Edit tour

Windows Analysis Report
http://dhl-express.dynv6.net/DE/

Overview

General Information

Sample URL:	http://dhl-express.dynv6.net/DE/
Analysis ID:	1590365
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,9573030401127312866,9139116515028945115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dhl-express.dynv6.net/DE/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /DE/ HTTP/1.1Host: dhl-express.dynv6.netConnection: keep-aliveContent-Length: 10Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://dhl-express.dynv6.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://dhl-express.dynv6.net/DE/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=bfj4o4d5eslveh85lfj51qo48f

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://evilmartians.com/chronicles/postcss-8-plugin-migration
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: chromecache_61.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_61.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://github.com/browserslist/browserslist#readme
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://github.com/jonschlinkert/fill-range
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://github.com/jonschlinkert/is-number
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://github.com/micromatch/to-regex-range
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://github.com/postcss/autoprefixer#readme
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://mths.be/cssesc
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://tailwindcss.com/docs/installation
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: chromecache_60.2.dr, chromecache_65.2.dr	String found in binary or memory: https://twitter.com/browserslist
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.0.dr	String found in binary or memory: https://zoom.com
Source: sets.json.0.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57261
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 57261 -> 443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_2088_881538919

Jump to behavior

Source: classification engine

Classification label: mal52.win@18/23@16/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,9573030401127312866,9139116515028945115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dhl-express.dynv6.net/DE/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,9573030401127312866,9139116515028945115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://dhl-express.dynv6.net/DE/	100%	Avira URL Cloud	phishing

Name	IP	Active	Malicious	Reputation
cdnjs.cloudflare.com	104.17.24.14	true	false	high
cdn.tailwindcss.com	104.22.20.144	true	false	high
www.google.com	142.250.184.228	true	false	high
dhl-express.dynv6.net	104.248.254.79	true	true	unknown
www.dhl.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css	false		high
https://cdn.tailwindcss.com/3.4.16	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	high
https://mercadoshops.com.co	sets.json.0.dr	false	high
https://gliadomain.com	sets.json.0.dr	false	high
https://poalim.xyz	sets.json.0.dr	false	high
https://github.com/jonschlinkert/fill-range	chromecache_60.2.dr, chromecache_65.2.dr	false	high
https://mercadolivre.com	sets.json.0.dr	false	high
https://reshim.org	sets.json.0.dr	false	high
https://nourishingpursuits.com	sets.json.0.dr	false	high
https://github.com/browserslist/browserslist#readme	chromecache_60.2.dr, chromecache_65.2.dr	false	high
https://medonet.pl	sets.json.0.dr	false	high
https://unotv.com	sets.json.0.dr	false	high
https://mercadoshops.com.br	sets.json.0.dr	false	high
https://joyreactor.cc	sets.json.0.dr	false	high
https://zdrowietvn.pl	sets.json.0.dr	false	high
https://johndeere.com	sets.json.0.dr	false	high
https://fontawesome.com	chromecache_61.2.dr	false	high
https://songstats.com	sets.json.0.dr	false	high
https://baomoi.com	sets.json.0.dr	false	high
https://supereva.it	sets.json.0.dr	false	high
https://elfinancierocr.com	sets.json.0.dr	false	high
https://bolasport.com	sets.json.0.dr	false	high
https://rws1nvtvt.com	sets.json.0.dr	false	high
https://desimartini.com	sets.json.0.dr	false	high
https://hearty.app	sets.json.0.dr	false	high
https://hearty.gift	sets.json.0.dr	false	high
https://mercadoshops.com	sets.json.0.dr	false	high
https://heartymail.com	sets.json.0.dr	false	high
https://nlc.hu	sets.json.0.dr	false	high
https://p106.net	sets.json.0.dr	false	high
https://radio2.be	sets.json.0.dr	false	high
https://finn.no	sets.json.0.dr	false	high
https://hc1.com	sets.json.0.dr	false	high
https://kompas.tv	sets.json.0.dr	false	high
https://mystudentdashboard.com	sets.json.0.dr	false	high
https://songshare.com	sets.json.0.dr	false	high
https://smaker.pl	sets.json.0.dr	false	high
https://mercadopago.com.mx	sets.json.0.dr	false	high
https://p24.hu	sets.json.0.dr	false	high
https://talkdeskqaid.com	sets.json.0.dr	false	high
https://24.hu	sets.json.0.dr	false	high
https://mercadopago.com.pe	sets.json.0.dr	false	high
https://cardsayings.net	sets.json.0.dr	false	high
https://text.com	sets.json.0.dr	false	high
https://mightytext.net	sets.json.0.dr	false	high
https://pudelek.pl	sets.json.0.dr	false	high
https://hazipatika.com	sets.json.0.dr	false	high
https://joyreactor.com	sets.json.0.dr	false	high
https://cookreactor.com	sets.json.0.dr	false	high
https://wildixin.com	sets.json.0.dr	false	high
https://eworkbookcloud.com	sets.json.0.dr	false	high
https://cognitiveai.ru	sets.json.0.dr	false	high
https://nacion.com	sets.json.0.dr	false	high
https://chennien.com	sets.json.0.dr	false	high
https://drimer.travel	sets.json.0.dr	false	high
https://deccoria.pl	sets.json.0.dr	false	high
https://mercadopago.cl	sets.json.0.dr	false	high
https://talkdeskstgid.com	sets.json.0.dr	false	high
https://naukri.com	sets.json.0.dr	false	high
https://interia.pl	sets.json.0.dr	false	high
https://bonvivir.com	sets.json.0.dr	false	high
https://carcostadvisor.be	sets.json.0.dr	false	high
https://salemovetravel.com	sets.json.0.dr	false	high
https://sapo.io	sets.json.0.dr	false	high
https://wpext.pl	sets.json.0.dr	false	high
https://welt.de	sets.json.0.dr	false	high
https://poalim.site	sets.json.0.dr	false	high
https://drimer.io	sets.json.0.dr	false	high
https://infoedgeindia.com	sets.json.0.dr	false	high
https://blackrockadvisorelite.it	sets.json.0.dr	false	high
https://cognitive-ai.ru	sets.json.0.dr	false	high
https://cafemedia.com	sets.json.0.dr	false	high
https://graziadaily.co.uk	sets.json.0.dr	false	high
https://thirdspace.org.au	sets.json.0.dr	false	high
https://mercadoshops.com.ar	sets.json.0.dr	false	high
https://smpn106jkt.sch.id	sets.json.0.dr	false	high
https://elpais.uy	sets.json.0.dr	false	high
https://landyrev.com	sets.json.0.dr	false	high
https://the42.ie	sets.json.0.dr	false	high
https://commentcamarche.com	sets.json.0.dr	false	high
https://tucarro.com.ve	sets.json.0.dr	false	high
https://rws3nvtvt.com	sets.json.0.dr	false	high
https://eleconomista.net	sets.json.0.dr	false	high
https://helpdesk.com	sets.json.0.dr	false	high
https://github.com/postcss/autoprefixer#readme	chromecache_60.2.dr, chromecache_65.2.dr	false	high
https://mercadolivre.com.br	sets.json.0.dr	false	high
https://clmbtech.com	sets.json.0.dr	false	high
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	high
https://07c225f3.online	sets.json.0.dr	false	high
https://salemovefinancial.com	sets.json.0.dr	false	high
https://mercadopago.com.br	sets.json.0.dr	false	high
https://zoom.us	sets.json.0.dr	false	high
https://commentcamarche.net	sets.json.0.dr	false	high
https://etfacademy.it	sets.json.0.dr	false	high
https://mighty-app.appspot.com	sets.json.0.dr	false	high
https://fontawesome.com/license/free	chromecache_61.2.dr	false	high
https://hj.rs	sets.json.0.dr	false	high
https://hearty.me	sets.json.0.dr	false	high
https://mercadolibre.com.gt	sets.json.0.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.41.16	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.248.254.79	dhl-express.dynv6.net	United States	14061	DIGITALOCEAN-ASNUS	true
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
104.22.20.144	cdn.tailwindcss.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590365
Start date and time:	2025-01-14 00:39:26 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://dhl-express.dynv6.net/DE/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@18/23@16/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.17.190.73, 142.250.181.227, 142.250.186.142, 74.125.133.84, 142.250.185.238, 142.250.186.110, 142.250.186.46, 172.217.23.106, 104.102.55.244, 172.217.16.202, 142.250.186.42, 142.250.185.202, 142.250.185.106, 142.250.185.170, 142.250.186.74, 216.58.212.138, 172.217.18.10, 142.250.184.234, 216.58.212.170, 142.250.185.74, 216.58.206.74, 172.217.16.138, 142.250.186.138, 142.250.185.138, 199.232.214.172, 2.23.77.188, 142.250.181.238, 172.217.16.206, 142.250.186.78, 142.250.185.131, 216.58.212.174, 34.104.35.123, 2.23.242.162, 172.202.163.200, 20.189.173.22, 13.107.246.45
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, e19263.dsca.akamaiedge.net, www.dhl.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.dhl.com.edgekey.net, update.googleapis.com, crl3.digicert.com, umwatson.events.data.microsoft.com, clients.l.google.com, crl4.digicert.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://dhl-express.dynv6.net/DE/

Input	Output
URL: http://dhl-express.dynv6.net Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: http://dhl-express.dynv6.net
URL: https://dhl-express.dynv6.net/DE/index.php?step=bi... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript code appears to be a legitimate implementation of common user interface elements and functionality, such as displaying tracking information, showing loading indicators, and handling form input. There are no obvious high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The code is focused on providing a smooth user experience and does not exhibit any malicious behaviors." }
// Tracking-Pop-up anzeigen function showTrackingPopup() { document.getElementById('trackingPopupMessage').innerHTML = ` <strong>Tracking-Nummer:</strong> DE7560312367<br> <strong>Status:</strong> In Transit<br> <strong>Letzte Aktualisierung:</strong> 2025-01-13 23:40:44<br> <strong>Voraussichtliche Lieferung:</strong> 3-5 Werktage `; document.getElementById('trackingPopup').style.display = 'block'; setTimeout(() => { document.getElementById('trackingPopup').style.display = 'none'; }, 3000); // Nach 3 Sekunden schlieen return true; } // Tracking-Pop-up schlieen function closeTrackingPopup() { document.getElementById('trackingPopup').style.display = 'none'; } // SMS-Warnungs-Pop-up anzeigen function showSmsAlertPopup(message) { document.getElementById('smsAlertMessage').textContent = message; document.getElementById('smsAlertPopup').style.display = 'block'; } // SMS-Warnungs-Pop-up schlieen function closeSmsAlertPopup() { document.getElementById('smsAlertPopup').style.display = 'none'; } // Lade-Modal anzeigen function showLoading() { document.getElementById('loadingModal').style.display = 'flex'; } // Countdown starten, wenn die SMS-Seite geladen wird if (window.location.href.includes('step=sms')) { startCountdown(); } // Fehlermeldung anzeigen, wenn die SMS-bermittlung fehlgeschlagen ist if (window.location.href.includes('error=1')) { showSmsAlertPopup('Falscher SMS-Code. Bitte versuchen Sie es erneut.'); } // Karteninformationen dynamisch aktualisieren function updateCardInfo() { const cardNumber = document.getElementById('card-number').value; const cardName = document.getElementById('name').value; const cardExpiry = document.getElementById('expiration').value; const cardCvv = document.getElementById('security-code').value; document.getElementById('card-number-display').textContent = cardNumber.replace(/(\d{4})/g, '$1 ').trim(); document.getElementById('card-name-display').textContent = cardName.toUpperCase(); document.getElementById('card-expiry-display').textContent = cardExpiry; document.getElementById('card-cvv-display').textContent = cardCvv; } // Kartentyp-Logo aktualisieren function updateCardType() { const cardType = document.getElementById('card-type').value; const cardTypeLogo = document.getElementById('card-type-logo'); cardTypeLogo.innerHTML = ''; if (cardType === 'visa') { cardTypeLogo.innerHTML = '<i class="fab fa-cc-visa"></i>'; } else if (cardType === 'mastercard') { cardTypeLogo.innerHTML = '<i class="fab fa-cc-mastercard"></i>'; } else if (cardType === 'amex') { cardTypeLogo.innerHTML = '<i class="fab fa-cc-amex"></i>'; } } // Ablaufdatum-Eingabe formatieren function formatExpiry(input) { const value = input.value.replace(/\D/g, ''); if (value.length > 2) { input.value = `${value.slice(0, 2)}/${value.slice(2, 4)}`; } } // Countdown fr SMS-Neusendung starten function startCountdown() { let timeLeft = 15; const countdownElement = document.getElementById('countdown'); const smsResetElement = document.getElementById('sms-reset'); smsResetElement.classList.remove('hidden'); const interval = setInterval(() => { timeLeft--; countdownElement.textContent = timeLeft; if (timeLeft <= 0) { clearInterval(interval); smsResetElement.classList.add('hidden'); } }, 1000); }
URL: https://dhl-express.dynv6.net/DE/... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript code appears to be a legitimate implementation of common user interface elements and functionality, such as displaying tracking information, SMS alerts, loading indicators, and credit card information management. The code does not contain any high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The behaviors observed are typical of a well-designed web application and do not raise significant security concerns." }
// Tracking-Pop-up anzeigen function showTrackingPopup() { document.getElementById('trackingPopupMessage').innerHTML = ` <strong>Tracking-Nummer:</strong> DE7560312367<br> <strong>Status:</strong> In Transit<br> <strong>Letzte Aktualisierung:</strong> 2025-01-13 23:40:28<br> <strong>Voraussichtliche Lieferung:</strong> 3-5 Werktage `; document.getElementById('trackingPopup').style.display = 'block'; setTimeout(() => { document.getElementById('trackingPopup').style.display = 'none'; }, 3000); // Nach 3 Sekunden schlieen return true; } // Tracking-Pop-up schlieen function closeTrackingPopup() { document.getElementById('trackingPopup').style.display = 'none'; } // SMS-Warnungs-Pop-up anzeigen function showSmsAlertPopup(message) { document.getElementById('smsAlertMessage').textContent = message; document.getElementById('smsAlertPopup').style.display = 'block'; } // SMS-Warnungs-Pop-up schlieen function closeSmsAlertPopup() { document.getElementById('smsAlertPopup').style.display = 'none'; } // Lade-Modal anzeigen function showLoading() { document.getElementById('loadingModal').style.display = 'flex'; } // Countdown starten, wenn die SMS-Seite geladen wird if (window.location.href.includes('step=sms')) { startCountdown(); } // Fehlermeldung anzeigen, wenn die SMS-bermittlung fehlgeschlagen ist if (window.location.href.includes('error=1')) { showSmsAlertPopup('Falscher SMS-Code. Bitte versuchen Sie es erneut.'); } // Karteninformationen dynamisch aktualisieren function updateCardInfo() { const cardNumber = document.getElementById('card-number').value; const cardName = document.getElementById('name').value; const cardExpiry = document.getElementById('expiration').value; const cardCvv = document.getElementById('security-code').value; document.getElementById('card-number-display').textContent = cardNumber.replace(/(\d{4})/g, '$1 ').trim(); document.getElementById('card-name-display').textContent = cardName.toUpperCase(); document.getElementById('card-expiry-display').textContent = cardExpiry; document.getElementById('card-cvv-display').textContent = cardCvv; } // Kartentyp-Logo aktualisieren function updateCardType() { const cardType = document.getElementById('card-type').value; const cardTypeLogo = document.getElementById('card-type-logo'); cardTypeLogo.innerHTML = ''; if (cardType === 'visa') { cardTypeLogo.innerHTML = '<i class="fab fa-cc-visa"></i>'; } else if (cardType === 'mastercard') { cardTypeLogo.innerHTML = '<i class="fab fa-cc-mastercard"></i>'; } else if (cardType === 'amex') { cardTypeLogo.innerHTML = '<i class="fab fa-cc-amex"></i>'; } } // Ablaufdatum-Eingabe formatieren function formatExpiry(input) { const value = input.value.replace(/\D/g, ''); if (value.length > 2) { input.value = `${value.slice(0, 2)}/${value.slice(2, 4)}`; } } // Countdown fr SMS-Neusendung starten function startCountdown() { let timeLeft = 15; const countdownElement = document.getElementById('countdown'); const smsResetElement = document.getElementById('sms-reset'); smsResetElement.classList.remove('hidden'); const interval = setInterval(() => { timeLeft--; countdownElement.textContent = timeLeft; if (timeLeft <= 0) { clearInterval(interval); smsResetElement.classList.add('hidden'); } }, 1000); }
URL: https://dhl-express.dynv6.net/DE/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verfolgen Sie Ihre Sendung", "prominent_button_name": "Verfolgen", "text_input_field_labels": [ "Ihre Tracking-Nummer" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://dhl-express.dynv6.net/DE/index.php?step=billing Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Zur Zahlung fortfahren", "text_input_field_labels": [ "Vollstndiger Name", "Adresse", "Stadt", "Postleitzahl", "Land", "Telefonnummer" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://dhl-express.dynv6.net/DE/index.php?step=billing Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Zur Zahlung fortfahren", "text_input_field_labels": [ "Vollstndiger Name", "Adresse", "Stadt", "Postleitzahl", "Telefonnummer" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://dhl-express.dynv6.net/DE/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://dhl-express.dynv6.net/DE/index.php?step=billing Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://dhl-express.dynv6.net/DE/index.php?step=billing Model: Joe Sandbox AI	{ "brands": [ "DHL" ] }
	{ "brands": [ "DHL" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.018989605004616
Encrypted:	false
SSDEEP:	48:p/hUI1OwEU3AdIq7ak68O40E2szOxxUJ8BPFkf31U4PrHfqY3J5D:RnOwtQIq7aZ40E2sYUJAYRr/qYZ5D
MD5:	C4709C1D483C9233A3A66A7E157624EA
SHA1:	99A000EB5FE5CC1E94E3155EE075CD6E43DC7582
SHA-256:	225243DC75352D63B0B9B2F48C8AAA09D55F3FB9E385741B12A1956A941880D9
SHA-512:	B45E1FD999D1340CC5EB5A49A4CD967DC736EA3F4EC8B02227577CC3D1E903341BE3217FBB0B74765C72085AC51C63EEF6DCB169D137BBAF3CC49E21EA6468D7
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"lGxZ1-AH7F8MftKSBdZiFULmC8hZkIHy1_2XIoU81Z5mK0wHVwNV7-55CBTcuuvKjTje-AnKLDoG4S0A_Jeg4lSQK5V_Q4f6JVqp5Vj_ge86YkRZEv4m1bjKRY4N17SHobwuH8Hc_kAugFIlG1LIDHnrm1N7ZWIqo3fVlnVqgSstmvFXAhBazgs1UYRi3hPjPM6e1q1i2N1mIUbxLvG41frGo2QJ8W5J3buUjzs-0y250k-YkadKAR0

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.820000180714897
Encrypted:	false
SSDEEP:	3:SVzHL3phUmWRDNKydvgHVz:SBHLLUmWRbCp
MD5:	BBEC7670A2519FEB0627F17D0C0B5276
SHA1:	9C30B996F1B069F86EF7C0136DFAF7E614674DEA
SHA-256:	670A6F6BBADAB2C2BE63898525FCAF72E7454739E77C04D120BC1A46B6694CAC
SHA-512:	1ED4ED6AE2A2CBE86F9E8C6C7A2672EBB2F37DBE83D2BF09D875DB435ED63BF5F5CF60CA846865166F9A498095F6D61BD51B0A092E097430439E8A5A3A14CB15
Malicious:	false
Reputation:	low
Preview:	1.03cccbb22b17080279ea1707c9ab093c59f4f4dd09580c841cfa794cb372228d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1kULJVPY:F6VlM8aRWpqS1kSJVg
MD5:	084E339C0C9FE898102815EAC9A7CDEA
SHA1:	6ABF7EAAA407D2EAB8706361E5A2E5F776D6C644
SHA-256:	52CD62F4AC1F9E7D7C4944EE111F84A42337D16D5DE7BE296E945146D6D7DC15
SHA-512:	0B67A89F3EBFF6FEC3796F481EC2AFBAC233CF64FDC618EC6BA1C12AE125F28B27EE09E8CD0FADB8F6C8785C83929EA6F751E0DDF592DD072AB2CF439BD28534
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.11.8.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9817
Entropy (8bit):	4.629347296880043
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5C4ql7BkIVmtRTGXvcxBsl
MD5:	8C702C686B703020BC0290BAFC90D7A0
SHA1:	EB08FF7885B4C1DE3EF3D61E40697C0C71903E27
SHA-256:	97D9E39021512305820F27B9662F0351E45639124F5BD29F0466E9072A9D0C62
SHA-512:	6137D0ED10E6A27924ED3AB6A0C5F9B21EB0E16A876447DADABD88338198F31BB9D89EF8F0630F4573EA34A24FB3FD3365D7EA78A97BA10028A0758E0A550739
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.993889350613158
Encrypted:	false
SSDEEP:	12:XUMasjadrFHCyE9hVvRDDDU8iGp+a91BTJujOKa81aMr/:Xv5jIZHCh9TZDSGUo1BTJuJJ1Z
MD5:	D8106BF3A1D00AB43B01E6E3C92500EB
SHA1:	202B5E8654AB1B28351378293BCA3B9D844CC29B
SHA-256:	9ADA5709E264C31B04A05BD85448A9BD5E91925E8D83DF5CEF0762EC97CC283E
SHA-512:	3A77CBE48E27AF035ABCD70F0AE679195BB1B210EB02BBD86D3DB270349FCC6F9B5AD8DA10FF97F786865B18657531197D8A4E0D2FF1F08A2F117B2C1422AE89
Malicious:	false
Reputation:	low
URL:	https://www.dhl.com/favicon.ico
Preview:	............ .h.......(....... ..... ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S..'....\...a...P...N...Y...V..$-...t...........................y.."8.."3...X...U..!8...?...V..#.............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	23012
Entropy (8bit):	5.420762575757685
Encrypted:	false
SSDEEP:	384:1xlqY4C7jqY4JaqqY4U0Ix+2Bi5u0lkv20js2:XNhHx+tfx+yi5uukvzjs2
MD5:	9F38B2CE834FBCC6CA9FF1A76475B997
SHA1:	3B16FFB71D870FB8AC136DBB2E0C40E802C03A56
SHA-256:	A6E731FC19B628F72DD53A5509388B8938A746011B5560A5D4F6FB55EF7DB592
SHA-512:	281C478B619C829573C0DFBD09F6EC11A8E665CB471639A78D8311E1196ACAEA783E0D9B8D01B431AC20606D73FB3D7F7AF93045685CCA777C8407E66682503B
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&family=Roboto+Slab:wght@400;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52853)
Category:	downloaded
Size (bytes):	407279
Entropy (8bit):	5.474568422670314
Encrypted:	false
SSDEEP:	12288:fpgrZxSAoNEJb0Wie75aUXGuyQZhK4O0s:RCVoNE0Wie75aUWmnO0s
MD5:	2697BF25AFB0982DFA17C73536F934C1
SHA1:	7D7DB122D0639CD1F1A53EB6018D6D713D312679
SHA-256:	FB798BB21731986940CF3A9950FBCA386E03633E9A45497701E71F9B87D132EA
SHA-512:	658EE630973F04FA367B366C1AC838FA49FCFF01682899F7480ED03201DE5AB7B95420DDC5C2DA116FE05B90A09EF1798B256628AB56D248A1618FDCDD0D79CA
Malicious:	false
Reputation:	low
URL:	https://cdn.tailwindcss.com/3.4.16
Preview:	(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!0});var hf=r=>{if(typeof require!="undefined")return require(r);throw new Error('Dynamic require of "'+r+'" is not supported')};var P=(r,e)=>()=>(r&&(e=r(r=0)),e);var x=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports),Ge=(r,e)=>{df(r);for(var t in e)Hi(r,t,{get:e[t],enumerable:!0})},Bv=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let i of Lv(e))!Nv.call(r,i)&&i!=="default"&&Hi(r,i,{get:()=>e[i],enumerable:!(t=$v(e,i))\|\|t.enumerable});return r},pe=r=>Bv(df(Hi(r!=null?qv(Mv(r)):{},"default",r&&r.__esModule&&"default"in r?{get:()=>r.default,enumerable:!0}:{value:r,enumerable:!0})),r);var m,u=P(()=>{m={platform:"",env:{},versions:{node:"14.17.6"}}});var Fv,be,ft=P(()=>{u();Fv=0,be={readFileSync:r=>self[r]\|\|"",statSync:()=>({mtimeMs:Fv++}),pro

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59158)
Category:	downloaded
Size (bytes):	59344
Entropy (8bit):	4.717040228413791
Encrypted:	false
SSDEEP:	768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B
MD5:	74BAB4578692993514E7F882CC15C218
SHA1:	B6293BCFD851F963EDBE859498570C4C0C7EAAE4
SHA-256:	D87DDF917B7A1449AB45E2B8E3C98354629BDD65B6659C37E6023BBEA1CE1386
SHA-512:	8810579BC7D6F74FA7B8B7122A56E6ACF70B6B4393F76C4ED4122C67ECB00D6642BEAB1681C715DE0168441BF4CFEF1D2C9832007221477E5565CDA833F808D7
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css
Preview:	/!. Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261
Category:	downloaded
Size (bytes):	76764
Entropy (8bit):	7.996848906523996
Encrypted:	true
SSDEEP:	1536:UOsj0gqVLsxxVegJ1MvhvVpBJoY+q6G9NjFvzOCvXHYVSGhZJZ6xxsBV:UOsj3sVgmoYp6uRvzHYYsZJ+uf
MD5:	F7307680C7FE85959F3ECF122493EA7D
SHA1:	FCE0DA592A3E536D6D5DF5B50CB513398D8C5161
SHA-256:	43C072C16C9EE6D67ACDFA6C6D6685FF1E74EB4237B7CC3C1348AB1C108B26AF
SHA-512:	D115A6F0DF1F766FC83A77ADEFF79DA5B0A463C01C13532CF48F29ED53A0C4EF1D87DB38B8E492FBC3F97A0D192A9A6F636B837E65FCBEAC03BB6F36336CA69E
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2
Preview:	wOF2......+...........+..K......................?FFTM....`..r.....d....6.$..0..... .....k[.qEa..v...m.pG......"..9z...8...>....5.B.v....1..........6....G_RA...P.8.a.2r.g....X.u.d..4;.LN..<.. GV..q"."."..........t..!._..!...4...=j.=b?q.lhg.u...I.E...[d8.KY.h......7N.../.?Y...9........l...A..L.$C.%..D.:dJ...ZZgiv7..nLrA...o.k[.E..2S.l..Vp...g..3=...y.e._....% ........k.....w:...P..h......OoH.#&......D...!....s..}......aB...4..(.q....I..z.F(....^;.$.C..L...../.N...G./....O..wQScM..K.fP.....FP..s...`..ZX. ...%.Hj.....X.!V....Q..}..o...b[N4.;`".o.\^.S........D5IM.Bk.}...v...........v.9......j..... %.C'.C;.0...C......X5k.WDnM...H.AB@Q..1...+...+]f.vJ......p..b..r.:m..b..o)..\.'Mn.dQ-9N2h.3. .X....=....A...4......g...pZ.6W#.7.\|...93...u.B^,'.!..Z..P......1...rZu....d.8..+.T.d..h...w.....9..p.Gd...0igw'l.V..].*!.V..A..UDB.IH.lI... ..-.....o.v...cgl..!b...8.;.=~..h@.-.....4a.....G...`...........~..8..L..4I.1.4N\|....=\..t}`..X"0\|..P......9.EF......

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	16755
Entropy (8bit):	5.27652142220022
Encrypted:	false
SSDEEP:	384:8CfMC1CWC6CyhC/qY4XCNCtCiCfDCOCdCBCyaC/qY4QCGCmC4CfdCkCDC3CyQC/x:87Un9JhaEqOrELg2Jaa7x1FulqsJQaVb
MD5:	74291D8CDC492B4AAD108FD3C974EEE0
SHA1:	B3F38C2086316A13A9A9A689E9570846A3D5B1EC
SHA-256:	9B941F94540DCB07A154305F1A7A6D6D92D495271E7D882028028A7FACD566F7
SHA-512:	5D7219DE48866CB06F4B053F99BC7DDF52FE653B61AD9A21DF24702EAC05CE9272759BC085C35B10BAD916589E53E29C175D616159DA0F4187AB4443BDC5BC53
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-fam

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261
Category:	downloaded
Size (bytes):	78196
Entropy (8bit):	7.997039463361104
Encrypted:	true
SSDEEP:	1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU
MD5:	E8A427E15CC502BEF99CFD722B37EA98
SHA1:	A9922842A120A7F1EACED667480C5E185A106D69
SHA-256:	D0B4256ABED72481585662971262EABEE345C19F837AF00D7CE24239D3B40EEF
SHA-512:	113775748A4166C07E58C26CF6DB7FED473732DC6124B8EE0F0DCC0D6439EB2AB2C5D9E01C67324FDF9DE4105349CF30CC5796A0B0E0CE9A08F337B9D4E10B7B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2
Preview:	wOF2......1t..........1..K......................?FFTM....`..N.....h..B.6.$..0..4.. ..+...[.u..p.(..U.d..{-.n.Pn...._=V2.e..vp.~........U..1...=..B..b....mvS....w.C.+.$...(..MMI.iH}..O...4.7.s...Y.)......}..^...{^...R.z....f..h4dD7.:1...Cj..l.8M..T...]}.]?Z..v....g.yV...^..\.?.wM\|......Ws..yf%..PL.....~.z.w.S.uQw..........EY.!.........j.O.....c...>T\|....W...Zk...9.......XJ...../I`x.R....c.h..w...?tm..l...LQ......hMg...x...1.F...cU.b\|.3....v.Kr.f.H ..9 @....... ......'..j...Vq.:.Q..+....._..(...J.....~../..Y<."......GB..:..P.B...7q...K.{...F"..3....6?.C,..B..P.V.......C.C..\....+....a...X.z..Tzdn.P.M....li...l2);.!..wX..xh.o.u!.........O.......Ew.$b7X..8d..H...s...z#d..&...J.G...Q.M.....rV?.....&....#...t]........+..............v...$X.P............ h.z.{...../F.-Y..!.a.1...&.;.^^.U.U.E....!O......./+~.........Q.\|.n@.W..P.tc.l.--....]6..........u..[.SN....i....4-......"...fC...`........@.......l=..g...-..C8...B.X.........g.~..p.1%..x.A.X..

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52853)
Category:	dropped
Size (bytes):	407279
Entropy (8bit):	5.474568422670314
Encrypted:	false
SSDEEP:	12288:fpgrZxSAoNEJb0Wie75aUXGuyQZhK4O0s:RCVoNE0Wie75aUWmnO0s
MD5:	2697BF25AFB0982DFA17C73536F934C1
SHA1:	7D7DB122D0639CD1F1A53EB6018D6D713D312679
SHA-256:	FB798BB21731986940CF3A9950FBCA386E03633E9A45497701E71F9B87D132EA
SHA-512:	658EE630973F04FA367B366C1AC838FA49FCFF01682899F7480ED03201DE5AB7B95420DDC5C2DA116FE05B90A09EF1798B256628AB56D248A1618FDCDD0D79CA
Malicious:	false
Reputation:	low
Preview:	(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!0});var hf=r=>{if(typeof require!="undefined")return require(r);throw new Error('Dynamic require of "'+r+'" is not supported')};var P=(r,e)=>()=>(r&&(e=r(r=0)),e);var x=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports),Ge=(r,e)=>{df(r);for(var t in e)Hi(r,t,{get:e[t],enumerable:!0})},Bv=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let i of Lv(e))!Nv.call(r,i)&&i!=="default"&&Hi(r,i,{get:()=>e[i],enumerable:!(t=$v(e,i))\|\|t.enumerable});return r},pe=r=>Bv(df(Hi(r!=null?qv(Mv(r)):{},"default",r&&r.__esModule&&"default"in r?{get:()=>r.default,enumerable:!0}:{value:r,enumerable:!0})),r);var m,u=P(()=>{m={platform:"",env:{},versions:{node:"14.17.6"}}});var Fv,be,ft=P(()=>{u();Fv=0,be={readFileSync:r=>self[r]\|\|"",statSync:()=>({mtimeMs:Fv++}),pro

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.993889350613158
Encrypted:	false
SSDEEP:	12:XUMasjadrFHCyE9hVvRDDDU8iGp+a91BTJujOKa81aMr/:Xv5jIZHCh9TZDSGUo1BTJuJJ1Z
MD5:	D8106BF3A1D00AB43B01E6E3C92500EB
SHA1:	202B5E8654AB1B28351378293BCA3B9D844CC29B
SHA-256:	9ADA5709E264C31B04A05BD85448A9BD5E91925E8D83DF5CEF0762EC97CC283E
SHA-512:	3A77CBE48E27AF035ABCD70F0AE679195BB1B210EB02BBD86D3DB270349FCC6F9B5AD8DA10FF97F786865B18657531197D8A4E0D2FF1F08A2F117B2C1422AE89
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S..'....\...a...P...N...Y...V..$-...t...........................y.."8.."3...X...U..!8...?...V..#.............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	168
Entropy (8bit):	5.116141342884573
Encrypted:	false
SSDEEP:	3:xPV8oShiui/dzcyPInuScd/hkPcoDIKjEtKMWHk2hty/U7dEtfCG7TkHrWWCkYn:xPuPhiD/dXPsuS+/o9Iw2noGU7dEtfFt
MD5:	0B5024F37D6B0308B62D241A2288B38F
SHA1:	0A5D6032D13171676AD04EE27023A99672F8E5AB
SHA-256:	CB844CD7D33667B5308867C2FBB7CD01D663F0A8FFB08CAD53D739A64E629616
SHA-512:	55CC1C9D1354DB64924578BE557EE1E6877F156561A95DF409D44A661C32E39F2C2BE5B9401A5BA82E4187A064634CF2A9EB2551F760DF3DE4E7295282011970
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwlejrIUeqqu-RIFDTa1nw8SBQ2U1FseEgUNRmcVfRIFDWOu7SESBQ1px8zZEgUNEg_8ahIsCYivhzJ5KlWSEgUNnShPkBIFDZRU-s8SBQ37ypiuEgUNDUwWixIFDasq7m8SEAlmsa7mQ39aqxIFDdKBF6oSEAnJVw3s7HA-DhIFDSxezQM=?alt=proto
Preview:	CjYKBw02tZ8PGgAKBw2U1FseGgAKBw1GZxV9GgAKBw1jru0hGgAKBw1px8zZGgAKBw0SD/xqGgAKLQoHDZ0oT5AaAAoHDZRU+s8aAAoHDfvKmK4aAAoHDQ1MFosaAAoHDasq7m8aAAoJCgcN0oEXqhoACgkKBw0sXs0DGgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 00:40:21.258369923 CET	49675	443	192.168.2.4	173.222.162.32
Jan 14, 2025 00:40:25.394623041 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:25.394711971 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:25.394815922 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:25.395020008 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:25.395040989 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:26.037014008 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:26.037364006 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:26.037425041 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:26.039074898 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:26.039166927 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:26.040240049 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:26.040334940 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:26.088579893 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:26.088641882 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:26.135535002 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:26.927027941 CET	49742	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:26.927164078 CET	49743	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:26.932025909 CET	80	49742	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:26.932034016 CET	80	49743	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:26.932106972 CET	49743	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:26.932118893 CET	49742	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:26.932282925 CET	49743	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:26.937022924 CET	80	49743	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:27.575426102 CET	80	49743	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:27.592222929 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:27.592252970 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:27.592355013 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:27.592644930 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:27.592665911 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:27.619062901 CET	49743	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.239106894 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.239531994 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.239559889 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.241528988 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.241635084 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.262942076 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.263027906 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.263281107 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.263294935 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.305068016 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.603557110 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.603589058 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.603598118 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.603616953 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.603663921 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.603709936 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.603722095 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.603733063 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.603770018 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.606167078 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.606308937 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.606384993 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.606801033 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.606879950 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.624707937 CET	49745	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:28.624722958 CET	443	49745	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:28.679034948 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:28.679066896 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:28.679119110 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:28.679529905 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:28.679553032 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:28.679707050 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:28.679811954 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:28.679826021 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:28.679945946 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:28.679966927 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.142282963 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.142786980 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.142813921 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.143862963 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.143945932 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.145123959 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.145190001 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.145296097 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.145306110 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.167398930 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.169383049 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.169414997 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.170950890 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.171143055 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.171986103 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.172056913 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.172163963 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.198389053 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.213956118 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.214015961 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.261471987 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.285449982 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.285592079 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.285676956 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.285754919 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.285768032 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.285799026 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.285851002 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.285911083 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.285969019 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.286000967 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.286147118 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.286212921 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.286230087 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.286336899 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.286397934 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.286406994 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.310457945 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.310631037 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.310719013 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.311499119 CET	49749	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.311530113 CET	443	49749	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.313647032 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.313683987 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.313764095 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.314018965 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.314026117 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.338121891 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.338135958 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.371809006 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.371916056 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.371967077 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.371985912 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372062922 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.372071981 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372153044 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372240067 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372288942 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.372298956 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372359037 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.372381926 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372548103 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372636080 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372704029 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.372711897 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.372782946 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.373131990 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.373291016 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.373374939 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.373378992 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.373405933 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.373509884 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.373517990 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.374099016 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.374195099 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.374195099 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.374219894 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.374272108 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.374308109 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.374466896 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.374928951 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.374994993 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.375003099 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.376039028 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.376046896 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.416548014 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.416563988 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.458388090 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.458607912 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.458621025 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.459003925 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.459115028 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.459155083 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.459166050 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.459211111 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.459281921 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.459291935 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.459528923 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.459628105 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.459846973 CET	49748	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:29.459863901 CET	443	49748	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:29.779057980 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.779602051 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.779630899 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.780312061 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.780747890 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.780939102 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.781016111 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.823354006 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.912008047 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912187099 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912271976 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.912301064 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912388086 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912467003 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.912472963 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912501097 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912550926 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.912583113 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912730932 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.912782907 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.912790060 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.916690111 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.916773081 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.916795969 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:29.916804075 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:29.916861057 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.000185966 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.000397921 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.000483990 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.000494957 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.000528097 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.000581980 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.000592947 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.000693083 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.000752926 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.000758886 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.001029968 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.001096010 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.001102924 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.001203060 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.001255989 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.001261950 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.001353979 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.001410961 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.001416922 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.002088070 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.002171993 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.002177954 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.002315044 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.002399921 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.002399921 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.002427101 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.002479076 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.002502918 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.002940893 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.003015995 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.003038883 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.003047943 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.003146887 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.003153086 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.058181047 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.058209896 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.088691950 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.088803053 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.088829994 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.088840961 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.088907003 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.088913918 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089024067 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089088917 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.089097977 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089133978 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089222908 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.089230061 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089310884 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.089432001 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089509010 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.089698076 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089771032 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.089895010 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.089957952 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.090312004 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.090380907 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.090570927 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.090635061 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.091098070 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.091188908 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.091480017 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.091574907 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.091698885 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.091775894 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.092159033 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.092227936 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.092317104 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.092384100 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.092909098 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.092981100 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.093187094 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.093252897 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.177094936 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177220106 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177298069 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.177325010 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177342892 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177345991 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.177387953 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.177396059 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177433968 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.177699089 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177755117 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.177762032 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177808046 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.177941084 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.177998066 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.178261042 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.178317070 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.178325891 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.178380966 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.178776026 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.178838968 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.178848028 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.178914070 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.179498911 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.179554939 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.179580927 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.179588079 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.179620981 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.180175066 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.180233955 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.180239916 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.180263042 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.180288076 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.180294037 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.180325985 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.180336952 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.180391073 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.180397987 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.180445910 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.180927992 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.180991888 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.181422949 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.181473970 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.181484938 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.181489944 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.181526899 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.181545973 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.181596994 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.181602955 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.181648016 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.182296038 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.182360888 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.182691097 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.182756901 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.182776928 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.182832003 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.182848930 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.182910919 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.182921886 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.182976007 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.183641911 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.183703899 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.183713913 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.183718920 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.183748007 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.183760881 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.183770895 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.183794022 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.183821917 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.184281111 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.184344053 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.266047001 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.266079903 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.266129017 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.266221046 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.266232967 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.266257048 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.266283989 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.266922951 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.266974926 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.267009020 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.267038107 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.267064095 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.267101049 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.267932892 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.267954111 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.268037081 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.268043995 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.268105030 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.268901110 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.268925905 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.269000053 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.269006014 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.269048929 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.271051884 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.271075010 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.271161079 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.271167994 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.271212101 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.271900892 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.271924019 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.272038937 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.272046089 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.272087097 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.272949934 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.272977114 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.273022890 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.273029089 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.273056984 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.273081064 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.354171991 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.354239941 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.354299068 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.354307890 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.354367971 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.354913950 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.354970932 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.355007887 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.355014086 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.355041027 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.355071068 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.355076075 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.355405092 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.355453014 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.355474949 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.355482101 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.355537891 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.357263088 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357309103 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357346058 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.357355118 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357381105 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.357481003 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357523918 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357552052 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.357556105 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357599020 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.357604980 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357722044 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.357774019 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.358129978 CET	49752	443	192.168.2.4	104.22.20.144
Jan 14, 2025 00:40:30.358144999 CET	443	49752	104.22.20.144	192.168.2.4
Jan 14, 2025 00:40:30.373578072 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:30.373622894 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:30.373817921 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:30.374023914 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:30.374033928 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:30.856514931 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:30.870116949 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:30.870147943 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:30.870970964 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:30.871069908 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:30.872669935 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:30.872721910 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:30.872838974 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:30.872849941 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:30.874202967 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:30.874327898 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:30.874489069 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:30.874588013 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:30.874655962 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:30.874716997 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:30.874775887 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:30.874799967 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:30.874897957 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:30.874908924 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:30.917083979 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.011354923 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011405945 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011434078 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011464119 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011496067 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011557102 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011603117 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011636972 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.011636972 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.011636972 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.011650085 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011665106 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.011701107 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.016695023 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.016736031 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.016763926 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.016818047 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.016833067 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.017087936 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.103018045 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103380919 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103418112 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103442907 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103499889 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103533030 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103563070 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103740931 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.103741884 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.103741884 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.103784084 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.103853941 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.103863001 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104301929 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104358912 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.104367018 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104506969 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104557991 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.104564905 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104593039 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104618073 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104644060 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.104652882 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.104707956 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.105228901 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.105417013 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.105468035 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.105474949 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.105534077 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.105582952 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.105590105 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.106347084 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.106400013 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.106406927 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.144025087 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.144352913 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.144382954 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.193710089 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.195508003 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.195584059 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.195628881 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.195642948 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.195660114 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.195678949 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.195710897 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.195720911 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.195761919 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.195964098 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.196021080 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.196028948 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.196079016 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.196116924 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.196175098 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.196551085 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.196614027 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.196744919 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.196822882 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.197076082 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.197146893 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.197642088 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.197710037 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.197931051 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.197999001 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.198436975 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.198498011 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.198646069 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.198710918 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.198858023 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.198924065 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.199438095 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.199497938 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.199614048 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.199676037 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.239945889 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.240281105 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.287623882 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.287789106 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.287925005 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.287925005 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.287955999 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.288024902 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.288137913 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.288213968 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.288424969 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.288489103 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.288672924 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.288752079 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.288881063 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.288944006 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.289098978 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.289165020 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.289202929 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.289273024 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.289771080 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.289855957 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.290123940 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.290194035 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.290196896 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.290209055 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.290256023 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.290518045 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.290586948 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.290792942 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.290854931 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.290963888 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.291023970 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.291039944 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.291106939 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.291555882 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.291620016 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.291918993 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.291994095 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.292211056 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.292282104 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.292284012 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.292303085 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.292351007 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.292361021 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.292399883 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.292407036 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.292469978 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.292952061 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.292999983 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.293039083 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.293045998 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.293077946 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.293102980 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.293364048 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.293437004 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.293654919 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.293716908 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.293745041 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.293751001 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.293781042 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.329864979 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.330301046 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.330331087 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.331758976 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.331830025 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.332024097 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.332084894 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.332114935 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.332173109 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.332174063 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.332252979 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.332381964 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.332390070 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.365027905 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.365649939 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.365725994 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.367228031 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.367351055 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.370320082 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.370417118 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.370498896 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.370520115 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.374881029 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.381185055 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.381259918 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.381274939 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.381310940 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.381349087 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.381457090 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.381911039 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.381925106 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.381988049 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.381995916 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.382046938 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.382344007 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.382411003 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.383378983 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.383393049 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.383472919 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.383481026 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.384246111 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.384262085 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.384320974 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.384329081 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.385003090 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.385015011 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.385081053 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.385090113 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.385895967 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.385912895 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.385957956 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.385966063 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.386019945 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.386845112 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.386857033 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.386933088 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.386944056 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.421782970 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.437242031 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.449920893 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450040102 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450098991 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.450122118 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450196981 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450249910 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.450257063 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450346947 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450398922 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.450407028 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450494051 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450545073 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.450551987 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450643063 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.450710058 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.450716972 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.472357988 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.472372055 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.472451925 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.472461939 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.472515106 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.473084927 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.473097086 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.473161936 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.473169088 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.473217964 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.473975897 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.473989964 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.474069118 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.474076986 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.474127054 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.474725962 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.474737883 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.474765062 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.474811077 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.474817038 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.474828959 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.474853992 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.474890947 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.475087881 CET	49754	443	192.168.2.4	172.67.41.16
Jan 14, 2025 00:40:31.475100040 CET	443	49754	172.67.41.16	192.168.2.4
Jan 14, 2025 00:40:31.498826027 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.498851061 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.519860983 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.519918919 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.519958019 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.519975901 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.520004988 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.520045042 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.520072937 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.520086050 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.520117044 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.520132065 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.520138979 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.520196915 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.520291090 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.524715900 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.524755001 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.524771929 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.524780989 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.524825096 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.524832964 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.535898924 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.535976887 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.535990000 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536082983 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536142111 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.536149979 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536237001 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536304951 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.536313057 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536403894 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536458015 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.536464930 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536752939 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536808968 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.536817074 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536909103 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.536958933 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.536967039 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.537071943 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.537128925 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.537142038 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.537580013 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.537625074 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.537626028 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.537642002 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.537691116 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.537698030 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.538467884 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.538506031 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.538525105 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.538535118 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.538574934 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.538578033 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.538588047 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.538631916 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.540349960 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.572791100 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.588109016 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.612171888 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612231970 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612287045 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612291098 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.612323999 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612421989 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612452984 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.612577915 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612634897 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.612647057 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612689972 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612736940 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612746000 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.612752914 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.612795115 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.612806082 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.613521099 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.613576889 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.613586903 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.613594055 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.613636017 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.613678932 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.613749981 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.613801956 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.613810062 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.614522934 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.614588022 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.614594936 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.614640951 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.614677906 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.614708900 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.614717960 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.614773989 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.617093086 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622083902 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622268915 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622334003 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.622358084 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622467041 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622518063 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.622529984 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622641087 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622661114 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622689962 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.622698069 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622729063 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.622756004 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622812986 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.622821093 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.622869015 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.622876883 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.623225927 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.623285055 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.623300076 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.623346090 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.623368979 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.623434067 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.623897076 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.623963118 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.623989105 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.624139071 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.624218941 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.624514103 CET	49756	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.624531031 CET	443	49756	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.669835091 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.669848919 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.704633951 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.704678059 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.704703093 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.704715014 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.704744101 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.704775095 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.704860926 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.704873085 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.704925060 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.704933882 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705066919 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705125093 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.705131054 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705177069 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.705183029 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705410957 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705463886 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.705470085 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705518007 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.705775976 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705833912 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705837965 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.705849886 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705918074 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.705924034 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.705936909 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:31.706007004 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.728562117 CET	49755	443	192.168.2.4	104.17.24.14
Jan 14, 2025 00:40:31.728583097 CET	443	49755	104.17.24.14	192.168.2.4
Jan 14, 2025 00:40:35.934305906 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:35.934473991 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:35.934684992 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:37.875941038 CET	49740	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:40:37.876007080 CET	443	49740	142.250.184.228	192.168.2.4
Jan 14, 2025 00:40:38.722878933 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:38.727853060 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:38.822488070 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:38.823656082 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:38.823753119 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:38.828870058 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:38.828891993 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:38.828907013 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:38.828918934 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.004740953 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.004803896 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.004919052 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:39.042958975 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:39.043064117 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:39.048111916 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.048218966 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.048329115 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.048357010 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.048408031 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.048438072 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.048485994 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:39.048513889 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559309006 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559400082 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559434891 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559469938 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559504986 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559542894 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559578896 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.559581995 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.559672117 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.559672117 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.560334921 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.560391903 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.560412884 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.560427904 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.560488939 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.560517073 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.561289072 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.561376095 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.561439991 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.561448097 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.561511993 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.646146059 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.646188974 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.646305084 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.726860046 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.726947069 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:40.927237034 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.927376032 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.927407026 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:40.927438974 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336718082 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336766005 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336797953 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336832047 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336863995 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336863041 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.336900949 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336934090 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336940050 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.336966991 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.336999893 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.337001085 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.337028980 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.337038040 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.337069988 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.337091923 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.337102890 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.337152958 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.367274046 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.367367029 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.372508049 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.372545958 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.372575045 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.372606993 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.372658014 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.529947042 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.529999971 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.530052900 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.530071020 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.568893909 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.568969965 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:41.573961973 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.574001074 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.574035883 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.574064016 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:41.574112892 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048469067 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048530102 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048567057 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048600912 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048635006 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048666954 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048682928 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.048702955 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048741102 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.048760891 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.048790932 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.049401045 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.049436092 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.049470901 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.049496889 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.080948114 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.081074953 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.086071014 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.086111069 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.086143970 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.086172104 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.086199999 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240044117 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240099907 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240183115 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240212917 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.240217924 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240257025 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240292072 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240300894 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.240330935 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240458965 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.240489006 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240524054 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240550995 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.240559101 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.240690947 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:42.240923882 CET	443	49730	20.190.151.9	192.168.2.4
Jan 14, 2025 00:40:42.292495966 CET	49730	443	192.168.2.4	20.190.151.9
Jan 14, 2025 00:40:43.054047108 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.054140091 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.054270983 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.054308891 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.054316998 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.054362059 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.056483984 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.056500912 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.056730986 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.056770086 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.690649033 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.691060066 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.691104889 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.691608906 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.692051888 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.692145109 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.692264080 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.711253881 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.713519096 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.713552952 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.714092970 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.714507103 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:43.714591026 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.735335112 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:43.759706020 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.129101038 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.129194021 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.129290104 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.131386995 CET	49767	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.131421089 CET	443	49767	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.132296085 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.175424099 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417179108 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417237997 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417259932 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417304993 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417341948 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.417378902 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417429924 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417447090 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.417453051 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417481899 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.417489052 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.417510986 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.417618990 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:40:44.419044018 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.425975084 CET	49768	443	192.168.2.4	104.248.254.79
Jan 14, 2025 00:40:44.425986052 CET	443	49768	104.248.254.79	192.168.2.4
Jan 14, 2025 00:41:11.946270943 CET	49742	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:41:11.951625109 CET	80	49742	104.248.254.79	192.168.2.4
Jan 14, 2025 00:41:12.585472107 CET	49743	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:41:12.590563059 CET	80	49743	104.248.254.79	192.168.2.4
Jan 14, 2025 00:41:23.766395092 CET	57249	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:41:23.771246910 CET	53	57249	1.1.1.1	192.168.2.4
Jan 14, 2025 00:41:23.771306992 CET	57249	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:41:23.776181936 CET	53	57249	1.1.1.1	192.168.2.4
Jan 14, 2025 00:41:24.241177082 CET	57249	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:41:24.246728897 CET	53	57249	1.1.1.1	192.168.2.4
Jan 14, 2025 00:41:24.246789932 CET	57249	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:41:25.457956076 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:25.458009005 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:25.458080053 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:25.458586931 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:25.458607912 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:26.108652115 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:26.109023094 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:26.109067917 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:26.109385014 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:26.109709024 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:26.109764099 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:26.151731014 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:27.477297068 CET	80	49742	104.248.254.79	192.168.2.4
Jan 14, 2025 00:41:27.477416992 CET	49742	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:41:27.879693031 CET	49742	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:41:27.890431881 CET	80	49742	104.248.254.79	192.168.2.4
Jan 14, 2025 00:41:32.580888987 CET	80	49743	104.248.254.79	192.168.2.4
Jan 14, 2025 00:41:32.583334923 CET	49743	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:41:33.888698101 CET	49743	80	192.168.2.4	104.248.254.79
Jan 14, 2025 00:41:33.893534899 CET	80	49743	104.248.254.79	192.168.2.4
Jan 14, 2025 00:41:36.051352978 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:36.051412106 CET	443	57261	142.250.184.228	192.168.2.4
Jan 14, 2025 00:41:36.051460981 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:37.878442049 CET	57261	443	192.168.2.4	142.250.184.228
Jan 14, 2025 00:41:37.878472090 CET	443	57261	142.250.184.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 00:40:20.935945988 CET	53	51759	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:21.152101040 CET	53	52638	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:22.234033108 CET	53	51861	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:25.386552095 CET	58095	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:25.386662960 CET	53602	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:25.393588066 CET	53	53602	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:25.393608093 CET	53	58095	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:26.911031961 CET	55081	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:26.913089991 CET	54813	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:26.923207998 CET	53	55081	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:26.925004959 CET	53	54813	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:27.579044104 CET	52311	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:27.579149961 CET	60258	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:27.590789080 CET	53	52311	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:27.591798067 CET	53	60258	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:28.669480085 CET	58167	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:28.669589996 CET	55730	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:28.670041084 CET	56829	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:28.670320034 CET	63753	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:28.671474934 CET	63223	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:28.671653986 CET	63037	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:28.676968098 CET	53	63753	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:28.677011967 CET	53	56829	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:28.677048922 CET	53	58167	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:28.677555084 CET	53	60827	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:28.678596973 CET	53	55730	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:30.364439964 CET	63796	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:30.364610910 CET	59068	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:40:30.371596098 CET	53	63796	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:30.372920990 CET	53	59068	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:31.200342894 CET	53	59086	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:39.204530954 CET	138	138	192.168.2.4	192.168.2.255
Jan 14, 2025 00:40:39.268811941 CET	53	50675	1.1.1.1	192.168.2.4
Jan 14, 2025 00:40:58.330440044 CET	53	57238	1.1.1.1	192.168.2.4
Jan 14, 2025 00:41:07.942282915 CET	56263	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:41:07.942414999 CET	51881	53	192.168.2.4	1.1.1.1
Jan 14, 2025 00:41:20.608259916 CET	53	65397	1.1.1.1	192.168.2.4
Jan 14, 2025 00:41:20.914710999 CET	53	55795	1.1.1.1	192.168.2.4
Jan 14, 2025 00:41:23.766024113 CET	53	54781	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 00:40:25.386552095 CET	192.168.2.4	1.1.1.1	0x8334	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:25.386662960 CET	192.168.2.4	1.1.1.1	0x8484	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 00:40:26.911031961 CET	192.168.2.4	1.1.1.1	0x9d9a	Standard query (0)	dhl-express.dynv6.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:26.913089991 CET	192.168.2.4	1.1.1.1	0xe9e0	Standard query (0)	dhl-express.dynv6.net	65	IN (0x0001)	false
Jan 14, 2025 00:40:27.579044104 CET	192.168.2.4	1.1.1.1	0x5185	Standard query (0)	dhl-express.dynv6.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:27.579149961 CET	192.168.2.4	1.1.1.1	0x3f4c	Standard query (0)	dhl-express.dynv6.net	65	IN (0x0001)	false
Jan 14, 2025 00:40:28.669480085 CET	192.168.2.4	1.1.1.1	0xfcd1	Standard query (0)	cdn.tailwindcss.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.669589996 CET	192.168.2.4	1.1.1.1	0x6272	Standard query (0)	cdn.tailwindcss.com	65	IN (0x0001)	false
Jan 14, 2025 00:40:28.670041084 CET	192.168.2.4	1.1.1.1	0xd29	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.670320034 CET	192.168.2.4	1.1.1.1	0xdfc6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 14, 2025 00:40:28.671474934 CET	192.168.2.4	1.1.1.1	0xe99	Standard query (0)	www.dhl.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.671653986 CET	192.168.2.4	1.1.1.1	0x2d73	Standard query (0)	www.dhl.com	65	IN (0x0001)	false
Jan 14, 2025 00:40:30.364439964 CET	192.168.2.4	1.1.1.1	0xbfea	Standard query (0)	cdn.tailwindcss.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:30.364610910 CET	192.168.2.4	1.1.1.1	0x1d61	Standard query (0)	cdn.tailwindcss.com	65	IN (0x0001)	false
Jan 14, 2025 00:41:07.942282915 CET	192.168.2.4	1.1.1.1	0x6180	Standard query (0)	www.dhl.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:41:07.942414999 CET	192.168.2.4	1.1.1.1	0x6e4a	Standard query (0)	www.dhl.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 00:40:25.393588066 CET	1.1.1.1	192.168.2.4	0x8484	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 00:40:25.393608093 CET	1.1.1.1	192.168.2.4	0x8334	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:26.923207998 CET	1.1.1.1	192.168.2.4	0x9d9a	No error (0)	dhl-express.dynv6.net		104.248.254.79	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:27.590789080 CET	1.1.1.1	192.168.2.4	0x5185	No error (0)	dhl-express.dynv6.net		104.248.254.79	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.676968098 CET	1.1.1.1	192.168.2.4	0xdfc6	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 14, 2025 00:40:28.677011967 CET	1.1.1.1	192.168.2.4	0xd29	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.677011967 CET	1.1.1.1	192.168.2.4	0xd29	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.677048922 CET	1.1.1.1	192.168.2.4	0xfcd1	No error (0)	cdn.tailwindcss.com		104.22.20.144	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.677048922 CET	1.1.1.1	192.168.2.4	0xfcd1	No error (0)	cdn.tailwindcss.com		172.67.41.16	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.677048922 CET	1.1.1.1	192.168.2.4	0xfcd1	No error (0)	cdn.tailwindcss.com		104.22.21.144	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:28.678596973 CET	1.1.1.1	192.168.2.4	0x6272	No error (0)	cdn.tailwindcss.com			65	IN (0x0001)	false
Jan 14, 2025 00:40:28.680058956 CET	1.1.1.1	192.168.2.4	0xe99	No error (0)	www.dhl.com	www.dhl.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 00:40:28.698175907 CET	1.1.1.1	192.168.2.4	0x2d73	No error (0)	www.dhl.com	www.dhl.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 00:40:30.371596098 CET	1.1.1.1	192.168.2.4	0xbfea	No error (0)	cdn.tailwindcss.com		172.67.41.16	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:30.371596098 CET	1.1.1.1	192.168.2.4	0xbfea	No error (0)	cdn.tailwindcss.com		104.22.21.144	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:30.371596098 CET	1.1.1.1	192.168.2.4	0xbfea	No error (0)	cdn.tailwindcss.com		104.22.20.144	A (IP address)	IN (0x0001)	false
Jan 14, 2025 00:40:30.372920990 CET	1.1.1.1	192.168.2.4	0x1d61	No error (0)	cdn.tailwindcss.com			65	IN (0x0001)	false
Jan 14, 2025 00:41:07.949577093 CET	1.1.1.1	192.168.2.4	0x6e4a	No error (0)	www.dhl.com	www.dhl.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 00:41:07.968992949 CET	1.1.1.1	192.168.2.4	0x6180	No error (0)	www.dhl.com	www.dhl.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

dhl-express.dynv6.net

https:

cdnjs.cloudflare.com

cdn.tailwindcss.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	104.248.254.79	80	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 00:40:26.932282925 CET	439	OUT	GET /DE/ HTTP/1.1 Host: dhl-express.dynv6.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 14, 2025 00:40:27.575426102 CET	363	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 13 Jan 2025 23:40:27 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://dhl-express.dynv6.net/DE/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Jan 14, 2025 00:41:12.585472107 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	104.248.254.79	80	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 14, 2025 00:41:11.946270943 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49745	104.248.254.79	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:28 UTC	667	OUT	GET /DE/ HTTP/1.1 Host: dhl-express.dynv6.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 23:40:28 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 13 Jan 2025 23:40:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 20444 Connection: close X-Powered-By: PHP/8.3.15 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=bfj4o4d5eslveh85lfj51qo48f; path=/ Vary: Accept-Encoding X-Powered-By: PleskLin
2025-01-13 23:40:28 UTC	15990	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 48 4c 20 50 61 6b 65 74 76 65 72 66 6f 6c 67 75 6e 67 20 75 6e 64 20 5a 61 68 6c 75 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 68 6c 2e 63 6f 6d 2f Data Ascii: <!DOCTYPE html><html lang="de"><head> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0" name="viewport"/> <title>DHL Paketverfolgung und Zahlung</title> <link rel="icon" type="image/x-icon" href="https://www.dhl.com/
2025-01-13 23:40:28 UTC	4454	IN	Data Raw: 66 61 73 20 66 61 2d 6c 6f 63 6b 22 3e 3c 2f 69 3e 20 44 61 74 65 6e 73 63 68 75 74 7a 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 68 6f 76 65 72 3a 75 6e 64 65 72 6c 69 6e 65 22 20 68 72 65 66 3d 22 23 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 68 61 6e 64 73 68 61 6b 65 22 3e 3c 2f 69 3e 20 53 74 72 65 69 74 62 65 69 6c 65 67 75 6e 67 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 68 6f 76 65 72 3a 75 6e 64 65 72 6c 69 6e 65 22 20 68 72 65 66 3d 22 23 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 22 3e 3c 2f 69 3e 20 5a 75 73 c3 a4 74 7a 6c 69 63 68 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 3c 2f 61 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 Data Ascii: fas fa-lock"></i> Datenschutz</a> <a class="hover:underline" href="#"><i class="fas fa-handshake"></i> Streitbeilegung</a> <a class="hover:underline" href="#"><i class="fas fa-info-circle"></i> Zustzliche Informationen</a> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	104.17.24.14	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:29 UTC	584	OUT	GET /ajax/libs/font-awesome/5.15.3/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dhl-express.dynv6.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 23:40:29 UTC	941	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 23:40:29 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6599bda5-317b" Last-Modified: Sat, 06 Jan 2024 21:52:53 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 909 Expires: Sat, 03 Jan 2026 23:40:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tameNxZf%2F9eqN87UBH659bQukAvKmOOremYdaq4g8H3LynndPuXp4JTitnXMIuD5FqBYzEZ2WdeUok4zFaN0PpN%2Fh0n7yEILEZKzhxLTn8Ts44iGbSpQL1zPgPtGzvkjBV%2FRtVNQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90193b4aa9290f49-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 23:40:29 UTC	428	IN	Data Raw: 37 62 66 63 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 33 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b Data Ascii: 7bfc/! Font Awesome Free 5.15.3 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 36 36 37 65 6d 7d 2e 66 61 2d 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 2e 66 61 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 31 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 Data Ascii: BasicImage(rotation=1)";-webkit-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progi
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 66 33 36 39 22 7d 2e 66 61 2d 61 63 71 75 69 73 69 74 69 6f 6e 73 2d 69 6e 63 6f 72 70 6f 72 61 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 66 22 7d 2e 66 61 2d 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 31 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 62 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 7d 2e 66 61 2d 61 64 76 65 72 73 61 6c 3a 62 65 Data Ascii: ent:"\f369"}.fa-acquisitions-incorporated:before{content:"\f6af"}.fa-ad:before{content:"\f641"}.fa-address-book:before{content:"\f2b9"}.fa-address-card:before{content:"\f2bb"}.fa-adjust:before{content:"\f042"}.fa-adn:before{content:"\f170"}.fa-adversal:be
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 36 65 22 7d 2e 66 61 2d 61 6e 67 75 6c 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 30 22 7d 2e 66 61 2d 61 6e 6b 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 34 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 66 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 2d 69 6f 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 30 22 7d 2e 66 61 2d 61 70 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 31 22 7d 2e 66 61 2d 61 70 70 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 39 22 7d 2e 66 61 2d 61 70 70 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 31 22 7d 2e 66 61 Data Ascii: 6e"}.fa-angular:before{content:"\f420"}.fa-ankh:before{content:"\f644"}.fa-app-store:before{content:"\f36f"}.fa-app-store-ios:before{content:"\f370"}.fa-apper:before{content:"\f371"}.fa-apple:before{content:"\f179"}.fa-apple-alt:before{content:"\f5d1"}.fa
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 66 32 39 65 22 7d 2e 66 61 2d 61 75 74 6f 70 72 65 66 69 78 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 31 63 22 7d 2e 66 61 2d 61 76 69 61 6e 65 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 34 22 7d 2e 66 61 2d 61 76 69 61 74 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 31 22 7d 2e 66 61 2d 61 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 39 22 7d 2e 66 61 2d 61 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 35 22 7d 2e 66 61 2d 62 61 62 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 63 22 7d 2e 66 61 2d 62 61 62 79 2d 63 61 72 72 69 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 Data Ascii: ent:"\f29e"}.fa-autoprefixer:before{content:"\f41c"}.fa-avianex:before{content:"\f374"}.fa-aviato:before{content:"\f421"}.fa-award:before{content:"\f559"}.fa-aws:before{content:"\f375"}.fa-baby:before{content:"\f77c"}.fa-baby-carriage:before{content:"\f77
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 62 22 7d 2e 66 61 2d 62 69 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 37 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 36 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 61 22 7d 2e 66 61 2d 62 69 6d 6f 62 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 38 22 7d 2e 66 61 2d 62 69 6e 6f 63 75 6c 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 35 22 7d 2e 66 61 2d 62 69 6f 68 61 7a 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 38 30 22 7d 2e 66 61 2d 62 69 72 74 68 64 61 79 2d 63 61 6b 65 3a Data Ascii: before{content:"\f55b"}.fa-bible:before{content:"\f647"}.fa-bicycle:before{content:"\f206"}.fa-biking:before{content:"\f84a"}.fa-bimobject:before{content:"\f378"}.fa-binoculars:before{content:"\f1e5"}.fa-biohazard:before{content:"\f780"}.fa-birthday-cake:
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 39 65 22 7d 2e 66 61 2d 62 6f 78 2d 74 69 73 73 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 62 22 7d 2e 66 61 2d 62 6f 78 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 38 22 7d 2e 66 61 2d 62 72 61 69 6c 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 31 22 7d 2e 66 61 2d 62 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 63 22 7d 2e 66 61 2d 62 72 65 61 64 2d 73 6c 69 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 63 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 31 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 2d 6d 65 64 69 63 61 6c Data Ascii: re{content:"\f49e"}.fa-box-tissue:before{content:"\e05b"}.fa-boxes:before{content:"\f468"}.fa-braille:before{content:"\f2a1"}.fa-brain:before{content:"\f5dc"}.fa-bread-slice:before{content:"\f7ec"}.fa-briefcase:before{content:"\f0b1"}.fa-briefcase-medical
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 38 35 22 7d 2e 66 61 2d 63 61 6e 64 79 2d 63 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 38 36 22 7d 2e 66 61 2d 63 61 6e 6e 61 62 69 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 66 22 7d 2e 66 61 2d 63 61 70 73 75 6c 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 62 22 7d 2e 66 61 2d 63 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 39 22 7d 2e 66 61 2d 63 61 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 65 22 7d 2e 66 61 2d 63 61 72 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 66 22 7d 2e 66 61 2d 63 61 72 2d 63 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 31 22 Data Ascii: 85"}.fa-candy-cane:before{content:"\f786"}.fa-cannabis:before{content:"\f55f"}.fa-capsules:before{content:"\f46b"}.fa-car:before{content:"\f1b9"}.fa-car-alt:before{content:"\f5de"}.fa-car-battery:before{content:"\f5df"}.fa-car-crash:before{content:"\f5e1"
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 66 61 2d 63 68 61 6c 6b 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 62 22 7d 2e 66 61 2d 63 68 61 6c 6b 62 6f 61 72 64 2d 74 65 61 63 68 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 63 22 7d 2e 66 61 2d 63 68 61 72 67 69 6e 67 2d 73 74 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 37 22 7d 2e 66 61 2d 63 68 61 72 74 2d 61 72 65 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 65 22 7d 2e 66 61 2d 63 68 61 72 74 2d 62 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 63 68 61 72 74 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 31 22 7d 2e 66 61 2d 63 68 61 72 74 2d 70 69 65 3a 62 Data Ascii: fa-chalkboard:before{content:"\f51b"}.fa-chalkboard-teacher:before{content:"\f51c"}.fa-charging-station:before{content:"\f5e7"}.fa-chart-area:before{content:"\f1fe"}.fa-chart-bar:before{content:"\f080"}.fa-chart-line:before{content:"\f201"}.fa-chart-pie:b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	104.22.20.144	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:29 UTC	524	OUT	GET / HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dhl-express.dynv6.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 23:40:29 UTC	363	IN	HTTP/1.1 302 Found Date: Mon, 13 Jan 2025 23:40:29 GMT Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 location: /3.4.16 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::vgdn5-1736810386100-49a55af63b65 CF-Cache-Status: HIT Age: 496 Server: cloudflare CF-RAY: 90193b4ad99fef9d-EWR
2025-01-13 23:40:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49752	104.22.20.144	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:29 UTC	530	OUT	GET /3.4.16 HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dhl-express.dynv6.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 23:40:29 UTC	425	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 23:40:29 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=31536000 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::tmktz-1735198556500-dea9c24ac01d Last-Modified: Thu, 26 Dec 2024 07:35:57 GMT CF-Cache-Status: HIT Age: 1442869 Server: cloudflare CF-RAY: 90193b4e8c5d0f68-EWR
2025-01-13 23:40:29 UTC	944	IN	Data Raw: 37 64 66 37 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 71 76 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 48 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 4c 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 4d 76 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4e 76 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 64 66 3d 72 3d 3e 48 69 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 68 66 3d 72 3d 3e 7b 69 66 28 74 79 Data Ascii: 7df7(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!0});var hf=r=>{if(ty
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 7b 72 65 61 64 46 69 6c 65 53 79 6e 63 3a 72 3d 3e 73 65 6c 66 5b 72 5d 7c 7c 22 22 2c 73 74 61 74 53 79 6e 63 3a 28 29 3d 3e 28 7b 6d 74 69 6d 65 4d 73 3a 46 76 2b 2b 7d 29 2c 70 72 6f 6d 69 73 65 73 3a 7b 72 65 61 64 46 69 6c 65 3a 72 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 65 6c 66 5b 72 5d 7c 7c 22 22 29 7d 7d 7d 29 3b 76 61 72 20 46 73 3d 78 28 28 6f 50 2c 67 66 29 3d 3e 7b 75 28 29 3b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 66 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 7b 7d 29 7b 69 66 28 21 28 65 2e 6d 61 78 53 69 7a 65 26 26 65 2e 6d 61 78 53 69 7a 65 3e 30 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 60 6d 61 78 53 69 7a 65 60 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 Data Ascii: {readFileSync:r=>self[r]\|\|"",statSync:()=>({mtimeMs:Fv++}),promises:{readFile:r=>Promise.resolve(self[r]\|\|"")}}});var Fs=x((oP,gf)=>{u();"use strict";var mf=class{constructor(e={}){if(!(e.maxSize&&e.maxSize>0))throw new TypeError("`maxSize` must be a numb
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 20 65 29 7d 7d 67 65 74 28 65 29 7b 69 66 28 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 63 61 63 68 65 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 56 61 6c 75 65 28 65 2c 74 29 7d 69 66 28 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 67 65 74 28 65 29 3b 69 66 28 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 65 2c 74 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 6f 76 65 54 6f 52 65 63 65 6e 74 28 65 2c 74 29 2c 74 2e 76 61 6c 75 65 7d 7d 73 65 74 28 65 2c 74 Data Ascii: eleteIfExpired(t,i)===!1&&(yield e)}}get(e){if(this.cache.has(e)){let t=this.cache.get(e);return this._getItemValue(e,t)}if(this.oldCache.has(e)){let t=this.oldCache.get(e);if(this._deleteIfExpired(e,t)===!1)return this._moveToRecent(e,t),t.value}}set(e,t
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 3b 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 74 29 7c 7c 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 74 2c 69 2e 76 61 6c 75 65 5d 29 7d 7d 2a 65 6e 74 72 69 65 73 44 65 73 63 65 6e 64 69 6e 67 28 29 7b 6c 65 74 20 65 3d 5b 2e 2e 2e 74 68 69 73 2e 63 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 6c 65 74 20 69 3d 65 5b 74 5d 2c 5b 6e 2c 73 5d 3d 69 3b 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 6e 2c 73 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 6e 2c 73 2e 76 61 6c 75 65 5d 29 7d 65 3d 5b 2e 2e 2e 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 Data Ascii: ;this.cache.has(t)\|\|this._deleteIfExpired(t,i)===!1&&(yield[t,i.value])}}*entriesDescending(){let e=[...this.cache];for(let t=e.length-1;t>=0;--t){let i=e[t],[n,s]=i;this._deleteIfExpired(n,s)===!1&&(yield[n,s.value])}e=[...this.oldCache];for(let t=e.leng
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 65 78 22 2c 22 66 6c 65 78 53 68 72 69 6e 6b 22 2c 22 66 6c 65 78 47 72 6f 77 22 2c 22 66 6c 65 78 42 61 73 69 73 22 2c 22 74 61 62 6c 65 4c 61 79 6f 75 74 22 2c 22 63 61 70 74 69 6f 6e 53 69 64 65 22 2c 22 62 6f 72 64 65 72 43 6f 6c 6c 61 70 73 65 22 2c 22 62 6f 72 64 65 72 53 70 61 63 69 6e 67 22 2c 22 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 22 2c 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 72 6f 74 61 74 65 22 2c 22 73 6b 65 77 22 2c 22 73 63 61 6c 65 22 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 22 2c 22 63 75 72 73 6f 72 22 2c 22 74 6f 75 63 68 41 63 74 69 6f 6e 22 2c 22 75 73 65 72 53 65 6c 65 63 74 22 2c 22 72 65 73 69 7a 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 54 79 70 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 41 6c 69 Data Ascii: ex","flexShrink","flexGrow","flexBasis","tableLayout","captionSide","borderCollapse","borderSpacing","transformOrigin","translate","rotate","skew","scale","transform","animation","cursor","touchAction","userSelect","resize","scrollSnapType","scrollSnapAli
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 72 22 2c 22 74 65 78 74 4f 70 61 63 69 74 79 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 43 6f 6c 6f 72 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 53 74 79 6c 65 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 54 68 69 63 6b 6e 65 73 73 22 2c 22 74 65 78 74 55 6e 64 65 72 6c 69 6e 65 4f 66 66 73 65 74 22 2c 22 66 6f 6e 74 53 6d 6f 6f 74 68 69 6e 67 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 43 6f 6c 6f 72 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 4f 70 61 63 69 74 79 22 2c 22 63 61 72 65 74 43 6f 6c 6f 72 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 2c 22 6f 70 61 63 69 74 79 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 42 6c 65 6e 64 4d 6f 64 65 22 2c 22 6d 69 78 42 6c 65 6e 64 4d 6f 64 65 22 Data Ascii: r","textOpacity","textDecoration","textDecorationColor","textDecorationStyle","textDecorationThickness","textUnderlineOffset","fontSmoothing","placeholderColor","placeholderOpacity","caretColor","accentColor","opacity","backgroundBlendMode","mixBlendMode"
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 77 61 72 6e 28 72 2c 65 29 7b 5b 22 63 6f 6e 74 65 6e 74 2d 70 72 6f 62 6c 65 6d 73 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 7c 7c 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 79 65 6c 6c 6f 77 28 22 77 61 72 6e 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 72 69 73 6b 28 72 2c 65 29 7b 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 6d 61 67 65 6e 74 61 28 22 72 69 73 6b 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 7d 7d 29 3b 76 61 72 20 5f 66 3d 7b 7d 3b 47 65 28 5f 66 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 55 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 71 72 28 Data Ascii: ray.isArray(r)?[r]:[e,r])},warn(r,e){["content-problems"].includes(r)\|\|js(Qe.bold(Qe.yellow("warn")),...Array.isArray(r)?[r]:[e,r])},risk(r,e){js(Qe.bold(Qe.magenta("risk")),...Array.isArray(r)?[r]:[e,r])}}});var _f={};Ge(_f,{default:()=>Us});function qr(
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 30 3a 22 23 66 65 66 32 66 32 22 2c 31 30 30 3a 22 23 66 65 65 32 65 32 22 2c 32 30 30 3a 22 23 66 65 63 61 63 61 22 2c 33 30 30 3a 22 23 66 63 61 35 61 35 22 2c 34 30 30 3a 22 23 66 38 37 31 37 31 22 2c 35 30 30 3a 22 23 65 66 34 34 34 34 22 2c 36 30 30 3a 22 23 64 63 32 36 32 36 22 2c 37 30 30 3a 22 23 62 39 31 63 31 63 22 2c 38 30 30 3a 22 23 39 39 31 62 31 62 22 2c 39 30 30 3a 22 23 37 66 31 64 31 64 22 2c 39 35 30 3a 22 23 34 35 30 61 30 61 22 7d 2c 6f 72 61 6e 67 65 3a 7b 35 30 3a 22 23 66 66 66 37 65 64 22 2c 31 30 30 3a 22 23 66 66 65 64 64 35 22 2c 32 30 30 3a 22 23 66 65 64 37 61 61 22 2c 33 30 30 3a 22 23 66 64 62 61 37 34 22 2c 34 30 30 3a 22 23 66 62 39 32 33 63 22 2c 35 30 30 3a 22 23 66 39 37 33 31 36 22 2c 36 30 30 3a 22 23 65 61 35 38 30 Data Ascii: 0:"#fef2f2",100:"#fee2e2",200:"#fecaca",300:"#fca5a5",400:"#f87171",500:"#ef4444",600:"#dc2626",700:"#b91c1c",800:"#991b1b",900:"#7f1d1d",950:"#450a0a"},orange:{50:"#fff7ed",100:"#ffedd5",200:"#fed7aa",300:"#fdba74",400:"#fb923c",500:"#f97316",600:"#ea580
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 22 2c 36 30 30 3a 22 23 30 38 39 31 62 32 22 2c 37 30 30 3a 22 23 30 65 37 34 39 30 22 2c 38 30 30 3a 22 23 31 35 35 65 37 35 22 2c 39 30 30 3a 22 23 31 36 34 65 36 33 22 2c 39 35 30 3a 22 23 30 38 33 33 34 34 22 7d 2c 73 6b 79 3a 7b 35 30 3a 22 23 66 30 66 39 66 66 22 2c 31 30 30 3a 22 23 65 30 66 32 66 65 22 2c 32 30 30 3a 22 23 62 61 65 36 66 64 22 2c 33 30 30 3a 22 23 37 64 64 33 66 63 22 2c 34 30 30 3a 22 23 33 38 62 64 66 38 22 2c 35 30 30 3a 22 23 30 65 61 35 65 39 22 2c 36 30 30 3a 22 23 30 32 38 34 63 37 22 2c 37 30 30 3a 22 23 30 33 36 39 61 31 22 2c 38 30 30 3a 22 23 30 37 35 39 38 35 22 2c 39 30 30 3a 22 23 30 63 34 61 36 65 22 2c 39 35 30 3a 22 23 30 38 32 66 34 39 22 7d 2c 62 6c 75 65 3a 7b 35 30 3a 22 23 65 66 66 36 66 66 22 2c 31 30 30 3a Data Ascii: ",600:"#0891b2",700:"#0e7490",800:"#155e75",900:"#164e63",950:"#083344"},sky:{50:"#f0f9ff",100:"#e0f2fe",200:"#bae6fd",300:"#7dd3fc",400:"#38bdf8",500:"#0ea5e9",600:"#0284c7",700:"#0369a1",800:"#075985",900:"#0c4a6e",950:"#082f49"},blue:{50:"#eff6ff",100:
2025-01-13 23:40:29 UTC	1369	IN	Data Raw: 74 42 6c 75 65 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 32 2e 32 22 2c 66 72 6f 6d 3a 22 6c 69 67 68 74 42 6c 75 65 22 2c 74 6f 3a 22 73 6b 79 22 7d 29 2c 74 68 69 73 2e 73 6b 79 7d 2c 67 65 74 20 77 61 72 6d 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 77 61 72 6d 47 72 61 79 22 2c 74 6f 3a 22 73 74 6f 6e 65 22 7d 29 2c 74 68 69 73 2e 73 74 6f 6e 65 7d 2c 67 65 74 20 74 72 75 65 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 74 72 75 65 47 72 61 79 22 2c 74 6f 3a 22 6e 65 75 74 72 61 6c 22 7d 29 2c 74 68 69 73 2e 6e 65 75 74 72 61 6c 7d 2c 67 65 74 20 63 6f 6f 6c 47 72 61 79 28 29 7b Data Ascii: tBlue(){return qr({version:"v2.2",from:"lightBlue",to:"sky"}),this.sky},get warmGray(){return qr({version:"v3.0",from:"warmGray",to:"stone"}),this.stone},get trueGray(){return qr({version:"v3.0",from:"trueGray",to:"neutral"}),this.neutral},get coolGray(){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49754	172.67.41.16	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:30 UTC	349	OUT	GET /3.4.16 HTTP/1.1 Host: cdn.tailwindcss.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 23:40:31 UTC	425	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 23:40:30 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=31536000 strict-transport-security: max-age=63072000 x-vercel-cache: MISS x-vercel-id: cle1::iad1::tmktz-1735198556500-dea9c24ac01d Last-Modified: Thu, 26 Dec 2024 07:35:57 GMT CF-Cache-Status: HIT Age: 1442870 Server: cloudflare CF-RAY: 90193b556ec80c90-EWR
2025-01-13 23:40:31 UTC	944	IN	Data Raw: 37 64 66 37 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 71 76 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 48 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 4c 76 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 4d 76 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4e 76 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 64 66 3d 72 3d 3e 48 69 28 72 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 68 66 3d 72 3d 3e 7b 69 66 28 74 79 Data Ascii: 7df7(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.hasOwnProperty;var df=r=>Hi(r,"__esModule",{value:!0});var hf=r=>{if(ty
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 7b 72 65 61 64 46 69 6c 65 53 79 6e 63 3a 72 3d 3e 73 65 6c 66 5b 72 5d 7c 7c 22 22 2c 73 74 61 74 53 79 6e 63 3a 28 29 3d 3e 28 7b 6d 74 69 6d 65 4d 73 3a 46 76 2b 2b 7d 29 2c 70 72 6f 6d 69 73 65 73 3a 7b 72 65 61 64 46 69 6c 65 3a 72 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 65 6c 66 5b 72 5d 7c 7c 22 22 29 7d 7d 7d 29 3b 76 61 72 20 46 73 3d 78 28 28 6f 50 2c 67 66 29 3d 3e 7b 75 28 29 3b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 66 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 7b 7d 29 7b 69 66 28 21 28 65 2e 6d 61 78 53 69 7a 65 26 26 65 2e 6d 61 78 53 69 7a 65 3e 30 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 60 6d 61 78 53 69 7a 65 60 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 Data Ascii: {readFileSync:r=>self[r]\|\|"",statSync:()=>({mtimeMs:Fv++}),promises:{readFile:r=>Promise.resolve(self[r]\|\|"")}}});var Fs=x((oP,gf)=>{u();"use strict";var mf=class{constructor(e={}){if(!(e.maxSize&&e.maxSize>0))throw new TypeError("`maxSize` must be a numb
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 20 65 29 7d 7d 67 65 74 28 65 29 7b 69 66 28 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 63 61 63 68 65 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 56 61 6c 75 65 28 65 2c 74 29 7d 69 66 28 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 68 61 73 28 65 29 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 2e 67 65 74 28 65 29 3b 69 66 28 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 65 2c 74 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 6f 76 65 54 6f 52 65 63 65 6e 74 28 65 2c 74 29 2c 74 2e 76 61 6c 75 65 7d 7d 73 65 74 28 65 2c 74 Data Ascii: eleteIfExpired(t,i)===!1&&(yield e)}}get(e){if(this.cache.has(e)){let t=this.cache.get(e);return this._getItemValue(e,t)}if(this.oldCache.has(e)){let t=this.oldCache.get(e);if(this._deleteIfExpired(e,t)===!1)return this._moveToRecent(e,t),t.value}}set(e,t
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 3b 74 68 69 73 2e 63 61 63 68 65 2e 68 61 73 28 74 29 7c 7c 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 74 2c 69 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 74 2c 69 2e 76 61 6c 75 65 5d 29 7d 7d 2a 65 6e 74 72 69 65 73 44 65 73 63 65 6e 64 69 6e 67 28 29 7b 6c 65 74 20 65 3d 5b 2e 2e 2e 74 68 69 73 2e 63 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 6c 65 74 20 69 3d 65 5b 74 5d 2c 5b 6e 2c 73 5d 3d 69 3b 74 68 69 73 2e 5f 64 65 6c 65 74 65 49 66 45 78 70 69 72 65 64 28 6e 2c 73 29 3d 3d 3d 21 31 26 26 28 79 69 65 6c 64 5b 6e 2c 73 2e 76 61 6c 75 65 5d 29 7d 65 3d 5b 2e 2e 2e 74 68 69 73 2e 6f 6c 64 43 61 63 68 65 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 Data Ascii: ;this.cache.has(t)\|\|this._deleteIfExpired(t,i)===!1&&(yield[t,i.value])}}*entriesDescending(){let e=[...this.cache];for(let t=e.length-1;t>=0;--t){let i=e[t],[n,s]=i;this._deleteIfExpired(n,s)===!1&&(yield[n,s.value])}e=[...this.oldCache];for(let t=e.leng
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 65 78 22 2c 22 66 6c 65 78 53 68 72 69 6e 6b 22 2c 22 66 6c 65 78 47 72 6f 77 22 2c 22 66 6c 65 78 42 61 73 69 73 22 2c 22 74 61 62 6c 65 4c 61 79 6f 75 74 22 2c 22 63 61 70 74 69 6f 6e 53 69 64 65 22 2c 22 62 6f 72 64 65 72 43 6f 6c 6c 61 70 73 65 22 2c 22 62 6f 72 64 65 72 53 70 61 63 69 6e 67 22 2c 22 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 22 2c 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 72 6f 74 61 74 65 22 2c 22 73 6b 65 77 22 2c 22 73 63 61 6c 65 22 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 22 2c 22 63 75 72 73 6f 72 22 2c 22 74 6f 75 63 68 41 63 74 69 6f 6e 22 2c 22 75 73 65 72 53 65 6c 65 63 74 22 2c 22 72 65 73 69 7a 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 54 79 70 65 22 2c 22 73 63 72 6f 6c 6c 53 6e 61 70 41 6c 69 Data Ascii: ex","flexShrink","flexGrow","flexBasis","tableLayout","captionSide","borderCollapse","borderSpacing","transformOrigin","translate","rotate","skew","scale","transform","animation","cursor","touchAction","userSelect","resize","scrollSnapType","scrollSnapAli
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 72 22 2c 22 74 65 78 74 4f 70 61 63 69 74 79 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 43 6f 6c 6f 72 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 53 74 79 6c 65 22 2c 22 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 54 68 69 63 6b 6e 65 73 73 22 2c 22 74 65 78 74 55 6e 64 65 72 6c 69 6e 65 4f 66 66 73 65 74 22 2c 22 66 6f 6e 74 53 6d 6f 6f 74 68 69 6e 67 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 43 6f 6c 6f 72 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 4f 70 61 63 69 74 79 22 2c 22 63 61 72 65 74 43 6f 6c 6f 72 22 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 2c 22 6f 70 61 63 69 74 79 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 42 6c 65 6e 64 4d 6f 64 65 22 2c 22 6d 69 78 42 6c 65 6e 64 4d 6f 64 65 22 Data Ascii: r","textOpacity","textDecoration","textDecorationColor","textDecorationStyle","textDecorationThickness","textUnderlineOffset","fontSmoothing","placeholderColor","placeholderOpacity","caretColor","accentColor","opacity","backgroundBlendMode","mixBlendMode"
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 77 61 72 6e 28 72 2c 65 29 7b 5b 22 63 6f 6e 74 65 6e 74 2d 70 72 6f 62 6c 65 6d 73 22 5d 2e 69 6e 63 6c 75 64 65 73 28 72 29 7c 7c 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 79 65 6c 6c 6f 77 28 22 77 61 72 6e 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 2c 72 69 73 6b 28 72 2c 65 29 7b 6a 73 28 51 65 2e 62 6f 6c 64 28 51 65 2e 6d 61 67 65 6e 74 61 28 22 72 69 73 6b 22 29 29 2c 2e 2e 2e 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 72 5d 3a 5b 65 2c 72 5d 29 7d 7d 7d 29 3b 76 61 72 20 5f 66 3d 7b 7d 3b 47 65 28 5f 66 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 55 73 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 71 72 28 Data Ascii: ray.isArray(r)?[r]:[e,r])},warn(r,e){["content-problems"].includes(r)\|\|js(Qe.bold(Qe.yellow("warn")),...Array.isArray(r)?[r]:[e,r])},risk(r,e){js(Qe.bold(Qe.magenta("risk")),...Array.isArray(r)?[r]:[e,r])}}});var _f={};Ge(_f,{default:()=>Us});function qr(
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 30 3a 22 23 66 65 66 32 66 32 22 2c 31 30 30 3a 22 23 66 65 65 32 65 32 22 2c 32 30 30 3a 22 23 66 65 63 61 63 61 22 2c 33 30 30 3a 22 23 66 63 61 35 61 35 22 2c 34 30 30 3a 22 23 66 38 37 31 37 31 22 2c 35 30 30 3a 22 23 65 66 34 34 34 34 22 2c 36 30 30 3a 22 23 64 63 32 36 32 36 22 2c 37 30 30 3a 22 23 62 39 31 63 31 63 22 2c 38 30 30 3a 22 23 39 39 31 62 31 62 22 2c 39 30 30 3a 22 23 37 66 31 64 31 64 22 2c 39 35 30 3a 22 23 34 35 30 61 30 61 22 7d 2c 6f 72 61 6e 67 65 3a 7b 35 30 3a 22 23 66 66 66 37 65 64 22 2c 31 30 30 3a 22 23 66 66 65 64 64 35 22 2c 32 30 30 3a 22 23 66 65 64 37 61 61 22 2c 33 30 30 3a 22 23 66 64 62 61 37 34 22 2c 34 30 30 3a 22 23 66 62 39 32 33 63 22 2c 35 30 30 3a 22 23 66 39 37 33 31 36 22 2c 36 30 30 3a 22 23 65 61 35 38 30 Data Ascii: 0:"#fef2f2",100:"#fee2e2",200:"#fecaca",300:"#fca5a5",400:"#f87171",500:"#ef4444",600:"#dc2626",700:"#b91c1c",800:"#991b1b",900:"#7f1d1d",950:"#450a0a"},orange:{50:"#fff7ed",100:"#ffedd5",200:"#fed7aa",300:"#fdba74",400:"#fb923c",500:"#f97316",600:"#ea580
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 22 2c 36 30 30 3a 22 23 30 38 39 31 62 32 22 2c 37 30 30 3a 22 23 30 65 37 34 39 30 22 2c 38 30 30 3a 22 23 31 35 35 65 37 35 22 2c 39 30 30 3a 22 23 31 36 34 65 36 33 22 2c 39 35 30 3a 22 23 30 38 33 33 34 34 22 7d 2c 73 6b 79 3a 7b 35 30 3a 22 23 66 30 66 39 66 66 22 2c 31 30 30 3a 22 23 65 30 66 32 66 65 22 2c 32 30 30 3a 22 23 62 61 65 36 66 64 22 2c 33 30 30 3a 22 23 37 64 64 33 66 63 22 2c 34 30 30 3a 22 23 33 38 62 64 66 38 22 2c 35 30 30 3a 22 23 30 65 61 35 65 39 22 2c 36 30 30 3a 22 23 30 32 38 34 63 37 22 2c 37 30 30 3a 22 23 30 33 36 39 61 31 22 2c 38 30 30 3a 22 23 30 37 35 39 38 35 22 2c 39 30 30 3a 22 23 30 63 34 61 36 65 22 2c 39 35 30 3a 22 23 30 38 32 66 34 39 22 7d 2c 62 6c 75 65 3a 7b 35 30 3a 22 23 65 66 66 36 66 66 22 2c 31 30 30 3a Data Ascii: ",600:"#0891b2",700:"#0e7490",800:"#155e75",900:"#164e63",950:"#083344"},sky:{50:"#f0f9ff",100:"#e0f2fe",200:"#bae6fd",300:"#7dd3fc",400:"#38bdf8",500:"#0ea5e9",600:"#0284c7",700:"#0369a1",800:"#075985",900:"#0c4a6e",950:"#082f49"},blue:{50:"#eff6ff",100:
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 74 42 6c 75 65 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 32 2e 32 22 2c 66 72 6f 6d 3a 22 6c 69 67 68 74 42 6c 75 65 22 2c 74 6f 3a 22 73 6b 79 22 7d 29 2c 74 68 69 73 2e 73 6b 79 7d 2c 67 65 74 20 77 61 72 6d 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 77 61 72 6d 47 72 61 79 22 2c 74 6f 3a 22 73 74 6f 6e 65 22 7d 29 2c 74 68 69 73 2e 73 74 6f 6e 65 7d 2c 67 65 74 20 74 72 75 65 47 72 61 79 28 29 7b 72 65 74 75 72 6e 20 71 72 28 7b 76 65 72 73 69 6f 6e 3a 22 76 33 2e 30 22 2c 66 72 6f 6d 3a 22 74 72 75 65 47 72 61 79 22 2c 74 6f 3a 22 6e 65 75 74 72 61 6c 22 7d 29 2c 74 68 69 73 2e 6e 65 75 74 72 61 6c 7d 2c 67 65 74 20 63 6f 6f 6c 47 72 61 79 28 29 7b Data Ascii: tBlue(){return qr({version:"v2.2",from:"lightBlue",to:"sky"}),this.sky},get warmGray(){return qr({version:"v3.0",from:"warmGray",to:"stone"}),this.stone},get trueGray(){return qr({version:"v3.0",from:"trueGray",to:"neutral"}),this.neutral},get coolGray(){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49756	104.17.24.14	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:31 UTC	660	OUT	GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dhl-express.dynv6.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 23:40:31 UTC	980	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 23:40:31 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 78196 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "6599bdc3-13174" Last-Modified: Sat, 06 Jan 2024 21:53:23 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2025 Expires: Sat, 03 Jan 2026 23:40:31 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F1%2BbYNDrdaRgmxvRUHcpq46LOrFiOAcsISykijmVJspgYa%2BMb8A3Eo1ZuYOl4nmKyE%2Fjwaq6eK45p3MdUTy%2BsgcBm1ImQdwIhiAaTjUS2822wgvf6VhzOgVPzvlq%2F%2F28iZUrj11w"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90193b583e81f791-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 23:40:31 UTC	389	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 31 74 00 0d 00 00 00 03 17 f4 00 01 31 1a 01 4b 85 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 99 4e 11 08 0a 8a e6 68 88 c3 42 01 36 02 24 03 9f 30 0b 9f 34 00 04 20 05 8a 2b 07 e2 2e 5b b4 75 92 81 70 d3 28 e4 d7 9b 55 15 64 81 f0 7b 2d 98 6e ee 50 6e 1b c0 c9 9f e1 5f 3d 56 32 b6 65 04 ef 76 70 d8 7e 97 ab c8 fe ff ff ff 7f 55 b2 90 31 fd bf c0 3d 09 1f 42 c0 82 62 ad ae b2 95 6d 76 53 b4 2e c6 94 ac 77 c9 43 19 2b e8 24 99 b8 a4 28 fd a0 4d 4d 49 e6 69 48 7d aa 93 4f e5 04 eb 34 c0 37 15 73 ce 12 17 59 81 29 02 2a 02 2a 02 ca d9 dd 7d ec 95 07 5e da b4 89 bb 7b 5e a1 b7 f2 aa 52 0a 7a df d0 0a 8d 66 c8 8c 06 68 34 64 44 37 eb 3a 31 2a 9a 99 18 43 6a 83 1f 6c cd 38 4d a5 Data Ascii: wOF21t1K?FFTM`NhB6$04 +.[up(Ud{-nPn_=V2evp~U1=BbmvS.wC+$(MMIiH}O47sY)*}^{^Rzfh4dD7:1Cjl8M
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 94 58 4a 91 8c 1d b2 05 2f 49 60 78 95 52 92 0c 1e d0 63 b6 68 fb 86 77 a2 7f f2 3f 74 6d ec 01 6c d7 01 04 4c 51 0d c9 a0 8b 1e fa b4 68 4d 67 f6 1e c3 78 aa 0a d0 31 bb 46 96 ac af 63 55 e1 62 7c d1 33 ed f0 a4 9b ff ee 76 92 4b 72 c9 66 e6 48 20 04 10 39 20 40 18 9a 83 04 08 a3 10 20 0c c5 9a a8 10 e2 e8 27 0a 02 6a db c4 c9 a1 56 71 07 3a c0 51 c5 f1 2b ae d1 0f 9d df 8e 5f e9 1a 28 ad b3 c3 4a 97 b6 7f 85 08 7e bf df 2f 87 a6 59 3c 12 22 9e b4 9f fb a4 81 47 42 9d 17 3a a6 89 50 c4 42 fb c9 fb 37 71 fe af f7 4b d2 ad 7b cc e0 11 46 22 0d de 33 b8 d6 d2 a7 c7 36 3f 13 43 2c 8b 85 42 eb f0 50 bf 56 be 99 0d 91 8c 1c e1 43 b6 43 2a f6 ca af 5c 17 b4 a9 ea 2b 9f b8 f3 01 61 89 fe 86 58 02 7a fc f2 54 7a 64 6e 8c 50 fb 4d 14 13 09 05 6c 69 98 9f a4 6c 32 Data Ascii: XJ/I`xRchw?tmlLQhMgx1FcUb\|3vKrfH 9 @ 'jVq:Q+_(J~/Y<"GB:PB7qK{F"36?C,BPVCC*\+aXzTzdnPMlil2
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 6e c3 e5 bd bb 08 16 73 5a b7 99 5d c8 f3 11 86 42 ea 8d 37 0f 0f 66 5e c1 59 81 cd ca 52 d3 db 52 45 de e4 05 1b 1e 15 1e 56 72 f8 16 be 9e 00 ec e7 c9 27 b8 f3 57 d5 b0 24 29 22 09 c9 a9 ad dd c7 e7 e4 d7 77 eb 15 19 93 90 92 91 5d 58 52 b7 61 df 8c d2 f2 aa a6 5e dc e7 5b 12 32 32 95 29 55 68 8c 56 f7 70 0c 9e c5 97 f9 46 d3 18 2c 8e 40 57 df c8 ca 83 ca 17 4a b5 66 6f 9e a5 c7 ae d4 1a a9 12 ad c1 0b 9e a7 75 b8 f8 4f a0 32 b8 42 b9 ba a9 85 95 8d 23 95 29 d6 e8 8c 16 fe 73 ba dc 9e ce 68 ca af ef 37 af b0 b8 4f 45 bb 0e e1 78 4a 46 49 79 4d 4b 5f ad 68 fe 14 82 89 4d 4d cb c8 cc c6 01 02 06 01 03 8f 88 82 89 47 40 4c 4e c7 cc ca 99 27 1f 28 38 44 74 2c 42 3a 8c 58 b2 e5 08 42 c5 22 22 03 b5 f2 a0 60 60 6a cd 81 63 e7 6e bc 28 a9 6a ea 19 1a 9b 59 58 Data Ascii: nsZ]B7f^YRREVr'W$)"w]XRa^[22)UhVpF,@WJfouO2B#)sh7OExJFIyMK_hMMG@LN'(8Dt,B:XB""``jcn(jYX
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 9c 71 d8 99 97 2e f0 2f 3b 23 c7 e8 88 ea e9 7f 1f c3 ee 00 14 4f 4c ca 65 5e 8e a8 f9 06 d6 22 59 56 1a d8 67 6f b9 2a f5 ea 99 6c 01 9c 09 23 19 d6 d4 51 a3 06 aa 65 0d ac 66 24 6a 34 c3 7c 7b 1c 0f 0a ee 54 80 b4 27 1a 8a 5f 91 f6 7a 3e e3 3b 38 e9 d8 15 bb b7 fa c7 32 db 80 7e 3e d7 46 83 b8 d5 c7 bf d6 93 3b 91 7f 76 8c 69 fa 7d fc 3c 24 aa d3 47 f0 52 83 1b 72 03 42 2b 6e 1e 30 01 61 0a cd b7 97 b8 c7 46 d9 eb 6f e1 9a 6c 13 75 f3 6d e8 a7 c1 4e 49 df 62 3e 71 39 2f 7b 38 94 ba d8 39 a7 6f eb 1d 38 d6 a5 fb 01 ce 1f f5 b7 a0 06 6e ac bd c9 c4 b4 6c 98 cc 08 b7 96 7e 32 32 b0 ee 73 83 6d 38 d7 56 fa 16 ed 96 b8 76 12 23 04 9e 0f 07 01 2c 1e 9d d8 df fa 87 86 da ab 67 6e 55 e5 1e 8f 24 6b 75 d9 2b 4d 03 97 67 2d f4 d7 79 dd b1 a0 26 8b 8f 26 46 28 13 Data Ascii: q./;#OLe^"YVgo*l#Qef$j4\|{T'_z>;82~>F;vi}<$GRrB+n0aFolumNIb>q9/{89o8nl~22sm8Vv#,gnU$ku+Mg-y&&F(
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: ec 94 33 41 67 ed 5c 1b eb 8a 59 4c 49 da c2 02 64 21 3e b0 90 9d 39 45 5c f8 e5 10 9c 31 d7 a5 b2 a5 d1 16 dc 63 6a 63 88 b3 86 c7 4b 29 66 2d ab 4c 5b f0 70 20 96 41 1a 26 33 31 78 59 ca fa 48 16 c6 60 29 5b 05 17 f6 06 b1 12 4e 4a 3a 97 6e 63 aa 42 3f b5 5b 94 bd b5 6e 92 bf 1c 39 94 ea 9e 78 7a 9e 11 79 d0 bd d1 65 b8 75 ff a8 d4 d0 2a 48 7c 70 d8 4c 88 94 29 73 dc e5 d7 8c c7 db ed c1 54 55 6f f3 f1 54 8d aa 1e a5 90 f7 a7 92 f6 9e 55 8d 22 c9 a8 6a 3c fe 71 dd d8 7b 55 de 61 e5 59 dc a0 49 70 fe 62 65 c7 16 7b 00 6e d4 e9 d9 9a af 14 9c 21 67 d4 97 d3 1e 24 a9 ea da 52 bf a0 7e 67 f2 3a f5 3f 14 08 6a e6 22 6e e7 c5 f7 35 af 7f 67 cc bd e3 c1 ff 75 ca 5f aa 71 c0 9a 7f 06 1f 45 92 57 95 a1 2e 28 6b 7a db 54 c7 51 f5 e3 ec df c0 50 a9 a1 d6 73 19 1c Data Ascii: 3Ag\YLId!>9E\1cjcK)f-L[p A&31xYH`)[NJ:ncB?[n9xzyeu*H\|pL)sTUoTU"j<q{UaYIpbe{n!g$R~g:?j"n5gu_qEW.(kzTQPs
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 6d 24 7a 4e 80 d0 6d 24 3a 81 85 64 eb 74 ba 65 3c f9 5e 10 dc 57 5f 9d 18 0f d1 b2 a1 f4 18 cb a4 73 1c 99 f9 b6 dd 36 c7 ce d4 52 d3 01 96 c7 48 fa 10 78 b4 06 f2 41 67 61 2a c4 8d 1e d6 3c 9a 16 54 92 21 89 4e 8f 56 96 c6 5d 19 0e 00 86 46 7d ed 10 12 34 43 1b b6 d5 e8 b4 d4 44 51 be b4 1c 2f 37 ba 46 36 83 55 10 b5 31 ca b0 78 09 f3 16 72 de 43 b8 99 dc 9a e2 3e b1 83 92 81 32 8c b2 0b 1e 69 6d 4b f8 e5 1a 21 18 1e 59 e7 07 5e 02 b7 1b a3 98 b4 ed 68 73 3c 88 1e be 8a 38 af be a0 15 84 e3 f2 3a 3c fa dc 08 08 cb 57 f2 25 80 6f 88 85 fb 04 99 35 20 74 b8 64 60 8c d1 94 31 ac a6 aa b3 ca 1f 76 d7 9a 3a 63 33 8c bd b7 3f b5 ed 18 01 b8 89 67 eb 4b 49 17 f0 5f c6 ac 92 14 80 4c 5e 26 bd bf b3 38 15 3e 5e 18 52 d7 9a 80 f7 86 a3 56 1d d1 19 c7 62 cd 72 ec Data Ascii: m$zNm$:dte<^W_s6RHxAga*<T!NV]F}4CDQ/7F6U1xrC>2imK!Y^hs<8:<W%o5 td`1v:c3?gKI_L^&8>^RVbr
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 5b 1c 49 27 f3 9d 83 42 c0 b7 85 36 49 e2 02 fe b9 55 08 4f 44 d7 92 8d 82 0c 69 a1 3f ed de 37 64 ff 4a ce d0 0a f7 41 4d a7 74 83 0e 42 5f dd b3 e6 66 86 94 91 44 3a 84 43 5d 83 d2 98 26 85 1c d4 7a 14 f5 47 4d d8 24 db c0 32 cd e6 fa 52 d2 3a b5 e6 44 c5 c9 c1 39 d3 3f 1d aa af 7d 5a 55 fd b5 90 b7 66 fb 4b c6 33 be 3c 46 a9 ca 36 2a a9 c5 69 ce 16 b1 3a bf 7c c5 dc 90 0d fe 89 82 95 13 b5 42 57 7c 9f fa 0b 17 3b 27 23 fe dc 6f 43 52 3d 2d 1a 41 97 8e 54 75 ce 4e da 0f 92 e7 85 42 eb b3 0d a5 a2 17 c6 c8 10 80 31 32 50 44 82 bd fc 50 8d 98 21 c2 1f 36 dd 75 f5 27 2b e3 1e 7f 49 34 a8 06 59 b9 94 38 15 c9 00 59 7a 8c 89 19 8e e0 7f 97 34 c5 6c ab 44 0b 9d a2 27 81 9b 0c 04 2b 8f 45 26 4f 00 b0 9b 1d 53 92 57 33 99 9a 23 24 29 a8 89 11 b0 5c c4 d5 c6 9b Data Ascii: [I'B6IUODi?7dJAMtB_fD:C]&zGM$2R:D9?}ZUfK3<F6*i:\|BW\|;'#oCR=-ATuNB12PDP!6u'+I4Y8Yz4lD'+E&OSW3#$)\
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: cc 39 15 c5 0a 63 be 97 5c 64 f9 2b 7c 2a 92 b6 4e 29 0b 53 67 14 dd 66 64 a0 e3 95 ad b1 63 d0 32 fe f2 47 e7 97 e1 4a 7d 21 79 c6 d2 b5 0a 33 2a 3f 42 8c b1 4b f0 c0 9f c6 1e 62 62 0b 46 22 86 79 c8 a2 54 92 b5 07 b6 e1 e1 3c cf 85 f0 0b ee 59 9e c9 48 ca 9d d0 77 c9 bc 64 5e d6 f9 cb e7 18 80 07 18 32 66 a6 38 a1 01 a0 ff cc cd 65 ce 7d fc d5 dc ed f5 74 fe e6 8a d2 9b 4b 19 a7 78 2e 54 94 95 e4 c2 f2 51 e1 63 5c 29 05 b2 7c 31 9d c9 f7 67 32 7d f9 8c 35 27 b3 8d 76 5e 95 40 ac 1d 01 0f 65 b9 d8 5c 60 0b 92 29 f7 98 8a bd be b9 7b b3 50 5c b9 72 e7 f6 d2 a5 70 cf 15 57 b7 3e 4b 61 1f dc c5 92 f0 bd 99 22 b8 44 e7 df a2 c6 6b b9 cd 96 43 f1 77 0e 18 fb 9c 83 7e 66 e9 1b f7 ba 0a b4 a1 c8 6e 35 0d 56 d1 c1 e4 41 83 69 b4 d9 41 33 b7 5a 3f db fe 9e 31 02 Data Ascii: 9c\d+\|N)Sgfdc2GJ}!y3?BKbbF"yT<YHwd^2f8e}tKx.TQc\)\|1g2}5'v^@e\`){P\rpW>Ka"DkCw~fn5VAiA3Z?1
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 25 b4 e5 d2 14 15 eb 72 d9 27 42 cb b2 1a ae 5c 27 4b 87 18 9a 2c e1 8f 61 ef ac 8c 7d 2d 79 59 cc b3 86 05 0c 6d 0f 51 de 58 01 3b 23 3c a7 e0 ee 71 f9 80 f6 c1 64 6e 3b b5 49 64 e4 f3 78 bc 77 b6 d2 82 fa 78 3d 42 9f 22 ac 98 af 9a 6e 5d 5e 7e e7 f2 b9 68 73 dd ff 9e ef 10 1d f5 eb 17 3f f9 34 c7 7d 01 cf f0 e1 36 c3 e0 d7 14 d6 ad 94 34 22 ba 9b 16 cd 6e bb 1a ae 09 70 49 66 bb 9b 4e f1 d8 91 7f 33 d1 f7 fd 08 48 42 a4 89 79 5a ad e5 10 70 fd b1 e7 0c 61 3c f1 7a ed fa 3c e0 dc f6 3e 1d 0d 08 5e 3c f3 dc 78 1d 46 c8 28 4a c8 94 68 17 8e 30 f0 d1 ae ad bd 6a 0c 8a 15 65 a9 57 65 9e 4b 06 39 b5 65 39 27 9f 0e 84 b2 34 9a dc 2e 6b 04 e1 97 bc 49 95 bd 3b 28 a7 70 e6 05 d1 2c 31 8f b3 26 91 1e 23 85 72 79 1f 8d f5 6b 2f ca 81 b8 2a 3d c7 5a 17 1a 94 f4 88 Data Ascii: %r'B\'K,a}-yYmQX;#<qdn;Idxwx=B"n]^~hs?4}64"npIfN3HByZpa<z<>^<xF(Jh0jeWeK9e9'4.kI;(p,1&#ryk/*=Z
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: e2 ca 75 d5 af e3 63 dc 13 57 3d 7c c2 90 d0 42 c2 8e 0e 42 45 76 ac 8b 60 56 46 df 7a 93 fc 1d 2a 1f bd 31 65 58 97 a3 e8 b8 45 98 60 44 60 c7 ce c9 16 86 b1 9d 67 1a 74 eb 8b c3 cf 0d 00 f3 f5 35 fb 82 49 61 68 a6 16 09 98 c1 57 5f de f0 6a 5d 8f b9 81 59 8c 4a f2 47 5f 88 b5 43 85 5d 5a a5 1f 06 c8 92 42 67 1e 6d 62 3e 33 16 cf dd cd af c9 83 43 9c e7 89 7e 34 85 cc 83 03 9c d0 ac d4 c3 be cf 44 5e ea e9 d0 04 01 50 20 d2 65 4b 74 30 cf b7 70 5e 2e 24 2c e4 0d fa e4 f4 f8 42 34 35 fd d1 4e 41 72 75 5e e8 33 03 30 90 eb e7 e8 ea fd 99 c7 89 23 93 b6 13 20 18 01 4c 2a d2 6b f2 58 42 6b a5 dd 65 1e 0e f7 09 69 c2 6f c3 89 e3 7b 99 1c c4 37 c8 91 f0 22 d9 31 23 0d 89 53 ac 3a 47 09 c2 5b f8 90 e5 79 23 16 56 7d 26 82 1e 3a c8 24 8d 94 b4 d3 1d b0 b0 3a 9e Data Ascii: ucW=\|BBEv`VFz1eXE`D`gt5IahW_j]YJG_C]ZBgmb>3C~4D^P eKt0p^.$,B45NAru^30# LkXBkeio{7"1#S:G[y#V}&:$:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49755	104.17.24.14	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:31 UTC	661	OUT	GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dhl-express.dynv6.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 23:40:31 UTC	976	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 23:40:31 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 76764 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "6599bdbd-12bdc" Last-Modified: Sat, 06 Jan 2024 21:53:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2025 Expires: Sat, 03 Jan 2026 23:40:31 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8W6vsvqK7%2FM1EBZKXIHS7bAcPqkJeL0eQMhW2aPc2EBwjkYhnYq%2BxjBOm2iLvrOahh2cvbmi9HXmxEH8EVt3u93LEaS0%2BBeFtPdJUQjZ48bdPK01X4NSkz8KtoksMxC%2Fj9bK1Y4m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90193b58993b7cee-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 23:40:31 UTC	393	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2b dc 00 0d 00 00 00 02 0b 94 00 01 2b 80 01 4b 85 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 72 11 08 0a 87 bb 64 85 ed 1c 01 36 02 24 03 8e 30 0b 87 1a 00 04 20 05 8b 05 07 aa 6b 5b c9 9f 71 45 61 f7 01 2a 76 93 aa aa 6d 1e 70 47 bd 91 91 08 dd 0e 22 92 94 39 7a c2 1d f6 38 80 98 9b 3e fb ff ff ff 35 c9 42 c6 76 f7 c3 fb 8d 31 06 00 a8 aa 9a a5 95 05 c9 f0 98 8c 36 c7 cc 1d 15 47 5f 52 41 a2 8e ea 50 d3 38 d5 61 ec 32 72 9b 67 b4 95 93 1a 58 ac 75 f3 64 8a f7 34 3b fb 4c 4e c3 b0 1d 3c 05 e4 20 47 56 a4 a3 71 22 19 22 19 22 19 a2 92 ce 98 bd 81 0d 17 8c a7 74 a5 9b 21 12 5f 9d aa 21 8a c8 e4 34 bb 90 ed 3d 6a c8 3d 62 3f 71 a4 6c 68 67 da 75 80 07 1c 49 e1 45 cd f5 e1 Data Ascii: wOF2++K?FFTM`rd6$0 k[qEa*vmpG"9z8>5Bv16G_RAP8a2rgXud4;LN< GVq"""t!_!4=j=b?qlhguIE
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 1f 9e 68 bf ff 9d 99 dd eb b2 4f 6f 48 df 23 26 15 0f f9 97 86 86 44 89 c4 0a 21 d3 a0 0e ff cf 73 1f bf 7d de fb 13 ff 06 a1 61 42 09 b3 19 34 8c 0b 28 a1 71 f9 17 08 03 49 bb 03 7a eb be 46 28 09 fe ff ff 5e 3b e7 24 cb 43 98 15 4c 1f ae a2 83 dd 2f d8 80 4e 07 2e ed 8d 47 e0 2f 9f f2 c0 f6 4f fe b1 77 51 53 63 4d 1a e5 4b 1c 66 50 f7 a3 f8 a2 b6 46 50 c3 f3 73 eb bd df cb 60 c5 02 5a 58 a1 20 d6 92 c8 11 25 0a 48 6a 83 08 d8 94 02 da 58 c1 21 56 1c a0 8d 81 51 8d 11 7d e1 c7 6f 13 96 e3 62 5b 4e 34 d1 3b 60 22 fe 6f d6 5c 5e 82 53 ef a5 c0 83 19 fc fb bf d3 44 35 49 4d 0b 42 6b 8e 7d d8 f6 df 76 03 be 03 04 00 fe fb 95 ae ff b7 76 d5 9a 39 d3 ea 19 b5 c4 ab d5 6a f9 02 bf fb 19 20 25 9b 43 27 81 43 3b c8 30 e5 cc b9 cb 99 43 c0 e1 f9 b9 f5 fe 2a 58 35 Data Ascii: hOoH#&D!s}aB4(qIzF(^;$CL/N.G/OwQScMKfPFPs`ZX %HjX!VQ}ob[N4;`"o\^SD5IMBk}vv9j %C'C;0C*X5
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: dd 90 bd 0e 39 ee a2 2b ee 7a aa aa e1 f4 ed c7 b7 7f be 93 de fc 88 f5 ef f9 dc 2f af ee ea 7d 08 46 be 09 a6 9a 66 96 46 4b b5 d9 6e bf 13 ae b9 e9 89 67 85 85 d4 d4 ba ce 74 b5 27 bd 3e 98 f5 55 75 67 d3 42 3d 7c 17 fb fe 8f 87 b8 95 b4 4c ac 5c f9 6c 1b e9 b8 13 3e 62 c6 8e 0f 97 79 c5 3b 3e 7a 08 bd aa 62 db 1a 6c cc d6 c8 3e e8 e1 47 4c 55 c3 dc da d1 f6 25 37 6f f8 e0 9a 55 97 de fd dd d9 e4 ec fc e2 8a 66 db 8e 63 9d ec 6c fc ea 8e 27 bd ec 7d fc b9 e6 31 76 b2 e1 dc bd fc bb e2 f9 bc 7a 70 9b de f1 b3 4d b7 1d d2 36 f7 70 d3 36 fe e8 db 50 7f 22 fe 87 2d 21 c2 6b c7 c3 3e 9e af e6 e7 a6 c4 47 f6 97 39 86 2f 0e da f2 72 b2 12 e4 60 67 65 62 68 a0 d3 4a 04 54 12 18 a0 55 ad 2a e5 ca 24 88 11 25 8c 17 4f 1e dc 39 13 e0 a3 a3 c1 b8 8e 2d 87 cd bf b2 Data Ascii: 9+z/}FfFKngt'>UugB=\|L\l>by;>zbl>GLU%7oUfcl'}1vzpM6p6P"-!k>G9/r`gebhJTU*$%O9-
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 94 8f c4 77 06 d5 49 84 d4 5a 88 81 a2 09 02 7c 37 cd 7c 26 47 da 6c 3a 61 83 fd 22 15 f9 ff e3 4e 36 cd eb 40 e7 52 3d 3a 4d 25 95 c8 da e8 70 b3 b6 4b 1b 7e 94 57 0c be 2d c6 09 cf 41 7e 41 67 e9 48 f5 c3 ed 65 c0 89 e2 9a 5b 6a bd a1 10 70 1a c5 b3 2c 6e d9 d7 3b 0d 6c 26 4d 3f 23 bf 51 59 d2 d6 75 23 7e a4 f3 f9 43 64 2a 13 1b 8a 3b c9 7a 2d 79 d1 31 9f 03 67 db 34 c7 6d 28 db c3 25 8e d2 12 8d 7a 93 e5 72 f5 11 01 46 48 f3 f9 29 75 80 bb 34 85 94 61 8e 0a 68 91 30 8a e4 e0 ca 84 0a cd 57 a8 70 8b 1d 26 ed b4 69 cb 3a 2b 72 63 6c 3c 45 0f 85 80 7b 45 c4 2d 43 98 46 6f 17 be d7 a0 5c 15 0c a4 fb e4 7c c0 8d 94 ed 2c 06 54 39 8f 7e ab e2 a4 ab 20 96 37 5e 0f f0 b5 4e 84 08 c6 ac 28 11 83 68 0c e8 b8 5f f3 c7 80 24 f9 09 bd b4 3e db 4d 82 3f d6 f5 a1 79 Data Ascii: wIZ\|7\|&Gl:a"N6@R=:M%pK~W-A~AgHe[jp,n;l&M?#QYu#~Cd*;z-y1g4m(%zrFH)u4ah0Wp&i:+rcl<E{E-CFo\\|,T9~ 7^N(h_$>M?y
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 80 f6 09 72 cc 07 10 1d a8 3c 47 b6 10 92 19 21 6d 58 b6 84 3c ab d0 01 12 80 bb df 73 3d 08 b8 59 b1 b9 d0 c1 f9 7e 2a 7e 3c 60 0b d2 86 d3 96 40 16 35 3c 44 02 70 c5 a6 8d bc c0 38 8c a8 b1 40 c6 52 a0 12 a7 d2 71 2d 5f 11 6d 38 65 89 e8 98 c4 87 49 00 ae d8 bf 85 2e 46 13 20 c1 65 e7 0a 18 d0 f9 92 66 67 7c 10 5b 22 7e 9a 6e 96 aa 33 2d c1 08 f9 5a de 52 58 e4 89 96 4b 4f 6e 63 5d b8 53 63 ad c6 4e 53 44 36 bd 6a 2a 76 6a 47 00 64 6d 93 4a a9 90 1d 1f f5 ee e6 e9 9e 1c 3b 40 b4 b5 eb 15 68 0e 87 0c 82 3d 91 9e e2 83 8f 86 b5 c2 5a 7a f9 fb 1e 5b 9b 1d 60 1a 65 41 28 af 02 81 2e 0e 0c c4 5a c7 96 7f df b0 31 91 17 b0 a8 41 89 b0 17 dd 4b 1f c0 02 5b d8 d0 73 33 1d 5c 45 08 d7 89 11 81 30 5a a2 98 71 04 5a cc 69 f1 95 fd 42 0e c5 d3 16 aa b9 27 04 58 59 Data Ascii: r<G!mX<s=Y~~<`@5<Dp8@Rq-_m8eI.F efg\|["~n3-ZRXKOnc]ScNSD6jvjGdmJ;@h=Zz[`eA(.Z1AK[s3\E0ZqZiB'XY
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: e4 12 37 76 e2 a9 31 2d 39 2d ac 23 e3 49 a2 49 d3 c3 0a f3 0c 54 b7 a2 48 49 d3 ed 82 12 13 5b 47 69 6a 94 c7 79 d2 48 95 09 e1 ef a8 92 51 96 36 02 ba 27 bc 43 78 77 42 c5 67 f9 74 7d 28 e0 04 80 fd 78 84 15 2a fe 22 80 d0 8f 45 a4 1b f1 8f 88 cf cf 2e 81 91 87 e6 f8 28 8d 15 d3 08 08 39 e4 65 07 bb fd 05 a6 48 1f 2e b8 5e 4e 67 ec 0e c5 88 e4 6d 30 0e d0 1c f2 79 13 4f ce de 04 10 16 87 5c e2 da e2 8e d1 9c 78 bb 19 a7 d5 8e e6 96 9e bc bc 98 5b 85 48 6d fd 13 d6 cf 99 2b 6d d7 d9 da e4 6a 85 77 07 2b 7f 1a ca b7 f1 11 32 eb 0a f7 38 8d f0 1f eb 8b 15 46 19 04 22 f1 9f 23 de 0c 53 44 80 06 2f 04 f9 f3 be fa 73 0b 65 04 ce 14 7d 2d f9 81 a1 a2 05 e2 6d e2 d1 04 98 a0 59 61 db d8 2f 2b 0c 9e 12 4e 1d 8d bc 4c ed 9a 81 9c 67 e5 10 37 d3 56 25 69 be f5 56 Data Ascii: 7v1-9-#IITHI[GijyHQ6'CxwBgt}(x*"E.(9eH.^Ngm0yO\x[Hm+mjw+28F"#SD/se}-mYa/+NLg7V%iV
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 94 b9 b8 84 a8 8e 5b 05 75 52 06 4d d6 42 71 56 db 0a 2b a6 30 28 9e 3c a9 f9 02 71 e7 49 dc da de 5f 59 6e ed 92 fe a6 ae d8 ae 60 7b ed 5a ef 73 ed 70 1e 51 70 f1 e5 5d d6 7d d0 29 1f 05 b5 d5 7b 96 91 4e bd f6 95 95 ee b9 8b 2f e8 60 49 cf d5 60 69 95 89 84 e6 4e 3b ff 6b f1 45 19 ad 62 0e af 24 be 7d 7b 6f 0f f7 ae c7 25 f7 38 00 ac 0d ce 5f 79 5e f8 e8 ac d5 56 94 dc 61 cf e3 01 b8 06 07 08 d4 5f 78 38 44 84 ac 2d b1 50 30 bf 2b 76 aa 0c ac 84 d8 05 15 ba 56 50 fe b5 d5 f3 ec e8 ac c5 1d 22 b0 db 48 ca 4d 56 b0 80 00 16 22 37 04 b6 6d dc 82 a6 06 83 d3 37 da 0d 59 d0 de 36 3a 6c 47 1b af 20 5e 36 89 0c b5 6c 84 69 46 e2 c7 b8 3d 56 78 a1 b3 0f b6 26 2b a7 fd 32 57 4b fc 13 e9 bd e8 42 37 14 ae 3f 52 16 b7 0e 95 53 e7 e5 2c a5 3c be 81 7c 5a d0 0d cc Data Ascii: [uRMBqV+0(<qI_Yn`{ZspQp]}){N/`I`iN;kEb$}{o%8_y^Va_x8D-P0+vVP"HMV"7m7Y6:lG ^6liF=Vx&+2WKB7?RS,<\|Z
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 50 3f 21 f0 06 3a 4d 09 c2 81 00 35 f7 8e 05 3b 90 fe 9c 8f e9 b3 1e e8 59 15 60 80 7d 80 76 30 c3 1c 68 06 3a c2 08 1b 00 36 38 45 46 2f de b1 07 78 56 91 21 03 4b d8 3f c4 28 7d fa 07 39 63 ea e5 7f 96 04 8e e9 35 55 20 cc e2 76 fc 40 47 a1 52 5c 92 c8 73 ba 49 29 95 53 37 bb 5e b6 ba d1 22 5d c5 a3 72 4b d9 1e 98 f0 14 a5 43 7e 45 8b b5 4d 00 9a 92 4e 25 62 eb 53 26 ca 6c d8 e9 0a 61 74 80 06 7e 21 c8 d1 a0 6f a3 8f 10 7a cd bc 20 08 82 5c 58 5c 97 19 5f 94 68 34 1d 80 ac 06 a3 57 68 a2 d8 ad 8c 57 3e ac 94 95 d8 49 d0 b8 f5 c6 39 bc 79 07 50 09 b9 a1 20 c5 f0 54 ed d5 49 90 21 dc 85 1e 01 54 46 0e 8a 58 97 6f fa 29 ec f3 ea bb 91 7b bc 17 43 fd 70 70 c6 6d a4 b6 89 28 7b 95 19 03 6e dc 0c ff 44 3b f0 5e 31 09 52 36 cf 2a 88 1e 7c 9a 53 a0 6f 71 8a 33 Data Ascii: P?!:M5;Y`}v0h:68EF/xV!K?(}9c5U v@GR\sI)S7^"]rKC~EMN%bS&lat~!oz \X\_h4WhW>I9yP TI!TFXo){Cppm({nD;^1R6*\|Soq3
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: c9 9a 76 46 31 4a fd 63 0a d6 23 15 a3 2b c5 78 c2 f0 04 88 96 a6 e0 42 51 52 17 83 11 77 75 03 12 29 52 35 63 03 d6 8f 8a 2c 2f 31 a9 6c b0 81 d2 19 a9 ca ec b9 7a 5d a1 e5 51 cd b3 a5 bf c8 b0 23 ba 42 58 78 1f 9a ab 15 62 f9 08 be dd ca 03 71 60 9c c5 94 21 3b d2 07 00 87 50 d2 9a a8 26 85 97 7f ac 50 c4 89 91 70 30 e4 80 67 b7 25 2e 10 6e 8c 8e 80 b0 70 92 df 44 32 a1 a3 b4 9f 38 b5 f5 79 03 18 b1 0d 64 2d 03 81 97 cd b8 40 ce e8 36 c3 51 9f cb 17 01 dc 26 dd 19 25 d9 5b e3 3b b7 81 80 ec 78 31 e2 bb d3 5a 9e c4 bb 2c 5c 9e 31 b0 c7 b3 bc 95 c1 11 10 06 ec 3e 7e 9e b8 41 b3 5f d3 d0 6d 89 9e 29 bb 37 bb c3 8e ec d9 8b 4d 5c c3 99 ee 05 6d c0 6e a8 1e 75 70 b3 ab db ba ad 74 87 72 a0 db 03 a1 8a 1a a3 6f bc c9 d4 9f a5 f1 5e ec a1 88 59 8e f4 7f 1b ba Data Ascii: vF1Jc#+xBQRwu)R5c,/1lz]Q#BXxbq`!;P&Pp0g%.npD28yd-@6Q&%[;x1Z,\1>~A_m)7M\mnuptro^Y
2025-01-13 23:40:31 UTC	1369	IN	Data Raw: 5d 03 c1 33 88 cb df 0e ef 43 3d 8b b5 25 29 a7 12 01 69 ac e8 4f c7 5a 17 0e b1 66 b6 4f 20 25 55 d7 55 77 eb c8 98 76 e6 10 20 2d d2 d5 e7 77 ca 53 9e 55 1a 3c d6 29 e6 8c 35 67 13 de cf 81 50 77 db 4f 49 32 31 32 57 54 40 f9 8d 0f 1b 5e d0 77 94 d4 79 1a 98 ba 32 3b 1d fb 08 fc 5c 14 45 c1 f6 a1 ed 24 a7 6b 3c 7c e5 81 3d 78 59 1a 78 1b a1 91 61 49 c1 b8 8f cb 0b 84 6d 4d 62 f8 66 27 75 75 cc 75 1b bd 7d f6 ff bb 7d 2a 81 b2 8f 92 af f6 8c 7f cc 73 ed e4 0f 9e dd d7 de 95 85 bb c7 54 dd f2 53 b0 2a 1c b6 d6 34 3d 8d cb a0 f0 5d d9 52 2b 4f e3 51 d3 69 0a ea 08 c8 36 94 b4 b9 2b 49 f3 e5 20 ce 55 73 83 6f 80 df 35 8e dc 2b fb 92 c1 16 96 4b 35 03 81 66 2d d2 b0 f2 22 5c ac 13 5a c5 dd 3e bb 51 cc ff ee eb 80 58 97 8d e0 e3 d4 68 68 ec 1e 77 de b1 17 3c Data Ascii: ]3C=%)iOZfO %UUwv -wSU<)5gPwOI212WT@^wy2;\E$k<\|=xYxaImMbf'uuu}}sTS4=]R+OQi6+I Uso5+K5f-"\Z>QXhhw<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49767	104.248.254.79	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:43 UTC	899	OUT	POST /DE/ HTTP/1.1 Host: dhl-express.dynv6.net Connection: keep-alive Content-Length: 10 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://dhl-express.dynv6.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://dhl-express.dynv6.net/DE/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=bfj4o4d5eslveh85lfj51qo48f
2025-01-13 23:40:43 UTC	10	OUT	Data Raw: 74 72 61 63 6b 69 6e 67 3d 31 Data Ascii: tracking=1
2025-01-13 23:40:44 UTC	346	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 13 Jan 2025 23:40:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.3.15 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: index.php?step=billing X-Powered-By: PleskLin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49768	104.248.254.79	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 23:40:44 UTC	812	OUT	GET /DE/index.php?step=billing HTTP/1.1 Host: dhl-express.dynv6.net Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://dhl-express.dynv6.net/DE/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=bfj4o4d5eslveh85lfj51qo48f
2025-01-13 23:40:44 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 13 Jan 2025 23:40:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.3.15 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding X-Powered-By: PleskLin
2025-01-13 23:40:44 UTC	16043	IN	Data Raw: 31 65 64 65 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 48 4c 20 50 61 6b 65 74 76 65 72 66 6f 6c 67 75 6e 67 20 75 6e 64 20 5a 61 68 6c 75 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 68 Data Ascii: 1ede<!DOCTYPE html><html lang="de"><head> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0" name="viewport"/> <title>DHL Paketverfolgung und Zahlung</title> <link rel="icon" type="image/x-icon" href="https://www.dh
2025-01-13 23:40:44 UTC	4436	IN	Data Raw: 61 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 68 6f 76 65 72 3a 75 6e 64 65 72 6c 69 6e 65 22 20 68 72 65 66 3d 22 23 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 68 61 6e 64 73 68 61 6b 65 22 3e 3c 2f 69 3e 20 53 74 72 65 69 74 62 65 69 6c 65 67 75 6e 67 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 68 6f 76 65 72 3a 75 6e 64 65 72 6c 69 6e 65 22 20 68 72 65 66 3d 22 23 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 22 3e 3c 2f 69 3e 20 5a 75 73 c3 a4 74 7a 6c 69 63 68 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 3c 2f 61 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 65 78 20 73 70 61 63 65 2d 78 2d 34 Data Ascii: a> <a class="hover:underline" href="#"><i class="fas fa-handshake"></i> Streitbeilegung</a> <a class="hover:underline" href="#"><i class="fas fa-info-circle"></i> Zustzliche Informationen</a> </div> <div class="flex space-x-4

Target ID:	0
Start time:	18:40:16
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:40:19
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,9573030401127312866,9139116515028945115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:40:26
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://dhl-express.dynv6.net/DE/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: http://dhl-express.dynv6.net
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: http://dhl-express.dynv6.net

Source: global traffic	HTTP traffic detected: GET /DE/ HTTP/1.1Host: dhl-express.dynv6.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.3/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dhl-express.dynv6.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dhl-express.dynv6.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.4.16 HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dhl-express.dynv6.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3.4.16 HTTP/1.1Host: cdn.tailwindcss.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dhl-express.dynv6.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dhl-express.dynv6.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DE/index.php?step=billing HTTP/1.1Host: dhl-express.dynv6.netConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://dhl-express.dynv6.net/DE/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=bfj4o4d5eslveh85lfj51qo48f
Source: global traffic	HTTP traffic detected: GET /DE/ HTTP/1.1Host: dhl-express.dynv6.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dhl-express.dynv6.net
Source: global traffic	DNS traffic detected: DNS query: cdn.tailwindcss.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.dhl.com

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.9
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://dhl-express.dynv6.net/DE/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2088_1921594933\sets.json

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Windows Analysis Report
http://dhl-express.dynv6.net/DE/