Create Interactive Tour

macOS Analysis Report http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm

Overview

General Information

Sample URL:	http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm
Analysis ID:	1393
Infos:
Most interesting Screenshot:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Opens the Safari browser app

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely the sample will exhibit less behavior

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	1393
Start date:	28.09.2021
Start time:	17:50:25
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm
Analysis system description:	Virtual Machine, High Sierra (Office 2016 v16.16, Java 11.0.2+9, Adobe Reader 2019.010.20099)
Analysis Mode:	default
Detection:	MAL
Classification:	mal48.mac@0/8@4/0
Warnings:	Show All Excluded IPs from analysis (whitelisted): 18.156.44.202, 104.89.25.202, 93.184.220.29, 18.156.205.85, 142.250.184.202, 23.37.43.27, 17.253.55.204, 17.253.55.202, 17.253.55.206, 17.253.54.251, 17.253.54.253, 17.253.38.253, 17.253.38.125, 17.253.54.125 Excluded domains from analysis (whitelisted): time-macos.apple.com, smoot-searchv2-euc1a.v.aaplimg.com, ocsp-a.g.aaplimg.com, gateway.icloud.com, g.symcd.com, crl.apple.com, valid.apple.com, api-glb-euc1a.smoot.apple.com, ocsp.digicert.com, safebrowsing.googleapis.com, cdn.smoot.apple.com, time-osx.g.aaplimg.com, e673.dsce9.akamaiedge.net, e8218.dscb1.akamaiedge.net, api.smoot.apple.com, bag-smoot.v.aaplimg.com, ocsp-ds.ws.symantec.com.edgekey.net, lb._dns-sd._udp.0.11.168.192.in-addr.arpa, configuration.apple.com, ocsp.apple.com, valid.origin-apple.com.akadns.net, cdn.smoot.g.aaplimg.com, valid-apple.g.aaplimg.com, configuration.apple.com.akadns.net, configuration.apple.com.edgekey.net Report size getting too big, too many PREAD calls found.

Process Tree

System is macvm-highsierra

xpcproxy New Fork (PID: 552, Parent: 1)

Safari (MD5: 8e18be737fe87f19fe7a97b4821e2005) Arguments: /Applications/Safari.app/Contents/MacOS/Safari

cleanup

Yara Overview

No yara matches

Jbx Signature Overview

• AV Detection
• Compliance
• Networking
• System Summary
• Persistence and Installation Behavior
• Language, Device and Operating System Detection

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm

Avira URL Cloud: detection malicious, Label: phishing

Source: unknown	HTTPS traffic detected: 17.248.248.38:443 -> 192.168.11.11:49204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 193.213.115.120:443 -> 192.168.11.11:49207 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: a0584464.xsph.ru

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49207

Source: unknown	TCP traffic detected without corresponding DNS query: 104.89.44.72
Source: unknown	TCP traffic detected without corresponding DNS query: 104.89.44.72
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm HTTP/1.1Host: a0584464.xsph.ruUpgrade-Insecure-Requests: 1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/percentage-bar.css HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: text/css,/;q=0.1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/telenor.css HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: text/css,/;q=0.1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/tln_devicecheck.css HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: text/css,/;q=0.1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-1.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/styles.css HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: text/css,/;q=0.1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui.css HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: text/css,/;q=0.1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/scriptbreaker-multiple-accordion-1.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/ui.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/common.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/app.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jstz.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/tln_devicecheck.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui_002.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery_003.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery_002.js HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/cross.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/header-logo_tcm48-237759.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/telenorlogo-no-text-white_tcm48-248598.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/images/header-background-center_tcm48-237819.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Telenor%20Font/TelenorLight.otf HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Together/Together.woff HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader.gif HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader_dark.gif HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/buttons.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/filetypes.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/listicons.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages_dark.png HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/watermark.jpg HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/b0ffdcf0-26da-47fd-8485-20e4a40d4b7d.ttf HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/da09f1f1-062a-45af-86e1-2bbdb3dd94f9.svg HTTP/1.1Host: a0584464.xsph.ruConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htmAccept-Encoding: gzip, deflate

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Tue, 28 Sep 2021 15:51:18 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 435Connection: keep-aliveData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 20 56 65 6c 6b 6f 6d 6d 65 6e 20 74 69 6c 20 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 5f 66 69 63 68 69 65 72 73 2f 66 6f 6e 74 2f 46 6f 6e 74 73 2f 62 63 66 35 34 33 34 33 2d 64 30 33 33 2d 34 31 65 65 2d 62 62 64 37 2d 32 62 37 37 64 66 33 66 65 37 62 61 2e 77 6f 66 66 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor E-post Velkommen til Telenor E-post_fichiers/font/Fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>

Source: .dat.nosync0228.jdetth.234.dr	String found in binary or memory: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm
Source: .dat.nosync0228.wiUtso.234.dr	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd

Source: unknown	HTTPS traffic detected: 17.248.248.38:443 -> 192.168.11.11:49204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 193.213.115.120:443 -> 192.168.11.11:49207 version: TLS 1.2

Source: classification engine

Classification label: mal48.mac@0/8@4/0

Source: /usr/libexec/xpcproxy (PID: 552)

Safari app opened: /Applications/Safari.app/Contents/MacOS/Safari

Jump to behavior

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 552)

AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist

Jump to behavior

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 552)

Random device file read: /dev/urandom

Jump to behavior

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 552)	XML plist file created: /Users/berri/Library/Safari/.dat.nosync0228.wiUtso	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 552)	Binary plist file created: /Users/berri/Library/WebKit/com.apple.Safari/WebsiteData/ResourceLoadStatistics/full_browsing_session_resourceLog.plist	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 552)	Binary plist file created: /private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/0/SafariFamily/Safari/.dat.nosync0228.JFCNWU	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 552)	Binary plist file created: /Users/berri/Library/Safari/.dat.nosync0228.jdetth	Jump to dropped file

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 552)

System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Plist Modification1	Plist Modification1	Direct Volume Access	OS Credential Dumping	System Information Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol3	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol4	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer3	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm	100%	Avira URL Cloud	phishing

Dropped Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
gateway.fe.apple-dns.net	0%	Virustotal		Browse

URLs

No Antivirus matches

Domains and IPs Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.online.no	51.13.97.228	true	false		high
www.telenor.no	51.13.97.228	true	false		high
a0584464.xsph.ru	141.8.192.193	true	false		high
gateway.fe.apple-dns.net	17.248.248.38	true	false	0%, Virustotal, Browse	unknown
epost.telenor.no	193.213.115.120	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/images/header-background-center_tcm48-237819.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery_002.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages_dark.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/tln_devicecheck.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/telenorlogo-no-text-white_tcm48-248598.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/da09f1f1-062a-45af-86e1-2bbdb3dd94f9.svg	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/watermark.jpg	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/percentage-bar.css	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/buttons.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/cross.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/header-logo_tcm48-237759.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/common.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jstz.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-1.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/tln_devicecheck.css	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/b0ffdcf0-26da-47fd-8485-20e4a40d4b7d.ttf	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/filetypes.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui_002.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/ui.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery_003.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader.gif	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/telenor.css	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/styles.css	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/app.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/listicons.png	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader_dark.gif	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui.css	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/scriptbreaker-multiple-accordion-1.js	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Telenor%20Font/TelenorLight.otf	false	high
http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Together/Together.woff	false	high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
104.89.44.72	unknown	United States	16625	AKAMAI-ASUS	false
141.8.192.193	a0584464.xsph.ru	Russian Federation	35278	SPRINTHOSTRU	false
193.213.115.120	epost.telenor.no	Norway	2119	TELENOR-NEXTELTelenorNorgeASNO	false

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

/Users/berri/Library/Safari/.dat.nosync0228.jdetth Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	7.373505536334681
Encrypted:	false
SSDEEP:	48:E3NmrmB4+SoTlg9pQTWGbXaxu/t4e9axCvqhQC:zd4Aa2xueeQxKqhQC
MD5:	32E5B114A47E89AD7CDFDE726BC32134
SHA1:	FC600D63B4BE6DC05013435DAF0D4450842DB4FB
SHA-256:	5AE820F6A468507441B4A556B7851470DEDDB2AF3AB039964C7402073B419994
SHA-512:	AF37FF5D85C79FC5F43A2CFAF2C1808B208F41B6C99C655B3B5577A7A27A458AF7E18CE620E21EBAF0075B6BA2AE55C5B67B721102CFAF0484A1DA028E170473
Malicious:	false
Reputation:	low
Preview:	bplist00.....^SessionVersion^SessionWindowsS1.0............................9_..SelectedTabIndex\TabBarHiddenZDateClosed_..FavoritesBarHidden]IsPopupWindow_. PrefersReadingListSidebarVisible\Miniaturized_..WindowStateVersionZWindowUUID_..WindowContentRectYTabStates_..IsPrivateWindow_..SelectedPinnedTabIndex...3A.....p....S2.0_.$66FF40DC-8325-4A58-B394-7DE46A42629F_..{{0, 52}, {1024, 693}}.... !."#.$%&'()*.,-...0123456.\IsDisposable\SessionState_..AncestorTabIdentifers_..SessionStateIsEncryptedXTabIndex]LastVisitTimeWTabUUIDVTabURL]TabIdentifierXTabTitle_..ProcessIdentifierWIsMuted.O...OCE.:.}.'.(m...J.&...gz=..S3.J;F.&[3:!w%6.!.b^H ...j.Kd.~...j.l..].....=R.0q..<...S......G..e._...QRW../..s.q.E........N.S..F...iM..3t1md'#...k`W. y$...=.[...8tG.. .........CW+.z.C....Ad..A.._.vM/.......f..d..E..m#....#o.,.C.DSO..1.6...0....^06.....=.LE.+..^..\...5..\|.!...M?zA.Y..z/..dj>....z......A>3q..Yr.I.>.....c."."...f..@.`.-....6.\z.i..P[.s".h..g.....&I.5..x..'...

/Users/berri/Library/Safari/.dat.nosync0228.wiUtso Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	1012
Entropy (8bit):	5.286991847916908
Encrypted:	false
SSDEEP:	24:2dfyiwHuG5Ku3hu65juqVrTrmuGoTxR1F1xW:cfyP5Z/5PrUon1F1xW
MD5:	0C29425555C7FF0CA114B1FD0DC39C50
SHA1:	D7D808E8BE92462F4C3CEBA66734F0E9BB26ACDD
SHA-256:	52826AFEEC974BB7BACB85BDC01DC4F23BF917D65E04773D7CAD393F7866F3FD
SHA-512:	D9C8364A85F4B4A96CAAC1409F32F9D6B2F8AE19201E0ABD2D449A3EEDADD471E99E44BC92DEB5D8FB60287DA64A88E61B45F759E7B9A383A9BBE5F5FD242F95
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">.<plist version="1.0">.<dict>..<key>SingleDeviceSaveChangesThrottlingPolicy</key>..<string>1:1440</string>..<key>MultipleDeviceSaveChangesThrottlingPolicy</key>..<string>50:1 \| 10:2 \| 10:5 \| 10:30 \| 9:40 \| 1:510</string>..<key>SingleDeviceFetchChangesThrottlingPolicy</key>..<string>11:15 \| 1:1275</string>..<key>MultipleDeviceFetchChangesThrottlingPolicy</key>..<string>50:1 \| 50:3 \| 20:4 \| 20:5 \| 20:15 \| 20:18 \| 20:20</string>..<key>SyncCircleSizeRetrievalThrottlingPolicy</key>..<string>1:1440</string>..<key>MaximumRequestLimitCharacterCount</key>..<integer>100000</integer>..<key>SyncWindow</key>..<real>1209600</real>..<key>HistoryModificationIdleDelayBeforeSyncAttemptKey</key>..<integer>90</integer>..<key>HistoryRemovalIdleDelayBeforeSyncAttempt</key>..<integer>6</integer>..<key>SaveChangesBeforeTerminationTimeout</key>..<integer>1</integer>.</dic

/Users/berri/Library/Safari/Favicon Cache/favicons/.dat.nosync0228.PPghPP Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5263
Entropy (8bit):	7.912707402701541
Encrypted:	false
SSDEEP:	96:B6MC1mfxQGFRS5VXbT/yeTvSIHB8Qi/Wm82i41A0CQH:BaomgRSfbTdDS+hCVis9CQH
MD5:	8B26180DC0567A58A69ED6138ECBDEE5
SHA1:	D1CA1205F5E10ECA94D6954D5645390434035DD0
SHA-256:	F65C74E4ACD7F238B009485632073E8814F1B1BD3C856B3177F82A3E13FAC4EF
SHA-512:	5AD18094B5DA66D000C8A97FDBECDECECA99CEE3BD0450D07F673EC2B71843249750062A59F99021E8241731BBB6E5F6709F0048EF60978359CDD1C51DC043F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....AiCCPICC Profile..H...wTS....7..." %..z. .;H..Q.I.P...&vD.F..)VdT..G."cE....b....P..QDE..k..5....Y.....g.}..P....tX..4.X....\..........X...ff.G.D....=...H.....d..,.P&s...."7C$...E.6<~&....S...2.....)2.12....."..l...+...&..Y...4...P.%...\.%.g.\|.e.TI....(....L.0.._..&.l.2E.........9.r...9h..x.g...Ib...i...f..S.b1+..M.xL.....0...o.E.%Ym.h.....Y..h.....~S.=.z.U.&..A..Y.l./....$Z.....U..m.@..O. .........l^....'....ls..k.+.7...o..9.....V;..?.#I.3eE..KD......d......9i...,......UQ....h..<.X..d.......6'..~.k.hu_.}.9P.I..o=.C#.$n?z.}.[.1...h...s.2z.....\.n.LA"S....dr%.,...l.....t..4..0.,`...3p.. ...H.....H.i@..A>...A1..v.jp..z..N.6p.\.W..p...G@...K0..i......A......B...Z.yCAP8...C....@..&.....CP=.#t...]..... 4...}.....a......;..G...Dx.......J..>........,._..@....FX...DB.X$..!k."...E.......H.q.....a......Y..bVa.bJ0.c.VL..6f.3....b..X'.?v.6...-.V`.`[.....a.;.......p~..\2n5...........&.x......s.b\|!.........'..Z.k..!. $l$T

/Users/berri/Library/WebKit/com.apple.Safari/WebsiteData/ResourceLoadStatistics/full_browsing_session_resourceLog.plist Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	480
Entropy (8bit):	5.458890328424225
Encrypted:	false
SSDEEP:	12:icAXgbAjz6lxzL+XBs6De3WrXAOu/Ew0Q1EXAn:DHlx+XBs6DRXLucpQ1EA
MD5:	EEF9F5CCB8375DFFD1D0493AD3976151
SHA1:	6F6773EF83FE4FCD4049104EE57372F20B64FD96
SHA-256:	207B50B392692B9ACEEDC0BBC8C9D4E8D533E3AD7D09C95D9704D20F5DD2156E
SHA-512:	AF814E7D4DB9EE028BA70B22558EEBBFCE885C5E9EF24EB91145F1968B0F553B39B957C082C5EF6503EAA7C169503DE31C04015D90009A4B80E372894C0A8E2D
Malicious:	false
Reputation:	low
Preview:	bplist00....... !^operatingDates_..browsingStatistics_..endOfGrandfatheringTimestampWversion.....Tdate#A.T........................_..PrevalentResourceOrigin_..mostRecentUserInteractionXlastSeen]grandfathered_..isPrevalentResource_..subresourceUnderTopFrameOrigins_..hadUserInteraction_..dataRecordsRemovedZtelenor.no#........#A.T.............VoriginUcountWxsph.ru.....#............... .5.T.\.^.a.f.o.q.................1.<.E.N.O.P.R.W.^.d.l.n.o.q.z..............."...............\|

/dev/null Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	ASCII text
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.758869412065115
Encrypted:	false
SSDEEP:	3:tUI2IXlCbMoQP6SeKV3WOv:m+1CENkA
MD5:	0BBD85F6677BE9BB3415DE8493E9577B
SHA1:	93A2DDE2BA9108C9537550A4370962EC35FBE75E
SHA-256:	2391252C5982CE326B6C1D00DAC5EB28E894A9EE3BFC68CF698F063E8C2CEEB6
SHA-512:	8FCEB19BFE698CD8ECF8C50B87F5E7B06ED69059E05BE1F3B23E7E07D3EEC9D59A3A4C4F1E682269E35DAC840879309400CD87AFFC32BC60C7A3077EB9ECE6B9
Malicious:	false
Reputation:	low
Preview:	2021-09-28 19:51:15.182 Safari[552:4974] ApplePersistence=NO.

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/0/SafariFamily/Safari/.dat.nosync0228.JFCNWU Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	76
Entropy (8bit):	3.9370658315190226
Encrypted:	false
SSDEEP:	3:N1n6qMvRGNMTAnd/t1tH:N1nleRaMTAltH
MD5:	CDC65B5F112547EAFAE0F16F9C149426
SHA1:	AEAF9908A5B6FF3E2F7B738ABF5FE9E79108BA01
SHA-256:	1C6D085D871A855CE4A3902BAB4B9B92631B8EE8F0B7F6536768A2AAF427B45C
SHA-512:	E8B0E4CE6A760A718A19976D3CFE9063F04FB4BF179947AECA84E94C83F21459FB9DC0FFABEA8F633BD2D0BA94FE1E15D8C97E9604FDE8BD0DEA961EB83BDDB7
Malicious:	false
Reputation:	low
Preview:	bplist00..._..ExtensionArchivesExtracted...(...............................)

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/C/mds/mdsDirectory.db_ Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	48908
Entropy (8bit):	3.533948990143748
Encrypted:	false
SSDEEP:	384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGBOmBfbouR6/chQOnGqwc2U+v+h/:8MdGleOGmBouRwchQOnGqwc2U+v+h/
MD5:	09070E01FA6ED1973D94FAD50C35E3ED
SHA1:	7546663E66F9889EE3365A7A0BE372300C6022CA
SHA-256:	2E6EC437A97DD88F9067B2E99AC64789670D9B9C1FC50B2856E392E66163211F
SHA-512:	621399FF832F1A8352E5E9A54984B878C7D3432156D9CF9986A1A5B75662E92D9A00FA1BA6714D679286BB49E71916F72655AADA2B99880A2806FAFC6F86E7F3
Malicious:	false
Reputation:	low
Preview:	kych...........................`...X...p..S0..SX..Th..T...T...[...^h...........L...X...............T...........d...................t...............t...........<...............P...........0...........$...p...........l...........X.......@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...D.......................!...%@.......MDS_CDSADIR_CSSM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_KRMM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_EMM_RECORDTYPE.....L.......................!...%@......"MDS_CDSADIR_EMM_PRIMARY_RECORDTYPE.....H.......................!...%@.......MDS_CDSADIR_COMMON_RECORDTYPE......L.......................!...%@......"MDS_CDSADIR_CSP_PRIMARY_RECORDTYPE.....P.......................!...%@......%MDS_CDSADIR_CSP_CAPABILITY_R

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/C/mds/mdsObject.db_ Download File
Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	4404
Entropy (8bit):	3.5113078915037033
Encrypted:	false
SSDEEP:	48:m6Xsh+CLjL3Pe3T5FFKfEuyu+iYxGv4sS:3X6LjLfe3wEuyu9YxGQX
MD5:	D487F899A14AE98519B46D51BC810F1B
SHA1:	64877ECFBE47ED66EED545B2449BBE8B22B775D0
SHA-256:	4835899C464487946E281D535381D4CAB8BC90EC08CD00A6A0ECB97854E9321D
SHA-512:	EB4FABD61B4FD2B9EF3C9E93793CA5F11353A1F81EA4DA22E0F79ED45D89180B77469B9E5DCD5350AE650B31DE9018743DA7716EFA7B5CDDFC3FA7A13C476F40
Malicious:	false
Reputation:	low
Preview:	kych.......................................d...................0...............0...p...........@...@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...@.......................!...%@.......MDS_OBJECT_RECORDTYPE..............h........... ...`........... ...@.......................-...1...5...9...=@..............................X...............P................... ...p...........l...........d...........P...........H...........,...............h...........P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................RelationName.......P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................AttributeID........X....

Static File Info

No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 66
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2021 17:51:17.847987890 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.888669968 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:17.889169931 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.889729977 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.930082083 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:17.931406021 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:17.931535006 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:17.931555986 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:17.931982994 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.932001114 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.932005882 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.967938900 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.978842020 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.978987932 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.979486942 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.979768038 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:17.979943037 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.009660959 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.009721994 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.009766102 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.009808064 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.009885073 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.009931087 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.009972095 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.010000944 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.010936022 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.010996103 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.011006117 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.011013985 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.011022091 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.011811972 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.012406111 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.019423008 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.019893885 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.020035982 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.020483971 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.020526886 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.020941019 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.020989895 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.021560907 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.021656990 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.023367882 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.023955107 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.023971081 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.024461031 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.024837017 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.025053024 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.061949015 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.062067986 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.062340975 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.062928915 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.063165903 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.063218117 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.063395977 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.063725948 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.063736916 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.063832998 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.063921928 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064012051 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064068079 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064121962 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064177036 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064203978 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.064258099 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064354897 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064369917 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064424038 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064451933 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.064498901 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064558983 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064611912 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064660072 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.064671993 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.064681053 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.064749002 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.065732002 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.065788031 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.065802097 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.065812111 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.066437006 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.066494942 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.066932917 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.067804098 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.069161892 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.069237947 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070389032 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070486069 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070549965 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070604086 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070657969 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070710897 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070764065 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070816994 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070866108 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.070882082 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.070959091 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071014881 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.071068048 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.071204901 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.071257114 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.071340084 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071407080 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071476936 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071526051 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071553946 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.071590900 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071638107 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071682930 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071728945 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071774006 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071793079 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.071826935 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071841955 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.071887970 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.071993113 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.072032928 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072098017 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072115898 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.072165966 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072191000 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.072215080 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072261095 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072302103 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.072324038 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072371006 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072407007 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.072537899 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.072624922 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.072705984 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.072721958 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.073093891 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.073179007 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.073513985 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.073925972 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.074445009 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.105485916 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105612040 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105659962 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105707884 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105756998 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105803013 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105871916 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105941057 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.105988026 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106034994 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106089115 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106128931 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106177092 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106189966 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.106221914 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.106236935 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.106278896 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106309891 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.106345892 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106398106 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106445074 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106551886 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106626987 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.106641054 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106700897 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106749058 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106794119 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106868982 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106916904 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.106962919 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107008934 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107057095 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107104063 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107150078 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107196093 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107242107 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107290983 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.107290983 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.107426882 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.107453108 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.107532978 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.107557058 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.107633114 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.107656002 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.107852936 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.108117104 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.108164072 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.108175039 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.108184099 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.108191967 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.108258009 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.108633041 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.109617949 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.110733986 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.110829115 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.110877037 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.110923052 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.110969067 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111013889 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111058950 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111104012 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111150026 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111196041 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111211061 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.111327887 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.111424923 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.111438990 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.111531973 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111537933 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.111599922 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111687899 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111737967 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111785889 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111834049 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111881018 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111927032 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.111927986 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.111970901 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.112124920 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.112210035 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.112435102 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.112591028 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.112601995 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.112632036 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.112699986 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.112750053 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.112796068 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.112859964 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.112907887 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.112971067 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.113017082 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.113025904 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.113121033 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.113122940 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.113189936 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.113204956 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.113260031 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.113293886 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.113424063 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.113492966 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.113574028 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.113766909 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.116894007 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.116971016 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.117019892 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.117058992 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.117549896 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.117597103 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.118962049 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.119565010 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.120012045 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.121800900 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122113943 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122211933 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122299910 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122384071 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122466087 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122499943 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.122545004 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122613907 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.122632027 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122723103 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122807026 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122831106 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.122889996 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.122976065 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.123018980 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.123054981 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.123119116 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.123136997 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.123223066 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.123279095 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.123302937 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.123389006 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.123451948 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.123469114 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.123621941 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.123719931 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.127028942 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.127541065 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.148050070 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148165941 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148267984 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148364067 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148425102 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148473024 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148519039 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148583889 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148670912 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148772001 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148842096 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148889065 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148935080 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.148979902 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149024963 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149070978 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149116993 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149162054 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149207115 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149255991 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149302959 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149348021 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149394989 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149441957 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149488926 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149534941 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149580002 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149626970 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149672985 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149719000 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149765968 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149812937 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149842978 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.149929047 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.149981022 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150027037 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150074005 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150120974 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150166988 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150213003 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150259018 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150305033 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150351048 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150397062 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150444031 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150490999 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150537968 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150542021 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150563002 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150613070 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150636911 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150657892 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150679111 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150733948 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150743961 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150753021 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150804043 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.150832891 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150856972 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150876999 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150933027 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.150976896 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151026964 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151045084 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151057005 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151129007 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151148081 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151160002 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151177883 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151228905 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151236057 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.151278019 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151293993 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151304007 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.151326895 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151343107 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151376009 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151376963 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.151441097 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.151482105 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.151648998 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151786089 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151807070 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.151865959 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.151954889 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152018070 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152095079 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152142048 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152188063 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152234077 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152280092 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152319908 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152333975 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.152503014 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.152519941 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152542114 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.152657986 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.152673006 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152697086 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.152721882 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152767897 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152831078 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152913094 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.152992964 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153040886 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153086901 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153126955 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.153139114 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153145075 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.153208971 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153259993 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153300047 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.153314114 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153372049 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153419018 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153444052 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.153465033 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.153481007 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153568983 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.153641939 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.153841019 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.153866053 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.154014111 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154124022 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154171944 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154217958 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154263973 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154309988 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154357910 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154480934 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.154484034 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154506922 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.154555082 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154603958 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154649973 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.154663086 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154669046 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.154731035 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154778957 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154824018 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154869080 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154916048 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.154918909 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.154967070 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.154983044 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.155040026 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.155086994 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.155107975 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.155150890 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.155200005 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.155235052 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.155246019 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.155352116 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.155422926 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.155512094 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.155529022 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.162914991 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.163034916 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.164288998 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.167790890 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168037891 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168088913 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168135881 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168183088 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168229103 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168276072 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168345928 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168395042 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168534994 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.168562889 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.168577909 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.168687105 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.168725014 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168790102 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168838024 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168884039 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168931961 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.168999910 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169063091 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169110060 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169156075 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169202089 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169245958 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169292927 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169338942 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169384956 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169430971 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169445992 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.169477940 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169493914 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.169504881 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.169526100 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169573069 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169619083 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169641972 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.169663906 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169712067 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169758081 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.169804096 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.170335054 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170382977 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170452118 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170470953 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170479059 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170499086 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170507908 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170516014 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.170597076 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.171160936 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.173078060 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.176665068 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.177561998 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.178555965 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.178569078 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.178620100 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.178632975 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.178642035 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.214334011 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.214725971 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.214788914 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.214838028 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.214884996 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.214931011 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.214977026 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215023041 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215070963 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215116978 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215162039 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215209007 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215255022 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215301991 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215348005 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.215382099 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.217319012 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.217400074 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.217422009 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.217431068 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.217438936 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.217447996 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.217456102 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.217464924 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.220345020 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.220412016 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.220460892 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.220506907 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.220545053 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.220873117 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.220947981 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.221743107 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.221745014 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.221802950 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.221818924 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.222868919 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.223620892 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.223781109 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.223834038 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.224291086 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.224848986 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.225189924 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.225394964 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.226429939 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.226538897 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.226689100 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.226763964 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.226831913 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.226890087 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.226916075 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.227016926 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227076054 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.227092981 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227163076 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.227255106 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227305889 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227353096 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227400064 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227418900 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.227566004 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227617025 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227667093 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227705002 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227731943 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.227755070 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.227766037 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227826118 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227871895 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227917910 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227963924 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.227982998 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228030920 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228080988 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228108883 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228142023 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228192091 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228235006 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228245020 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228255033 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228331089 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228333950 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228395939 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228444099 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228491068 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228535891 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228549957 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228569031 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228642941 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228692055 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228738070 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228754997 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228801012 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228826046 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228864908 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228914022 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.228951931 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.228965998 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229022980 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229070902 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229099035 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229129076 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229181051 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229228020 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229274035 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229315996 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229326963 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229335070 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229393005 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229410887 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229459047 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229485035 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229522943 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229573965 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229619980 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229665041 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229712009 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229722023 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229775906 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229825020 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229846001 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229897976 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.229929924 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.229984045 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230014086 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.230041027 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230087996 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.230097055 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230154991 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230158091 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.230215073 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230262995 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230283976 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.230324030 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230360031 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.230454922 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.230562925 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.230709076 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.230787992 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.231167078 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.231508970 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.243303061 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.251437902 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.251535892 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.251620054 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.251696110 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.251743078 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.251791954 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.251831055 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.252249956 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.252330065 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.252341032 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.252350092 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.252357960 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.266217947 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266278028 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266324997 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266371012 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266478062 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266781092 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266832113 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.266853094 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266872883 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.266927958 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.266977072 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.267024040 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.267071009 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.267116070 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.267154932 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.267292023 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.267343998 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.267472029 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.267569065 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.267587900 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.269392014 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.269546986 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.269556999 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.270065069 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.270133972 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.270399094 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.312194109 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.312761068 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.384454012 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.422677040 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.422677040 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.426152945 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.426870108 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.465302944 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.465373993 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.466017008 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.466022015 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.466737032 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.466830015 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.466902971 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.468178988 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.469850063 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.470640898 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.508400917 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.508924961 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.508961916 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.509341955 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.509393930 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.509533882 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.509917974 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.510160923 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.511454105 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.511991024 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.512077093 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.512692928 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.515853882 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.516506910 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.548712969 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.550759077 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.551256895 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.551433086 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.551872015 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.590382099 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.591022968 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.597745895 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.613176107 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.621362925 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.621426105 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.621465921 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.622059107 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.622153044 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.637600899 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.637696028 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.637708902 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.637718916 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.637729883 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.639204025 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:18.639775038 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:18.642031908 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.646049976 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.646131039 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.646171093 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.646209002 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.646244049 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.647314072 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.647321939 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.647442102 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.647538900 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.647594929 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.647650957 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.647705078 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.648242950 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.648330927 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.648350954 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.648365021 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.648550034 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.648621082 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.648670912 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.649449110 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.649542093 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.650661945 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.678683043 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.679301977 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.680355072 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.712605953 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:18.716924906 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.717014074 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.717601061 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.717681885 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.717746973 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.717791080 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.718326092 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.718424082 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.718445063 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.718590021 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.719146967 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.720818043 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:18.728709936 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.729216099 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.740041971 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.776911020 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.777731895 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.778731108 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.816306114 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.816395044 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.816462994 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.816524029 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.816576958 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.816786051 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.816853046 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.816894054 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.816909075 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.816992998 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:18.841756105 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:18.842243910 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:20.617250919 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:20.617391109 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:20.618339062 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:20.625833988 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:20.625911951 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:20.626264095 CEST	49204	443	192.168.11.11	17.248.248.38
Sep 28, 2021 17:51:20.626631021 CEST	443	49204	17.248.248.38	192.168.11.11
Sep 28, 2021 17:51:23.821613073 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:23.822271109 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:23.822372913 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:23.823208094 CEST	49207	443	192.168.11.11	193.213.115.120
Sep 28, 2021 17:51:23.860225916 CEST	443	49207	193.213.115.120	192.168.11.11
Sep 28, 2021 17:51:44.277945042 CEST	49191	80	192.168.11.11	104.89.44.72
Sep 28, 2021 17:51:44.296402931 CEST	80	49191	104.89.44.72	192.168.11.11
Sep 28, 2021 17:51:44.296998024 CEST	49191	80	192.168.11.11	104.89.44.72
Sep 28, 2021 17:51:48.502270937 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.502325058 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.502360106 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.502393007 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.505394936 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.505400896 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.505475044 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.505495071 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.508625984 CEST	49201	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.510746002 CEST	49200	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.510821104 CEST	49202	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.510843039 CEST	49199	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.551758051 CEST	80	49200	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.551810980 CEST	80	49202	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.552021027 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.552524090 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.553076982 CEST	80	49201	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.554004908 CEST	49198	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.555531979 CEST	80	49199	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.594857931 CEST	80	49198	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.602207899 CEST	80	49197	141.8.192.193	192.168.11.11
Sep 28, 2021 17:51:48.603240013 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.603322029 CEST	49197	80	192.168.11.11	141.8.192.193
Sep 28, 2021 17:51:48.644253969 CEST	80	49197	141.8.192.193	192.168.11.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2021 17:51:16.123938084 CEST	53284	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:16.132774115 CEST	53	53284	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:16.518594027 CEST	60209	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:16.527601004 CEST	53	60209	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:16.801462889 CEST	60837	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:16.809743881 CEST	53	60837	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:17.790064096 CEST	64838	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:17.845433950 CEST	53	64838	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:18.045417070 CEST	60605	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:18.054357052 CEST	53	60605	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:18.106169939 CEST	63941	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:18.117095947 CEST	53	63941	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:18.341801882 CEST	60739	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:18.342763901 CEST	56508	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:18.379028082 CEST	53	60739	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:18.414803982 CEST	53	56508	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:18.576510906 CEST	57825	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:18.586010933 CEST	53	57825	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:18.601392984 CEST	57849	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:18.639125109 CEST	53	57849	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:29.650439024 CEST	55038	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:29.659543991 CEST	53	55038	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:30.278086901 CEST	64114	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:30.286751986 CEST	53	64114	1.1.1.1	192.168.11.11
Sep 28, 2021 17:51:47.944382906 CEST	53538	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:51:47.954229116 CEST	53	53538	1.1.1.1	192.168.11.11
Sep 28, 2021 17:52:16.809989929 CEST	63011	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:52:16.818725109 CEST	53	63011	1.1.1.1	192.168.11.11
Sep 28, 2021 17:52:22.072458982 CEST	59042	53	192.168.11.11	1.1.1.1
Sep 28, 2021 17:52:22.081500053 CEST	53	59042	1.1.1.1	192.168.11.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Sep 28, 2021 17:51:17.790064096 CEST	192.168.11.11	1.1.1.1	0x81d	Standard query (0)	a0584464.xsph.ru	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.341801882 CEST	192.168.11.11	1.1.1.1	0xd8a6	Standard query (0)	www.online.no	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.342763901 CEST	192.168.11.11	1.1.1.1	0x645b	Standard query (0)	www.telenor.no	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.601392984 CEST	192.168.11.11	1.1.1.1	0xc48c	Standard query (0)	epost.telenor.no	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class
Sep 28, 2021 17:51:17.845433950 CEST	1.1.1.1	192.168.11.11	0x81d	No error (0)	a0584464.xsph.ru	141.8.192.193	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.248.38	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.248.73	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.248.10	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.248.81	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.248.75	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.145.109	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.145.137	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.117095947 CEST	1.1.1.1	192.168.11.11	0x9dff	No error (0)	gateway.fe.apple-dns.net	17.248.145.196	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.379028082 CEST	1.1.1.1	192.168.11.11	0xd8a6	No error (0)	www.online.no	51.13.97.228	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.414803982 CEST	1.1.1.1	192.168.11.11	0x645b	No error (0)	www.telenor.no	51.13.97.228	A (IP address)	IN (0x0001)
Sep 28, 2021 17:51:18.639125109 CEST	1.1.1.1	192.168.11.11	0xc48c	No error (0)	epost.telenor.no	193.213.115.120	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

a0584464.xsph.ru

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.11.11	49197	141.8.192.193	80

Timestamp	kBytes transferred	Direction	Data
Sep 28, 2021 17:51:17.889729977 CEST	60	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm HTTP/1.1 Host: a0584464.xsph.ru Upgrade-Insecure-Requests: 1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Sep 28, 2021 17:51:17.931406021 CEST	61	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:17 GMT Content-Type: text/html Last-Modified: Tue, 28 Sep 2021 12:39:16 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530cf4-26fd" Expires: Tue, 05 Oct 2021 15:51:17 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 64 62 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 5a ed 56 db 46 1a fe 0d 57 31 51 bb 0d b4 f8 03 12 12 02 d8 59 87 40 4a 97 00 07 cc b6 39 49 8e 8f 2c 8d ed c1 d2 8c 3a 1a d9 71 7a 7a 39 fb 63 6f 63 f7 c6 f6 79 67 24 59 18 08 4d 93 a5 9c 04 ec d1 3b f3 7e 7f 8e 76 1f bc 3c d9 eb be 39 dd 67 23 13 47 ed e5 5d fa c3 82 c8 4f d3 96 c7 2e 53 16 ab 8f 22 8a 7c 8f 45 be 1c b6 3c d9 f7 da bb 23 ee 87 ed e5 a5 a5 5d 23 4c c4 db 5d 1e 71 a9 34 db af 25 2a 35 6c 7b 9b fd 93 47 63 15 c7 5c 32 23 22 76 f5 f9 6e c3 ed a2 fd 31 37 3e 93 7e cc 5b de 99 ea 2b 93 7a 2c 50 d2 70 69 80 49 09 19 f2 0f 6b 52 0d 54 14 a9 a9 37 df 31 32 26 a9 f1 5f 33 31 69 79 bf d4 2e 3a b5 3d 15 27 be 11 fd 88 57 0e 38 dc 6f ed bf 7c b5 8f 7d 0e 4f 79 f2 54 84 66 d4 0a f9 44 04 bc 66 bf ac 31 21 85 11 7e 54 4b 03 3f e2 ad f5 7a d3 cb e9 9a 08 3e 4d 94 36 74 4c 24 e4 98 69 1e b5 bc 74 84 a5 20 33 4c e0 54 8f 8d 34 1f b4 3c 22 2b dd 6e 34 38 89 a1 6e 9c 54 ea 52 35 d2 b1 90 69 23 5f 68 88 d8 1f f2 b4 11 a9 a1 aa 27 72 b8 70 b0 99 45 3c 1d 71 6e 3c 66 66 09 04 63 f8 07 d3 08 52 88 c6 61 c9 a5 f9 b7 8d a6 93 37 3e 94 e2 c6 67 08 1c bf 17 81 7a 03 11 8c 04 d7 69 23 e1 3a 80 7c 41 42 ad ef eb 3a 1d 7c 95 b3 ff 37 01 85 5c ee 1f 73 6a 59 cb 59 5e 5e de 7d 50 ab bd 15 03 16 19 ce 0e f7 d9 d6 fb 76 55 c1 77 8a 61 41 a9 7c e4 07 63 7b f8 f3 b4 b5 be f9 e4 59 b3 b9 be b9 be e5 b1 46 7b f7 c1 5b 2e 43 31 78 5f ab 41 d4 57 b1 3e fd 42 ac 4f 4b b4 37 62 f2 c3 90 87 6c 00 e7 cc c5 ce 88 06 fc 7c 16 ab 5f 68 72 26 92 3d e7 6d c1 88 07 e3 bf c0 e6 2e 7f cd b8 9e d5 32 51 e0 4e 03 2d 12 53 f5 b0 4b 7f e2 bb 55 8f a5 3a f8 62 3f cb 51 ae d7 2f e1 60 bb 0d 77 34 d4 7f 6f 98 c1 ec 15 d4 8c 2c 8f 4d 10 03 84 92 6c bd be 8e 7f ce 1a ee 81 26 c7 75 5f 73 7f cc 75 2d ce 22 23 92 88 d7 fc 20 50 3a 04 3d b5 45 39 59 3f 61 47 27 9d 97 ac bb df 39 3a bc 78 cd ba 9d 57 6c ff 97 ee fe d9 71 e7 88 45 b3 be f6 b5 e0 a9 65 81 80 ff 80 60 e7 8a f8 d3 9b ee 43 58 8b 9a bb 4b 43 ed 65 c6 be 5d 19 64 32 30 10 e5 ca 2a fb 0d 0b b4 c4 bc 6f 12 ad 86 9a a7 29 62 bd c7 56 eb 95 af 2b 0e 8a b1 89 1f 65 7c 9b 6d 34 ed f7 df 57 77 f0 d7 fd 9e 9b ed 32 b2 f5 72 9e af ab d9 37 cf a9 35 4a 55 95 d4 6b 73 16 55 12 3b 2c 18 f9 3a e5 a6 75 d1 3d a8 6d 51 aa c9 f5 f4 f5 7c 8c cc fc 16 4f be c1 f1 be 06 de 00 b5 8d 92 f7 8f d7 4f 92 fb 47 7a 99 9a 8f 9f 87 b5 52 b7 54 a2 2a 02 4d e3 fb dc e4 18 fb 7b 24 82 d4 f8 da 30 d6 1d 71 64 28 2a f1 84 1c 32 91 32 83 05 94 28 42 73 06 28 2e 53 ce a4 32 f8 e4 12 19 9e 96 c7 fc 84 a8 7d ee 62 79 a0 42 8e 32 0e cf 71 44 82 fa a6 be 5c 82 ed a9 64 a6 c5 70 64 d8 ca de 2a 2c bd b9 59 db 68 ae 3f b6 a8 cf 54 26 c3 20 eb 73 f6 92 4f 50 ab fa f1 7c 1f 3d ff 14 0a a2 76 a0 39 67 a9 1a 98 a9 af e1 46 33 95 b1 c0 97 28 13 43 91 1a 2d fa 99 e1 25 1d c2 30 5f 86 0d 70 11 2b 14 04 33 86 05 60 e7 8e 2b c3 75 9c 32 35 b0 5f 5e 1d 5f b0 57 5c 72 ed 47 ec 34 eb 43 10 ec c8 09 a3 3c cd 07 9f f4 04 e5 62 c8 fa 33 bb ed 80 a8 39 cf a9 61 07 c4 1b 0a 63 25 d7 18 17 78 ae cb Data Ascii: db9ZVFW1QY@J9I,:qzz9cocyg$YM;~v<9g#G]O.S"\|E<#]#L]q4%5l{Gc\2#"vn17>~[+z,PpiIkRT712&_31iy.:='W8o\|}OyTfDf1!~TK?z>M6tL$it 3LT4<"+n48nTR5i#_h'rpE<qn<ffcRa7>gzi#:\|AB:\|7\sjYY^^}PvUwaA\|c{YF{[.C1x_AW>BOK7bl\|_hr&=m.2QN-SKU:b?Q/`w4o,Ml&u_su-"# P:=E9Y?aG'9:xWlqEe`CXKCe]d20o)bV+e\|m4Ww2r75JUksU;,:u=mQ\|OOGzRTM{$0qd(22(Bs(.S2}byB2qD\dpd*,Yh?T& sOP\|=v9gF3(C-%0_p+3`+u25_^_W\rG4C<b39ac%x
Sep 28, 2021 17:51:17.931535006 CEST	63	IN	Data Raw: 04 f0 08 88 ca 93 68 67 7e fa 1a 03 75 2b be 21 46 34 53 09 6d 5e 05 d5 33 34 00 20 b0 d8 5f 11 2e 09 c9 09 3f 65 73 9e 43 f6 f3 61 f7 c7 93 8b 2e eb 1c bf 61 3f 77 ce ce 3a c7 dd 37 3b 6c 0a 32 14 0a 67 3e a1 ee 00 5b 45 9c 44 82 87 25 2d 10 a3 Data Ascii: hg~u+!F4Sm^34 _.?esCa.a?w:7;l2g>[ED%- ^}G7Dax;u.:g\|^tI<=+Un@DiFhXfnEa6_3@ZL)zSD[Prgtm{h<8T$TQ@-
Sep 28, 2021 17:51:17.931555986 CEST	64	IN	Data Raw: b6 f1 e8 e9 d3 cd 67 4e 42 7e 04 2a 8e 68 7e 4f 19 f3 0a 99 a5 f8 6e 79 0c 47 f1 ad fc aa ae e2 c4 55 38 1b 99 b6 35 c8 1a 85 2c eb 6f 4e d8 15 87 ea ab 0f 35 aa 03 b4 7b 5c 7d e4 48 b7 a2 c0 0c da 3a 4e 3e 72 2d fc 28 f7 bb 5c fe 7d d4 fc 63 b4 Data Ascii: gNB~*h~OnyGU85,oN5{\}H:N>r-(\}cZI+)JFhVnE+#:X]v2Cw63W'?B&h w\wE#~v+tlv3vPCX,civ!By!(
Sep 28, 2021 17:51:17.967938900 CEST	65	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/percentage-bar.css HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: text/css,/;q=0.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.009660959 CEST	67	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:17 GMT Content-Type: text/css Last-Modified: Tue, 28 Sep 2021 12:40:07 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d27-88d4" Expires: Tue, 05 Oct 2021 15:51:17 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 32 65 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 3d 69 73 e2 c8 92 9f 67 7e 05 6f 5e bc 89 d9 71 cb 06 71 18 3c d1 b1 61 6c 73 f8 a2 8d 6d ae 2f 1d 02 49 20 23 24 21 89 cb 1b ef bf 6f d6 25 95 50 95 44 f7 9b 8d 58 7b 0e 53 28 ab b2 b2 f2 ae ac d2 c5 9f ff 28 7c bc 6c 0c ff 50 78 ef 16 94 c2 b6 74 5e 82 7f e0 2f b5 58 aa 28 c5 ba 52 2a ff fa 67 61 11 86 de d5 c5 c5 c7 1a 3d b9 b1 ce 67 ee 0a 5a bb ce cc de e8 46 70 55 98 b9 be 71 3e 0b 82 2f 05 6d 06 7f eb 96 eb d0 8f 9b d0 85 87 3d db 08 e9 03 d3 4d 18 b2 6f 75 2d 34 3c 6b b6 34 7c f2 b4 6e 69 b6 3b a7 7f fb da 7c ae 4d 6d 0a b6 32 9c 0d f9 c2 f3 dd b9 6f 04 c1 54 a3 50 f0 c1 fa 8c 9f 0c 0c db 98 85 c7 9f 63 f8 c0 b6 74 36 60 e0 fa fc 93 9e e5 38 ec 2b 68 0f c8 80 a1 eb da a1 e5 d1 0f 0b 63 85 51 82 f9 bf b9 85 ad 65 ec 0a 9a a3 17 56 ae 6e 99 87 42 b8 b0 02 f8 0f 3c f3 05 be 0b ac 50 44 ba 0b fc 80 ef da b6 e1 5f fc b7 69 de 1a a6 b6 b1 c3 af 03 c3 d7 35 47 fb 97 7a 73 ed 03 25 e0 ff 81 e6 04 4a 60 f8 96 f9 bb b9 63 8f 39 ae bf d2 ec df cd 80 35 c0 82 19 ab df 81 ee 80 7c 5f d3 ad 4d f0 b5 e2 ed 7f 9f ce 6f 5c db f5 3b 86 06 f3 fd 3a c3 3f d0 f8 66 ec c3 8d 6f d0 e6 85 35 5f d8 f0 6f f8 3d 70 cd 10 be ee ae e6 3d 4f 9b 59 e1 81 3e 71 59 fd 7d 0a 4b 6a f8 7c 6f 1a fe f9 dd 9c d1 87 54 fc f3 bb 35 73 1d fe 31 da 4c 31 b9 71 9d d0 70 c2 af 26 fe 89 51 89 da 6d 2d 89 01 fb 22 89 02 6b 8d 70 60 0d c7 48 1c b5 53 2c 18 d5 8c 1a fa 8d b1 60 ed 73 5b 0b 82 04 21 d8 37 49 34 58 ab 5e 46 bf 40 0a d6 50 c5 3f 31 2d 58 7b 1d ff 44 cb e2 6e 61 55 74 0d fd 72 ab 82 5b d3 28 74 70 fb d1 52 e0 b6 06 fe 41 2b 81 3f aa 25 f4 cb 2d 04 6e ad 54 d1 2f 1b fa 7a 16 5a 5b 23 b5 0c b4 39 3d 38 fd a2 96 60 04 da 18 2d 02 fd 7c 3c 3e 6d 4e 22 d0 61 4c f7 d5 9c 9a 0d c3 e0 e6 1f 7d 23 a0 41 f4 1d 50 97 67 c9 b8 b7 19 48 52 09 d1 22 6a 2a d7 d0 2f 47 8f e8 1b d5 a8 97 31 17 62 86 bd f3 7d d7 ff 6a 1a 66 c9 e0 84 84 b4 a6 51 21 ed 8d 04 1a a4 6d a6 17 b5 22 12 8c c4 c7 48 2e 12 ad 74 e8 1e ac 90 ad 1d be 52 52 46 12 ca da cd 63 b1 60 5f 14 7f 77 89 a4 b2 86 72 91 4d e7 75 a1 e9 ee 2e d5 25 6d 4e f5 48 db a3 0e e9 67 e8 0f 14 da 6c e9 80 ba a5 4d 75 50 2c ae 69 06 46 f8 e6 7a b4 4d 89 1b 1f 0d 33 e4 5b 79 a5 14 f7 00 ba f3 c6 f5 0e 3e d2 3b d8 d0 30 1b d4 72 37 0e 18 05 30 1f 58 a9 ba a0 28 7d 30 2e 4e e8 5b 60 37 5c 3f f8 ab f0 68 cd 0c 27 30 f4 c2 53 f7 ad f0 e7 c5 af bf 5e fc 59 78 d4 0e ee 06 54 ad 61 7b 86 1f fc aa e4 fe 00 dc f9 c6 52 08 80 b2 b0 74 dd 70 0a ff f3 eb 2f ba 15 78 b0 14 57 05 c7 75 8c bf 7e fd 77 fa 29 05 0c 1c 50 c3 02 c3 84 00 08 1b 5e 15 8a 7f fd fa cb cc b6 bc ab 82 0f c6 e7 8f 62 01 ff fe 17 b4 2e 0c 34 cb ab 42 c9 db c3 a7 95 e6 cf 2d e7 aa a0 90 8f 48 38 4d db dd 5d 15 08 0e d0 e4 69 ba 6e 39 73 d2 a5 e7 82 09 01 6a 5c 15 c0 1a b9 f6 26 04 a4 7e d9 59 7a b8 a0 1d 26 30 04 43 68 84 08 2b 36 0a ee 82 ef 8f 47 17 28 66 5b 8e 41 06 42 7f 01 39 28 aa e7 65 68 0a c1 4e 28 ba 01 2b 88 17 84 d1 e4 17 13 96 43 01 8b 0b 90 a5 62 f1 5f 18 38 80 96 f0 60 43 93 80 70 Data Ascii: 22ed=isg~o^qq<alsm/I #$!o%PDX{S((\|lPxt^/X(Rga=gZFpUq>/m=Mou-4<k4\|ni;\|Mm2oTPct6`8+hcQeVnB<PD_i5Gzs%J`c95\|_Mo\;:?fo5_o=p=OY>qY}Kj\|oT5s1L1qp&Qm-"kp`HS,`s[!7I4X^F@P?1-X{DnaUtr[(tpRA+?%-nT/zZ[#9=8`-\|<>mN"aL}#APgHR"j/G1b}jfQ!m"H.tRRFc`_wrMu.%mNHglMuP,iFzM3[y>;0r70X(}0.N[`7\?h'0S^YxTa{Rtp/xWu~w)P^b.4B-H8M]in9sj\&~Yz&0Ch+6G(f[AB9(ehN(+Cb_8`Cp
Sep 28, 2021 17:51:18.009721994 CEST	68	IN	Data Raw: 33 db d0 7c d3 da 5f 4d 0d 13 fc 84 2f 3c 51 a3 ef 34 33 84 a5 06 dc d1 6a 83 91 b8 2a fc f6 1b 74 1d 2d 08 36 d3 d0 40 66 a0 cc c0 78 6a 5e 00 03 b2 bf 8e 56 4b d0 31 42 e3 aa 30 05 a6 92 3c 8b 49 67 39 11 1d 8a 7f 15 80 b9 82 8d e7 81 9b 70 55 Data Ascii: 3\|_M/<Q43jt-6@fxj^VK1B0<Ig9pU]"KD$CS#ca4'L\]BZQG(JC\|{@hXH@W_u1~@L4itURB401vxK'Q:9''b[ALMr
Sep 28, 2021 17:51:18.009766102 CEST	69	IN	Data Raw: 6d 9c 18 c2 59 a7 28 c9 c9 18 e6 1c 11 2f 95 14 01 d2 13 c4 e8 4a c5 46 8e 36 50 c9 46 da 9f b6 40 da 31 74 57 38 b5 f7 03 28 c6 31 37 64 89 51 da 8a cd 3e c2 0f a7 67 b0 b9 c1 cc 20 08 9b 8f ac 52 8d 72 43 e1 1c fe 8a 55 3a 49 1c 08 a2 e6 1f 47 Data Ascii: mY(/JF6PF@1tW8(17dQ>g RrCU:IGH !rI&"r 7P q)&>0B@O!@&F"%EwX.e9x%\Z*eJ?$v?z!q?qB=8GH=s)S8
Sep 28, 2021 17:51:18.009808064 CEST	71	IN	Data Raw: f4 a0 73 71 70 ec d9 ac b4 f9 36 b8 9d ec 5f ba fd e2 83 5a 3d 9b 75 6f 6e 56 ee fa c6 a8 ae da 8b 49 cf 34 c6 af ef 8b ea e1 7e 76 7f f0 97 93 e1 d0 d3 fa 75 dd bd 57 dd ca f3 78 5d 53 6d 34 1f a4 ec 96 58 c1 51 65 e7 a2 39 c2 2a 0e 6e bb 95 f1 Data Ascii: sqp6_Z=uonVI4~vuWx]Sm4XQe9*nAU'Nv]JC}t_)z{U\|Es`]<~^N:cUA/x}gi`{+q1\|_?a]n6mn>zh?f{mQy.'7v
Sep 28, 2021 17:51:18.009885073 CEST	72	IN	Data Raw: 8d 96 e6 85 2d 7f 7a 76 33 5a f5 1a 3d f7 d3 78 ac 0e cc 6f 8d 46 67 7b 3d 5c 78 d6 bb 3e db 2d bd 66 a7 5c 57 ab d7 bb b1 fe 5e df bf ad ed c7 f6 22 bc 71 83 6b ff e1 c9 db c2 11 8a d5 53 5f 33 1a 83 ed 70 62 1a 4d 75 64 7e 5b 1a 8f ab 55 a9 6e Data Ascii: -zv3Z=xoFg{=\x>-f\W^"qkS_3pbMud~[Ung^UwIym-Sj+v1~f~o[eZk/0WKkiUW*.~%.>W,t?\EaEbbYdv0\|rN)'8tSHD
Sep 28, 2021 17:51:18.009931087 CEST	73	IN	Data Raw: 86 59 80 50 22 1b 16 3f 08 d5 c2 e8 28 78 cc 3c 31 0d 99 92 44 94 e2 19 8d 5d 0c 81 ef e7 48 30 9d 6d e5 4c 86 4f ac 1c 95 c6 24 67 88 8a c7 69 15 27 bd 2d 84 1d 30 a5 fc 13 d7 a6 c6 12 81 aa 33 20 fa 90 14 34 51 ee 21 17 4d 61 31 67 b5 6d f8 b4 Data Ascii: YP"?(x<1D]H0mLO$gi'-03 4Q!Ma1gm8ntvvgK+W\|%T/R/f0SW'GIXfQ\#q=hroz%\|!:-KKb>&i'B;JoV
Sep 28, 2021 17:51:18.009972095 CEST	75	IN	Data Raw: ea 23 4f 2b 9c 82 87 9c 9e 38 ce c8 c4 23 8b 0c 18 30 17 5c 4e 05 1c 7a e4 8d 2e 27 00 0e 42 f2 c0 33 a2 0a 1c 8d 48 e1 4d 38 5a b0 c8 9c 7d 09 87 25 b9 1d 64 70 01 8e 4f 72 3b c8 32 2b 99 14 64 53 c8 a0 01 f1 04 c4 4c a4 54 e4 c1 b3 82 d6 4e e0 Data Ascii: #O+8#0\Nz.'B3HM8Z}%dpOr;2+dSLTNV=<pOV<- :ePp,Z_&$+N:UsYprjHKQ lpH,(%23CJBR8e)Hr;DM`VetfR,ij`c3=%'G
Sep 28, 2021 17:51:18.010000944 CEST	75	IN	Data Raw: 03 d4 88 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 0
Sep 28, 2021 17:51:18.012406111 CEST	76	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.063736916 CEST	84	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:15 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d2f-71633" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 31 66 37 61 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 bd 7b 7f 5c c5 b5 2d fa b7 f9 14 6d 85 1d 64 6c 49 36 e4 41 94 00 3f 63 9b e0 b3 01 73 b0 d9 ec 5c 43 7c 5a 52 4b 6e 90 ba b5 bb 5b d8 4e c8 77 bf 63 8c 39 67 d5 ac b5 56 b7 64 87 dc 73 93 73 36 56 af 55 ab 9e b3 e6 fb b1 f7 ee f5 d1 0f ff fb 62 b2 78 35 fa e6 e1 68 67 f4 d3 9d dd 3b f8 ff f8 eb bd db 77 7e b3 73 fb 83 9d 3b ef bf f5 ee e8 f9 6a 75 be bf b7 f7 c3 ff b0 e5 c5 74 f7 70 7e 86 a7 0f 67 87 a7 17 47 93 e5 fe e8 70 be 98 ec fe b0 bc 35 7a 31 3d 3a 99 ac f4 e7 d9 fc 62 69 0f cf e7 cb e9 6a 3a 9f e9 c7 f8 10 8d 8f ca af 8b d5 1c 9d 9d 9f 4e 56 d6 f6 e0 62 b5 f2 96 47 e3 d5 e4 7c 7a f8 e3 64 a1 37 47 d3 f1 e9 fc c4 fe 5c 8c 4f 4e c6 07 a7 f6 c9 d1 62 7e 7e 5e 7e 4d 8e 8f 27 87 36 03 fb 73 e7 e0 74 3a 3b 6a 1e cc 2f 66 87 f6 ad 37 39 3c 9d 9e e7 df ec 32 ff 9e bc 3c 3f 9d 1f 35 9f 1c 8f 3b bf e7 a7 cd 20 cf a7 27 cf 4f f1 7f cd 54 ce 2f 8e 8f 73 bf e7 17 a7 4b ac 32 3f 5a 1e 8e 7d 5d 3e b7 e5 f3 f1 8f 6d 8b e9 df da df a7 d3 76 2a ab c5 78 b6 3c f6 6d 3b 9b cc 2e ec 14 16 f3 93 c5 64 b9 3c 18 db 7e e2 ef e9 df ca b6 2d 27 a7 d8 ab ce cf f2 ed 92 43 d8 67 cb f9 22 35 3b 9f ce 66 fe 02 4f 97 6a b1 9a cf 4f 57 da 4f c0 c8 bd f9 f9 ab 05 b7 41 00 15 b0 f6 29 4e 00 c7 0b 28 18 8d 67 47 a3 f9 ea f9 64 01 20 9a ad 16 53 00 c0 7c b1 fc e3 e8 f3 e9 e1 64 b6 9c 1c 8d be 78 f8 64 f4 ee de 5b 6f 6d 1f e3 d4 f8 c9 f6 e8 78 7c 88 46 af 46 37 46 7f 7f eb da f4 78 b4 3d 5a bd 3a 9f cc 8f 47 47 93 e3 e9 6c 32 fa f0 c3 0f 47 5b d1 7c 6b f4 eb 5f fb 8b dd f1 d9 91 3e 7a eb da b5 bd bd d1 dd 2f ee ef 8e be 9e 9c 4c 97 2b 0c 3f 5e 62 2e f8 ff f3 d9 2b 82 2e e0 f7 e8 02 27 81 a6 d6 eb f6 d3 d1 96 5d 80 ad d1 f7 b7 ea 1c fe f8 d6 b5 7f 8c 26 a7 cb 49 e9 f7 93 c5 fc c5 12 3d 9e 9c ce 0f c6 a7 4b f4 e0 13 de 8e f5 df e0 47 6f fd 23 2d e9 6d cd 6b ef dd eb 6f 8d de 4d 37 f2 1e 2e d6 c8 ee 24 5f 0c dd c3 d1 bb 7c f3 86 fb cc 4f bf c6 d1 8f b9 d3 38 13 cc 1a 67 a1 3d 3f b5 03 d8 ed 8d bb 3b 5f 9c ec f9 5b bc 4c ef c7 e7 d3 dd 8c 23 f6 0e 01 dc 27 38 a9 bd 8b e9 0e 71 c4 1e 1a e3 28 df c2 e6 bf bd 7b 31 1d 9d 09 32 26 2f 71 02 a3 e3 c5 fc 0c 30 70 76 3e 9f 4d 66 ab 25 50 c9 ea f9 68 36 c7 d1 9d 4f 30 b1 d9 e1 74 c2 0b bb 7b b2 7b 4b 1f ef 06 5a 79 4b 5d 7d 68 3d fe fc f3 e8 ef ff f8 e3 5b 78 36 79 b9 c2 77 db 7a 7c 8b 80 f2 d3 64 b1 04 f8 ec 8f b6 6c 43 b7 6e 01 0e 7e 9c bc ba 87 9b bd cf 06 d7 3e b9 7b ef 3f 1f 7f 75 f7 de 83 fd d1 07 b7 f0 fb de a3 2f be b8 bb 3f ba f3 81 7e dd 7f f0 f9 83 27 78 f5 9b df e9 d7 a3 6f bf c4 df b7 f9 f7 83 2f ef ef 8f de ff ad fd f9 e4 c1 d7 f8 e4 7d fd 78 7c ef ee 57 f8 e2 bd df f3 d7 67 8f be c0 df ef eb eb cf 1f 7c fa 04 7f eb f9 57 77 ff fc e0 99 75 f7 fe 6f ca 83 6f be c2 4f f5 f2 d5 83 af 1f 3e c2 00 77 fe a0 c1 be 7e f8 e7 cf f8 ed 1f f8 c3 67 fb fe 7b fc f1 e4 ee 27 fb 23 3d d6 c7 1f 08 c6 00 6a dc ee f3 d3 8b 93 e9 6c 89 7d 39 9e c5 d6 60 c9 cb c3 c5 fc f4 f4 ab f1 02 5b be 3f aa 37 Data Ascii: 1f7a4{\-mdlI6A?cs\C\|ZRKn[Nwc9gVdss6VUbx5hg;w~s;jutp~gGp5z1=:bij:NVbG\|zd7G\ONb~~^~M'6st:;j/f79<2<?5; 'OT/sK2?Z}]>mv*x<m;.d<~-'Cg"5;fOjOWOA)N(gGd S\|dxd[omx\|FF7Fx=Z:GGl2G[\|k_>z/L+?^b.+.']&I=KGo#-mkoM7.$_\|O8g=?;_[L#'8q({12&/q0pv>Mf%Ph6O0t{{KZyK]}h=[x6ywz\|dlCn~>{?u/?~'xo/}x\|Wg\|WwuooO>w~g{'#=jl}9`[?7
Sep 28, 2021 17:51:18.063832998 CEST	86	IN	Data Raw: 6c 6a a8 fd b3 e9 11 76 de ee d9 b5 9f c6 8b 82 ca b1 dd ab e7 d3 e5 ee e1 72 b9 3d da 8a 93 d8 1a dd e0 e8 d7 26 2f f5 f5 e3 15 ae f8 a1 75 8e 0f a2 95 5d 4f 60 8b f9 e9 c5 6a 82 53 c0 17 73 1c ce f1 e9 fc 05 6e e3 e4 25 da b6 e3 7f 3c da db 1e Data Ascii: ljvr=&/u]O`jSsn%</lucobrH$}8B2Cn[a\j3>dueXyrW;@Q_K[?nNg{t?hz7oSt
Sep 28, 2021 17:51:18.178555965 CEST	453	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jstz.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.220345020 CEST	478	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:06 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d26-350a" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 31 34 38 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5b 5b 53 db c8 b6 7e 9f 5f a1 f8 21 65 4f 84 d1 c5 92 65 33 4e b6 01 07 3c e1 56 e0 cc ec 1c 8a a2 1a bb c1 4a 6c 89 2d c9 c9 30 84 ff be bf d5 ea 6e b5 04 cc 7e 3e 55 89 63 f7 ea 5e ab d7 fd 22 65 fb d7 5f 7f b1 7e b5 be e6 b3 78 cd ff 4e 13 be cf 0b 3e 2f ac 2d eb bb db 75 ba 21 80 04 ff 57 9e 6e b2 39 b7 96 45 71 9f 0f b7 b7 6f e2 e2 66 33 ff c6 8b 6e 9a dd 6d df f3 d5 8a df c7 eb ed af 79 21 d1 2c 04 9a ed 8c fd d8 0e e7 3d af 1f 06 51 18 85 f3 30 ec 2d 58 e0 cd 43 16 f5 e7 8b d0 e3 f3 81 eb dc 30 76 83 1d db 8b 38 2f 08 c5 df dd af b9 a2 bb 8a e7 79 c1 b2 c2 b2 66 4b 6e dd a6 ab 55 fa 23 4e ee ac 38 b7 0a 2c f0 a4 88 33 6e 61 17 4f 72 6e 25 69 81 6f d8 96 11 94 2e fe 3b fb ce 2e e6 59 7c 5f 58 f3 74 c1 ad 38 01 04 87 6f e3 15 ef 4a 22 7b e9 fd 43 16 df 2d 0b ab 3d ef 58 bf a7 89 75 f2 b0 62 c9 82 67 72 c3 51 89 7e 61 6d 68 51 10 3e 9e ce 14 55 75 d7 33 9e ad e3 3c 8f 71 1e 04 96 3c e3 37 0f d6 5d c6 92 82 2f 6c eb 36 e3 dc 4a 6f ad f9 92 65 77 dc b6 8a d4 62 c9 83 75 cf b3 1c 07 d2 9b 82 c5 09 18 a3 3b 33 5c f5 fe 81 36 8b ab e6 e9 6d f1 83 81 4b 5c c9 62 79 9e ce 63 06 94 d6 22 9d 6f d6 10 00 2b 88 24 31 94 5b 6d c9 76 eb 42 1e 6a 75 04 a9 05 67 ab 92 77 6e 29 90 f5 23 2e 96 e9 a6 b0 32 9e 17 59 3c 27 34 36 36 cd 57 9b 85 bc 89 da b1 8a d7 b1 a4 43 18 84 b0 a0 80 d4 da e4 60 85 6e 6b 5b eb 74 11 df d2 bf 5c f0 77 bf b9 59 c5 f9 d2 26 86 48 b1 59 7c b3 29 b0 9e d3 ba 10 a7 4d 0c 6d 43 55 39 cc 87 90 c4 60 40 30 5d dd 51 ec 01 21 c2 02 51 e1 16 52 62 82 fa 8f 65 ba ae b3 44 9a dd 64 09 08 43 40 c4 77 0a f1 09 a2 5f c9 aa 4b 44 44 a0 b2 a4 79 9a 2c 62 e2 3d 1f 4a 75 93 a5 b1 9b f4 3b 17 9c 95 96 21 2d 4b dc 86 94 22 2e 53 2a 5b 82 f2 25 03 1b 37 c2 ea 4a 21 e2 0a 10 39 ad 2a e6 c0 eb e6 06 f6 0c ab 85 3e ee d3 4c d0 6d 32 ad ec 72 76 38 b1 2e 4e 3f ce fe 1c 9f 4f ac e9 85 75 76 7e fa c7 74 7f b2 6f b5 c6 17 f8 dd b2 ad 3f a7 b3 c3 d3 cf 33 0b 3b ce c7 27 b3 2f d6 e9 47 6b 7c f2 c5 fa 34 3d d9 17 92 9f fc fb ec 7c 72 71 61 9d 9e 5b d3 e3 b3 a3 e9 64 df b6 a6 27 7b 47 9f f7 a7 27 07 d6 2e 8e 9e 9c ce ac a3 29 cc 19 78 67 a7 16 d1 94 d8 a6 13 9c fb 48 58 8e 27 e7 7b 87 c0 3f de 9d 1e 4d 67 5f 6c eb e3 74 76 42 68 3f 02 ef d8 3a 1b 9f cf a6 7b 9f 8f c6 e7 d6 d9 e7 f3 b3 d3 8b 09 2e b1 4f 07 4f 4e 4f a6 27 1f cf 41 6b 72 3c 39 99 75 41 1b 6b d6 e4 0f fc b0 2e 0e c7 47 47 82 e0 f8 33 d8 38 17 b7 dc 3b 3d fb 72 3e 3d 38 9c 59 87 a7 47 fb 13 2c ee 4e 08 d3 d1 74 bc 7b 34 29 09 82 c1 bd a3 f1 f4 d8 b6 f6 c7 c7 e3 03 ba e6 b9 75 0a 44 e7 62 9b bc e3 9f 87 13 b1 04 92 63 fc d9 9b 4d 4f 4f 08 13 44 b4 77 7a 32 3b c7 8a 0d 8e cf 67 fa f4 9f d3 8b 89 6d 8d cf a7 17 24 9c 8f e7 a7 a0 40 d2 c5 09 92 df 09 9d 3b 99 68 44 24 7c 71 7d ad 23 ec a2 df 9f 21 00 7d a3 fd c9 f8 08 e8 a0 b0 93 da 66 a5 e4 7f 09 6f 58 94 f1 ad b4 ba 7f 8a 6d c4 81 0c 6f ff 33 b6 6d ff b2 4d 91 1d f1 74 1d 27 88 a9 d6 1f 08 36 30 b8 a1 25 42 bb b5 Data Ascii: 148c[[S~_!eOe3N<VJl-0n~>Uc^"e_~xN>/-u!Wn9Eqof3nmy!,=Q0-XC0v8/yfKnU#N8,3naOrn%io.;.Y\|_Xt8oJ"{C-=XubgrQ~amhQ>Uu3<q<7]/l6Joewbu;3\6mK\byc"o+$1[mvBjugwn)#.2Y<'466WC`nk[t\wY&HY\|)MmCU9`@0]Q!QRbeDdC@w_KDDy,b=Ju;!-K".S[%7J!9>Lm2rv8.N?Ouv~to?3;'/Gk\|4=\|rqa[d'{G'.)xgHX'{?Mg_ltvBh?:{.OONO'Akr<9uAk.GG38;=r>=8YG,Nt{4)uDbcMOODwz2;gm$@;hD$\|q}#!}foXmo3mMt'60%B
Sep 28, 2021 17:51:18.225189924 CEST	488	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/header-logo_tcm48-237759.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.266217947 CEST	588	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: image/png Content-Length: 4811 Last-Modified: Tue, 28 Sep 2021 12:39:33 GMT Connection: keep-alive ETag: "61530d05-12cb" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b9 00 00 00 4e 08 06 00 00 00 7c 3a b7 fd 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 31 36 42 34 34 33 38 30 36 36 35 31 31 45 33 39 34 41 35 43 33 33 41 44 42 42 46 32 31 46 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 31 36 42 34 34 33 39 30 36 36 35 31 31 45 33 39 34 41 35 43 33 33 41 44 42 42 46 32 31 46 39 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 31 36 42 34 34 33 36 30 36 36 35 31 31 45 33 39 34 41 35 43 33 33 41 44 42 42 46 32 31 46 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 31 36 42 34 34 33 37 30 36 36 35 31 31 45 33 39 34 41 35 43 33 33 41 44 42 42 46 32 31 46 39 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e a1 6c 0e b8 00 00 0f 3d 49 44 41 54 78 da ec 5d 0d 8c 1c 65 19 fe e6 6f f7 fe 77 af bd eb 5d 0b a5 5b 0a 56 d1 a6 5b 8b 81 28 84 6b aa 45 30 a6 87 51 24 c4 c8 15 c4 08 89 d2 c6 bf 98 68 6c 25 26 24 6a 4a 13 12 89 46 7b 06 22 01 63 68 8d 18 09 d6 5e ad 51 89 c1 6e e5 47 0c 09 b7 d7 1f 90 fe dc ed fd ec dd ee ce 9f ef 3b f3 cd dd dc 32 bb 37 33 3b 7b bb 2d ef a3 c3 ee ec ce 7d f3 ee cc f3 3d df f3 bd df f7 Data Ascii: PNGIHDRN\|:tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:916B4438066511E394A5C33ADBBF21F9" xmpMM:DocumentID="xmp.did:916B4439066511E394A5C33ADBBF21F9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:916B4436066511E394A5C33ADBBF21F9" stRef:documentID="xmp.did:916B4437066511E394A5C33ADBBF21F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>l=IDATx]eow][V[(kE0Q$hl%&$jJF{"ch^QnG;273;{-}=
Sep 28, 2021 17:51:18.384454012 CEST	606	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/images/header-background-center_tcm48-237819.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.426152945 CEST	608	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 431 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 20 56 65 6c 6b 6f 6d 6d 65 6e 20 74 69 6c 20 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 5f 66 69 63 68 69 65 72 73 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 65 6e 74 65 72 5f 74 63 6d 34 38 2d 32 33 37 38 31 39 2e 70 6e 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor E-post Velkommen til Telenor E-post_fichiers/images/header-background-center_tcm48-237819.png was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.466737032 CEST	610	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader.gif HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.508400917 CEST	614	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 365 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 61 6a 61 78 6c 6f 61 64 65 72 2e 67 69 66 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader.gif was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.509341955 CEST	615	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages_dark.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.550759077 CEST	619	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 368 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 6d 65 73 73 61 67 65 73 5f 64 61 72 6b 2e 70 6e 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages_dark.png was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.597745895 CEST	631	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/da09f1f1-062a-45af-86e1-2bbdb3dd94f9.svg HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.639204025 CEST	637	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 434 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 20 56 65 6c 6b 6f 6d 6d 65 6e 20 74 69 6c 20 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 5f 66 69 63 68 69 65 72 73 2f 66 6f 6e 74 2f 46 6f 6e 74 73 2f 64 61 30 39 66 31 66 31 2d 30 36 32 61 2d 34 35 61 66 2d 38 36 65 31 2d 32 62 62 64 62 33 64 64 39 34 66 39 2e 73 76 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor E-post Velkommen til Telenor E-post_fichiers/font/Fonts/da09f1f1-062a-45af-86e1-2bbdb3dd94f9.svg was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.11.11	49198	141.8.192.193	80

Timestamp	kBytes transferred	Direction	Data
Sep 28, 2021 17:51:18.020989895 CEST	77	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/telenor.css HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: text/css,/;q=0.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.062928915 CEST	81	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/css Last-Modified: Tue, 28 Sep 2021 12:40:08 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d28-952" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 61 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 56 4d 4f 1b 31 10 3d 27 bf 62 14 2e 80 ba 9b 64 f9 28 18 71 40 ad a8 2a b5 ea 81 1e 7a ab bc eb d9 ac 85 d7 b6 6c 2f 09 54 fc 77 6c ef 26 24 1b 28 52 d3 03 b1 14 c9 e3 8f 99 79 3b f3 9e 53 8b 02 0b 97 cc 0d d5 1a cd 9f e1 60 50 0a 45 1d 01 81 a5 bb f0 53 c6 ad 16 f4 9e 00 97 82 4b 4c 72 a1 8a db b0 90 2b c3 d0 10 98 ea 05 58 25 38 83 3d 76 16 c6 05 ac fd c2 46 5a dc ce 8c 6a 24 23 d0 18 b1 3f e2 35 9d a1 1d 33 35 97 57 c6 a8 f9 17 83 f7 a9 96 b3 d1 01 48 95 18 d4 48 1d 64 47 27 fe e2 02 a5 43 13 dc 15 8d b1 ca bb d3 8a 2f 4d 6d 04 89 a1 8c 37 96 1c eb 85 df f7 38 1c a4 9b 39 7d 80 9e 01 da f5 90 eb 9c 33 57 11 c8 4e 26 f1 f0 a0 42 3e ab 7c f2 d9 69 3b 8f 19 f7 8d 85 12 21 90 bd 8f a7 61 b4 3e 97 63 e9 aa 72 b5 78 87 a0 4e b3 5d 41 5d 4f ec 19 d9 75 eb 36 bc d3 e3 dd e1 5d 02 5b 2a f9 1e ab f5 ec 68 c7 62 5d cf eb 19 d7 75 eb 36 ae e7 67 ff a5 6a 19 bf 4b 63 57 53 c6 0c 16 82 5a 0b 8e e6 02 d7 ac d6 62 b0 1a 70 0c ac a6 b2 df 63 c3 c1 0b d6 2e e2 bd d5 e5 f6 da a8 fa a6 c9 bb ee 7b 27 4c 33 9d bc d9 14 1d 4f 4c b3 9d 0a b9 a3 cc 2d c2 1a 7a f6 18 1f 7a a6 dd f9 3b 90 4a dd a1 81 40 6d 6f b2 ee 16 e3 f6 71 e8 e8 75 49 77 d9 d1 79 c9 f2 25 dd f5 0a a0 75 fc 6f 7e b3 1e fe af fa 3d 1c 6f 91 3b a4 95 12 5e 04 5e a1 a2 34 12 53 7f cb 46 57 c5 2d d1 d2 6e 0b 39 ac 34 6f 25 76 35 35 33 2e 09 4c 20 ca d2 04 fc 7f 10 88 79 c5 1d 26 be f6 0b 24 5e bc 82 8c f6 e5 2f 00 e3 2b 7d 4e a0 e2 8c a1 7c 45 cc b4 b2 dc 71 e5 7d 18 14 d4 f1 3b 0c 1b 1f 12 2e 19 2e 08 24 d3 17 c5 ad 6b b1 bf 32 f1 9b 74 b2 4a 2e 78 7c 8e 83 e6 5e d6 1b b7 19 47 d6 4f ef 05 5d 56 8d 0b c2 19 00 91 f1 b4 f2 f8 70 e7 df 10 93 30 1b 1f c2 a7 9b 1b a8 fc b3 c0 42 a9 0c 44 dc 21 f7 2f 01 8b c6 42 f8 cc 83 df 52 5d ab a2 b1 df e2 45 b8 d0 c6 13 90 87 67 df 55 dc a6 1e 49 8c cb 97 ce 34 78 70 01 fe 44 52 db a4 e4 c2 3f 17 c8 48 1b 35 e3 8c 7c fe f5 35 3c 35 7e 1a 2a ad 77 54 a7 df 79 61 94 55 a5 4b af 84 ae e8 fe 8f 36 b0 cb c9 c1 28 44 d6 1d 07 1a 17 bb a8 fd 62 58 4b 6e 63 2d 6d a6 92 d4 ea 61 d3 f4 f8 04 b2 7c 6e 9e 52 09 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 2acVMO1='b.d(q@zl/Twl&$(Ry;S`PESKLr+X%8=vFZj$#?535WHHdG'C/Mm789}3WN&B>\|i;!a>crxN]A]Ou6][hb]u6gjKcWSZbpc.{'L3OL-zz;J@moquIwy%uo~=o;^^4SFW-n94o%v553.L y&$^/+}N\|Eq};..$k2tJ.x\|^GO]Vp0BD!/BR]EgUI4xpDR?H5\|5<5~*wTyaUK6(DbXKnc-ma\|nR0
Sep 28, 2021 17:51:18.066494942 CEST	106	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/scriptbreaker-multiple-accordion-1.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.107852936 CEST	193	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:07 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d27-a16" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 33 62 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 56 4b 6f db 38 10 3e 5b bf 62 ea 1a b0 d4 a4 52 b2 bd 39 cd 02 c5 b6 87 02 5b a0 c5 22 a7 20 07 56 a2 2d 36 34 25 90 94 dd 6c e0 ff de 19 3e f4 70 9c 22 87 1a b0 25 91 c3 99 ef fb e6 21 17 6f 12 78 03 3f be 75 5c 3f c0 cd 67 f8 d2 49 2b 24 df 71 09 1f ca b2 d1 95 68 14 ec f2 4b b2 a2 ef 3f 4d fb a0 c5 a6 b6 90 96 19 fc 75 71 79 09 5f 05 b7 5c c3 57 a6 b9 b0 68 43 66 b5 b5 ed aa 28 f6 fb 7d 6e 4a 2d 5a fb 5d 73 76 cf 75 5e 36 5b 6f 52 24 49 51 b4 b2 db 08 05 15 5f 0b 25 2c 86 4a d2 75 a7 4a ba 4b 17 d9 63 02 f8 59 e4 6b 95 f3 9f 96 ab 2a 7d 4c dc 12 1e 64 c6 80 ad 39 34 2d 19 1b d8 31 2d d8 77 c9 c1 36 6e 3d ba 71 f6 2c 32 59 f5 eb 69 38 98 81 8f 42 9f 64 36 43 37 84 86 a1 0a 06 ae 71 6f 36 9b 8d 4e 2f ad ee f8 f2 9c 56 4d cb 79 b5 82 77 17 17 ee b1 94 8d e1 d5 7f 62 a3 56 b0 bc 3d bb f3 46 4d cb d5 b0 fa f6 6e 89 8b 87 ab 04 7f 8b 02 3e 39 4e d0 74 7d c8 9e cd 5e d8 1a 69 a0 4b 68 75 b3 13 15 af f2 80 0e 71 13 b2 45 94 24 a2 3d 8f 87 b3 2b e7 fe 83 31 08 06 ca 4e 6b ae 2c 70 c9 b7 74 45 79 a2 54 e7 80 d2 db 5a 18 28 19 06 c2 eb cd bf d1 2e 01 af c5 c2 ed 63 b8 94 6e d0 35 ae d3 b7 28 58 55 01 83 2d d3 f7 80 74 c9 2f 3e 0d c5 83 c1 3a 32 74 0e 72 4c 6f 95 ce a5 98 67 39 67 65 3d 24 d9 c9 8f 42 89 75 1a 42 04 db 4e a2 ad 11 ff f3 34 83 57 d7 70 41 c5 80 76 21 30 65 78 14 cc 31 55 58 23 31 fb 52 a8 7b 6f 3f f5 ca 56 6b a1 8d 45 d7 ac c5 d4 20 a6 f7 a6 65 ea ef f9 19 a9 67 f2 21 8b 70 36 7f 5f f8 3d cf da f3 76 00 76 8d a8 e0 47 b7 6d 85 da c4 88 b6 69 a1 59 bb d2 6b d9 86 c3 be e6 24 2e 87 5a f3 35 69 cb 14 bc f6 1e 9e 70 1d a1 b2 56 a7 4b 3a b2 cc e0 fa 1a e6 af e7 9e 38 d0 c9 e7 b8 94 52 94 f7 23 4d 1f 35 b7 9d 56 b0 66 d2 f0 ab 83 c7 4f 1e 0e 0e 80 fb a5 55 9f 48 aa 51 ec 10 2b 76 1c 5c e3 3f 4d 5b ee b7 9f cd 5e 04 d6 e2 08 50 d6 a4 73 9f 3d 89 75 fb b1 d9 2b ea 35 93 bb 86 09 5a 9e 3e e0 8f 87 3a f1 25 43 19 e8 73 56 db ad f4 be 86 be f2 0e 3d 9b 27 e5 06 0c 61 1c ab e3 1a 7e 9a 86 10 38 fb 4d ed c5 cc b9 f0 fd 44 70 23 8a 72 8a 3a 7e 6c 40 35 58 ed 58 13 7d f2 a5 30 96 92 4f 78 a3 25 a6 ff d5 94 7f 3a 09 2c 4c ba 5c ed 84 11 38 cd 96 d9 10 61 16 d4 1d ba 31 ef 71 4f 84 47 45 3c a6 59 f0 42 27 46 6d d8 c9 e8 de 95 f6 d4 f6 a8 3f 83 87 cf aa e2 3f 47 50 dc 6c 70 cd 82 be 69 26 0e 7e 22 cc 23 47 1e e1 13 3f d4 0c 01 fc ed c8 e4 8e 8a 3f c4 be 1d 63 b8 1b 83 08 53 17 21 f8 4a ef b9 20 f5 49 0b 8c 36 b0 f8 03 61 57 34 fd 03 e2 70 7c 26 fe 47 9d 7a a2 44 68 2e bd 00 e3 22 3d 6d e4 fb e3 a6 1d 75 c7 f9 f0 7a 9a f2 ec 5b ff e5 2d 32 8c b2 31 4d df 2a 3d 6b 1a 6a 51 0e 9a 0b bd 34 fd ed c8 3c ee c7 eb ef d4 e9 7b 16 ab 79 3e 94 db c0 ea d9 0e e8 4f be 54 9e 23 4f fe 2d 73 62 7a 54 5c b2 87 f1 28 ca 87 79 72 4a ac 11 f3 a8 46 b8 1e 38 56 5b df f9 2f 64 72 34 08 4f a7 fa 4f 70 99 ce 46 9f d1 81 4b 48 9e bf f8 65 80 43 42 77 87 2c f5 ff 03 b3 ab 5f 66 55 1f d9 16 0a 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3b5VKo8>[bR9[" V-64%l>p"%!ox?u\?gI+$qhK?Muqy_\WhCf(}nJ-Z]svu^6[oR$IQ_%,JuJKcYk}Ld94-1-w6n=q,2Yi8Bd6C7qo6N/VMywbV=FMn>9Nt}^iKhuqE$=+1Nk,ptEyTZ(.cn5(XU-t/>:2trLog9ge=$BuBN4WpAv!0ex1UX#1R{o?VkE eg!p6_=vvGmiYk$.Z5ipVK:8R#M5VfOUHQ+v\?M[^Ps=u+5Z>:%CsV='a~8MDp#r:~l@5XX}0Ox%:,L\8a1qOGE<YB'Fm??GPlpi&~"#G??cS!J I6aW4p\|&GzDh."=muz[-21M=kjQ4<{y>OT#O-sbzT\(yrJF8V[/dr4OOpFKHeCBw,_fU0
Sep 28, 2021 17:51:18.109617949 CEST	194	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/common.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.151236057 CEST	337	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:39:26 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530cfe-370d" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 31 34 66 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cd 5a fb 57 db b8 b6 fe 9d bf c2 64 f5 e6 d8 8d 09 79 41 69 52 97 a1 4c 3b ed 19 fa 38 40 4f a7 87 50 96 6c 2b 89 07 27 ce d8 0e 90 92 fc ef e7 db da f2 23 10 98 de b5 66 d6 bd b0 56 6c 4b 5b 5b fb a5 4f d2 96 b6 9f 3e dd 30 9e 1a c7 d1 6c e2 7b 33 57 1a 5e 34 1e 47 13 e3 f7 c4 08 03 37 16 f1 1c d5 44 71 3a 0a 12 63 10 84 d2 c0 73 2a e2 d4 88 06 46 3a 92 a5 a6 5f a4 3b 16 41 68 78 61 20 27 a9 6e f7 53 18 78 49 4a f4 60 21 8d 41 14 86 d1 75 30 19 12 1b 6a 0e ca 20 96 e8 cc 93 93 44 1a 93 28 c5 1b c8 62 aa a5 8e ff 29 ae c4 89 17 07 d3 14 b2 f9 e8 7e 82 1a 2d 4b 5d 77 72 18 4d e7 71 30 1c a5 86 e9 59 46 ab d1 d8 d9 6a 35 9a 1d 5b 75 59 e8 f6 b3 bc 32 4e a5 18 e7 2a c9 07 b9 4f c5 50 69 3a 88 a5 34 92 68 90 5e 8b 58 76 8d 79 34 33 3c 31 21 b9 62 e9 07 49 1a 07 ee 2c 05 65 6a 88 89 bf 0d a9 c7 91 1f 0c e6 54 00 8b 4a a5 85 91 ca 78 9c 64 f6 fa e5 c3 67 6a fe 8b 9c c8 58 84 c6 a7 99 0b dd 8d 23 ad bf 89 6a e3 97 4f 47 96 21 60 66 aa 4b 46 d2 37 dc b9 62 f4 86 a4 39 d1 d2 10 97 37 e4 37 91 06 d1 c4 36 64 00 92 d8 b8 92 71 82 6f a3 9d 75 a8 59 db 06 a4 33 45 4a 3a c4 46 34 a5 46 16 f1 10 93 b9 11 0a c8 98 35 ad b3 ab d8 da 89 51 a8 e9 1b 5f de 9d be fd f8 f9 d4 38 f8 f0 d5 f8 72 70 7c 7c f0 e1 f4 6b 8f 98 5c a3 f3 68 96 1a f2 4a 92 7f d0 70 3c 45 18 f8 06 ec 16 8b 49 3a 27 69 de bf 3e 3e 7c 8b 26 07 af de 1d bd 3b fd 4a 02 bd 79 77 fa e1 f5 c9 89 d2 e5 e3 b1 71 60 7c 3a 38 3e 7d 77 f8 f9 e8 e0 d8 f8 f4 f9 f8 d3 c7 93 d7 10 e7 04 6a 13 53 6d 1c 15 1e e3 08 61 e3 cb 14 11 97 64 71 70 90 18 c2 f7 03 52 0d a6 9d c2 ec 41 a2 8c c1 be c8 9a 17 26 4a a4 47 c4 c6 33 9b cc 42 52 8c c5 bc a4 31 e2 71 b2 95 c0 60 88 49 53 d6 87 75 db 18 07 93 60 1c 7c 87 6a 10 02 a3 65 2a bc 54 fa 16 c9 a4 9c 4c 4c d2 11 ec ac ec 97 d9 85 a4 f7 10 a5 a5 28 20 37 83 7f 3c 16 61 38 47 38 fd 31 c3 40 20 57 13 87 4c 30 c4 f0 34 8e ae 02 1f 35 14 7c c1 c4 0b 67 e0 ab 86 c0 9d 41 83 08 34 84 f1 f9 f8 88 45 88 a3 d9 70 64 5c 8f 02 6f 04 ee 5e 30 a5 51 99 50 f8 1a c2 f3 64 c2 e3 ef 30 8a 63 99 4c a3 89 4f 83 f2 44 a9 9a 99 93 c6 ae 04 53 15 0e c2 8d ae 54 3c 3c 38 6a a9 5b 3d 70 ff 74 d4 6e 6f 5c 89 d8 38 fc f8 e1 f4 f8 e3 d1 c5 af af bf 3a 4d fb e4 ed bb 37 a7 ea bd 65 67 35 45 59 bb b7 31 98 4d d8 5d 50 8d e1 ea c2 8d a3 eb 44 c6 a6 75 4b fc 84 33 11 57 c1 50 a4 51 dc 23 0b d5 31 8a 27 a9 23 ea 33 d0 1c d0 7b a9 f8 22 f4 ca 35 f5 34 3a 8a ae 65 7c 28 12 69 5a 4c 37 11 63 09 1a 31 9d 7e c0 1b 97 21 c0 fd 28 46 29 bf ec 67 2f dd 4a a5 20 40 84 e5 14 27 33 77 1f 80 99 c8 37 61 24 52 33 a3 47 b1 d5 6d 70 13 b8 d8 9f 79 24 a8 7e 03 57 fd 96 b3 9d 62 8c 52 8c 39 27 00 9d c9 10 7c b2 12 6b 9d e8 a1 98 0c c1 8f 1e 33 58 01 0c b3 d7 7a 32 73 09 b8 c0 a3 61 b7 ac ae a8 6b 23 1e 15 b4 77 4a ee 37 49 e6 49 2a c7 a5 16 ab 05 77 1b 54 e4 44 5b 07 d8 ef 34 5e 38 ac b6 56 a9 1e 60 78 de 7c 1c 98 15 d4 56 b4 ed c7 c2 7b 84 10 b5 20 dc 50 6c c2 60 32 bb 79 84 56 d5 67 Data Ascii: 14ffZWdyAiRL;8@OPl+'#fVlK[[O>0l{3W^4G7Dq:csF:_;Ahxa 'nSxIJ`!Au0j D(b)~-K]wrMq0YFj5[uY2NOPi:4h^Xvy43<1!bI,ejTJxdgjX#jOG!`fKF7b9776dqouY3EJ:F4F5Q_8rp\|\|k\hJp<EI:'i>>\|&;Jywq`\|:8>}wjSmadqpRA&JG3BR1q`ISu`\|jeTLL( 7<a8G81@ WL045\|gA4Epd\o^0QPd0cLODST<<8j[=ptno\8:M7eg5EY1M]PDuK3WPQ#1'#3{"54:e\|(iZL7c1~!(F)g/J @'3w7a$R3Gmpy$~WbR9'\|k3Xz2sak#wJ7IIwTD[4^8V`x\|V{ Pl`2yVg
Sep 28, 2021 17:51:18.151304007 CEST	338	IN	Data Raw: 6c 67 93 e0 31 5a aa ce 48 fd 68 ec f8 91 37 1b 23 6e ea 43 99 be 0e 25 bd be 9a bf f3 f7 37 1b dd cd 26 3b 0f 64 ad 82 0e f8 f3 1a 91 91 1e 61 72 20 88 af 56 73 16 b1 1c 63 08 ad d4 32 07 e9 0f 25 e4 2f 22 16 a1 59 d8 c4 a0 ea ed 4c a8 6b e9 5e Data Ascii: lg1ZHh7#nC%7&;dar Vsc2%/"YLk^7Vl%7$jV0]#X,[=CAvTmgaQSiY]UH!iX0QR\_lv>b+MW%/cr%b @[9ja0^F?jg2Lw!u
Sep 28, 2021 17:51:18.151376963 CEST	340	IN	Data Raw: 3c cb 03 f9 df 22 9c 49 07 fb 53 40 24 c6 f7 a7 38 02 fc a8 2c 21 99 f5 4e 11 72 1d 80 2a 25 c3 ab 99 8b c9 11 9b 37 0d 08 9b cd a5 1d 24 34 fd b8 91 88 fd 35 73 84 41 68 8b 99 0b cb 35 80 70 96 98 a0 4f 0b 18 4e 6b a3 ed 6f 68 be 8d 75 df a6 06 Data Ascii: <"IS@$8,!Nr%7$45sAh5pONkohuF^:+Ds 4VfaLhIQ%MaF\biU&]6qzvswk>khp'\|~Lrbq!'`Zi(h.7JZjJ!9i%mVe3A[
Sep 28, 2021 17:51:18.151441097 CEST	341	IN	Data Raw: 98 97 c2 a8 8c 83 0c 83 8c 82 1a 04 b5 52 0a 02 55 53 05 80 8c 7f 1a fe 18 fd 18 fc 14 89 82 3e 46 3e 0d 7c 7f 66 f8 16 99 19 88 57 d0 29 d7 00 ee 56 d0 8e f1 8a f1 8c 81 89 91 8e 81 8e cb 59 3f 5d 07 90 2b da 90 cf 09 e1 18 e0 18 df 0a 2e 40 37 Data Ascii: RUS>F>\|fW)VY?]+.@7766F,65+@-113F3322F2211fO !)1SzWyuD;U/D>w4VSq=xOzC]r$; Y([NjD*\|v rpLZ.B3
Sep 28, 2021 17:51:18.151482105 CEST	342	IN	Data Raw: e9 77 4c d9 35 9b ad 67 ca 8c d8 e3 3c 42 f8 f2 e5 ee a2 f9 9c ac f4 10 ab 97 2f a1 38 9c a1 cc b9 b6 33 f0 80 35 16 90 08 e9 ef 87 88 72 8a a5 70 5c 9a 04 d7 e5 d7 f5 fa d9 4d 23 a1 12 d9 59 4c e2 9b 56 fe 7c 09 6a 62 dd 2e 33 a3 21 e6 ec 91 bd Data Ascii: wL5g<B/835rp\M#YLV\|jb.3!q()tOY._{=+We2L>/_;=tL=Q?tFn>-laro~yON?o_#(2OqoVlymxB
Sep 28, 2021 17:51:18.178642035 CEST	455	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery_002.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.227667093 CEST	509	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:04 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d24-f9f" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 35 66 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 57 db 6e 1b 37 10 7d 96 bf 62 22 18 e8 ca 90 57 56 8a a6 89 03 3f 24 ae d3 b8 69 da 14 76 da 87 a2 08 28 2d b5 a2 bd 5a 6e 49 ae 6c 25 f1 bf f7 0c b9 57 45 46 2e a8 1c 39 de 25 39 3c 73 e6 cc 70 38 39 78 b0 47 07 74 f5 47 29 cd 86 de 64 62 2e 97 3a 4b a4 a1 22 2b 53 95 63 90 c7 2f 97 ca 56 6f 08 7f 95 56 26 e4 34 d9 b2 28 b4 71 e4 96 92 5e 5e be fe f5 07 cc 69 2d 08 e7 8c 9a 95 4e 92 ce 69 a5 ad a3 5c e7 87 7e de e1 5c af 8a 4c 89 dc d1 cc e8 1b 2b 8d 8d 79 1f fe be b5 22 95 c7 b4 1f 77 d0 c4 2a 57 2e fa 40 73 9d 69 43 c7 34 34 e9 2c 3a 1a e3 67 34 a4 bb d1 d3 7a ed 4f c2 61 e9 85 2c 1c 3d 3c 9a 4e f9 f5 b3 d2 2d b5 39 a6 df 9d 98 03 47 34 db 2c a6 4f 1e ff f8 4e b8 77 e9 4a a8 2c 06 94 11 4f 7c 63 f4 95 9c 3b 2a fc f6 4b e7 0a 7b 3c 99 cc 75 22 e3 54 eb 34 93 3c 73 52 4c ae fe 65 ae 0e 3b 9e 1e 5e d9 09 5b f8 13 6e 28 9d 1f d3 34 fe 9e 9f 4f 97 22 4f 65 a6 d3 63 38 86 0f 5e d3 b3 24 01 77 f3 4c 8a fc b9 5c 68 23 2f ca d9 4a 39 4a 33 3d 13 19 2d ca 7c ee 60 63 4c 56 83 56 e1 98 6b 43 73 91 e3 9b 65 34 f3 6b 40 3c 2f 72 2a 4f 09 cf 2b 9a 6d e8 97 8b 98 17 e4 d7 96 23 f3 ca bc df d8 f7 4e 2f 28 ba d6 ee a0 f9 f0 ab be eb 6c 00 bc e6 21 56 6c d1 71 b0 55 22 05 89 3c 01 8e 95 c4 78 22 39 42 de 89 87 95 13 56 ae 14 07 24 f7 3b b2 06 24 e6 63 cb 4f 9d e0 c1 95 ca 69 1d 18 a2 1b 6d ae bb 70 2f 75 be a1 c8 6d 3c ce 1d f8 0a ad f2 16 9b 2e 9d 87 56 18 bd 56 89 27 41 dd c6 7b 83 69 3c 1d bc 2d 12 68 00 ea c4 8e 8c 9a a1 ad a4 74 b5 c4 83 ac 3d 6b c2 c5 95 27 85 30 62 25 9d 34 ea 3d 96 b2 d6 62 44 0c f6 8e e8 1c 0f 0a 81 31 12 21 b3 d2 ab f4 52 5a de 82 23 7d ba 34 cc 4f 94 61 53 08 3c 91 eb da c7 d1 53 3a 3f 7b 44 d1 f9 99 9f 6e fc f3 e3 ce 33 5b 7a 95 eb 9b 9c ce ad 2d a5 65 91 1c d0 a0 9b 83 1c 9a 37 c2 5a d0 05 58 96 e6 a5 31 32 77 d9 06 99 e4 ea ec 93 09 d6 4d f6 a2 9a f5 68 7f f4 81 f6 06 bd fc a1 13 fa b0 37 18 58 e9 35 63 91 41 fc 38 e8 a5 d3 f4 d1 93 71 f5 1d 0d c7 34 99 50 22 cc f5 cf 46 6e 28 d1 d2 fa 2d 39 6e e0 87 94 e4 e5 60 5a fc 06 e2 38 21 b5 51 e0 55 64 87 0b 48 09 e9 8d 3c 1d b2 0d 8e 43 ce 73 a0 0b fe 9b d7 90 13 69 a8 21 d0 ad 57 db 4a 27 65 c6 36 ef c6 f8 85 7f 58 79 78 48 cf 15 a2 2c d7 70 99 c3 c8 35 43 e7 78 b0 18 c3 1c 8e 13 b6 6e fc ae bd 1b 79 df 60 e1 b5 34 29 76 94 0b 51 66 a0 ab 76 fe 46 b9 a5 c7 02 63 a8 6a 5e 44 20 11 6b d4 22 6a 8c f0 b3 37 04 26 e5 ad 83 b4 a3 7e 49 aa 67 22 55 2b cb a8 43 98 7e c7 bf 2a 04 f0 e1 ad 53 19 90 a0 08 25 8c db 8f ac 85 a1 54 ba 53 50 c5 be 9d b4 3e 40 65 2b bc 0a 2e 0c 8c 74 a5 c9 69 3f aa 5f c7 6b 91 45 a3 a7 c1 fe 1d 6f 57 9b 03 86 fb cd 8d 7d 82 b7 76 b7 0c d6 83 5d bb 5d 9c 5d 49 7e 05 56 ae ff d1 b0 53 27 87 15 41 9e a6 1a b8 b2 15 ee b3 55 e1 36 f7 73 c1 9c 55 40 31 a9 65 af e1 c6 5b ad 29 8b aa a9 71 26 f3 14 e1 3e 39 39 a1 a3 11 7d fc d8 da f0 46 3a ae f5 0d 79 72 7b f4 76 a6 5e b8 4d 26 ef 87 da a1 97 e5 7e 8f 6e e2 3a 7d c6 dd 00 cf ad 8d 86 21 7d 46 Data Ascii: 5f1Wn7}b"WV?$iv(-ZnIl%WEF.9%9<sp89xGtG)db.:K"+Sc/VoV&4(q^^i-Ni\~\L+y"wW.@siC44,:g4zOa,=<N-9G4,ONwJ,O\|c;K{<u"T4<sRLe;^[n(4O"Oec8^$wL\h#/J9J3=-\|`cLVVkCse4k@</rO+m#N/(l!VlqU"<x"9BV$;$cOimp/um<.VV'A{i<-ht=k'0b%4=bD1!RZ#}4OaS<S:?{Dn3[z-e7ZX12wMh7X5cA8q4P"Fn(-9n`Z8!QUdH<Csi!WJ'e6XyxH,p5Cxny`4)vQfvFcj^D k"j7&~Ig"U+C~S%TSP>@e+.ti?_kEoW}v]]]I~VS'AU6sU@1e[)q&>99}F:yr{v^M&~n:}!}F
Sep 28, 2021 17:51:18.227705002 CEST	510	IN	Data Raw: 81 ae 41 c7 5c 67 14 ab 7a 27 64 2d 42 9c 52 58 dc d3 48 c3 35 1f 3b e6 9b fc e8 6f dc ea f1 4b fc 83 1f 81 c8 ae 27 46 ae f4 5a e2 bc fe 2c 3d bb 44 63 97 fa e6 8b 54 d9 a6 45 8d 79 7c 5f d8 2b b6 b1 62 9b a1 56 19 6d de 35 9c 2e 51 3c be 08 0a Data Ascii: A\gz'd-BRXH5;oK'FZ,=DcTEy\|_+bVm5.Q<WcTU^lBE)h-MgQ\E&{Fw2OYqon1kliv{mIm^8svpK#$;stWh}T1t6<~pK1_g:By;W
Sep 28, 2021 17:51:18.270399094 CEST	605	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.312194109 CEST	606	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 435 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 20 56 65 6c 6b 6f 6d 6d 65 6e 20 74 69 6c 20 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 5f 66 69 63 68 69 65 72 73 2f 66 6f 6e 74 2f 46 6f 6e 74 73 2f 62 63 66 35 34 33 34 33 2d 64 30 33 33 2d 34 31 65 65 2d 62 62 64 37 2d 32 62 37 37 64 66 33 66 65 37 62 61 2e 77 6f 66 66 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor E-post Velkommen til Telenor E-post_fichiers/font/Fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.422677040 CEST	607	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Telenor%20Font/TelenorLight.otf HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.465373993 CEST	610	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 417 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 20 56 65 6c 6b 6f 6d 6d 65 6e 20 74 69 6c 20 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 5f 66 69 63 68 69 65 72 73 2f 66 6f 6e 74 2f 54 65 6c 65 6e 6f 72 20 46 6f 6e 74 2f 54 65 6c 65 6e 6f 72 4c 69 67 68 74 2e 6f 74 66 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor E-post Velkommen til Telenor E-post_fichiers/font/Telenor Font/TelenorLight.otf was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.468178988 CEST	612	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/filetypes.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.509533882 CEST	616	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 364 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 66 69 6c 65 74 79 70 65 73 2e 70 6e 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/filetypes.png was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.548712969 CEST	619	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Fonts/b0ffdcf0-26da-47fd-8485-20e4a40d4b7d.ttf HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.590382099 CEST	626	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 434 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 20 56 65 6c 6b 6f 6d 6d 65 6e 20 74 69 6c 20 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 5f 66 69 63 68 69 65 72 73 2f 66 6f 6e 74 2f 46 6f 6e 74 73 2f 62 30 66 66 64 63 66 30 2d 32 36 64 61 2d 34 37 66 64 2d 38 34 38 35 2d 32 30 65 34 61 34 30 64 34 62 37 64 2e 74 74 66 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor E-post Velkommen til Telenor E-post_fichiers/font/Fonts/b0ffdcf0-26da-47fd-8485-20e4a40d4b7d.ttf was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.11.11	49200	141.8.192.193	80

Timestamp	kBytes transferred	Direction	Data
Sep 28, 2021 17:51:18.021560907 CEST	77	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/tln_devicecheck.css HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: text/css,/;q=0.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.063165903 CEST	82	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/css Last-Modified: Tue, 28 Sep 2021 12:40:10 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d2a-2bff" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 36 31 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5a db 6e e3 36 10 7d b6 bf 82 d8 45 81 6e 10 67 6d e7 e2 ad 17 05 5a f4 a5 05 8a 3e 2c fa 56 f4 81 96 c6 36 1b 4a 14 28 ca 49 1a e4 df 77 86 37 5d 2c 67 63 24 d8 05 b2 72 10 c4 a0 24 72 38 73 e6 cc e1 28 e3 f7 27 27 9f a0 2c 54 5e 8a 1d b0 d2 dc 49 28 4f 4e de 8f 53 b1 3b cb b8 c8 b7 c0 53 91 6f ee c7 a3 8c eb 8d c8 27 12 d6 66 39 9b fe f0 31 8e 68 b1 d9 86 a1 f1 c3 38 3e 6a 84 91 50 3f 68 54 b1 bc 9a 16 b7 f8 60 a2 a4 d2 4b f6 76 6a 3f 1f c7 0c 3f 6b 95 9b c9 9a 67 42 de 2d d9 df 20 21 57 fa 4f 9a f9 f4 77 90 3b 30 22 e1 a7 bf 6a c1 e5 69 c9 f3 72 52 82 16 eb c6 93 a5 f8 1f 96 6c b6 a0 f9 e3 74 37 60 4d 63 38 55 c6 e5 c7 60 5c 82 4b 41 6e 4a 48 8c 50 79 6d e1 4a 19 a3 b2 e5 bc 6d e4 e2 8a 7e be aa 91 e4 74 d0 8c 62 a0 a1 94 6a a3 ee ed a6 56 4a e3 f8 c4 db c9 66 c5 2d 2b 95 14 29 79 f2 2a 5d 71 67 e4 d6 ef 7a 76 69 9d 5d f0 94 22 88 ce c1 7d 31 fa 9d cd dd 97 3a 84 75 50 99 0f a0 5f 97 71 26 b2 cd 3d c3 89 dd e2 4b 36 45 77 e6 10 9d 49 20 59 55 e8 38 72 e4 8d 48 cd 16 d1 d1 84 47 b4 d6 ae f8 30 66 11 20 ee b1 92 89 bc a8 cc 99 44 7c c1 a9 dd 74 3d 67 c9 b8 bb 80 93 af 78 72 bd d1 aa ca 53 8a 68 0e 4c 43 01 dc b0 32 d1 4a 4a b4 6b da f6 43 30 38 83 54 54 99 7b c4 68 04 4f c1 35 86 df 39 cb bb 54 23 ca ab 12 37 d7 76 e1 f9 79 c0 93 aa 8c 14 39 42 2c 6c 9f 1e f6 ae 75 39 c1 ac bb 9b c3 2e 31 ea 71 bb b8 20 cc 2d 59 bd 19 36 3d 9b 5f 96 0c 78 09 13 cc 2f 5c 88 4d 4b 0c 8d 4d 88 2e ac 9d 83 d9 4f 97 94 7f 06 6e cd 84 4b b1 c1 f9 12 dc 11 68 1c 64 21 b9 d6 f6 e3 2c 4a 2a 5d 52 c6 15 4a b8 db 68 30 15 65 21 39 66 9b c8 69 6b 93 95 54 c9 75 0f ce 63 fe fd 05 15 7c 82 4d 85 01 79 34 29 1b 1c 10 42 5c 47 d1 1a 9d 42 a2 34 b7 9e 70 60 1a 45 5f b6 e1 d2 74 27 11 88 05 31 de ee 31 ce 2b a3 7a 90 d8 82 d4 72 ab 76 a0 0f 02 cb 5d 7e 32 bc 16 3c f9 10 57 d4 90 41 b6 02 5d 82 31 98 62 0c 91 45 59 d0 a2 b2 a3 bd d7 08 fc cc c2 cf d3 e5 db 40 44 21 a3 1d ec 30 97 e9 16 17 e0 18 df de 10 c4 34 ed 66 12 4e 10 92 a5 c5 29 6e b3 fe da c4 e7 48 d3 26 4a 38 7f 53 2b 22 23 74 29 31 b6 0c f0 cc 44 9a 4a 8a f3 81 f0 07 92 b2 1c e5 78 cb 41 dd 21 bd 99 0b ee 6a 2f f6 9f e9 f8 90 10 ed 7c 78 c4 95 07 b1 d3 ef d0 c5 7c 35 4b 57 83 43 6b 89 10 e8 81 48 df 56 81 95 ba c5 04 ea 0f 44 5d c9 10 02 ae 9a d1 17 a4 6c 8f 95 f9 95 4b 86 0e f8 90 37 62 c6 de 68 5e 14 a0 13 c9 cb 12 17 a2 d4 5f 4b 75 b3 dc 22 3e 21 8f 33 f9 0a 76 b3 15 06 26 98 d5 09 20 4f b5 34 44 37 f5 ad f5 ff 98 bb 02 7e 7e 93 6c 21 b9 c6 9d bc f9 97 b9 ba ed ea c3 e4 02 c5 4e ac 11 2a 54 02 be c2 1a 5e 19 57 51 6d 6d dc 9b 3b db 9c 25 5b 9c f0 8f 6c f3 1b 59 ee a7 ed 65 75 2f d3 2c 59 4e ac 3f c8 82 43 f9 e8 c1 bd 56 0a cb 82 f5 0a 16 7e af 06 ef c7 4f ab b8 8e 00 7c 65 72 9e f3 64 70 61 b7 5b 84 ad d6 3b f5 24 8f a1 b3 ae c1 bf 8d 7c 0e a5 6c df b6 23 59 1a 89 cb 0a ba 50 d5 a3 21 ac b6 84 9c d3 c7 25 34 de da 52 08 4e c3 55 8c 55 d2 d5 95 d6 a0 14 3e 3e 9d 02 eb 22 e1 e2 53 db 14 d4 d9 94 79 dd 69 6b b1 77 e0 b9 23 bb 4e f4 Data Ascii: 61bZn6}EngmZ>,V6J(Iw7],gc$r$r8s('',T^I(ONS;So'f91h8>jP?hT`Kvj??kgB- !WOw;0"jirRlt7`Mc8U`\KAnJHPymJm~tbjVJf-+)y]qgzvi]"}1:uP_q&=K6EwI YU8rHG0f D\|t=gxrShLC2JJkC08TT{hO59T#7vy9B,lu9.1q -Y6=_x/\MKM.OnKhd!,J]RJh0e!9fikTuc\|My4)B\GB4p`E_t'11+zrv]~2<WA]1bEY@D!04fN)nH&J8S+"#t)1DJxA!j/\|x\|5KWCkHVD]lK7bh^_Ku">!3v& O4D7~~l!N*T^WQmm;%[lYeu/,YN?CV~O\|erdpa[;$\|l#YP!%4RNUU>>"Syikw#N
Sep 28, 2021 17:51:18.063218117 CEST	83	IN	Data Raw: 02 99 ee 3b 88 2c 42 27 05 36 f5 8a cb 82 aa 6b 22 c7 fb 7a 01 d4 65 68 2f f7 42 15 0a b2 a2 6f 71 dc 39 8f 9c b8 37 0f 0a 37 d0 b4 bb 98 8d 4d 9b a4 38 4b 54 71 67 35 13 62 10 5d 18 8f 09 fc 0a e6 eb c5 a1 aa 5b eb 77 c2 bc d3 07 14 ac 5f 48 f7 Data Ascii: ;,B'6k"zeh/Boq977M8KTqg5b][w_HqR9y~Vyna\sk9u5a<rZGt=Th>.WuW\4w8mTeD2xz0 Q{H!K.j9Fl
Sep 28, 2021 17:51:18.067804098 CEST	107	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/ui.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.110733986 CEST	195	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:13 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d2d-1459e" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 35 65 61 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 dd bd d9 76 1b 57 b6 25 fa 2c 7f 45 98 f2 31 40 91 04 1b 35 96 69 51 be 4a 49 4e eb 5c 4b f2 15 e9 93 a7 86 52 c5 01 12 41 12 16 08 20 d1 88 62 aa fc 2f f5 19 f5 5c f5 63 77 ce d5 ec 26 22 c0 ce 72 e6 c9 72 8e b4 89 88 1d bb df 6b af 76 ae f5 3b 77 be 28 ee 14 6f 46 f3 61 ef 70 7e 50 16 47 f3 e1 e1 ac 3f 1a 4e 8b a3 d1 a4 e8 95 47 dd f9 60 56 4c df f7 87 45 7f 38 2b 27 47 dd c3 12 5f f0 a3 a7 a3 f1 f9 a4 7f 7c 32 2b da 87 cb c5 d6 c6 e6 dd d5 62 ef a4 4c 2a 7b 56 7e 28 f6 ca ee a9 7d c0 97 87 23 d4 32 9c 4d 8b ee a4 2c a6 f3 83 5f cb c3 59 31 1b 15 33 bc 7b 3a 29 bb b3 fe 07 fc 31 3a 3d 65 17 9e cc 66 93 fe c1 9c fd 59 db 3d c1 17 4f 06 fd f7 6c be f8 a9 7f 58 0e a7 65 a7 78 31 2b fa a8 6c 30 18 9d 95 3d 56 74 88 5e ad 16 bd fe 54 3f 2d 57 8b d9 a4 3b 9c 9e f6 67 45 77 28 25 ba bd ee 18 6d a2 c1 b3 d1 e4 3d 6b 3b 38 2f de 97 e5 b8 3f 3c 2e 0e 27 65 af 8f ee 59 97 46 18 60 7f d8 1d 14 dd f9 6c 34 99 62 0e e4 c3 37 cf 9f 3c 7b f9 bc 38 ea 0f ca 0e 2b d8 2d cb e2 64 36 1b 6f af af a3 02 19 c4 a1 8e a1 33 9a 1c af 0f b4 b7 d3 f5 83 f3 b5 69 77 fd 6e 67 63 dd a6 77 d6 ed 0f a6 ac 62 fd 8b 2f be f0 b9 2f 26 5c 8a fd 53 bc db 9f f7 db cb 5f 7c fa a2 28 3e 74 27 45 39 fc 50 ec 14 9f 7e fb ce 7e 8f 47 e3 f9 78 5a 7f 84 49 3e ea 1f f3 39 0a 16 6c ea ac 3b e9 9d 96 c3 f9 36 7f f3 9f 4f 05 c7 d9 3d 18 94 db 9b c5 6f ab 52 6e 5a 76 27 87 27 59 b1 ac dc 6a 71 88 89 3e e8 1e be df 8e 45 fd e3 ee 6c d6 95 8f 67 b1 82 4f fe 72 80 e5 18 8d 65 5f 5d d8 83 de a4 7b 9c b7 cf 9e 4e 67 fd c3 f7 e7 b1 9f c7 93 d1 7c 5c 29 f6 a9 e8 1e 8c 3e 24 83 e1 ec 1d 8c 3e 56 06 5d 29 34 1d 97 83 41 ad a6 30 ca 22 bc f7 81 ac af 63 67 1c 1f 63 d6 8a db 9b f7 1e 3e 78 b8 85 4d 2f 7f 7d 7b 77 43 26 b1 15 27 62 0d 13 7f da c2 80 d3 c9 5e f5 8e 62 63 6a 4d 5f 1e 9c 75 fa e5 d7 5f f3 bf 83 fe 70 fe d1 1b 6b cd c7 83 51 b7 17 aa a9 ae db 45 35 a0 2f 61 9b 9c 96 d8 0a b3 93 fe d4 f7 0d e7 e6 43 bf 3c 9b 8e 07 fd 99 3f c4 86 1d 8f a6 e5 fe 49 d9 ed 95 d8 ea d9 46 9b 94 47 f8 1a 95 62 02 ca 8f e3 d1 64 56 8c e7 07 d8 d7 c5 69 39 3b 19 f5 a6 78 c5 16 3a d3 72 86 2f f1 6f ec 55 d6 2c 0f fb 43 9c be 1d 1c 1e 6d 2d 3c db c7 06 64 43 7c 21 7f 87 b7 d3 93 d1 d9 3e 16 6b 2e b5 85 1f f9 7b d9 fe fe 5e 7e 84 f7 dd 5e 6f df 5f 87 bf e3 d7 e5 6c df 76 f0 a8 a7 dd 8d bf f3 36 74 09 b8 90 de 50 7c 92 97 d4 79 db 9f 8c ce bc 64 7c 12 4a 9e f4 7b 3e c3 56 b2 f2 24 94 9c 8f 7b dd 59 b9 ff b7 f9 68 d6 45 85 e9 cf 50 e6 18 fd 1e 63 69 f0 de ff 8c 7d ea 7e 28 fd e5 d4 ff f6 25 e4 2a 9d 62 d6 4f 41 d9 4e 47 bd b2 18 0d 8b 29 7e 0c 8a 29 e8 17 68 55 d1 ee 8d 86 ad 59 71 d6 c5 ca c9 4d 30 3a 9c f3 70 77 40 de 7a e7 cb 58 c5 fe 51 d1 3e eb 0f 7b a3 b3 ce 57 c5 d7 5f c7 12 07 23 14 30 d2 43 aa 85 86 a4 8d d8 c9 76 cb 1a e7 f3 d6 32 fb ac f5 8d bb 93 69 f9 62 38 6b db 37 cb c5 ff f8 1f 85 ff 28 76 76 76 8a e1 1c 9d 44 6b 5f 59 db cb 9d 93 92 77 50 7b b9 78 54 3c bc bf b1 ec 2d Data Ascii: 5ea2vW%,E1@5iQJIN\KRA b/\cw&"rrkv;w(oFap~PG?NG`VLE8+'G_\|2+bL{V~(}#2M,_Y13{:)1:=efY=OlXex1+l0=Vt^T?-W;gEw(%m=k;8/?<.'eYF`l4b7<{8+-d6o3iwngcwb//&\S_\|(>t'E9P~~GxZI>9l;6O=oRnZv''Yjq>ElgOre_]{Ng\|\)>$>V])4A0"cgc>xM/}{wC&'b^bcjM_u_pkQE5/aC<?IFGbdVi9;x:r/oU,Cm-<dC\|!>k.{^~^o_lv6tP\|yd\|J{>V${YhEPci}~(%bOANG)~)hUYqM0:pw@zXQ>{W_#0Cv2ib8k7(vvvDk_YwP{xT<-
Sep 28, 2021 17:51:18.110829115 CEST	196	IN	Data Raw: 17 28 12 3a 2d 5d ea 60 23 3c 1d 74 a7 d3 d0 bc 37 fd 1b 77 b6 f6 00 67 50 a8 e2 2c ad a7 75 9b a7 85 bb be 85 5a 70 29 b5 5b 76 8f b5 56 8b a5 b3 7e 6f 76 b2 d3 2b 3f 80 ca af c9 8f 55 d9 d1 fd ee 60 6d 0a 5a 52 ee 6c 76 36 56 8b d3 ee c7 fe e9 Data Ascii: (:-]`#<t7wgP,uZp)[vV~ov+?U`mZRlv6V4}4w6l&~}u~_pA[<}sNk*)'W05\szSXl%+h`qY\|[t#O.<m;cV?\lUgCsM
Sep 28, 2021 17:51:18.110877037 CEST	198	IN	Data Raw: 41 b9 20 d7 61 c3 b4 2d e0 5f 8d 4b 5b bc b3 4d 2f 62 44 51 f8 b8 2b 5f 5a 85 68 cc c2 65 f3 f4 f5 cb 9f 5f ef 3e 57 2a 6a 04 74 d6 1f 9e bf 7c fa bc 73 d0 9d 96 bf bc f9 09 ba 92 5e f9 f1 f5 51 7b 69 3c 19 1d 4f ba a7 4b cb 5f 62 98 6b 9b 60 06 Data Ascii: A a-_K[M/bDQ+_Zhe_>Wjt\|s^Q{i<OK_bk`@O{{Qy},S)\|zX./VoFJh:vOKlAH17NCM4cxVu8q_zT(RkT'HBp
Sep 28, 2021 17:51:18.110923052 CEST	199	IN	Data Raw: a8 c1 cb 02 a4 21 0e d5 dc 2f b2 bb 32 10 87 1b 5f 94 4d 03 4c 5c 76 f4 c6 14 af 22 f8 c5 70 c7 86 5b 54 75 fb fb 54 c3 42 9c 5f 74 83 ea 3d 2a a6 17 7a 4c 40 3b 70 0c 46 33 57 fa 37 dd b1 41 f3 ef 1f 25 3b 65 21 13 c8 2b 3c 53 dc 45 bd 21 6f 60 Data Ascii: !/2_ML\v"p[TuTB_t=*zL@;pF3W7A%;e!+<SE!o`A[JFi+<=5SWsLTe8[7(MoXy7Za^kgD.qh[BUS]ILFWtkFC5+2&9Ie3N@^__xL.>Z
Sep 28, 2021 17:51:18.110969067 CEST	201	IN	Data Raw: 37 58 5b c3 ce 01 ac 77 e8 cd 08 a7 51 b8 28 8e 0c 0e 7a f2 d3 17 d1 0a c1 e5 5f 8a 34 ba 64 88 1b 45 07 45 9e 4a e8 ca 4e b1 f5 4d be d0 e2 83 20 8e b9 62 39 54 27 ba bc 88 05 25 c8 9b b7 fd de bb 8a 45 a8 d1 98 2f f5 b4 fb f4 8e a0 7b 57 e6 9c Data Ascii: 7X[wQ(z_4dEEJNM b9T'%E/{WZMCUU~$qKZ%Ty/a~Z$PK14zrA0O'K&cy&~T`nG2cT;*Xh~O[s:;SCg~,
Sep 28, 2021 17:51:18.111013889 CEST	202	IN	Data Raw: 4b e9 b7 aa 2a f9 93 a8 df db 5e 91 eb 99 42 94 23 04 6c 91 a7 8d 8f b3 79 c5 f5 26 2c 70 12 81 de 99 9d 8f 95 f5 92 37 2d ba 71 56 89 38 f5 20 58 96 3e c6 9d 46 07 33 b8 28 ea 35 7c e7 e8 18 21 2d 91 e1 54 48 06 5c 81 f0 20 3b b1 c1 58 ed 82 23 Data Ascii: K*^B#ly&,p7-qV8 X>F3(5\|!-TH\ ;X#a2Uj YIk3VBA9}[ruN&c2Op&B$mRq}6JFYyx2D3C}b;!/J <5htrZo8`%
Sep 28, 2021 17:51:18.111058950 CEST	203	IN	Data Raw: 32 79 0f b9 e3 43 81 58 a1 c2 7a e8 f9 81 cc f3 2e f0 70 24 6a c0 67 1c bd 57 59 1c b8 25 b0 ce d1 fb e1 5c 51 4e 74 1b 57 8f 0e d4 49 d3 c2 2e 21 99 3a 39 bc ba e0 5a 5b 85 cc e0 bc db f3 54 4b 46 ff 79 d9 f4 e4 de 88 01 80 9a 02 87 89 b8 1d f9 Data Ascii: 2yCXz.p$jgWY%\QNtWI.!:9Z[TKFyP[*wJO`[oE]rYOUcR,T$5O[b]{\|,oTq4V)"9(l}\.8u^$-
Sep 28, 2021 17:51:18.111104012 CEST	205	IN	Data Raw: f2 97 f2 41 85 22 7a 31 57 c7 53 7b 97 26 84 a0 08 4e f2 1c c0 f8 23 b0 55 0d ed 44 00 fa ef 42 ff e3 95 e2 ec 4c 67 e7 83 72 4a d7 6b 2a f7 fc d7 bc df 73 07 43 e9 53 8e fc a5 83 b6 b8 76 0d 65 49 4c 1d 3e a0 05 58 38 c9 9d e7 0c 40 e0 cb c5 94 Data Ascii: A"z1WS{&N#UDBLgrJksCSveIL>X8@xT4xP1nOmFH7ZEj$k8tks{(PbCb]i88-/p[ORov{IN_6~HC^2Gl0Gz>.pw4(.z
Sep 28, 2021 17:51:18.111150026 CEST	206	IN	Data Raw: e0 49 6e e3 14 03 27 2d 8f 0e c9 91 6a 2b ca 41 36 4a 72 11 6c 24 4e 24 0a c4 69 af b2 41 89 5a 1e e5 a2 82 3b 96 cb 2a ba 90 a5 0a a7 4a 39 25 91 cb ea c2 59 9d 33 c9 c8 eb 57 e6 76 af 02 57 c2 85 84 1d cd d0 53 35 8b 87 60 9b 20 1d d9 d7 55 01 Data Ascii: In'-j+A6Jrl$N$iAZ;*J9%Y3WvWS5` U)jv`i/%tTEV#!,{+vZ++-$^L&XO+6a>$A~g?Vv7yDlx!VV!_d=O=V52MP6Y\_Q
Sep 28, 2021 17:51:18.111196041 CEST	207	IN	Data Raw: 1b 5c ee 2e d2 e3 09 f6 49 92 a9 55 bb 1d 66 9a 5a ba d1 18 d1 bc 04 da 21 76 97 e5 00 15 f5 58 58 8b 3c 2f 68 65 19 16 cc 9d 25 16 55 bd 81 6e ff 98 b3 33 37 b9 78 08 65 32 ad a9 b7 cd c2 09 4b 67 f5 5a 13 96 88 f6 c5 0f 06 b5 3f 45 02 80 35 a2 Data Ascii: \.IUfZ!vXX</he%Un37xe2KgZ?E5\S fg)8!9!S/P}qs(5{$f{{DSt6r@D?i6}.yzOWX<sphfi'QayN*L
Sep 28, 2021 17:51:18.178569078 CEST	454	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/tln_devicecheck.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.220873117 CEST	484	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:12 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d2c-97d" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 34 34 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 95 56 db 6e e3 36 10 7d b6 bf 82 f0 06 21 95 d8 52 52 14 68 e1 c0 28 f6 12 6c 03 34 d8 16 de a2 0f 45 21 d0 d2 58 62 22 91 02 49 f9 82 b5 ff bd 43 52 72 ec cd 66 d3 1a b6 2c 91 73 39 33 73 66 28 b1 24 6c 2d 64 ae d6 b1 ce 6a 2e aa 88 7c 19 0e c2 6d cc f3 fc 76 05 d2 fe 26 8c 05 09 9a 51 21 85 a5 63 b2 6c 65 66 85 92 0c 56 d6 2b 10 42 92 a4 d3 32 60 53 90 2b 46 4d a6 01 64 aa c1 a8 aa 75 e2 a8 99 95 90 3d ce fd c6 5f 22 b7 25 8b a2 1b 54 4f 12 d2 69 67 aa ae b9 cc 51 3b 98 41 9d ff 6a a8 83 c1 2b d0 96 75 e6 d0 42 fc 0c 87 77 49 88 bf 74 72 1a 0a 17 a4 4e 0f fe 9b aa 2d 84 8c 1b ad 32 80 7c b2 68 ad f5 11 1c 62 c7 c0 07 83 c1 10 7f 87 d0 8b 56 a4 6a f1 00 99 35 b1 80 9f 53 5b 37 55 ba 54 ba 8e 4d bb a8 85 65 ce b3 93 3f 63 23 b7 fc b7 e4 35 cc e8 89 28 fd 67 14 7d 2d 1e 42 a2 39 7e 68 6f a2 03 5e 5a db a4 8d 32 b8 dd 21 76 86 27 c1 df c4 f0 15 d0 31 75 df e8 86 0c 9d f3 c1 8a 6b 92 2b a9 ec bc 54 eb da 14 64 46 10 ce 9b d4 af 99 b0 86 10 56 bc ea e0 0e c4 92 9d 2a cc c8 75 84 55 ef ad b5 ba 42 23 f4 97 d4 72 f3 38 ab 14 e6 ed 3c e5 9e 21 b3 17 40 9d 9f b8 9b 5d 9f 67 ad b6 c2 25 e3 f2 e1 8f 16 f4 36 96 6a dd fb 1f 24 17 67 31 7f e0 9b 39 d8 b6 61 5f b0 6c ae 7a fe b3 00 8c 17 e6 20 f3 e9 a1 34 84 6d c6 c4 60 7d bc e0 91 b0 8f 1d 0d 23 5a 09 6b f2 81 5b 40 1f cf a4 4c 9c 73 cb c9 e5 8c 8c ce ef 6f 53 87 cb 58 5e 37 b3 11 b9 74 ea 71 01 f6 33 2e f6 ba 1d 94 7d f8 df 47 37 17 49 b8 0d a8 59 97 aa 81 dd 36 30 25 f4 e3 ed 67 3a ee 74 30 75 53 82 97 fe d9 3b 46 99 af d2 73 90 cf 38 76 10 46 ca 2b 03 bd 0e 37 5b 99 4d 89 d5 2d 8c 3d 1f f1 03 5a 2b fd 94 11 a6 30 21 96 db d6 8c 09 6e f9 d4 ec 7b 7d d3 66 19 18 73 24 ed 50 44 c7 22 2e 05 aa b5 53 f2 c3 d5 d5 d5 21 cc 70 83 6c 76 09 61 3e 0c 34 7c 02 7d 4a 46 d7 23 b2 27 81 b5 83 7d 28 9b c6 3a 6a e9 11 fb f5 fd d8 df 1f f7 65 92 fc 79 47 84 c4 96 0c 44 32 4e 0e 79 1a 67 e5 42 6d ee ea e2 7d c5 8d 41 9e 66 95 c8 1e d9 53 57 86 64 9f 31 5b 0a 13 61 fb c2 8a f5 42 ae 05 dc 26 f2 b9 df e7 d6 e2 58 33 3a a3 11 99 21 87 cd a3 90 26 b1 50 81 54 3a 11 35 2f c0 24 ef dd d0 7a a7 36 e9 1c d7 33 0b 79 dc c8 82 f6 1d f0 dc d4 f8 15 33 1f 60 c9 db ca 06 2b 21 31 08 98 9e b6 20 0d 2d 78 d5 67 0e b0 e2 1d 91 fe bf c7 53 e0 af b8 bc ee 5d fa d2 84 87 2e fb b9 58 c5 1a 6a a8 17 a0 71 40 5b 21 0b 62 1a 2e bf 53 87 97 2a 16 ec 3a f3 48 45 bc ee 87 c3 33 1c 33 59 5b e3 89 13 a1 17 9e 6f 4f cb ea 9a b7 c4 65 d0 bf 82 28 4a 1b 06 57 58 41 00 c8 cf 7e 87 f5 6c c2 7d 07 19 4f 33 e9 e4 10 ae 43 6a 0c a3 b5 90 93 d2 9b a1 63 86 74 08 87 60 14 87 35 16 91 09 61 c7 ce a2 68 f2 e3 4f fe b0 1a 3a 1a be c1 f1 eb 07 5d 6b 40 8f c9 e1 b1 59 e7 cf 73 01 48 95 7e c8 24 89 92 d5 96 e0 d0 22 05 af f8 66 4b 2c 5f 1c 76 91 99 c9 5b 99 6b 25 f2 dd 1a 16 9f e6 3b f1 7b a9 24 e0 1f cf f1 a2 f2 dd bb 8a 23 19 b1 89 b7 bb bb db 7b b5 10 15 ec 3e 35 d8 26 e4 1e 4f e7 44 c4 16 87 15 93 7c 25 0a 6e 95 8e 1d c0 b7 85 cb a9 Data Ascii: 448Vn6}!RRh(l4E!Xb"ICRrf,s93sf($l-dj.\|mv&Q!clefV+B2`S+FMdu=_"%TOigQ;Aj+uBwItrN-2\|hbVj5S[7UTMe?c#5(g}-B9~ho^Z2!v'1uk+TdFVuUB#r8<!@]g%6j$g19a_lz 4m`}#Zk[@LsoSX^7tq3.}G7IY60%g:t0uS;Fs8vF+7[M-=Z+0!n{}fs$PD".S!plva>4\|}JF#'}(:jeyGD2NygBm}AfSWd1[aB&X3:!&PT:5/$z63y3`+!1 -xgS].Xjq@[!b.S:HE33Y[oOe(JWXA~l}O3Cjct`5ahO:]k@YsH~$"fK,_v[k%;{$#{>5&OD\|%n
Sep 28, 2021 17:51:18.225394964 CEST	488	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/telenorlogo-no-text-white_tcm48-248598.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.266478062 CEST	593	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: image/png Content-Length: 10801 Last-Modified: Tue, 28 Sep 2021 12:40:09 GMT Connection: keep-alive ETag: "61530d29-2a31" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 67 00 00 00 5f 08 06 00 00 00 f5 68 d9 39 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 cb 63 62 e3 00 50 2d 00 60 27 7f e6 d3 00 80 9d f8 99 7b 01 00 5b 94 21 15 01 a0 91 00 20 13 65 88 44 00 68 3b 00 ac cf 56 8a 45 00 58 30 00 14 66 4b c4 39 00 d8 2d 00 30 49 57 66 48 00 b0 b7 00 c0 ce 10 0b b2 00 08 0c 00 30 51 88 85 29 00 04 7b 00 60 c8 23 23 78 00 84 99 00 14 46 f2 57 3c f1 2b ae 10 e7 2a 00 00 78 99 b2 3c b9 24 39 45 81 5b 08 2d 71 07 57 57 2e 1e 28 ce 49 17 2b 14 36 61 02 61 9a 40 2e c2 79 99 19 32 81 34 0f e0 f3 cc 00 00 a0 91 15 11 e0 83 f3 fd 78 ce 0e ae ce ce 36 8e b6 0e 5f 2d ea bf 06 ff 22 62 62 e3 fe e5 cf ab 70 40 00 00 e1 74 7e d1 fe 2c 2f b3 1a 80 3b 06 80 6d fe a2 25 ee 04 68 5e 0b a0 75 f7 8b 66 b2 0f 40 b5 00 a0 e9 da 57 f3 70 f8 7e 3c 3c 45 a1 90 b9 d9 d9 e5 e4 e4 d8 4a c4 42 5b 61 ca 57 7d fe 67 c2 5f c0 57 fd 6c f9 7e 3c fc f7 f5 e0 be e2 24 81 32 5d 81 47 04 f8 e0 c2 cc f4 4c a5 1c cf 92 09 84 62 dc e6 8f 47 fc b7 0b ff fc 1d d3 22 c4 49 62 b9 58 2a 14 e3 51 12 71 8e 44 9a 8c f3 32 a5 22 89 42 92 29 c5 25 d2 ff 64 e2 df 2c fb 03 3e df 35 00 b0 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b fc 60 36 84 42 24 c4 c2 42 10 42 0a 64 80 1c 72 60 29 ac 82 42 28 86 cd b0 1d 2a 60 2f d4 40 1d 34 c0 51 68 86 93 70 0e 2e c2 55 b8 0e 3d 70 0f fa 61 08 9e c1 28 bc 81 09 04 41 c8 08 13 61 21 da 88 01 62 8a 58 23 8e 08 17 99 85 f8 21 c1 48 04 12 8b 24 20 c9 88 14 51 22 4b 91 35 48 31 52 8a 54 20 55 48 1d f2 3d 72 02 39 87 5c 46 ba 91 3b c8 00 32 82 fc 86 bc 47 31 94 81 b2 51 3d d4 0c b5 43 b9 a8 37 1a 84 46 a2 0b d0 64 74 31 9a 8f 16 a0 9b d0 72 b4 1a 3d 8c 36 a1 e7 d0 ab 68 0f da 8f 3e 43 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 38 2c 09 93 63 cb b1 22 ac 0c ab c6 1a b0 56 ac 03 bb 89 f5 63 cf b1 77 04 12 81 45 c0 09 36 04 77 42 20 61 1e 41 48 58 4c 58 4e d8 48 a8 20 1c 24 34 11 da 09 37 09 03 84 51 c2 27 22 93 a8 4b b4 26 ba 11 f9 c4 18 62 32 31 87 58 48 2c 23 d6 12 8f 13 2f 10 7b 88 43 c4 37 24 12 89 43 32 27 b9 90 02 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a Data Ascii: PNGIHDRg_h9pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K@zB@F&S`cbP-`'{[! eDh;VEX0fK9-0IWfH0Q){`##xFW<+x<$9E[-qWW.(I+6aa@.y24x6_-"bbp@t~,/;m%h^uf@Wp~<<EJB[aW}g_Wl~<$2]GLbG"IbXQqD2"B)%d,>5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,`6B$BBdr`)B(*`/@4Qhp.U=pa(Aa!bX#!H$ Q"K5H1RT UH=r9\F;2G1Q=C7Fdt1r=6h>C03l0.B8,c"VcwE6wB aAHXLXNH $47Q'"K&b21XH,#/{C7$C2'ITFnR#,4H#dk9, +3![
Sep 28, 2021 17:51:18.422677040 CEST	608	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/font/Together/Together.woff HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.465302944 CEST	609	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 410 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 20 56 65 6c 6b 6f 6d 6d 65 6e 20 74 69 6c 20 54 65 6c 65 6e 6f 72 20 45 2d 70 6f 73 74 5f 66 69 63 68 69 65 72 73 2f 66 6f 6e 74 2f 54 6f 67 65 74 68 65 72 2f 54 6f 67 65 74 68 65 72 2e 77 6f 66 66 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor E-post Velkommen til Telenor E-post_fichiers/font/Together/Together.woff was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.469850063 CEST	613	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/listicons.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.511454105 CEST	617	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 364 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 6c 69 73 74 69 63 6f 6e 73 2e 70 6e 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/listicons.png was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.11.11	49202	141.8.192.193	80

Timestamp	kBytes transferred	Direction	Data
Sep 28, 2021 17:51:18.021656990 CEST	78	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-1.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.070389032 CEST	108	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:39:33 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d05-42b2f" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 31 36 31 62 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 bd 79 7f 5b d7 91 2d fa b7 f4 29 8e 20 77 0c 4a 22 28 4a 96 63 d3 1a 5a 96 a5 44 7d 3d b5 e5 c4 fd 1e 45 c7 20 01 52 b0 48 80 01 40 0d 31 9d cf fe d6 5a 55 b5 87 83 03 4a 71 bb fb 77 9f ef ed 08 3c c3 3e 7b a8 5d bb 86 55 55 5b d7 ae 5c 6e ae 35 3f ff e7 d9 78 fe b6 f9 8f e1 ab e1 b3 83 f9 e4 74 d9 7c 39 d9 9f 0f 71 e9 d5 f6 60 fb e6 e0 16 1f 7a b1 5c 9e ee 6c 6d fd fc 77 3e 3b 38 98 9d 6c e1 2a 6f 3c 9d 1e 1c 9f 8d c6 8b e6 d9 e4 1f ff 38 1e 0f 7e 5e 14 8f 2f 74 ed e7 45 f9 c2 a3 d9 e9 db f9 e4 e8 c5 b2 b9 75 f3 e6 9d 1b f8 df ed db d1 87 27 b3 b3 e9 68 b8 9c cc a6 37 d8 f0 a0 19 4e 47 cd 6c f9 62 3c 6f 0e 66 d3 e5 7c b2 7f b6 9c cd f5 85 ef c6 c7 e3 e1 62 3c 6a f0 06 6e e3 99 e6 ab a7 df 37 c7 93 83 f1 74 31 5e ed f2 6c 7e b4 95 6f f2 fe 17 c3 e5 78 47 9f df bc f9 c7 cd 9b b7 bf df be bd f3 d1 27 ff 2f 6e 6d 5d ee 1f 9e 4d 0f d8 8f 7e f3 7a 32 1d cd 5e df d0 77 0e 27 53 7c 71 a3 f9 e5 f2 e5 ad ad e6 d1 70 fa e1 b2 19 cd f0 f1 c9 a2 d9 1f 1f 0c cf 16 e3 66 31 7e 35 9e 0f 8f 9b e1 e9 e9 a2 99 68 76 26 d3 a3 e6 e1 b3 6f 07 5f 3f fe be 59 ce 87 07 63 be cd 1e 2f 96 c3 83 97 cd ab c9 b0 19 ce 8f ce 4e c6 d3 25 a6 6a 78 7c 3c 9e db 3f 63 4d c0 93 c9 7c 7c 38 7b d3 8c 26 98 e6 c9 21 5f 7e 3b 3b 43 4b 6f 9b 25 3e ce 06 d1 da 7c 76 76 f4 a2 e9 a9 0b 98 a9 83 65 af 61 1b cd c1 8b e1 64 ba 18 34 fd ab db b7 6f df be b3 c1 d7 9f 9d 9d 9e ce e6 cb 9d d4 f4 f6 27 d7 71 bd 7c f9 b3 cb af 86 f3 cb 97 f0 f0 f7 e8 28 86 3e 9e cf 39 db 9c f2 d9 b4 f9 e2 9b af 9a f9 78 38 7a 7b f9 92 fe f9 72 b2 58 de b8 ac e7 1f 36 58 02 f4 ea 18 0f e0 ad f1 94 dd e3 24 8d 9b f9 6c b6 f4 b5 ee 8f 66 07 1a f1 06 5a c0 65 a3 42 6f 22 f5 ef e9 e3 bb db 37 d5 ea 93 d9 bc f9 69 f9 f6 74 3c 3b 6c de 9c 1c 7f 3d 1b 8d 07 27 e3 e5 8b d9 e8 27 cc f2 62 89 4e 34 b8 f5 53 7d af b9 72 ef 5e 5e b9 9f 2e 5f 3a 98 cd c7 7f c3 fc e4 d5 bc d7 78 ab e9 92 77 e2 2f 98 49 76 1a af cc c7 07 5c 68 eb 70 33 3c c0 25 2e ea f1 5b 50 c7 f2 85 93 48 5a c3 a6 bf c0 b2 ed cf de 60 68 c7 b3 03 d1 73 73 cf 9f 1a c4 95 1b 97 2f a5 16 d3 cd b8 62 37 1f 1f 8f 4f f0 62 5c 1c c4 0f 5e 47 47 bc 9f 5f 0d 4f 9b 19 68 2e 36 d1 64 8a 85 47 df 31 1b bc fc 7a 3e 59 8e 2f 5f fa 9b 6f f3 f4 a9 6a c2 53 1b 1c f0 07 98 d0 ce 26 3e c8 a3 f8 c0 3f be bb fb e8 78 b8 58 ec ed 35 9b f7 35 91 cd e9 70 82 1d 7a e9 80 97 6f e9 ca bd e6 97 5f fd 71 92 09 3b 36 c2 ee 5d 82 92 b0 d9 87 f8 d4 01 be 3a 19 2d 6e 34 8b 59 f3 1a 33 3e 9c 82 76 48 c9 e8 ce 89 2f 9a bf f2 74 b4 40 83 bb 7b 6c 50 8b 89 21 2e 6c 82 7b c6 ae 7a 41 44 c3 57 d8 3f 35 11 2e 66 27 5a d0 71 63 b4 c3 8e b2 11 70 17 ac 13 da d0 5f f9 53 60 5c bc 81 e5 d0 8d d3 b3 c5 8b 8e 87 78 39 1e 59 90 c9 74 3c a3 eb f1 10 58 ca f8 cd 37 87 1d 8f f9 9d 78 70 39 7b 86 bd 0c f6 81 9e a5 09 1d c4 d5 78 ea c5 70 f1 cd 6b ce 40 f1 8c 5d fb 76 3e 3b 1d cf 97 d8 57 36 00 34 46 8a 2a 27 6e c0 6b 3e 65 5f 88 c3 61 d2 48 a4 60 1d 60 d5 5c 2d 23 95 Data Ascii: 161b8y[-) wJ"(JcZD}=E RH@1ZUJqw<>{]UU[\n5?xt\|9q`z\lmw>;8lo<8~^/tEu'h7NGlb<of\|b<jn7t1^l~oxG'/nm]M~z2^w'S\|qpf1~5hv&o_?Yc/N%jx\|<?cM\|\|8{&!_~;;CKo%>\|vvead4o'q\|(>9x8z{rX6X$lfZeBo"7it<;l=''bN4S}r^^._:xw/Iv\hp3<%.[PHZ`hss/b7Ob\^GG_Oh.6dG1z>Y/_ojS&>?xX55pzo_q;6]:-n4Y3>vH/t@{lP!.l{zADW?5.f'Zqcp_S`\x9Yt<X7xp9{xpk@]v>;W64F'nk>e_aH``\-#
Sep 28, 2021 17:51:18.070486069 CEST	109	IN	Data Raw: cb 97 12 09 65 ee b8 c0 42 1e 80 27 df 10 83 1e bf 59 8a 3b 5e 0a be e1 6f cc f6 7f e6 0e 02 97 1c 1e 2c cf c0 95 de 36 3f 9f 81 12 48 6d 93 e9 64 c9 97 b9 29 d9 52 f3 e1 78 fa 62 08 a6 31 fa 10 ed cc c7 cb b3 f9 b4 99 8e 5f 7b 2f 06 87 d3 01 5f Data Ascii: eB'Y;^o,6?Hmd)Rxb1_{/_>}C?KAuM/8}M,+l^{\|t\|:?y5X\Iqx\irS2ztE~[Gi>=8o>N,%hIs
Sep 28, 2021 17:51:18.070549965 CEST	111	IN	Data Raw: 92 b3 44 4a 0a ac f6 8b 9a 1e 65 c3 bc 2d 1e c4 bd dd 9b 7b 0d 77 84 1e b4 09 d2 b7 17 b2 69 40 71 06 63 c6 01 29 f6 c6 23 67 93 1c 66 b8 b4 e7 7c 4f 9e 8c e7 47 63 10 1b e8 f2 46 da a7 38 ea c7 14 59 fa f6 a8 cd 34 fa 89 9d a5 ff a2 6f 98 0a ff Data Ascii: DJe-{wi@qc)#gf\|OGcF8Y4o9B;;n0{Exm'h1H,hAN6$Y@CK+AN$d~!y9.X1[(gH]xEs:[,&>2qdo:ur.]OliA4di
Sep 28, 2021 17:51:18.070604086 CEST	112	IN	Data Raw: 13 9b 8e 9d d3 be cd 68 36 47 92 b6 6f a0 bf f5 69 1a 4b ef fc de 1f b2 0d ee 36 a1 8d 3c 4f d3 d1 c5 2b 9c 77 33 44 ad d8 b8 49 b4 91 f5 a5 d8 8a 74 92 c6 26 e0 96 d0 de b0 8d f6 f9 f8 05 fc 61 70 25 4c 8c 87 ea d4 82 6b c1 34 b4 1b 90 fa 71 f0 Data Ascii: h6GoiK6<O+w3DIt&ap%Lk4q^yvos{p+yF/S'NW\hf02c8j<v&P%Z6A%.JiHeOF3;eP!VEi_Q!w#oxs4J
Sep 28, 2021 17:51:18.070657969 CEST	113	IN	Data Raw: d8 09 3b d3 f3 de 61 bb 91 3f 02 6e e8 4f f4 7b ea 4f 6f 63 30 3b 3c 4c 7f d8 d0 12 c4 8b db 98 3e 2f 08 57 93 e5 16 d9 2c 90 c8 66 26 85 87 7f 72 0c a8 09 f9 8b d9 80 26 8b 70 37 99 6e f4 0c 30 dd 71 72 b9 6f 0f 6e df d0 5a 85 f3 8a ab 92 27 cc Data Ascii: ;a?nO{Ooc0;<L>/W,f&r&p7n0qronZ'$G ]\p-Q;~8F@>f~Gqtu%'.J7?)dU=U4r\|z?<=u~6DW,6y_pqezu~K971Tqvj2'
Sep 28, 2021 17:51:18.070710897 CEST	115	IN	Data Raw: 76 e5 7f 87 69 26 11 d0 14 6f 43 9c 43 86 fd d6 b6 0e a6 a9 21 47 52 58 c9 5c 80 d8 4b f8 34 e8 89 b3 95 9e 8b 89 e1 50 a0 b5 9f 9c da 5e 7a 02 22 08 dd 42 73 88 c9 27 c3 da c2 73 58 26 13 3f dc 16 c4 cf 28 60 e0 d2 25 6b 85 1f 78 88 b8 d4 57 e3 Data Ascii: vi&oCC!GRX\K4P^z"Bs'sX&?(`%kxWfnv`hS{-D!Gx\|X$nT'$My3q[\|$a\|HRzHt @E=V=M.rWY3ast<WN?/PHWEt
Sep 28, 2021 17:51:18.070764065 CEST	116	IN	Data Raw: bf 5a 12 63 b1 18 17 0a 8c e5 f4 db 12 75 8b 8c 8e c8 af 96 f4 e2 f5 81 35 6a ba 00 84 95 eb 23 38 91 7b ca 12 2e 45 3a 42 6c a1 96 c8 f9 2e 89 b3 2d 70 b6 16 47 f2 66 92 7a 0a a1 a7 05 1d 14 79 ee 72 dd 42 e7 e6 3e 54 e3 15 6f b1 23 b9 a0 43 c3 Data Ascii: Zcu5j#8{.E:Bl.-pGfzyrB>To#C(sqzkWqY'XL":[-rO,7rxf?rS16g >9%2R!8wf^2c;30iYvXmWLYdJwZ+
Sep 28, 2021 17:51:18.070816994 CEST	118	IN	Data Raw: 91 5d 60 ee 1e d2 73 92 52 06 ba 6f 1e 76 11 b8 b3 c9 c9 60 04 91 86 30 3c 46 4a 4b 50 26 5c b8 7c d1 9f eb f8 fa c5 29 e3 8c 75 02 44 62 c4 0a b6 39 06 ea 6b e1 59 d8 2a bd 17 8f 3e 9e 2a 93 27 ac 48 3c 07 02 c0 e8 7d 3b 19 be 05 57 a5 6e 21 22 Data Ascii: ]`sRov`0<FJKP&\\|)uDb9kY>'H<};Wn!"]h+ k'(O_LLP]9;6/=j8>k9EBZ H:%+f_<9+y`@])JG/`*qIJiR%H&l{IGhbD/{f
Sep 28, 2021 17:51:18.070882082 CEST	119	IN	Data Raw: cd 55 19 87 36 41 19 9b 79 10 d8 19 79 40 60 8e ed 19 cb 70 9f de 6b e4 f6 ee bd be ea 29 16 38 60 d8 cc 4f 97 24 30 37 2c a3 d4 50 f7 d2 17 ab de 39 a6 9c 61 96 2b f4 fc f9 2e f9 7f 41 13 90 f2 ae 41 46 bc be da 3f 0a 80 1b ed a7 b1 3d f1 fc 83 Data Ascii: U6Ayy@`pk)8`O$07,P9a+.AAF?=?8Va\|~&P{l<~\-f_;aFv'10n,Zf-pS4?'d\l1;}1z7o-a"#0)AUJuFg3~*XO
Sep 28, 2021 17:51:18.070959091 CEST	120	IN	Data Raw: 2f a3 04 03 ed 16 b9 70 c8 6a 2f 68 f7 60 6a 61 fb 74 09 67 b7 48 32 f9 85 e4 cd a6 95 05 96 25 2c 7e 50 81 3f ed dc 5f 28 f4 be 27 4a 04 a0 dd 2a 38 c0 20 82 9f 82 2f c9 41 51 7d 07 4f fc cc 7a 42 6e e7 82 1f 02 66 e6 64 bc 37 c3 70 77 15 43 8b Data Ascii: /pj/h`jatgH2%,~P?_('J*8 /AQ}OzBnfd7pwC!^Jar'a0].A%?Eg:h:euhMed\mw"W1B@cTEZ1RBy'luG%)^dRC
Sep 28, 2021 17:51:18.111531973 CEST	209	IN	Data Raw: ed dc b7 96 29 51 58 3c 4f ce 38 9a bc 72 88 20 8e 59 a5 f9 8e 9a 24 b6 25 eb be f3 fd 39 36 76 f4 9a 0a 32 5b c8 5a 68 2b 03 60 0f 77 c9 32 01 90 f1 0c af 3e a2 2b 57 18 b6 c2 77 b5 24 61 25 71 a4 64 1b f3 56 31 31 10 2f b2 83 b3 c6 82 8e 78 96 Data Ascii: )QX<O8r Y$%96v2[Zh+`w2>+Ww$a%qdV11/x0fA@G\|DW@T\|Sfx2`Wn0*8EeEHB"pCs}_W!S1)zj'!gIQF,S,0E8zV=C<{Q,.
Sep 28, 2021 17:51:18.178620100 CEST	454	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui_002.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.226429939 CEST	490	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:39:57 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d1d-3f6c0" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 31 33 36 30 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 bd 6b 77 1b 47 96 2d f8 bd 7f 05 85 ee 56 01 66 f2 25 77 75 57 83 06 39 b2 64 b7 7d db b2 7c 2d b9 ab 6a 68 96 06 02 92 64 96 41 80 8d 04 f4 28 92 f3 db 67 ef f3 88 47 66 82 a4 ec ba f7 ae 59 ab ca 22 32 23 22 e3 79 e2 3c f7 d9 fb ec d1 d6 5f ff e7 ba 5c 7e dc fa e9 db ad 9d ad 77 07 bb 07 4f 76 f7 f1 d7 93 fd 83 7f dd d9 ff c3 ce fe c1 3f 7c b6 75 b1 5a 5d 0d f7 f6 fe fa df 2c b9 ae 76 27 8b 4b 3c fd 76 3e 99 ad a7 65 3d dc 7a 5f 4d cf cb d5 ee 5f eb 62 eb 6a 51 57 ab 6a 31 97 1f d3 f1 6a ac 7f 54 f5 f8 ed ac dc a9 cb 59 39 09 af cf 16 93 b5 3c 97 32 67 8b e5 e5 ce b2 ac cb d5 ce 65 f5 a1 d2 16 f4 93 3b 07 3b ff 26 3f 7f 29 3f 4e 16 53 2d 3f 1b bf 2d 67 b5 fc 59 4f 96 8b d9 6c e7 6a bc 2c e7 da 8d d5 f8 ed db d0 f2 7a 5e a1 99 9d 6a 2a af b4 b3 f5 de 74 39 3e 3f 0f 65 e2 d3 c5 d5 55 eb 29 ba 55 fd ad f5 54 47 d3 7e bc 58 b6 1f 8e 27 93 c5 72 ea 13 e3 5f 1b af 57 0b 4c e6 d5 ac 5c e9 a0 fc c5 db f5 6a 65 93 e8 8f 26 17 e5 e4 97 b7 8b 0f cb 31 9a c9 0a 4f 16 f3 15 26 e0 7c b9 58 5f e5 43 1c af ca ab 6a f2 4b b9 cc 1f 57 e3 d9 e2 3c 7b 74 59 ce d7 f9 83 c5 ba ce bb 74 b5 5c 9c 63 1e ea b7 e3 bc 35 9d 85 56 03 f5 ac 9a 36 be 5b 5f 55 f3 79 e3 19 66 4a d7 d0 87 b9 5a 2c 66 ab 4a c7 51 9e 9d a1 e9 e4 cf 7a 4f 1f ed bc 9d 55 73 5d 4e 7d 10 5f 2c d6 f3 89 76 bc f1 66 32 cb 5a 0d 35 a6 cb 45 fa b5 f0 bc fc 70 35 f3 bd d6 68 ea 6c 6c 7b b0 f9 7c 31 eb ec d4 45 75 7e 31 c3 ff 3b 87 72 b5 3e 3b eb ea ef d5 7a 56 63 fd ba 5e d5 93 b1 1d 9a 46 07 ea 8b f1 2f dd 35 aa bf 75 3f e7 2a 75 7d 62 b5 1c cf eb 33 59 2c 1c f5 67 8b ab 8f 4b 0e c0 a9 c5 d7 98 66 9c 6e ec e7 ad f1 7c ba b5 58 5d 94 cb 2d d9 87 15 b6 ee 62 59 1f 6e 7d 57 4d ca 79 5d 4e b7 5e 7c fb 7a eb b3 bd 7f f8 87 fe 19 96 86 55 fa ab c1 75 cf 7f f4 46 a3 d5 c7 ab 72 71 b6 35 2d cf aa 79 f9 f8 b1 fe bb 3b be 9c 1e eb 9f fd 93 9e d2 81 de 69 b1 1a 0c 57 7d 25 59 83 db 41 d6 a4 b7 b8 55 f2 03 20 27 fd 77 e3 e5 56 39 5a ed 4e ea ba df 7b 57 d5 d5 db 6a 56 ad 3e f6 06 87 bd 6a 8e 1e 57 2b 7c 7d 54 1e 0e 56 28 a4 d4 a3 3f 28 ba 6b 2c cb d5 7a 39 ef 5d 54 d3 69 39 ef 3d 42 b5 db f0 c1 2a fb 60 51 1d ae 76 67 e5 fc 7c 75 f1 f8 f1 ea 64 ff 14 85 a7 20 75 38 22 ab c3 c1 75 75 d6 0f 5f 70 6a d9 1b 14 fd 1e 4e c2 62 b6 5e 95 d2 a7 9b 9b de b2 9c 61 86 df 85 df 67 d5 87 72 2a 2f 07 8f 1f f7 ab 11 3a 5c 97 df a2 cb 36 c0 bf 7d 3b 9f 96 1f d0 d4 c1 fe a0 78 54 d5 df 8f bf ef 57 28 ba 8f ef 57 83 81 0e 60 0b 9d 4b 06 7b 6b 4f f7 e3 60 ea fe e0 7a 75 51 d5 bb 6f 26 eb e5 b7 f3 7a 35 9a af 67 b3 42 1f 81 00 7f f5 0e e3 18 3d 3a b0 27 46 da a7 df ce af d6 ab 7a 74 82 25 92 92 d8 1d 46 7b 5e 5d 2c de 57 f3 f3 58 a5 9a 3f 17 0a 14 9f 5c 8e f9 ec dd b7 d3 51 6f 5d ed c4 aa 3b d3 ea 5d cf 1a ac e6 38 f3 e5 b3 d9 b8 ae 9b a5 f4 95 17 1c 5f 5d 95 f3 69 67 41 7d e5 05 b1 59 cf cf cb 65 67 49 7b e7 45 a7 d2 e1 ce 92 fa 2a 16 94 1b 6d 43 49 79 17 be bf c6 f1 f0 1b a4 b3 42 5a c0 3f Data Ascii: 1360bkwG-Vf%wuW9d}\|-jhdA(gGfY"2#"y<_\~wOv?\|uZ],v'K<v>e=z_M_bjQWj1jTY9<2ge;;&?)?NS-?-gYOlj,z^jt9>?eU)UTG~X'r_WL\je&1O&\|X_CjKW<{tYt\c5V6[_UyfJZ,fJQzOUs]N}_,vf2Z5Ep5hll{\|1Eu~1;r>;zVc^F/5u?u}b3Y,gKfn\|X]-bYn}WMy]N^\|zUuFrq5-y;iW}%YAU 'wV9ZN{WjV>jW+\|}TV(?(k,z9]Ti9=B`Qvg\|ud u8"uu_pjNb^agr/:\6};xTW(W`K{kO`zuQo&z5gB=:'Fzt%F{^],WX?\Qo];]8_]igA}YegI{E*mCIyBZ?
Sep 28, 2021 17:51:18.466830015 CEST	611	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader_dark.gif HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.508924961 CEST	614	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 370 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 61 6a 61 78 6c 6f 61 64 65 72 5f 64 61 72 6b 2e 67 69 66 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/ajaxloader_dark.gif was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>
Sep 28, 2021 17:51:18.509917974 CEST	616	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/watermark.jpg HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.551256895 CEST	620	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 364 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 77 61 74 65 72 6d 61 72 6b 2e 6a 70 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/watermark.jpg was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.11.11	49199	141.8.192.193	80

Timestamp	kBytes transferred	Direction	Data
Sep 28, 2021 17:51:18.024837017 CEST	79	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/styles.css HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: text/css,/;q=0.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.071340084 CEST	122	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/css Last-Modified: Tue, 28 Sep 2021 12:40:08 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d28-14914" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 34 34 33 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 7d f9 73 1b 47 92 ee cf e4 5f d1 2b 86 c3 b6 86 0d e1 3e a8 18 ef c8 b2 b4 76 cc d8 de b0 bd 6f 5e c4 c4 84 a2 81 6e 90 18 01 04 16 00 75 58 a1 ff fd 7d 99 59 67 77 55 a3 41 52 b2 3c cf 92 0f 12 e8 ae 33 2b 2b 8f 2f 33 ff 32 5f 5f ef d3 79 36 2b 92 77 a7 89 fa a3 3e 5b 2d 96 6f 2f 92 07 bf 14 cb e2 7a bd 7d f0 d8 7c bf db ce 2e 92 9b ed f2 8b cf e9 c9 47 bd 4e af d3 69 f7 06 dd 74 2f 8f b6 8a f5 fe f3 2f 8f 7b fe 3f cf 16 c5 7c f1 e6 f3 2f 93 f9 7a bb ca f6 5f 7c 5e ac a6 45 9e 17 79 ba de 14 d7 fb b7 9b e2 f3 2f cf cd 10 ea 7a df bd ba 3c 53 83 76 9a c3 a7 4d 1b 78 bd 9e cf 9d 37 e5 d7 66 7d ef f7 ee 9b fb ed 4d 21 23 b7 8b c1 8b fb ba 58 5c 5e ed 2f 12 2c d6 2a 5b 96 be dc ed df 2e 0b fb dd fb d3 d3 b3 d9 7a b5 59 ef 8a e9 3a 7f 3b c3 fb d9 e2 ba d8 26 f9 e2 55 6b 35 2b d2 fd e2 fa 2d fe ff ee f4 64 93 e5 f9 e2 fa 32 5d 16 73 34 de 1d 6c de 3c 3e 3d 79 f4 70 9a cd 5e 5e 6e d7 37 d7 f9 45 b2 df 66 d7 bb 4d b6 c5 92 e2 bb e9 7a 9b 17 db 8b 36 06 72 5d e0 f7 55 b6 bd 5c 5c 5f 24 6d 19 d2 eb ab c5 be 48 f1 f8 8c c7 f3 7a 9b 6d e4 8b 7d f1 66 9f e6 c5 6c bd cd f6 8b 35 5e 90 f7 e9 ab e8 fc 66 37 db dd 7a 7b 91 e4 c5 3c bb 59 a2 77 7a 7a b6 5e d2 67 67 ed b6 ea f2 55 b1 dd 2f 66 d9 32 cd 96 8b 4b 34 3c cd 76 c5 12 d3 95 c7 65 bc 29 de 5a 66 9b 1d 06 b5 2b 30 97 6c af be e6 61 a9 17 69 0d 1e 27 0f 1f 39 ef 99 79 95 a6 19 5d 9f 4f 72 0d 5e 2f f2 fd d5 45 92 dd ec d7 b7 5b 94 d3 f7 a7 8b f9 36 5b 15 2e 59 bd c0 47 a0 20 45 10 49 67 f3 26 d9 ad 97 8b 3c 39 9b cd 66 8f f1 ca a9 21 b7 f5 7a 39 cd b6 e9 e5 76 53 f3 82 6a 29 9d ae f7 fb f5 0a 2b af 49 cc 1b fe 09 1a d6 ed 1a c2 c6 3b f9 5b e1 46 a5 8d 52 f4 6d f6 b1 76 e3 2a f4 86 39 fc c5 61 77 c9 e9 49 90 d1 fd 8d 8e e6 83 c7 fa eb d2 51 d5 1f 97 0e e9 49 89 27 2a fe 93 3c 27 06 a9 7e e1 86 5b 6b e2 10 38 6a 8d 5f 00 33 6d c4 1c 4f 4f 2c 53 8c 77 ef 30 47 1e 4f 98 43 36 69 a9 86 4b 36 79 3d ce 29 0f ec d3 e7 bf ac 2f 8b fd 55 b1 fd fc 56 7b e4 5c 5c ba a1 47 fa 87 56 70 4e 81 cd 52 23 b0 2f f2 ae 9e 7b 5b 50 79 e6 56 1b 59 69 85 36 f0 db 62 f9 aa 20 36 f9 43 71 53 fc 54 5c de 2c b3 ed c1 8d ac b4 d4 6c 03 2b af 35 dc b8 77 a7 ee e9 7a 10 1a 32 44 0a 3a 05 44 2d 0f 58 92 a0 d3 b2 7b 34 1d 0d 27 bd 6c dc 4b a7 e3 61 27 ed 67 d9 30 1d 0f 8a 76 3a 29 66 f3 e1 68 38 9d f5 f3 21 89 18 ea 54 3c c0 69 ba 97 66 b4 e4 f1 00 6d 3f f8 f2 bc 32 ac d9 7c d0 ef f5 7b 69 de ee f5 d2 7e a7 28 d2 e9 34 1f a5 dd e9 68 94 cf 7b f3 62 34 cd 98 80 1e 18 19 e6 81 fc 5a 6d aa 3d 9f e7 b3 79 3b ed 0e f3 2c ed 8f e6 79 3a ee 8f 07 69 b7 5d f4 b3 7e 3b ef 4f 47 79 0b eb ec b4 a4 45 89 40 6b 79 d6 9e cc 3b f3 4e da 1e 76 d1 da 20 9b a7 e3 61 d1 c1 c0 a6 f9 b4 97 e7 93 fe 7c d2 22 b2 69 f2 a0 d3 25 5e a1 b5 7d ef 70 cd ba 4d fd 7b bb 93 0e 86 df 81 75 06 b7 63 30 ce 06 b3 e9 7c 9e e6 83 51 3b ed cf 3a e3 34 1b 14 bd 74 d8 1e 0f c7 f9 ac 3d ca 8a 71 83 5d 3d ba 99 03 bb da 9d b5 07 d8 84 71 da 9f 74 31 ac 02 ff 19 cf 86 93 74 9c 0d a7 bd ce Data Ascii: 443b}sG_+>vo^nuX}YgwUAR<3++/32__y6+w>[-o/z}\|.GNit//{?\|/z_\|^Ey/z<SvMx7f}M!#X\^/,[.zY:;&Uk5+-d2]s4l<>=yp^^n7EfMz6r]U\\_$mHzm}fl5^f7z{<Ywzz^ggU/f2K4<ve)Zf+0lai'9y]Or^/E[6[.YG EIg&<9f!z9vSj)+I;[FRmv9awIQI'*<'~[k8j_3mOO,Sw0GOC6iK6y=)/UV{\\GVpNR#/{[PyVYi6b 6CqST\,l+5wz2D:D-X{4'lKa'g0v:)fh8!T<ifm?2\|{i~(4h{b4Zm=y;,y:i]~;OGyE@ky;Nv a\|"i%^}pM{uc0\|Q;:4t=q]=qt1t
Sep 28, 2021 17:51:18.071407080 CEST	123	IN	Data Raw: a0 8f fe 26 0d 77 b5 db 1b 77 f2 09 e6 d5 e9 0d f3 b4 df ef 63 1f 7a 93 4e 9a 4f db b3 69 86 4e 7a e3 f1 11 bb da 1e 4e 46 93 51 27 1d ce 07 18 dd 60 32 4a 27 fd 6e 91 8e a7 45 36 cd 3b 59 3e 1b 8f 64 57 1b 3c 78 fb 5d fd be c8 17 37 ab c8 9e b6 Data Ascii: &wwczNOiNzNFQ'`2J'nE6;Y>dW<x]7G=/ftct\;A{zt3tY8ia1SiwpOd4:9Njt~g\|O{C}w6L{vf8iotRC:Q:hq
Sep 28, 2021 17:51:18.071476936 CEST	125	IN	Data Raw: 33 1c 86 38 24 86 8c eb c2 f6 d5 22 82 27 76 ec f3 5a c3 c8 69 b1 3e 4b f0 df 0e b5 6b dc 1d 5a 80 81 a7 44 d8 78 f9 dc e4 93 62 3e c7 5d ab 2f e7 3e 96 9d 7d 0b e0 28 6e f7 7c a0 42 44 3c ee d1 1b fe 58 e5 61 45 1e eb cd 26 87 1b a3 74 02 d4 70 Data Ascii: 38$"'vZi>KkZDxb>]/>}(n\|BD<XaE&tptCfzJ.8}3F'xT:1,tgyj05<< q<U/6vb_Z_ DxGZ.l.:1VrlwLOE@\'2G/
Sep 28, 2021 17:51:18.071526051 CEST	126	IN	Data Raw: f4 7c 71 01 bc fe f4 e5 82 ac 1b 70 79 a5 d0 b1 66 c5 15 88 82 8c 25 b8 62 92 bf 17 d3 bf 2e 60 ca 05 5b 85 13 63 07 06 5c 77 c8 f9 1c c8 ea 55 67 79 91 ae d6 bf 56 7b f8 7e fd eb 02 90 f7 e4 f9 62 0b 23 02 1c 99 60 d5 49 67 ac e1 ed 8a 0f e2 56 Data Ascii: \|qpyf%b.`[c\wUgyV{~b#`IgV?S\|5=b8iDQt&P#HWjGk'@&tuN\+{yG't)U<&3<)>gOWC3br~O_ @v&d`&=O>E\|RHp:+<j
Sep 28, 2021 17:51:18.071590900 CEST	127	IN	Data Raw: 07 49 9c 1e f0 d8 ba 37 65 ff 10 1b 51 44 c1 cb 49 65 3e 75 41 8e ca 8e 7e 6a 8e ac e6 e6 88 32 59 16 df 32 b4 f5 9d 79 43 03 e9 7d 5b ab 1b 87 d3 25 bd c5 4d 02 10 0a ba f1 40 eb 0a 6e 8f 26 43 2c 32 c2 66 c1 38 1e 3d 74 59 e7 27 be 45 a5 8b f6 Data Ascii: I7eQDIe>uA~j2Y2yC}[%M@n&C,2f8=tY'EQe'8MC},}_rN[b`@l\Y%YV8{(P Vz^;[c31pvaEz{h2R#9L\|\w>NPlZ69
Sep 28, 2021 17:51:18.071638107 CEST	129	IN	Data Raw: a2 78 2d 59 af 4a 19 25 cc 61 b2 2b a9 ee 8a d0 66 a9 af ca 5b a6 3e 0e 6c 9c 11 6a 2b db a7 7b e1 44 7e 95 ce 85 b7 56 c7 a4 f8 4c ad fe 0e 54 eb 19 d9 dc e0 82 23 0c 34 d6 8a ac 08 ee 7a 25 29 fb dc 13 fa 5c 80 fe 36 d9 0d 8e fc 62 b3 5b ec 7c Data Ascii: x-YJ%a+f[>lj+{D~VLT#4z%)\6b[\|@^jy+CYt^seL;F6I0rJnqK9BSJiRz6y9^~xAN$OIGZ[ pn6FuboV8bK
Sep 28, 2021 17:51:18.071682930 CEST	130	IN	Data Raw: 29 e5 64 9a f9 03 d5 53 8f 38 6b 02 92 e6 51 bd 0a 61 9d 30 00 39 d9 b7 29 3a d3 af 66 c9 a9 ce a1 30 2d 17 ab 05 0c 96 ea 61 55 c6 d2 c9 e3 43 39 7f 05 7f a4 f5 31 24 1c 21 a2 42 93 65 d3 55 2c d7 ca b1 be d1 87 94 be 51 ca 3a 10 e9 1c b1 16 94 Data Ascii: )dS8kQa09):f0-aUC91$!BeU,Q:glpG9khRrAg Y8*Sa]'VHJ'z]LN/'Q_0>'Qg2~{>Ne3jLR/o:Uf+IWZUOsMF8
Sep 28, 2021 17:51:18.071728945 CEST	132	IN	Data Raw: 99 64 1c 55 e8 f7 45 0f 24 8d 7d 52 47 19 35 a8 58 37 aa 72 1e b5 c6 e0 3d 77 da fa 4f 6e ba 65 5a 6a a6 c1 1a ad 3a 42 8a 8d cf d1 ef 8b 5e 8f 3e b9 25 fe 25 c6 6f d6 4f ee c8 c2 6a ac 44 07 0d 1a 25 c3 82 b2 d4 30 a7 24 87 02 32 f2 9b f4 d8 62 Data Ascii: dUE$}RG5X7r=wOneZj:B^>%%oOjD%0$2b-pS$-=":usB?ar~&*;J\y@e=:%}Q1cmp9{x s)lQng<o?A]f:~o/WS;vq
Sep 28, 2021 17:51:18.071774006 CEST	133	IN	Data Raw: 82 54 46 71 42 0b 71 3f 3c 63 f1 81 d4 61 c4 dd 19 e7 79 6c 81 2b 7e 1d 46 00 88 73 dd 02 9c a2 32 0b 39 97 44 70 93 f0 15 48 6f b0 02 ce e6 9d 69 ab 33 ee 73 f8 8a 07 6f 8f a1 b4 3f 0a 9e 9b 11 d9 67 2a 9f 1f 25 f1 96 2a ea d4 b7 b9 fd e9 8a 32 Data Ascii: TFqBq?<cayl+~Fs29DpHoi3so?g%2E&oLk1f+:FnY~n50JJ+:?f#k!DGnb,JDR8fVV!&':)g3&W P"hRKUdCN6`MF=Sw$
Sep 28, 2021 17:51:18.071826935 CEST	134	IN	Data Raw: 6c 2b c1 7a 8c d5 05 e5 99 5b 00 6b 1d 3e aa 33 d1 b9 32 a2 2b d4 96 34 da 75 2b e4 f4 15 6d a6 3b d4 fe d1 c8 80 55 cd b3 f8 56 1d 5c 66 0d 35 8c 8e a1 c7 38 ec 9a a9 2c ae 09 94 5a 4b 30 3d a3 d2 46 e6 01 54 e9 8e 51 65 f1 61 0c 0f ac 28 97 5e Data Ascii: l+z[k>32+4u+m;UV\f58,ZK0=FTQea(^mcu9)pq}+[/j*vd.Ih5,mHlp`{w&_OS8.Tn,4e\)\;dc9CX/BW;]QX]5XnR:m3/f\iD`lWp
Sep 28, 2021 17:51:18.116894007 CEST	237	IN	Data Raw: e5 09 ea 4d 43 d4 f6 ad ea 40 4c 11 3a 31 95 f9 03 55 29 61 ae dc 95 1d 4e 26 bd 09 8d b8 02 81 0c 46 46 07 c0 c9 07 d9 38 49 fa b8 be 21 17 26 30 88 f0 ff a9 4c b4 fe 91 05 b8 a3 95 06 5d 57 1e fa 83 ab 32 9c 53 f3 fe 45 3e 86 1a 51 f9 90 48 5f Data Ascii: MC@L:1U)aN&FF8I!&0L]W2SE>QH_>nb=JJ5lw$SZ()`['c>a,dbd%@T#bFe~4C_Gd5u)o\|4F&!XGRnau=BxCa
Sep 28, 2021 17:51:18.120012045 CEST	242	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/app.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.168395042 CEST	420	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:39:29 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d01-2763a" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 63 38 65 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 bd 79 77 1b d7 95 2d fe 3f 3f 05 88 76 53 80 09 4e b2 d3 89 41 41 8c e2 28 89 5f 3b 4e 96 ad ac 74 7e 34 c3 05 10 45 10 26 08 d0 00 28 89 21 f9 dd df de 67 b8 43 0d 24 95 4e bf f7 7b 59 2b 16 51 75 eb d6 ad 3b 9e 61 9f 7d f6 3e ff 7c a3 f5 79 eb fb c5 cd 7c 7c 76 33 2a 5a 7f 2d 46 57 c3 e9 ac f5 f5 6c 5a cc d7 ad 1f ce 96 d3 eb 35 8a b0 d4 bb 8b e9 aa 75 3e 9d 15 2d fc 7b 3d 5c ae 5b 8b f3 d6 fa a2 a8 79 fc 4c 1e b7 e7 7e 3d 9b 9e ad d6 2c 8f 2a 8a d6 f9 62 36 5b 7c 98 ce 27 ac 86 8f a3 e4 74 59 b4 50 aa 98 af 8a d6 7c b1 c6 5f 28 b6 e4 5d be f8 7f 0d df 0f b5 25 ad b3 c5 18 af 9f e3 8e b5 65 d7 5e f2 f5 e2 fa 76 39 9d 5c ac 5b 9d af bb ad 97 fb fb bf d8 79 b9 7f f0 8b 9e bc 32 7e df 6f 8b f7 ad 77 c5 f0 8a d5 96 1f 39 38 b0 47 fe 73 31 1b 8e 5a 3f dc ae d6 c5 d5 aa f5 e6 f7 e1 fb 8b c6 a6 5c 0f 27 d2 2d e7 cb a2 68 ad 16 e7 eb 0f c3 65 d1 6f dd 2e 6e 5a 67 c3 39 df b6 2c c6 d3 d5 7a 39 1d dd ac 51 72 dd 1a ce c7 7b f8 c4 ab c5 78 7a 7e cb 0b 18 82 42 3e b9 b5 2e 96 78 af 75 ee ef bf fb 0b 1f ff 7d 31 2f 96 c3 59 eb cf 37 23 74 54 eb 5b eb ac 0e 6e b7 7e ff e7 6f bb ad 21 c6 84 f7 56 17 c5 b8 35 ba 95 8a 7e c7 d6 fc 60 ad 61 2d bf e3 40 0f d7 d3 c5 bc d7 2a a6 28 b2 6c bd 2f 96 2b fc 6e 7d e1 2f b4 aa 7b 2d b4 ae 33 5c f3 1b 96 ad c5 35 1f ea b2 8e e1 fc b6 35 1b a2 8d fe e8 ae 8e ab 0e cd aa 15 3f 73 dc fa eb 37 ef fe f0 a7 bf bc 6b bd f9 ee 6f ad bf be f9 fe fb 37 df bd fb db 21 2b f9 80 97 2f 6e d6 ad e2 7d c1 c1 c4 83 57 d7 98 33 e3 16 fa 6d 39 9c af 6f d9 9a 3f be fd fe eb 3f e0 91 37 bf f9 e6 db 6f de fd 8d 0d fa dd 37 ef be 7b fb c3 0f f2 2d 7f fa be f5 a6 f5 e7 37 df bf fb e6 eb bf 7c fb e6 fb d6 9f ff f2 fd 9f ff f4 c3 5b 34 e7 07 7c 36 2b b5 ce 91 b9 74 b5 c0 1c 1b 17 6b cc ee 95 4f 9a 37 ab d6 70 3c 9e f2 d3 d0 b5 d7 e8 f6 e9 4a 3a 43 c7 c2 1f 8f 5d b4 2a ce 58 b8 f5 cb 1e bb 85 ad b8 1a de 26 5f 8c c9 3b df 59 a1 c3 30 81 3b c5 ee 64 b7 d7 ba 9a ce a7 57 d3 7f e0 d3 d0 88 b3 c5 d5 f5 f0 6c 5d 8c bb 6c 93 0c 32 2b 59 5f a0 9f a5 ff bc 5f d8 fa 33 4c e9 64 16 70 98 51 ff f2 6a 38 9b dd 62 3a fd 7c 83 55 c3 a1 66 0d de b0 2f 7b ad eb e5 e2 fd 74 8c 3b 9c 7c d3 f9 d9 ec 06 f5 ca 7a 29 ad 30 cc c0 d6 b0 f5 97 ef bf d5 26 2c 17 37 93 8b d6 87 8b e9 d9 05 6a 3f 9b 5e 73 09 af 38 7d 5b c3 b3 b3 62 a5 8b f5 eb c5 72 59 ac ae 17 f3 31 57 f0 0f f2 a9 de 9d 5c e8 05 2a 95 e9 30 1c 2d de cb 7c 68 5c e2 7c ad ad f2 67 2d f1 5f 0f 6f 30 69 96 a8 7d 71 85 d9 fe 9b e5 4d 81 51 9a 4d 5b af d0 74 dd bf 7e 3d e1 ee b5 8b 6e 7e cd da fd 89 37 b3 e2 72 85 cf c5 98 be 78 b3 fb ed ee db dd af 5f b4 fe 38 3c bb 98 4f 87 97 ad 57 c3 59 71 f6 6b fe 67 f7 7a 96 3d f7 f5 c5 70 39 2b 56 ad 3f 9e 7d 77 33 c3 9c 7c 75 a6 17 7e 6d ff 5e 9d cd 79 dd df 27 af b4 81 59 b5 7e fa f9 a6 58 de ee fe b4 ea 71 d8 af 16 73 f9 13 0b 74 8d 3f 50 74 6f e3 fc 66 ae d3 69 c9 b6 9f 7e d0 bd b7 d3 bd e3 68 ed 62 0f 2a 66 ab c1 dd c3 a1 fc c4 Data Ascii: c8e2yw-??vSNAA(_;Nt~4E&(!gC$N{Y+Qu;a}>\|y\|\|v3Z-FWlZ5u>-{=\[yL~=,b6[\|'tYP\|_(]%e^v9\[y2~ow98Gs1Z?\'-heo.nZg9,z9Qr{xz~B>.xu}1/Y7#tT[n~o!V5~`a-@(l/+n}/{-3\55?s7ko7!+/n}W3m9o??7o7{-7\|[4\|6+tkO7p<J:C]X&_;Y0;dWl]l2+Y__3LdpQj8b:\|Uf/{t;\|z)0&,7j?^s8}[brY1W\0-\|h\\|g-_o0i}qMQM[t~=n~7rx_8<OWYqkgz=p9+V?}w3\|u~m^y'Y~Xqst?Ptofi~hbf
Sep 28, 2021 17:51:18.224848986 CEST	487	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/cross.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.269546986 CEST	604	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: image/png Content-Length: 328 Last-Modified: Tue, 28 Sep 2021 12:39:30 GMT Connection: keep-alive ETag: "61530d02-148" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 17 08 02 00 00 00 9e 43 18 7a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 dd 49 44 41 54 38 4f 63 78 76 c1 a9 a1 44 3f 36 54 93 6c d4 54 66 f0 fc a2 33 c3 92 69 e6 76 56 8a d6 e6 0a 64 23 a0 f6 e5 33 cc 19 e6 f4 99 92 6d 04 5c e3 fc 89 a3 06 11 8a 8a 21 17 46 ab e7 58 e6 a5 e8 42 e2 b8 20 4d 07 c8 c5 95 50 08 78 ad ae 48 ff e3 4d d7 60 1f b5 88 40 f5 8f b7 dc 2a f3 f4 c8 34 08 a8 6d 62 ab c9 cf 07 6e 3f ee bb f7 37 1b e3 49 b7 84 03 bb 30 4d e7 c3 4d d7 b7 d7 5c f2 53 75 c8 37 28 29 52 f3 cd 55 57 a0 8f 80 7e 7c 7d d5 15 98 ab c9 f4 da cb 4b 2e 5d 75 46 10 cd 3d 0d 46 40 2e 99 06 11 9f 99 09 87 11 91 66 8d 1a 44 b8 14 06 85 d1 bc 89 a6 36 16 84 95 e2 09 75 a0 f6 85 93 cd 18 8e 6d b1 09 f6 55 25 32 76 b0 2a 0b f3 53 3b be d5 16 00 1d c4 82 0f 16 56 6f ea 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRCzsRGBgAMAapHYsodIDAT8OcxvD?6TlTf3ivVd#3m\!FXB MPxHM`@4mbn?7I0MM\Su7()RUW~\|}K.]uF=F@.fD6umU%2vS;VoIENDB`
Sep 28, 2021 17:51:18.466902971 CEST	612	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/buttons.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.512077093 CEST	618	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 362 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 73 2e 70 6e 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/buttons.png was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.11.11	49201	141.8.192.193	80

Timestamp	kBytes transferred	Direction	Data
Sep 28, 2021 17:51:18.025053024 CEST	79	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery-ui.css HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: text/css,/;q=0.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.071887970 CEST	136	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/css Last-Modified: Tue, 28 Sep 2021 12:39:42 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d0e-a119" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 39 61 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 7d 6b 73 ea c8 92 e0 e7 7b 7e 85 a6 3b a6 b7 ef b5 65 f3 36 78 e6 ec 86 9f e0 27 c7 2f c0 6c 6c 4c 08 90 40 46 48 42 02 03 9e b8 ff 7d b3 5e 52 95 aa 4a c2 7d c7 8e d3 6d 84 b2 1e 59 99 59 99 59 99 59 c7 ff f8 37 e3 e3 69 6d 47 3b e3 ed c6 30 8d cf f2 51 b9 72 54 82 bf 2a a5 72 c3 2c 35 cd 52 f9 c7 3f 8c d9 6a 15 9e 1e 1f 7f 2c d1 9b 6b f7 68 1c 2c e0 e9 8d 3f f6 d6 13 3b 3e 35 26 91 35 9d 5a 23 cf 3e 1a c7 f1 a1 31 0e 22 fa 57 64 c7 ee 57 fa 45 6c 7b f6 78 c5 7d 0e 22 ee 93 35 06 c0 89 1b f8 a4 15 6b bd 0a a0 a3 d0 b3 57 b4 b5 85 ed af c9 77 a3 f5 6a c5 de 1b 07 fe 2a 0a bc 69 14 ac 43 da ff cc 1e cf 47 c1 36 b2 a0 35 f2 68 62 ad ec d0 1d cf ed 88 7e 76 2d 2f 98 92 bf c3 28 98 c2 40 e3 91 45 bf 24 c3 4c 7b 8b 3d 77 c2 00 e3 d0 f5 7d f6 01 06 1f 93 36 56 41 e0 ad 5c da ff 6a 66 2f f0 90 01 49 af 81 f1 e9 da 1b c3 f2 27 c6 22 98 b8 ce ce 58 cd dc 18 fe 03 ef 1c c2 77 b1 bb 52 e1 f7 18 bf 00 f3 f2 ec e8 f8 ff c4 e3 20 b4 7f fe e1 04 1e 0c e4 d1 5a d8 3f 47 56 6c ff 01 f8 82 b1 3c c3 34 d7 f1 cb cc 9a 04 9b 9f cd 70 fb 47 e0 38 b1 bd ba b7 9d 15 7d 58 4a 1e be 06 21 f7 0c 46 32 9e fb 30 75 fa ac 8e de 0b ad b1 bb da d1 27 d5 d2 1f a3 e9 cd 62 da 15 9e a2 87 af f6 76 b5 8e 6c fa 9e e3 59 2b 78 78 11 78 41 44 1f 35 f0 0f 6b af fb 69 47 9e b5 fb 99 69 90 3d e6 5a 64 8f f8 26 d9 33 0b ff fc e1 c2 9a e3 ae ae a2 28 88 7e 8e c7 25 f8 f9 c3 19 93 8f 75 a7 0a bf 7f 8c 80 98 ec 88 7b cd 29 5b cd 56 2b 1d 3a 79 9b ef 86 3e 99 4c 9c 89 93 76 d2 71 a7 33 0f fe ad 7e 9e 9c 9c 34 2a a8 23 e9 11 d7 59 fa dd c4 9a d4 eb 76 da 61 fa 0d df 29 f7 d4 71 ac 56 29 ed f8 6c bc 72 3f ed 9f 0e fe 81 5e c5 cf 5c 97 f4 8b 52 a9 6a c3 8b c9 da b0 f7 b9 b5 49 de 3c 41 4d 26 78 ec 04 b0 3c 3f eb f8 07 4d 0f 7f ac 8c d0 2f 8f 47 f2 7c 8c 7f b8 69 e1 a7 c2 94 f0 13 7b 82 7e d3 4e 2e 6d c7 5a 7b 18 8b f0 03 dd b0 07 b5 3a fa e5 3b 62 df 8c eb e8 37 ed 8a 3d e7 3b 4b 9e 35 1c f8 4d bb bb 00 b9 60 fb ab 9f 35 fc 03 dd b1 07 55 fc c3 77 c7 be 99 e0 9f b4 3b f6 9c ef 2e 79 46 56 25 45 a1 6d 01 b9 a5 bd 75 c8 67 b9 33 fa 45 b6 2f fa 58 40 23 69 c2 6e a1 5f 81 d9 7f 56 81 53 9d 0d 9b ba 1f 44 0b cb fb c3 89 d9 83 b2 bd f8 c3 71 d8 a7 b3 08 a4 dd bf 57 2e 3a b6 f7 69 af dc b1 05 7f c7 96 1f 9b b1 1d b9 0e 08 a9 8b 20 dc 45 88 c2 d9 66 70 1d ac 7d 10 99 20 8b b1 e0 0a 40 18 45 20 d6 41 d0 ba 20 7a 83 28 fe 0f e3 de 1d db 7e 6c 4f 8c 87 9b 57 e3 1f c7 3f 7e 1c ad 5d 33 d9 08 cc 19 c0 79 b6 f1 df 3f fe 66 2e 62 73 15 ac c7 33 d3 02 7a 0e fc 53 c3 0f 7c fb 3f 7e fc 4d f5 f0 9f 3f 8e ff 61 dc 5b bb 60 0d 52 d1 f6 42 3b 8a 7f 98 85 3f d0 3d ea 9d 00 98 33 77 32 b1 7d d4 f5 c4 8d 43 10 3a ac c7 7f ca 6f c1 98 c6 20 ff 5c d8 bb 10 00 e1 a9 53 a3 04 c3 1b 7b 6e 78 6a 44 b0 13 fc 59 32 f0 ef df e1 e9 cc 46 78 3a 35 ca e1 16 3e 2d ac 68 ea c2 8c 4c f2 11 91 bd e3 05 9b 53 83 8c 01 1e 85 d6 64 e2 fa 53 d2 64 18 80 b4 c7 28 80 8d 23 f0 d6 2b 84 86 8d 3b 59 cd 68 83 c2 08 61 4f b2 57 68 54 ac 17 dc 04 df 1e 3f Data Ascii: 29a0}ks{~;e6x'/llL@FHB}^RJ}mYYYY7imG;0QrTr,5R?j,kh,?;>5&5Z#>1"WdWEl{x}"5kWwjiCG65hb~v-/(@E$L{=w}6VA\jf/I'"XwR Z?GVl<4pG8}XJ!F20u'bvlY+xxxAD5kiGi=Zd&3(~%u{)[V+:y>Lvq3~4*#Yva)qV)lr?^\RjI<AM&x<?M/G\|i{~N.mZ{:;b7=;K5M`5Uw;.yFV%Emug3E/X@#in_VSDqW.:i Efp} @E A z(~lOW?~]3y?f.bs3zS\|?~M?a[`RB;?=3w2}C:o \S{nxjDY2Fx:5>-hLSdSd(#+;YhaOWhT?
Sep 28, 2021 17:51:18.072032928 CEST	137	IN	Data Raw: 5c c0 98 e7 fa 36 e9 08 fd 05 e8 a0 43 3d aa 22 6c 83 bc 36 27 36 6c 19 78 5d 93 55 70 60 55 4d d8 a5 01 b2 5c 2a fd 3b 06 8e e1 c9 6a e7 c1 23 b2 54 c2 b0 c6 9e 6d 45 8e bb 3d 1d d9 0e 6c f4 87 3c 52 93 ef 2c 67 05 14 03 63 47 44 03 5c 78 6a fc Data Ascii: \6C="l6'6lx]Up`UM\*;j#TmE=l<R,gcGD\xj4,9}c4mmfbl!yq=?aqsDON@2]bo1 JD-ZWO:Y0+
Sep 28, 2021 17:51:18.072098017 CEST	139	IN	Data Raw: a7 20 dd e6 c2 03 ec dc b7 27 c2 b3 19 6a 52 78 92 12 bb c6 45 43 68 00 e8 61 61 cd 6d 23 0a 82 85 01 8e 17 74 82 80 79 00 4e 4a 0c cc c2 86 6f db 13 38 59 08 8c 91 0d 1b 0e 72 a0 45 36 23 50 32 46 62 da 06 be 87 6d 49 ca f8 4c bb 80 6d d3 fd c2 Data Ascii: 'jRxEChaam#tyNJo8YrE6#P2FbmILm**a'QF6~T{F!`u[$E_8H#(%cn];Yx1g_a%@+t;)0]vDtVL~;S7 d7A4K2Zn.QZIA
Sep 28, 2021 17:51:18.072165966 CEST	140	IN	Data Raw: 76 79 a7 4b 66 35 ff 9a 34 94 d8 42 b1 56 59 31 f5 8d b9 60 d0 ef 70 a5 ae 7b 73 4f 9e 24 67 30 29 53 32 63 8c e7 55 aa 21 e3 c8 3e 7c 08 45 4f 87 32 3b a1 14 19 c7 42 11 64 9f ef 5f 8c 67 63 87 4a 24 76 0e eb b2 44 3f a2 64 82 b3 1f f2 cd 21 31 Data Ascii: vyKf54BVY1`p{sO$g0)S2cU!>\|EO2;Bd_gcJ$vD?d!16R8O[8DD39:8[}n22Tab7NDQ*':ch3F-sUNI$v.mNZljyhEl1&Ar2^@b!B(dctLU8]p
Sep 28, 2021 17:51:18.072215080 CEST	141	IN	Data Raw: 57 0f fd f3 a7 f2 d7 5d db bb bf 99 c5 73 f7 ea d7 a2 05 0b f8 3c d8 f6 6a c3 af fe 6b 65 d7 e9 b6 c3 fe c3 2e 88 46 de 9d f7 18 36 3b 8b ce d5 e8 d8 bb 18 7c 8c fb 27 a3 c5 6a f0 ab 39 58 55 2a ad 6e af ff 5c 76 82 49 c5 ee 2f 1f 9d ce fa e1 63 Data Ascii: W]s<jke.F6;\|'j9XU*n\vI/cpk~~t=,z"xqnA=[{_K?GTEs\|co\|._tS5Kj\]ezWc7?5Em['-zn'W"1sU>>L
Sep 28, 2021 17:51:18.072261095 CEST	143	IN	Data Raw: 39 0f 85 84 7c a8 c2 22 e6 34 27 39 bf 99 29 e0 d0 5f de 81 c2 5c bc 62 f4 67 85 b8 d1 be ef db e3 50 99 0d 90 c5 9e 25 2e 8e 9e 5a 2a b9 2e c6 32 97 6a c2 35 8d 1c d5 2c f4 89 73 71 8a 47 b4 24 51 3b b1 ee 48 b1 1c d1 b7 98 4d d9 a6 11 fe fc 99 Data Ascii: 9\|"4'9)_\bgP%.Z.2j5,sqG$Q;HMh-e'. 0!i,}(E:,uGFYTEMa\|WGR> %uL%5N'+JIZdL8>8Jk~V;D#FC}R%MFn0
Sep 28, 2021 17:51:18.072324038 CEST	144	IN	Data Raw: 9a 8e fe 6c d5 0e 8d 72 bd 79 68 c0 01 49 92 3e cb 17 92 29 10 66 7c 89 1a 1d ad b0 77 f8 b9 f1 70 94 80 e4 47 e9 8a 91 ef d2 50 70 05 45 91 02 ce 59 8a 2a 95 50 b1 e6 42 8a 62 5b 1b d9 d9 49 0d cb 64 4b a1 be 3e be ba 8e e2 2d 62 86 92 d0 5c d0 Data Ascii: lryhI>)f\|wpGPpEY*PBb[IdK>-b\$=}Q9)JH<${tn=tU.{b8u\\@oN!EaPN&#pLP"Ys&2~w$<W48&%rI}xYq,4-%MHq~
Sep 28, 2021 17:51:18.072371006 CEST	146	IN	Data Raw: d1 91 bb bb a9 81 68 dd 23 0d 24 51 58 64 48 20 ac 9c fe 28 bf 49 83 c4 50 f9 1d 52 9e 93 40 69 6d ac 7c 9e 53 43 e5 77 48 39 4f 02 9d db 70 1b 4b 01 cb 49 40 f8 42 f2 d1 da d3 6f fb 8c eb 24 d0 78 ec c6 70 53 6c ce 22 92 1d 4e 5e 0b 74 25 f2 28 Data Ascii: h#$QXdH (IPR@im\|SCwH9OpKI@Bo$xpSl"N^t%("8O\1]w(HI@XOGz&">5yZP?J}~s}G?>b"@eEN@*Eg:($PH;A#Vqro_tF(q mxzI
Sep 28, 2021 17:51:18.072407007 CEST	146	IN	Data Raw: ab ea c2 d1 bd 66 87 a8 6b 1f 0a 94 2e 25 55 b7 9e 73 4f a6 f1 ad 8b 32 8b f9 2e b9 58 46 c5 78 ca 12 21 34 35 8e de 64 28 96 12 25 aa 1f ab 7f 44 ab a7 f1 77 35 68 45 0b b9 bf 94 4c fc f4 d4 5c c4 a6 bd 85 82 3c f8 0e 4c b9 48 ac 6b 97 e1 72 c8 Data Ascii: fk.%UsO2.XFx!45d(%Dw5hEL\<LHkr\</+H20g}+;QsW^`$k^PN1MH4d'%WEJ.15#Z(%rH"T[XlQtZ!S(%*\Bk
Sep 28, 2021 17:51:18.074445009 CEST	147	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.121800900 CEST	243	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:02 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d22-1582b" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 38 34 38 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc bd e9 7a 1b 57 92 2d fa bf 9f 02 cc 52 d1 80 90 04 49 d9 ae 73 1a 54 0a 47 a3 cd 2a 4d 25 51 96 dd 20 e5 2f 01 24 06 12 13 01 50 a4 4c b0 9f fd ae 15 b1 a7 4c 24 24 57 f5 3d df bd 35 88 89 1c f6 bc 63 c7 b0 22 62 ff fe fd ff a8 dc af 9c ff f3 2a 5b 7c a9 ec 55 3e 7f df 78 d0 38 c4 2d de fd 3f cb d9 d5 a2 9b 55 86 ab d5 7c d9 dc df 1f 8c 56 c3 ab 4e a3 3b 9b ec 9f 5f f2 03 fb 67 b5 c8 b2 fd dc 97 e3 51 77 b9 4a 17 ab 4a e5 64 98 55 fa b3 f1 78 76 3d 9a 0e 2a a3 65 65 85 1b d9 74 35 5a 64 15 bc 95 4d 97 59 65 3a 5b e1 0a af 2d f8 94 55 ff 3d fd 9c be ef 2e 46 f3 55 a5 3b eb 65 95 d1 14 4f f0 71 7f 34 ce 1a a6 79 4f 67 f3 2f 8b d1 60 b8 aa 3c 38 38 f8 31 c6 bf 87 3f da 9e bc 98 5d 4d 7b e9 6a 34 9b c6 95 e3 69 d7 7e f2 52 2b ec 55 f0 34 93 ca 2a af 8e 4f 6c 3b 96 a6 e0 b7 d9 62 32 5a 2e f1 31 db 3b cc 16 59 e7 4b 65 b0 48 a7 ab ac 17 57 fa e8 6c 65 d6 af 74 87 e9 62 90 c5 95 d5 ac 92 4e bf 54 e6 d9 62 89 0f 66 9d 55 3a 9a a2 ab ec 45 8a c6 cf bf f0 65 69 fc 72 d6 5f 5d a7 e8 77 3a ed 55 d2 e5 72 d6 1d a5 28 b2 d2 9b 75 af 26 18 12 69 af 74 71 59 a9 9a 81 88 de 9b 8f a2 9a 54 d5 cb d2 b1 8e 46 56 b1 8f 2a d7 98 98 d9 d5 aa b2 c8 96 ab c5 a8 ab dd 1e 4d bb e3 ab 9e 69 89 7d 63 3c 9a 8c 4c 3d 2c 41 86 0f 53 32 ab 5c 2d d1 15 b6 36 ae 4c 66 bd 51 9f 7f 33 e9 df fc aa 33 1e 2d 87 31 3b d4 1b b1 82 ce d5 0a f7 97 bc 2f c3 19 b3 43 fb 98 bc 65 36 1e b3 90 11 3a 20 9d f6 6d 94 77 50 11 4b c1 50 a1 15 66 c4 a4 f6 eb e1 6c 92 ef 12 e7 fa 6a 31 45 c5 18 20 f6 7b 86 e1 93 4a cf b3 ee ca 14 c4 0a fc da ea ce a6 bd 11 fb be 6c 9a 89 e4 da 4b 3b b3 cf 99 f4 4c d7 8a 59 6b d2 1a 4e 8a 34 46 27 db 3c 5a 0e 53 74 a3 23 eb 50 07 11 4d c0 90 f3 ae ed 1c fa 7a d5 c1 0a c7 3a c6 7c cc 67 0b a9 b7 d8 69 bb ec 4e 7e 7e 5e 79 ff e6 c5 c9 c7 c7 ef 9e 57 8e df 57 de be 7b f3 cb f1 b3 e7 cf 2a d1 e3 f7 f8 1d c5 95 8f c7 27 3f bf f9 70 52 c1 1b ef 1e bf 3e f9 ad f2 e6 45 e5 f1 eb df 2a ff 38 7e fd 4c 46 fe f9 af 6f df 3d 7f ff be f2 e6 5d e5 f8 d5 db 97 c7 cf 9f 61 61 bf 7e fa f2 c3 b3 e3 d7 3f 55 9e e0 d3 d7 6f 4e 2a 2f 8f b1 9c 51 ee c9 9b 0a eb 34 a5 1d 3f c7 77 2f 58 ca ab e7 ef 9e fe 8c f2 1f 3f 39 7e 79 7c f2 5b 5c 79 71 7c f2 9a c5 be 40 b9 8f 2b 6f 1f bf 3b 39 7e fa e1 e5 e3 77 95 b7 1f de bd 7d f3 fe 39 1a f1 8c 1f be 7e f3 fa f8 f5 8b 77 a8 eb f9 ab e7 af 4f 1a a8 1b f7 2a cf 7f c1 8f ca fb 9f 1f bf 7c 29 15 3e fe 80 6e bc 93 56 3e 7d f3 f6 b7 77 c7 3f fd 7c 52 f9 f9 cd cb 67 cf 71 f3 c9 73 96 f4 f2 f8 f1 93 97 cf b5 42 74 f0 e9 cb c7 c7 af e2 ca b3 c7 af 1e ff c4 66 be ab bc 41 41 ef e4 35 d3 c6 8f 3f 3f 97 5b a8 f2 31 fe f7 f4 e4 f8 cd 6b 96 84 21 7a fa e6 f5 c9 3b dc 89 d1 e3 77 27 ee eb 8f c7 ef 9f c7 95 c7 ef 8e df 73 70 5e bc 7b 83 1a 38 ba f8 82 e3 f7 9a df bd 7e ee 0a e2 e0 4b f3 dd 1c e1 2d fe fe 80 01 70 2d 7a f6 fc f1 4b 14 87 09 7b 9d 7b d9 4e f2 ff 91 dd d0 53 8a a7 ab ee 6b d4 8e 3d 30 04 ef 9b d4 6e ff 3f f6 ef Data Ascii: 848ezW-RIsTGM%Q /$PLL$$W=5c"b[\|U>x8-?U\|VN;_gQwJJdUxv=eet5ZdMYe:[-U=.FU;eOq4yOg/`<881?]M{j4i~R+U4Ol;b2Z.1;YKeHWletbNTbfU:Eeir_]w:Ur(u&itqYTFVMi}c<L=,AS2\-6LfQ33-1;/Ce6: mwPKPflj1E {JlK;LYkN4F'<ZSt#PMz:\|giN~~^yWW{'?pR>E8~LFo=]aa~?UoN/Q4?w/X?9~y\|[\yq\|@+o;9~w}9~wO*\|)>nV>}w?\|RgqsBtfAA5??[1k!z;w'sp^{8~K-p-zK{{NSk=0n?
Sep 28, 2021 17:51:18.122113943 CEST	244	IN	Data Raw: ef 58 d2 a6 24 ba b2 ae 54 bb b5 ca df 31 75 8e d4 c9 16 9b 61 53 2c b0 4e a7 ba 51 67 8b 25 5e 55 72 dd 98 2d 06 fb 96 e6 de df ff 8f 9d fe d5 54 88 45 35 8d 3b b5 db 08 34 a0 a2 04 24 3a 8a 66 b2 d1 a2 24 59 7d 99 67 d8 cc a0 0a 57 e3 6c 77 77 Data Ascii: X$T1uaS,NQg%^Ur-TE5;4$:f$Y}gWlwwFv]l{g6,ukuPAkJm5\+\|-9%(*!A/[xT;Zd+j5jD2M^cO$ 0\|N1I,=Nc.fM?'p9x5
Sep 28, 2021 17:51:18.122211933 CEST	246	IN	Data Raw: 87 b5 0e d8 99 8b bb 6c 0c 3e 95 5f ab 54 f6 ed 2f ec d6 4c 31 c8 8b d1 e4 6b 83 8c 21 ae 72 a0 7d 97 96 dc 93 3c 33 2f b2 02 a3 20 0c 97 e1 b4 d6 eb f6 99 ad 46 e9 1b f6 0a 3a 6a 68 14 fa db b2 e7 7a 37 f6 4b df 4d 17 b8 82 66 5a 6b 0e b5 e7 5d Data Ascii: l>_T/L1k!r}<3/ F:jhz7KMfZk]538YOk9+9s4,DQ6Cw71i;$bd+W<[e+Dq6Npp,>=ln&ua[..dY,X'PkjGnM
Sep 28, 2021 17:51:18.178632975 CEST	455	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/Telenor%20E-post%20Velkommen%20til%20Telenor%20E-post_fichiers/jquery_003.js HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.223781109 CEST	486	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: application/x-javascript Last-Modified: Tue, 28 Sep 2021 12:40:04 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"61530d24-c31" Expires: Tue, 05 Oct 2021 15:51:18 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 35 37 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8d 56 5d 53 db 46 14 7d 86 5f 71 c9 30 91 1c 8c 0c 69 9a c9 98 7a 98 94 34 53 d2 49 93 02 69 1f 30 0f 6b 69 65 89 c8 5a 65 77 85 f1 64 f8 ef 3d 77 77 e5 2f 98 36 0c 60 4b 7b bf ef b9 e7 ee e0 c5 de 2e bd a0 db bf 5a a9 17 74 a6 d4 d7 52 d2 e7 aa 9d 96 35 dd 1d 27 af 92 63 3e 2e ac 6d cc 70 30 98 96 b6 68 27 49 aa 66 83 54 e8 42 68 5b 0d 6e bf b1 ea 61 ea 54 21 cc f2 67 aa 59 e8 72 5a 58 7a 79 74 fc 13 fd 51 89 d6 d0 ef 2c ce a7 17 b2 92 c2 c8 8c da 3a 93 9a 6c 21 e9 e3 f9 15 55 65 2a 6b c3 26 06 bb 71 de d6 a9 2d 55 4d 71 2e 52 ab f4 a2 47 df 77 77 ca 9c 62 bb 68 a4 ca 29 93 79 59 4b 1a 8d 46 14 75 c2 11 3d 7f 1e 0e 12 31 cb 9c ca ce 60 40 6f 3f be c3 17 af 11 5f 47 3e e2 e8 a6 4f 9d ed 93 dd 9d 07 92 95 91 b4 e6 41 de 37 4a 5b e3 5d a8 c9 ad 4c 6d b4 34 79 a6 66 33 55 7f b8 84 dd 60 24 d6 f2 5b 5b 6a 19 77 f6 7b bd 95 d9 10 c8 af 5a cd 0d 52 9e 56 6a 22 2a b3 a6 ec 1b e0 34 76 1f d6 b2 df 67 8f bb 3b 77 42 53 53 b5 46 22 1c 1a 8c 0f 06 d3 13 bc 5d 16 49 d6 a9 ca 64 6c 7c 78 5a da 56 d7 94 aa 3a 2f a7 89 16 73 3a 25 43 43 f2 52 5f 2e ce 11 7c a3 6a 59 5b 68 38 8f 6b a6 32 f9 23 a6 bc d4 ff 98 32 56 97 f5 b4 cc 17 1e 56 7f 8b aa 95 f1 1d ff df 88 33 04 1f c2 bd 35 68 fa 29 7d b8 fc f4 67 b2 34 d0 69 0d e9 d2 d9 0c cf 8f 82 6f 84 36 72 dd 5b a8 08 77 d5 24 25 e0 76 ff 29 8f a3 67 e8 23 77 f5 c8 c7 c1 10 b9 2a 4a 43 f8 15 f4 ad 55 16 d8 f4 78 26 81 57 69 aa 74 06 af 64 15 5d bc 3f 7b 79 f4 fa 4d 1f d8 95 26 15 8d 4c 92 84 4d 70 5f 4c 62 18 c3 f1 71 9f 0e 8f 7b 89 96 4d 25 f0 38 18 8f 9f 0d a6 7d 62 b7 eb 2f c7 63 f7 76 3c 8e 38 0f d7 85 1d 8b 21 ec 42 ba f0 fa 04 c0 dc 49 7d 68 ca 4c d2 5c 97 d6 ca ba c3 c2 1c f3 48 a6 81 94 71 51 20 91 f3 9c e6 92 52 51 47 16 a3 c0 5d 72 03 e6 d3 e9 53 39 ad 95 06 cc 2d be da c8 20 8d d6 88 49 25 9f 52 77 d5 fc 71 6d 2e c1 53 b8 58 e6 ec 01 8c 94 29 72 b3 b1 8d d4 f5 d6 3b df 0c e8 21 19 57 1d a4 64 d3 22 66 e8 3c 6c 41 56 4b 91 c5 b0 0b 04 a1 50 56 6a df 56 9e 19 87 36 c4 f5 68 16 9e 40 0a bb 09 a3 b3 9f 94 e6 7d 60 a0 78 cd ec e9 ca c7 0a 92 ce 47 18 23 f6 e9 7d c1 e9 3e 88 d2 81 68 44 2b 3a fb 2a 17 7d 1f 56 9f 54 c3 14 e7 30 ea 89 ea 1f b4 57 f2 77 06 ac 8f 7d 0f 38 65 9e 64 ee ca 98 df f6 36 82 f3 e3 14 70 1c ec 39 d7 f2 1e 38 c9 e2 ef 0f ae 2e 4c 04 b0 21 da ca a2 50 9d 5f e6 10 ef 2b 90 6a 38 80 72 03 26 0b d4 57 b7 b3 89 d4 81 fa 7c 59 33 b1 e0 6e 6f 89 f7 c9 3e 7e 89 37 b5 9c d3 3b 61 65 ec 9b be 63 13 23 ed 55 39 93 f1 81 a5 03 6f ec 05 bd 79 fd 4a 1e fc ec 45 dc 2c 74 cd 88 33 95 b6 33 b0 d5 aa 9c d7 ce 4e 20 0e 54 b4 07 50 8d a2 3e fd 07 e3 f4 9d ca 76 82 a7 14 9d 50 c8 76 14 21 98 2d 81 c4 aa 2f 57 67 81 74 18 8c 11 bc a0 51 00 72 a7 46 c2 82 93 26 ad 45 43 67 e2 fe 50 4c 31 5e 86 6a 65 c9 b4 0d af 10 f4 6d b2 a0 f3 df 36 22 68 04 46 17 3f 2e 02 7e d8 70 ef 4e 9d b7 0d a5 4c cd 04 16 b3 57 f2 0f 1b 6a e1 fc b1 a2 91 69 8b b1 f7 8a fe 21 72 f6 d9 fc 4d 72 ab ca 3a 8e c2 54 Data Ascii: 57fV]SF}_q0iz4SIi0kieZewd=ww/6`K{.ZtR5'c>.mp0h'IfTBh[naT!gYrZXzytQ,:l!Uek&q-UMq.RGwwbh)yYKFu=1`@o?_G>OA7J[]Lm4yf3U`$[[jw{ZRVj"4vg;wBSSF"]Idl\|xZV:/s:%CCR_.\|jY[h8k2#2VV35h)}g4io6r[w$%v)g#wJCUx&Witd]?{yM&LMp_Lbq{M%8}b/cv<8!BI}hL\HqQ RQG]rS9- I%Rwqm.SX)r;!Wd"f<lAVKPVjV6h@}`xG#}>hD+:}VT0Ww}8ed6p98.L!P_+j8r&W\|Y3no>~7;aec#U9oyJE,t33N TP>vPv!-/WgtQrF&ECgPL1^jem6"hF?.~pNLWji!rMr:T
Sep 28, 2021 17:51:18.470640898 CEST	613	OUT	GET /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages.png HTTP/1.1 Host: a0584464.xsph.ru Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm Accept-Encoding: gzip, deflate
Sep 28, 2021 17:51:18.515853882 CEST	618	IN	HTTP/1.1 404 Not Found Server: openresty Date: Tue, 28 Sep 2021 15:51:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 363 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 37 79 67 67 74 36 35 36 2f 46 35 34 65 44 65 65 2f 36 67 73 66 65 72 44 44 32 2f 32 73 71 7a 61 53 53 2f 37 62 76 73 66 45 45 2f 51 33 32 61 7a 38 38 2f 35 35 34 68 67 66 46 46 2f 73 6b 69 6e 73 2f 74 65 6c 65 6e 6f 72 2f 69 6d 61 67 65 73 2f 6d 65 73 73 61 67 65 73 2e 70 6e 67 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 36 20 53 65 72 76 65 72 20 61 74 20 61 30 35 38 34 34 36 34 2e 78 73 70 68 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/skins/telenor/images/messages.png was not found on this server.</p><hr><address>Apache/2.4.6 Server at a0584464.xsph.ru Port 80</address></body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Sep 28, 2021 17:51:18.251791954 CEST	17.248.248.38	443	192.168.11.11	49204	C=US, ST=California, O=Apple Inc., CN=gateway.icloud.com C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1 C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1	C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1 CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE CN=GeoTrust Global CA, O=GeoTrust Inc., C=US	Tue Jun 22 13:54:06 CEST 2021 Wed Dec 12 13:00:00 CET 2018 Mon Jun 16 17:42:02 CEST 2014	Fri Jul 22 13:54:05 CEST 2022 Wed May 07 14:00:00 CEST 2025 Fri May 20 17:42:02 CEST 2022	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
					C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Dec 12 13:00:00 CET 2018	Wed May 07 14:00:00 CEST 2025
					C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1	CN=GeoTrust Global CA, O=GeoTrust Inc., C=US	Mon Jun 16 17:42:02 CEST 2014	Fri May 20 17:42:02 CEST 2022
Sep 28, 2021 17:51:18.718590021 CEST	193.213.115.120	443	192.168.11.11	49207	CN=epost.telenor.no CN=Buypass Class 2 CA 2, O=Buypass AS-983163327, C=NO CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO	CN=Buypass Class 2 CA 2, O=Buypass AS-983163327, C=NO CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO	Tue Aug 18 16:26:24 CEST 2020 Mon Mar 25 13:17:10 CET 2019 Tue Oct 26 10:38:03 CEST 2010	Wed Oct 12 23:59:00 CEST 2022 Sat Oct 26 11:16:17 CEST 2030 Fri Oct 26 10:38:03 CEST 2040	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47,65281-0-23-13-5-13172-18-16-11-10,29-23-24,0	3e4e87dda5a3162306609b7e330441d2
					CN=Buypass Class 2 CA 2, O=Buypass AS-983163327, C=NO	CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO	Mon Mar 25 13:17:10 CET 2019	Sat Oct 26 11:16:17 CEST 2030
					CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO	CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO	Tue Oct 26 10:38:03 CEST 2010	Fri Oct 26 10:38:03 CEST 2040

System Behavior

Analysis Process: xpcproxy PID: 552 Parent PID: 1

General

Start time:	17:51:14
Start date:	28/09/2021
Path:	/usr/libexec/xpcproxy
Arguments:	n/a
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Process Activities

Process Spawned

General

Start time:	17:51:14
Start date:	28/09/2021
Path:	/Applications/Safari.app/Contents/MacOS/Safari
Arguments:	/Applications/Safari.app/Contents/MacOS/Safari
File size:	20896 bytes
MD5 hash:	8e18be737fe87f19fe7a97b4821e2005

Description:	Adversaries may modify plist files to run a program during system boot or user login. Property list (plist) files contain all of the information that macOS and OS X uses to configure applications and services. These files are UTF-8 encoded and formatted like XML documents via a series of keys surrounded by < >. They detail when programs should execute, file paths to the executables, program arguments, required OS permissions, and many others. plists are located in certain locations depending on their purpose such as `/Library/Preferences` (which execute with elevated privileges) and `~/Library/Preferences` (which execute with a user's privileges).
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	macOS
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

macOS Analysis Report http://a0584464.xsph.ru/7yggt656/F54eDee/6gsferDD2/2sqzaSS/7bvsfEE/Q32az88/554hgfFF/index98.htm

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Process Tree

Yara Overview

Jbx Signature Overview

AV Detection:

Compliance:

Networking:

System Summary:

Persistence and Installation Behavior:

Language, Device and Operating System Detection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

Contacted IPs

Public

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

System Behavior

Analysis Process: xpcproxy PID: 552 Parent PID: 1

General

File Activities

File Opened

File Read

Directory Created

Process Activities

Process Spawned

System Activities

Sysctl Requested

Chronological Activities

Analysis Process: Safari PID: 552 Parent PID: 1

General

File Activities

File Opened

File Created

File Deleted

File Truncated

File Read

File Read (Anonymous Pipes)

File Written

File Seeked

File Moved