Edit tour

Windows Analysis Report
https://hkwyolaw.ency.cloud/

Overview

General Information

Sample URL:	https://hkwyolaw.ency.cloud/
Analysis ID:	1501394
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2000,i,17870269698083817735,11241588252409947018,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hkwyolaw.ency.cloud/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
10.15.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
12.22.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
10.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
12.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
12.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound - Source IP: 172.233.123.231 - Destination IP: 192.168.2.4

Timestamp:	2024-08-29T21:20:01.688486+0200
SID:	2857090
Severity:	1
Source Port:	443
Destination Port:	49778
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/jsd/r/8baee50bef5442a7 HTTP/1.1Host: hkwyolaw.ency.cloudConnection: keep-aliveContent-Length: 15784sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://hkwyolaw.ency.cloudSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=sg463LRxea7GCkT0n69snZu9C1s3PW.nzHe3WmdlWcE-1724959187-1.0.1.1-erCJ6Kk62pWu1pNPxc3Nv6YNLeq8PGylcauOXWg5jXliNI.QKln5MCYCGGBfdr5RoBbiQAQSE.VFQSrKoHI5yw

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:20:12 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: a842e37b-0e1b-482f-9d13-19a5d8ec2b00x-ms-ests-server: 2.1.18794.6 - SEASLR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:20:18 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: f3f48bd4-c1de-4088-9e7c-294dd82b8700x-ms-ests-server: 2.1.18794.6 - KRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:20:18 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: 4530b1a1-63d4-4b6f-b033-cc1522137bd9x-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 1D99660DF5454FE09248E91B71CD4A63 Ref B: AMS231032610035 Ref C: 2024-08-29T19:20:18Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:20:23 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 2c3fb01d-2b4e-46d0-8a93-14459dc14901x-ms-ests-server: 2.1.18794.6 - JPE ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:20:31 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: e685657d-1fba-4406-ba1c-95ad5dedfe01x-ms-ests-server: 2.1.18794.6 - KRSLR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:20:41 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3da42625-4137-4793-950c-99f3f81ba200x-ms-ests-server: 2.1.18794.6 - KRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:20:49 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 2c3fb01d-2b4e-46d0-8a93-14455ec54901x-ms-ests-server: 2.1.18794.6 - JPE ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 29 Aug 2024 19:21:03 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 78f636f0-872c-4d41-8f7a-2d68891c9600x-ms-ests-server: 2.1.18794.6 - KRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_140.2.dr, chromecache_128.2.dr	String found in binary or memory: http://bit.ly/sp-js)
Source: chromecache_112.2.dr	String found in binary or memory: https://app.instapage.com/ajax/pageserver/files/serve-file
Source: chromecache_112.2.dr, chromecache_131.2.dr	String found in binary or memory: https://cdn.instapagemetrics.com/t/js/3/it.js
Source: chromecache_90.2.dr, chromecache_112.2.dr, chromecache_131.2.dr	String found in binary or memory: https://ec.instapagemetrics.com
Source: chromecache_112.2.dr	String found in binary or memory: https://g.fastcdn.co/js/cm.js
Source: chromecache_90.2.dr, chromecache_142.2.dr, chromecache_131.2.dr, chromecache_117.2.dr, chromecache_106.2.dr, chromecache_136.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_90.2.dr, chromecache_142.2.dr, chromecache_131.2.dr, chromecache_117.2.dr, chromecache_106.2.dr, chromecache_136.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE
Source: chromecache_112.2.dr	String found in binary or memory: https://hkwyolaw.ency.cloud
Source: chromecache_112.2.dr	String found in binary or memory: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt
Source: chromecache_112.2.dr	String found in binary or memory: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt
Source: chromecache_112.2.dr	String found in binary or memory: https://storage.googleapis.com/instapage-assets/favicon/favicon-64x64.ico

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@18/96@76/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2000,i,17870269698083817735,11241588252409947018,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hkwyolaw.ency.cloud/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2000,i,17870269698083817735,11241588252409947018,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://hkwyolaw.ency.cloud/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js	0%	Avira URL Cloud	safe
https://l1ve.ency.cloud/login.srf?wa=wsignin1.0&rpsnv=159&checkda=1&ct=1724959229&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.ency.cloud%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.ency.cloud%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253dE269E9D1D98D4545%2526opidt%253d1724959227%2526uaid%253d1b9ba598ef1c4718bf548acdb9395636%2526contextid%253d75F2B73860AC1050%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D1b9ba598ef1c4718bf548acdb9395636%26suc%3Dhttps%253a%252f%252f8d19784d-02f3d9a4.ency.cloud.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=1b9ba598ef1c4718bf548acdb9395636	0%	Avira URL Cloud	safe
http://bit.ly/sp-js)	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js	0%	Avira URL Cloud	safe
https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://hkwyolaw.ency.cloud	0%	Avira URL Cloud	safe
https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	0%	Avira URL Cloud	safe
https://hkwyolaw.ency.cloud/cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js?	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	0%	Avira URL Cloud	safe
https://g.fastcdn.co/js/Cradle.8725edce5135a9515d48.js	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	0%	Avira URL Cloud	safe
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/images/2_bc3d32a696895f78c19d.svg	0%	Avira URL Cloud	safe
https://l1ve.ency.cloud/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fhkwyolawofficelogin.ency.cloud%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARmLJ0tLfNewn1_SNfZnZZhZrMYOeNzMsvAKlcxKhM2Tv8CI-MLRsZbTIL-RemeKeHFbqkpqUWJJZn5eRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECrT1SeMdnY4aWf_mRROW9eqKMZ1i1XfLsUz1s3DKcXV1y3bXzi_1MTR2DS80yTJzTHWKDM0McHLOyAp3dvYyLXe1NbYynMAmNIGN6RQbwwc2xg52hlnsDAc4GTfwMB7gZfjBd_Trsys_uze983jFrxNRlV2eCjSryMzbP8kgNS3I3cI11yyowsjV08evzCK_MEg_38jH3dU9y9F2gwDDAwEGAA2&estsfed=1&uaid=1b9ba598ef1c4718bf548acdb9395636&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2f8d19784d-02f3d9a4.ency.cloud.orgid.com	0%	Avira URL Cloud	safe
https://539d138f-02f3d9a4.ency.cloud/PXzC5j78di/main.min.js	0%	Avira URL Cloud	safe
https://ec.instapagemetrics.com/t/two	0%	Avira URL Cloud	safe
https://a5031de5-02f3d9a4.ency.cloud/?session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	0%	Avira URL Cloud	safe
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	0%	Avira URL Cloud	safe
https://app.instapage.com/ajax/pageserver/files/serve-file	0%	Avira URL Cloud	safe
https://ec.instapagemetrics.com/t/two?3thpc=true	0%	Avira URL Cloud	safe
https://signup.ency.cloud/error.aspx?e=404	0%	Avira URL Cloud	safe
https://g.fastcdn.co/js/sptw.2fff3c07e91a81e507a4.js	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	0%	Avira URL Cloud	safe
https://g.fastcdn.co/js/utils.8e682833b85e4bb96d30.js	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://g.fastcdn.co/js/Links.7722c547d653e74ec16f.js	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	Avira URL Cloud	safe
https://v.fastcdn.co/u/da0b7436/65136922-0-Screenshot-2024-08-2.png	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://g.fastcdn.co/js/cm.js	0%	Avira URL Cloud	safe
https://hkwyolawofficelogin.ency.cloud/02f3d9a46eef4029b93e04119111d9c5/	0%	Avira URL Cloud	safe
https://hkwyolaw.ency.cloud/cdn-cgi/challenge-platform/h/b/jsd/r/8baee50bef5442a7	0%	Avira URL Cloud	safe
https://8d19784d-02f3d9a4.ency.cloud/Prefetch/Prefetch.aspx	0%	Avira URL Cloud	safe
https://l1ve.ency.cloud/Me.htm?v=3	0%	Avira URL Cloud	safe
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://6ea3e58b-02f3d9a4.ency.cloud/images/favicon.ico?v=2	0%	Avira URL Cloud	safe
https://hkwyolaw.ency.cloud/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://ec.instapagemetrics.com	0%	Avira URL Cloud	safe
https://signup.ency.cloud/signup?sru=https://l1ve.ency.cloud/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https://22e7fe0a-02f3d9a4.ency.cloud	0%	Avira URL Cloud	safe
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	0%	Avira URL Cloud	safe
https://cdn.instapagemetrics.com/t/js/3/it.js	0%	Avira URL Cloud	safe
https://9b36d051-02f3d9a4.ency.cloud/ns?c=ca0d5630-663b-11ef-b954-8b91b831308d	0%	Avira URL Cloud	safe
https://g.fastcdn.co/js/LazyImage.a698675f6fd38cb87757.js	0%	Avira URL Cloud	safe
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js	0%	Avira URL Cloud	safe
https://hkwyolawofficelogin.ency.cloud/favicon.ico	0%	Avira URL Cloud	safe
https://aa6c90d0-02f3d9a4.ency.cloud/index.html	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dcd98dee-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
9b36d051-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
secure.pageserve.co	104.18.38.43	true	false	unknown
cdn.instapagemetrics.com	34.36.17.181	true	false	unknown
766c2f61-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
86b155fe-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
258f46e4-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
539d138f-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
abd318b4-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
www.google.com	142.250.185.68	true	false	unknown
ec.instapagemetrics.com	104.21.51.207	true	false	unknown
l1ve.ency.cloud	172.233.123.231	true	true	unknown
a5031de5-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
bfd0284f-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
v.fastcdn.co	172.64.146.38	true	false	unknown
signup.ency.cloud	172.233.123.231	true	true	unknown
e7de3c1c-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
g.fastcdn.co	104.18.41.218	true	false	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
aa6c90d0-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
6ea3e58b-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
8d19784d-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
a58b77c9-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
3cb44b12-02f3d9a4.ency.cloud	172.233.123.231	true	true	unknown
hkwyolawofficelogin.ency.cloud	172.233.123.231	true	true	unknown
hkwyolaw.ency.cloud	unknown	unknown	false	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js	true	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	true	Avira URL Cloud: safe	unknown
https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin	true	Avira URL Cloud: safe	unknown
https://l1ve.ency.cloud/login.srf?wa=wsignin1.0&rpsnv=159&checkda=1&ct=1724959229&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.ency.cloud%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.ency.cloud%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253dE269E9D1D98D4545%2526opidt%253d1724959227%2526uaid%253d1b9ba598ef1c4718bf548acdb9395636%2526contextid%253d75F2B73860AC1050%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D1b9ba598ef1c4718bf548acdb9395636%26suc%3Dhttps%253a%252f%252f8d19784d-02f3d9a4.ency.cloud.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=1b9ba598ef1c4718bf548acdb9395636	true	Avira URL Cloud: safe	unknown
https://hkwyolaw.ency.cloud/cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js?	false	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	true	Avira URL Cloud: safe	unknown
https://ec.instapagemetrics.com/t/two	false	Avira URL Cloud: safe	unknown
https://l1ve.ency.cloud/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fhkwyolawofficelogin.ency.cloud%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARmLJ0tLfNewn1_SNfZnZZhZrMYOeNzMsvAKlcxKhM2Tv8CI-MLRsZbTIL-RemeKeHFbqkpqUWJJZn5eRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECrT1SeMdnY4aWf_mRROW9eqKMZ1i1XfLsUz1s3DKcXV1y3bXzi_1MTR2DS80yTJzTHWKDM0McHLOyAp3dvYyLXe1NbYynMAmNIGN6RQbwwc2xg52hlnsDAc4GTfwMB7gZfjBd_Trsys_uze983jFrxNRlV2eCjSryMzbP8kgNS3I3cI11yyowsjV08evzCK_MEg_38jH3dU9y9F2gwDDAwEGAA2&estsfed=1&uaid=1b9ba598ef1c4718bf548acdb9395636&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2f8d19784d-02f3d9a4.ency.cloud.orgid.com	true	Avira URL Cloud: safe	unknown
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/images/2_bc3d32a696895f78c19d.svg	true	Avira URL Cloud: safe	unknown
https://539d138f-02f3d9a4.ency.cloud/PXzC5j78di/main.min.js	true	Avira URL Cloud: safe	unknown
https://a5031de5-02f3d9a4.ency.cloud/?session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	true	Avira URL Cloud: safe	unknown
https://g.fastcdn.co/js/Cradle.8725edce5135a9515d48.js	false	Avira URL Cloud: safe	unknown
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js	true	Avira URL Cloud: safe	unknown
https://signup.ency.cloud/error.aspx?e=404	true	Avira URL Cloud: safe	unknown
https://ec.instapagemetrics.com/t/two?3thpc=true	false	Avira URL Cloud: safe	unknown
https://g.fastcdn.co/js/sptw.2fff3c07e91a81e507a4.js	false	Avira URL Cloud: safe	unknown
https://g.fastcdn.co/js/utils.8e682833b85e4bb96d30.js	false	Avira URL Cloud: safe	unknown
https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1	true		unknown
https://g.fastcdn.co/js/Links.7722c547d653e74ec16f.js	false	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	true	Avira URL Cloud: safe	unknown
https://v.fastcdn.co/u/da0b7436/65136922-0-Screenshot-2024-08-2.png	false	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js	true	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://g.fastcdn.co/js/cm.js	false	Avira URL Cloud: safe	unknown
https://hkwyolaw.ency.cloud/cdn-cgi/challenge-platform/h/b/jsd/r/8baee50bef5442a7	false	Avira URL Cloud: safe	unknown
https://8d19784d-02f3d9a4.ency.cloud/Prefetch/Prefetch.aspx	true	Avira URL Cloud: safe	unknown
https://hkwyolaw.ency.cloud/	false		unknown
https://hkwyolawofficelogin.ency.cloud/02f3d9a46eef4029b93e04119111d9c5/	true	Avira URL Cloud: safe	unknown
https://6ea3e58b-02f3d9a4.ency.cloud/images/favicon.ico?v=2	true	Avira URL Cloud: safe	unknown
https://l1ve.ency.cloud/Me.htm?v=3	true	Avira URL Cloud: safe	unknown
https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	true	Avira URL Cloud: safe	unknown
https://hkwyolaw.ency.cloud/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://signup.ency.cloud/signup?sru=https://l1ve.ency.cloud/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https://22e7fe0a-02f3d9a4.ency.cloud	true	Avira URL Cloud: safe	unknown
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	true	Avira URL Cloud: safe	unknown
https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	true		unknown
https://9b36d051-02f3d9a4.ency.cloud/ns?c=ca0d5630-663b-11ef-b954-8b91b831308d	true	Avira URL Cloud: safe	unknown
https://g.fastcdn.co/js/LazyImage.a698675f6fd38cb87757.js	false	Avira URL Cloud: safe	unknown
https://cdn.instapagemetrics.com/t/js/3/it.js	false	Avira URL Cloud: safe	unknown
https://dcd98dee-02f3d9a4.ency.cloud/shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js	true	Avira URL Cloud: safe	unknown
https://hkwyolawofficelogin.ency.cloud/favicon.ico	true	Avira URL Cloud: safe	unknown
https://aa6c90d0-02f3d9a4.ency.cloud/index.html	true	Avira URL Cloud: safe	unknown
https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://hkwyolaw.ency.cloud	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
http://bit.ly/sp-js)	chromecache_140.2.dr, chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js	chromecache_90.2.dr, chromecache_142.2.dr, chromecache_131.2.dr, chromecache_117.2.dr, chromecache_106.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://app.instapage.com/ajax/pageserver/files/serve-file	chromecache_112.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	chromecache_90.2.dr, chromecache_142.2.dr, chromecache_131.2.dr, chromecache_117.2.dr, chromecache_106.2.dr, chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://ec.instapagemetrics.com	chromecache_90.2.dr, chromecache_112.2.dr, chromecache_131.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.185.227	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
172.233.123.231	dcd98dee-02f3d9a4.ency.cloud	United States	20940	AKAMAI-ASN1EU	true
34.36.17.181	cdn.instapagemetrics.com	United States	2686	ATGS-MMD-ASUS	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
104.21.51.207	ec.instapagemetrics.com	United States	13335	CLOUDFLARENETUS	false
172.64.149.213	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.38.43	secure.pageserve.co	United States	13335	CLOUDFLARENETUS	false
104.18.41.218	g.fastcdn.co	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.64.146.38	v.fastcdn.co	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501394
Start date and time:	2024-08-29 21:18:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hkwyolaw.ency.cloud/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@18/96@76/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt Browse: https://l1ve.ency.cloud/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fhkwyolawofficelogin.ency.cloud%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARmLJ0tLfNewn1_SNfZnZZhZrMYOeNzMsvAKlcxKhM2Tv8CI-MLRsZbTIL-RemeKeHFbqkpqUWJJZn5eRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECrT1SeMdnY4aWf_mRROW9eqKMZ1i1XfLsUz1s3DKcXV1y3bXzi_1MTR2DS80yTJzTHWKDM0McHLOyAp3dvYyLXe1NbYynMAmNIGN6RQbwwc2xg52hlnsDAc4GTfwMB7gZfjBd_Trsys_uze983jFrxNRlV2eCjSryMzbP8kgNS3I3cI11yyowsjV08evzCK_MEg_38jH3dU9y9F2gwDDAwEGAA2&estsfed=1&uaid=1b9ba598ef1c4718bf548acdb9395636&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2f8d19784d-02f3d9a4.ency.cloud.orgid.com

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.206, 74.125.206.84, 142.250.185.131, 34.104.35.123, 142.250.184.251, 216.58.206.91, 172.217.16.155, 142.250.185.187, 172.217.16.219, 142.250.181.251, 142.250.186.187, 142.250.184.219, 216.58.212.187, 142.250.186.155, 172.217.18.27, 216.58.206.59, 142.250.186.91, 142.250.185.251, 142.250.185.219, 142.250.186.59, 142.250.185.91, 142.250.186.123, 142.250.74.219, 142.250.185.123, 142.250.185.155, 20.12.23.50, 93.184.221.240, 192.229.221.95, 20.166.126.56, 20.3.187.198, 142.250.186.138, 142.250.184.234, 142.250.181.234, 142.250.185.202, 142.250.184.202, 172.217.18.106, 216.58.206.42, 172.217.16.202, 142.250.185.234, 142.250.185.170, 142.250.74.202, 142.250.186.42, 142.250.186.74, 172.217.18.10, 216.58.206.74, 216.58.212.170, 142.250.186.163
Excluded domains from analysis (whitelisted): storage.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://hkwyolaw.ency.cloud/

Input	Output
URL: https://hkwyolaw.ency.cloud/ Model: jbxai

URL: https://hkwyolaw.ency.cloud/ Model: jbxai	{ "brand":["Hathaway & Kunz LLP"], "contains_trigger_text":true, "prominent_button_name":"VIEW SHARED DOCUMENT", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype", "No account? Create one! Can't access your account?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb939563 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["Create account", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb939563 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "prominent_button_name":"Next", "text_input_field_labels":["someone@example.com", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb939563 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"next", "text_input_field_labels":["someone@example.com", "Get a new email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb939563 Model: jbxai	{ "phishing_score":8, "brand_name":"Microsoft", "reasons":"The domain does not match the legitimate Microsoft domain, the presence of an unusual top-level domain (.cloud), and the lack of a secure protocol (HTTPS) in the URL."}

URL: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true Model: jbxai	{ "phishing_score":8, "brand_name":"Microsoft", "reasons":"The domain name 'hkwyolawofficelogin.ency.cloud' is unusual and does not match the typical Microsoft domain structure, which is a strong indication of a phishing attempt. The presence of a search bar at the bottom of the page and the typical sign-in page design elements are attempts to mimic the legitimate Microsoft website, but the domain name is a clear red flag."}

URL: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb939563 Model: jbxai	{ "phishing_score":2, "brand_name":"Create account", "reasons":"The domain name seems appropriate for the identified brand, but the use of a.cloud top-level domain is uncommon for a brand that is not explicitly related to cloud services. Additionally, there are no notable features or images on the page that would suggest a legitimate brand."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	48876
Entropy (8bit):	7.969916650119032
Encrypted:	false
SSDEEP:	768:Ua9ZQL3gqw5GGdEXYTD1vcKXWCjJr7TtYw2RlOUqAnq+Se/Xm764TPEVOrObvUS9:/A3g3GWBTBkoJr1H29qXe/LePcOObvUo
MD5:	59163A626E3E61DCBE32DB6BD511D8CB
SHA1:	868CFA61D59871BBEE4A13C2511E13A142893165
SHA-256:	EE3AB02ACB26B9EE8AEC3A9C5FAE9772A4409950AC9D435642BDA4BFD9D15504
SHA-512:	16C7ACB0438DD14879D7B9420CD0D5A1D701B8446CE5F3D158B8A807FC05E679599FC8EA532BC314A1A659765E573EA2FA7BD7345BA27B04D028AA4D9C461D12
Malicious:	false
Reputation:	low
URL:	https://v.fastcdn.co/u/da0b7436/65136922-0-Screenshot-2024-08-2.png
Preview:	RIFF...WEBPVP8L.../}CT..@r.H..;.&"a...\..m......o..I............{...$#GR./\|w.b..\|9..X.mS..G..<..[.G.]...G.....Y...s.....X..E........PUo.m+......D..@..;.....g$....B f.......K2W...k..$..)2I.Z....I...D.#I.$.F........@ Q.pmE.m...(r.94.4........r.Q<..$I.....K..V..a.m.\|......\|.v......#......?.c..W.F..1C.....#..x......w.^_...>..u.0T..W...~..y...q.}..(:.......N......U.5o3..NUQ[U_.T.V.i..)3e.U...=`F8$..z.:...zC.\|iK?.....:.%..j..R.)....P....C.^vm....sSvg..MM.i.~5/U{Q..u.SU.EU[m....." ..:.(^.?.qN`^..Bel....a..I.."...i..E.,..J.B1{...v.7..g.Um.sU..&..pu..L?...S.3..+..VE....N.i.....n.i.....# ...E.A..y........TQZ.S}xok...VUs.......u..d.Q.f.&..`......ME..V...7.4.1t.~].P..u.G....\|.`..=.@e.NYM.o.......F.\e.y.E...Y.}S..m.H...W.3.{.cDL....9;)..v._..h@P18.m..q........v........{...2..@.k.8._.<..l..o. -...4..i.vc.....7..Qzl.A./.......>.....V....Z{Ph..h...03.....}.13.....;1[.eI.....k,.m...oA.,I.$.......j>z/U&.I.m.$IZk..H..B61"..)..w...-I.%I.m..x...g

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7875), with no line terminators
Category:	downloaded
Size (bytes):	7875
Entropy (8bit):	5.75602038830457
Encrypted:	false
SSDEEP:	192:nYA8+rypMbPXgeVruM633oy0124u2d/damQ:nYAzmabPXgeVruMg3oHu2tdamQ
MD5:	EBF31236DAEBC7B493C12B5256EA00AA
SHA1:	EAE95D1D19C95ED425C875E127BC465207D3DA78
SHA-256:	9037DE54B4F59CDC3F186D198856A417400F4942526E140C09CBD373ACF522FD
SHA-512:	5BCEDA66751816C2DC662DAAE8229703BAB4C275B6AB24923F359D92AF5506B85B98F589B5B756889404AE4B1463DD0599A34C81C32E1842C5F59120D05E34DE
Malicious:	false
Reputation:	low
URL:	https://hkwyolaw.ency.cloud/cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(311))/1(parseInt(U(299))/2)+-parseInt(U(362))/3+-parseInt(U(321))/4+parseInt(U(329))/5(parseInt(U(358))/6)+parseInt(U(361))/7+-parseInt(U(277))/8(parseInt(U(325))/9)+parseInt(U(282))/10(parseInt(U(339))/11),e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,167665),g=this\|\|self,h=g[V(324)],i={},i[V(336)]='o',i[V(343)]='s',i[V(295)]='u',i[V(305)]='z',i[V(337)]='n',i[V(302)]='I',j=i,g[V(373)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|void 0===D)return F;for(H=m(D),C[a0(346)][a0(312)]&&(H=H[a0(320)](C[a0(346)][a0(312)](D))),H=C[a0(285)][a0(340)]&&C[a0(327)]?C[a0(285)][a0(340)](new C[(a0(327))](H)):function(N,a1,O){for(a1=a0,N[a1(335)](),O=0;O<N[a1(347)];N[O+1]===N[O]?N[a1(342)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(275)][a0(376)](I),J=0;J<H[a0(347)];K=H[J],L=l(C,D,K),I(L)?(M='s'===L&&!C[a0(294)](D[K]),a0(344)===E+K?G(E+K,L

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 894 x 338, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	69064
Entropy (8bit):	7.991234626429274
Encrypted:	true
SSDEEP:	1536:9CHGNXDd1Z6i18VUBA33Bk/G318br5igAvBu4kR:9WGh5ii18ma3aOavQxBu4kR
MD5:	09EDA6A50A9A44988646E5FA710D2D8A
SHA1:	56C4030F695274267736771F9AD9DFCBEB0DC86F
SHA-256:	CACA21CE8272934017D56FE25C28EB96A11A672942C81451C31547173038FEF3
SHA-512:	E5EC0E887EC0909B693B5745DBA2B61C94F15340E32FECE1F8524921B6E194B927CF1B49434E002C723B14C314F2E326C3955453BC387FED9E78F1AB02A6CB78
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...R....."..'....iCCPicc..x..wP........ZB(RBo.[.)!.....FH(....T..kAE.+...Z.Y+....{].EAY......>..y.....9s?.3.~.3.;s...<.8.U...I%.A~...D&..p..........#".@.....p.......oR.......9'.r..r>...\|.D........Qn.3]"oP..G9.;..r..ca.&:.#g:....I..(L.`...r....H ..Y,g.........B^#..?+./>i.......<v.."..s.Y....Vv.l..3yP.%..........U.(yZ.8........g~.'q..<.P..ia...\|...qN....gINd..^.a.3O2q.,3F.OO......9O.;m.s3.B'j8..D....A..7qn..........+M..V.'._....W.&H.....Q..~....S.d.).yQ..R..9.7"z.3x!.....,yH..a./..i.\|)..../....L....0."..d....3..{.1.c..C.qu"W...K022rj".f.p\|%...D.....&....L..c.\8 ...A....,.....<... ..!..`6.!..A..`.,."(....`'..p..B....p...M.....z......F...P..... ..5..o$..C"..$.ICD..Y..@J.R...T#?#'......y.t!}.[.3.A)(..C.P;....P4.....s.\|..]...U.!..=.^C..+t...%..c....0.L8&....`.`.1e.L-........c>a.X.....zb..1X>v.v.v...{.[.m...va...pT........qi.y."\.n...."........3..x7\|0>..._._.........A.`M."..x.)....p.p..A.!\|$*.....@b"QD, ......;./..$U.)..N.....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (379), with no line terminators
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	5.182032506557214
Encrypted:	false
SSDEEP:	6:+hjgjYhrQNMbALm7FX4hHOv2hCrsmGmJ9LEinawXtsGteqjpXrLYVsjfn:+dcYJQMkLet4hHOuhCAmGXbAsBenYV2n
MD5:	29C24FF1E7D09EB3B67FCF90DE082749
SHA1:	84263358A2D879FF4773F657BAE4A438EF7AC89C
SHA-256:	2E065B142374BE24BCDFFF600DECCC28F6AF18F5401CC224342FBE8FCA3DE357
SHA-512:	F7E8C6374898C337F86D55FF959ADABE63E2E03497997104902D58BE5D2A6E931C0121CDCD956DB53ED9E3B8A4D22CFA4A92E8BA3EE7BBAAD33AE05502E8DB69
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/Links.7722c547d653e74ec16f.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size&&(n=a,document.querySelectorAll(c).forEach((function(a){a.href=(0,r.MM)(a.href,n)}))),(0,r.jS)("Links")}))}},n=>{n(n.s=2594)}]);

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 56391
Category:	downloaded
Size (bytes):	16112
Entropy (8bit):	7.9853806279143615
Encrypted:	false
SSDEEP:	192:gRCWKuQFsW2AzKFUuU/ZU6gjeDAmfAhPh2WfUeM+SC3U5hOtIJjJzDCXeqJPHMd5:yHWdKqlDfAn2WfURN5gIJZQFEYhgHpn
MD5:	5711D7744DA20062A039724CB53597EE
SHA1:	C35D3C986E03380199195A0962357F871D42DDE5
SHA-256:	E8CB3E5F5794500E7B6FC9E3B759AF6AF66F5F3DF1CC146C81C5F4303FBDEB08
SHA-512:	C773330DA8BBB58E75A735FFA3F5605B07A59B6B937C93D4D99BC3E798EC82D482595BE2903FBC5FC6B5DCB9BB14CCF23776B6276317D88F64EC1FF03F6C0128
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9.j.B1DwUeUeeeefef..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<.w.(...ey.....i8...._V.h.~.{Y....`......6..(.=...wC......es....;.~.....+../.b.E..G.:....(....'.K...&..p2...zu..w.&.?w..b2...F...7...p.M. .n.;..k?.:......i../.M..1Ah...'N]..Ll@..p... ....:N.."p.. Xx..cL...O..7.z.O.^......s.O..h..V...\|1..@.....XL....o..X/by..C..,......0.~$........._.......Z.._...~U).....j...C..`.."..t.z.-..m.]..3y...S@...'.KSzS...4.b......`.....K.[.&....._z..eF.)......'L"..E4...R.._$t.V......=.k..dv.O...b_...8u#...P,a......T..ks........f...?....X..E.."f@a.fn!$......U..B$B...\d........t......w......\?`q..........0..(...C..!..=.xk....(.w.O..".!b.4...t$g..r...7..\|.....m.;(..Y.....V...Y........._a.7./..........y0u...B.TH...].k...^..sOf.2.2'....Ra$.......N........n..#.."...3.."D..)...[...H......vwT...Jh.^.(.....s...e..?....

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141810
Category:	downloaded
Size (bytes):	49809
Entropy (8bit):	7.995612907120691
Encrypted:	true
SSDEEP:	768:B2sHIY3QN0O01Fi5B/H21s9v7UI1FhE+lpYyuSFp2YCouv9DT2BYxEoTui:AxYRO+snH21s9DBXXYe2hjlDLKoii
MD5:	3944C777502742C874A6E2F1C7D817B0
SHA1:	106B56E689049C53D90F169955B199E752284BE1
SHA-256:	D681A1278E1C107519F67E088EEE7A20157232EDF5D3017FBA192F3AA5CCB609
SHA-512:	23D7BF29D154983386336F2EF6232A056E9E166700D25B00C16831F27A8EC1AC1D1BE06EA7B0D7B95A9BBD15B9BA77CA29D52ED417FE692E0FD6C8C17F219E30
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y!.T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q........0...(..a.&".....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG./t......t....5"...oC%.+..L.>...V.o.1}.....l..s.E.M.L!.G.BV.m...)....m...r.9.8.6..^.....Tt.\.....U.q.N.b.cK.?...+2.T...U.#.T[...Zcs..49..I....~.'w.a]....h..u/..N..z0..}.....O............~x.....>...A8U..AP...E.M.N..[&A.Y_...6....\I....Q.....Y..\6.-.~..V.4..sy.w..D...]'...../.k.?D...$a.<..;7.?.................et..:.Og.]._.+...N......+..CU.V.UV.ep....F..#.Ng.Zj...?N.f...:/s+t^.vc.I..#..q5.L..H$.(..s....1.Pa.....N....d..2.wd!.....k.V...2qV.Y...l....x.....E...e.....>...C..+...c.23..@...r...Q..3..YY.Nt...I.L. ..T......<..v..a......0E.3...j...D........6.Qq.W.OU...H..N...jb.u...D_k.......J..._[X.....d....*.\|.i.Z."..iy..Q......^_..[..LH.........^T..2Ld7..)Q.$J&

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59552), with no line terminators
Category:	downloaded
Size (bytes):	59586
Entropy (8bit):	5.399493138817419
Encrypted:	false
SSDEEP:	768:3EUzC7wTML5H2TmcXQZPDIh4OiDIsyczTDwv1:fTMxqtA2Gev1
MD5:	5B9C1E18E7818E2D69550EC80E4936FD
SHA1:	4D6906D97B6F3FAC6EE66270A97E3D3F13B4E77D
SHA-256:	B0F04580DFC831EFFB265B29B88BC622D94E3676984FDD7B17D5FE7B21DC3CA5
SHA-512:	78357F3B2E7E7FA562E3FD76CB6CA5C5431F0C53BF3E457E88964EA361FE427C4BEA17ED35927BCDC356F0E531E29164346530D8CC88BD8CDC3A617FE815B414
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/utils.8e682833b85e4bb96d30.js
Preview:	(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,u=[null,null,null,null],s=-1;if(r.ie){for(var c=[];++s<a;)e=i[s],n=i[++s],u[0]=e>

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2507), with no line terminators
Category:	downloaded
Size (bytes):	2507
Entropy (8bit):	5.1470151284317565
Encrypted:	false
SSDEEP:	48:icZct9sKqe/GvDoGu8E59ywtAWjOKSByR8aGboRh6xevO:a9HqQkDCpzUDYR89xevO
MD5:	27C8A49AC26ECEF4F41FE26CED69A58B
SHA1:	A2DACC66455DA6ECEAC53CDEF818C849FF405FC1
SHA-256:	F15DC2DF620A373AC551CEB8364BA4B2085B95FFC59FAC2BBC304AF57BF20E55
SHA-512:	021860F83E2473905245C67152491DC7D2B6CD9DFCBD707A9595D0CC2CF4176CB0BA41B775891A1FB02058E493BCAD9E0C0699281FDE91549D4F2B0B57ABD477
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/LazyImage.a698675f6fd38cb87757.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}function i(t){return function(t){if(Array.isArray(t))return a(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|function(t,r){if(t){if("string"==typeof t)return a(t,r);var e={}.toString.call(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function a(t,r){(null==r\|\|r>t.length)&&(r

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://dcd98dee-02f3d9a4.ency.cloud/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 56391
Category:	dropped
Size (bytes):	16112
Entropy (8bit):	7.9853806279143615
Encrypted:	false
SSDEEP:	192:gRCWKuQFsW2AzKFUuU/ZU6gjeDAmfAhPh2WfUeM+SC3U5hOtIJjJzDCXeqJPHMd5:yHWdKqlDfAn2WfURN5gIJZQFEYhgHpn
MD5:	5711D7744DA20062A039724CB53597EE
SHA1:	C35D3C986E03380199195A0962357F871D42DDE5
SHA-256:	E8CB3E5F5794500E7B6FC9E3B759AF6AF66F5F3DF1CC146C81C5F4303FBDEB08
SHA-512:	C773330DA8BBB58E75A735FFA3F5605B07A59B6B937C93D4D99BC3E798EC82D482595BE2903FBC5FC6B5DCB9BB14CCF23776B6276317D88F64EC1FF03F6C0128
Malicious:	false
Reputation:	low
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9.j.B1DwUeUeeeefef..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<.w.(...ey.....i8...._V.h.~.{Y....`......6..(.=...wC......es....;.~.....+../.b.E..G.:....(....'.K...&..p2...zu..w.&.?w..b2...F...7...p.M. .n.;..k?.:......i../.M..1Ah...'N]..Ll@..p... ....:N.."p.. Xx..cL...O..7.z.O.^......s.O..h..V...\|1..@.....XL....o..X/by..C..,......0.~$........._.......Z.._...~U).....j...C..`.."..t.z.-..m.]..3y...S@...'.KSzS...4.b......`.....K.[.&....._z..eF.)......'L"..E4...R.._$t.V......=.k..dv.O...b_...8u#...P,a......T..ks........f...?....X..E.."f@a.fn!$......U..B$B...\d........t......w......\?`q..........0..(...C..!..=.xk....(.w.O..".!b.4...t$g..r...7..\|.....m.;(..Y.....V...Y........._a.7./..........y0u...B.TH...].k...^..sOf.2.2'....Ra$.......N........n..#.."...3.."D..)...[...H......vwT...Jh.^.(.....s...e..?....

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 64x64, 8 bits/pixel
Category:	dropped
Size (bytes):	5694
Entropy (8bit):	2.490440089535343
Encrypted:	false
SSDEEP:	48:XArZMIbYQvlgI/kBdANE+Le5NeXKe+Epu:eZMCWIKgeeaJ
MD5:	645F04909379B62EDDA16F5F5206672B
SHA1:	545D1DB0ABEB80BB750D62D575E70A29DEC37C68
SHA-256:	45081FDA9C0A99C2C4D82ED4914F53F265517AE082352E334035635AE8B46D4D
SHA-512:	A22550AD009F8F10172E70ED5473609E22DBD4684D3EA851D93BA0A6E4D9054924E2830ABA1C568B10A1ADD63410D87F7B1F4AD3DEEF691512A5DA615C8BF1B1
Malicious:	false
Reputation:	low
Preview:	......@@......(.......(...@...................................................................!... ..."...%...#...%...$...'...* ..*!..+#...&!..'#.0($.3-).;41.>84.@:7.F@<.LGD.PJG.SNK.TOK.WQN.YTP.c]Z.ea^.gc`.ieb.tpl.upl.vqn.wso.yur.{vs.}yv.~zw..{x..\|x...}..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4374)
Category:	downloaded
Size (bytes):	13243
Entropy (8bit):	5.402450661327013
Encrypted:	false
SSDEEP:	384:/GhiutHqYRvcvuMeNjn7A3WzBwfbDxnx/ju:uhinvuMeNz7A3WzufRx/i
MD5:	2DACD1E5983A1750AA91C2CC88183711
SHA1:	2275565E5277A4C2C6265407B9CAC1AA1BDDA7E1
SHA-256:	90C9A5F91ED8F1849105B8B126D64988CD05957D9EC8DCF1A63A288253C6688B
SHA-512:	8569F788A4C1DD0EC0CE2A98E2B01C3F7C57DA750DEF8AAFACF8CA3109C5F6BA416F02EF1433AD379B93513CE8D4A733508C6F0183F2AD92635BD932800E8EF8
Malicious:	false
Reputation:	low
URL:	https://hkwyolaw.ency.cloud/
Preview:	<!DOCTYPE html>.<html >..<head>. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="format-detection" content="telephone=no">.. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />.<meta http-equiv="content-type" content="text/html; charset=utf-8" />.<meta name="description" content="" />.<meta name="keywords" content="" />.<meta name="robots" content="noindex,nofollow">..<link rel="canonical" href="https://hkwyolaw.ency.cloud">..<link rel="shortcut icon" href="https://storage.googleapis.com/instapage-assets/favicon/favicon-64x64.ico" type="image/x-ico">.<title>Hathaway & Kunz, LLP</title>.. <meta property="og:locale" content="en_US">.<meta property="og:type" content="article">.<meta property="og:title" content="">.<meta property="og:description" content="">.<meta property="og:site_name" content="">.<meta property="og:url" content="https://hkwyolaw.ency.cloud">... <link rel="preload" as="script" href="//g.fastcdn.co/js/utils.8

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 154898
Category:	downloaded
Size (bytes):	64203
Entropy (8bit):	7.996329777425257
Encrypted:	true
SSDEEP:	1536:ZvQP5jNLx6Ku+m7d+TRf0TR2ttm9p7z5waECzy55:1QHu+HqV2tWdz5bW5
MD5:	E8618B9C398F1BBDDB426C351D9D336F
SHA1:	8DAB7C9912030F0C3409EF4EDECB95E4CECEA547
SHA-256:	3985D09F29655E11050CC98687FE7D3661A35B9D7F20EB6330FCA6B6409BD325
SHA-512:	899EA2159CA19DF7299302D0515B1F6E0C467CD00996C80A914004CC106E12D04AF9CB59C9CDD8A37F08958D426D605316CAF966866077F8648E62BA40EED580
Malicious:	false
Reputation:	low
URL:	https://539d138f-02f3d9a4.ency.cloud/PXzC5j78di/main.min.js
Preview:	...........i{.(.....g.,{.....Nv.3..a.c..'`......o..[..k.{...k.&..T*.JU......<.....v0...^?ZR..%S7...n...........C.YR....#...w..._..~...R.]...x....%.... ZjC0.yng..;kA....Q......W.~\|.y~'x....o.F..K9...]z.T;.B...D^.....X...._.TW...(.!l)"^...c..HW..v0XYQ.40....+v...ISQZ!..M......`t\|.6v.n...e... ......4H._.........e.............Z.W........NB.w.6.......7...rZ..[V.?..0m.zH\|...bO.W...{i.#..ri....Zg.g........;.`.u..mj....oVa..j+..0.Sheb.=t5...#Z`2Q.\Vv.v0...!4TW6.^<....k.....or.......<)......p.v4V..k...Gj.m..._....O......Q......hG.4L...M&3....].w;..,..<Cds.G[..HQ..o...D[..`.......oK.....n...(...=...Q..G.R.,.G.kw`.....6,j.....7....KA.qC..k\d!...p,.tz.K.x.-..Ww.^..-.5......kSD'.b4..V'p.\....W..e.c..........-.......2..?......%...%.A..0...j.....T.<...c.(kC...C...-2..~......b...;.....B.f...\|.A.w...j.9.`.".9...@.z#.....{.Q......j[.....].a.J...R6..wv..........._\^]....?<.m......_.C?....Q.....K7.B.T.Tk.5h..Zk..!}....h..j..M.:...&..hG.M..H.......R.....mXa.....d.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HoMDhRn:IURn
MD5:	C56EB54F69EB059B7CE41FF5ABEF35E6
SHA1:	CCD01B565595769C7FA3DE585C6B39AA9D7699A9
SHA-256:	B88FE70B99FF6E92C57579BA3ECCDD5DFD6C8A19141BF2FB943C729ADF17F23D
SHA-512:	24E48F4C8934D89B7D0857BFE5E1DE5633030B06DD6328817C02C81D741D402227FD858A19933C44FB8B604EE764B962B85957DE235107AE9BF8A68564DA2541
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm59EDQizqdRxIFDdbBmF8=?alt=proto
Preview:	CgkKBw3WwZhfGgA=

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113797
Category:	downloaded
Size (bytes):	35192
Entropy (8bit):	7.994909097754044
Encrypted:	true
SSDEEP:	768:T5j+Fu8BcuacTEjXEe8KT5ZRsn/lxNIyGd6pFXOhJ:38eu7TI8Q5MnN86pFXOf
MD5:	E548957688A90E127CEE6228D03D5CEA
SHA1:	2135D3CBE674A9C5411DC867B315C19EB23BC2FE
SHA-256:	8491ACE3E70CB8F75861CDA2900151D4CDDE9AA8B94DEADF7C574AAE1198B2A8
SHA-512:	55FCE0FFFA5D911E3D62248A2926629A29092702C67EF6483449B47599BEC70AD0A80BB19625E927A8E6A323713BEC8F0E9A4DB46A0395FD17B4D3F795093463
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+..w[a..G.t9I..F.^..G..{.....r...I...v9.D.N.Y..u.o.$.r&..70....X".L..\|.?]$.J..O.&....n.."./...Z.V........2....:....Vg..?^.C.W=..?....y..aQ;..`^.q.AV......?OW....9T...=.k.<?._;............u.{..._m......../......Km...eR....u?GY..h<Lg.t>..K.....`......!^.........~.........g.$:.O...b>..m.M.........y_p.. .....V..No....U.;.b....[ ..z.....t...N.g5d..._c6....I....l_.l_.."..._oz..^lM....hc..^l..-.0M..'[.....,...A....7X....O^...y..4.i.f.......JGQ=...........y$?.cB.+h..2...n).9.....kb.Cdg....^'...."..Q:^.z.j~..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 902233
Category:	downloaded
Size (bytes):	231269
Entropy (8bit):	7.998106860761752
Encrypted:	true
SSDEEP:	6144:C7PkWkPK+9LXHfDCO5U5OogdUIkqqmfMpegkGQ2d:1KoLPDCy1oO9kqvMWGHd
MD5:	4ADF448E6205A9A4819F5B0E5A623057
SHA1:	C5B8B819D129E73ACE7BEDB86C3EB80BBA0E9C22
SHA-256:	6BD89F1C28AD52350D6F832FDA4E39E90944F583DF7459FE1B2D721E7A2269EF
SHA-512:	10D8BFC0705761FB73D3120953115C814BBB7CAA650A82FE9B1BACD84447BCA2354A738A40D0998CF2B4002B5225339819201B11F081BDB2ADABA2EEB3743652
Malicious:	false
Reputation:	low
URL:	https://dcd98dee-02f3d9a4.ency.cloud/shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52118), with no line terminators
Category:	dropped
Size (bytes):	52150
Entropy (8bit):	5.401084712667143
Encrypted:	false
SSDEEP:	768:xk4LftsbiuuaWhZI/kUkZaoaLDTjnh4GcVknH4HUbCJCx:LftNI/kyrkHS
MD5:	69201B044F9E912CC72B07E4FFBF9555
SHA1:	4A31F53B5A91F52B28F10A84BE73D6CFFCE01706
SHA-256:	DD8625BFA35604F050E4DCC7FF10C2C31D7CDF1CE7BDF4CDE0D0415DCC74E2FB
SHA-512:	3B95C143C19165B8A37283AE927AE8C7105C76AE26473E1008EB12880C1019891E4335CA4B26C9A8AED70AE539BBC4DBADB026EE876BB5046A8147B47C009081
Malicious:	false
Reputation:	low
Preview:	(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,s=[null,null,null,null],u=-1;if(r.ie){for

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979510858152841
Encrypted:	false
SSDEEP:	384:VkqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:gCGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	7E18E71D589531855CF589482EAB8174
SHA1:	05F69583C81A69910337CFC736EDC8CE67544DBF
SHA-256:	7C0DF71DA7BB0F2C55BE83B8BA31FCA820E7F856CDA39A0BD009584B6FB36B3B
SHA-512:	C758593F92BBC29804E45ACE4A4F3FC6EB7B76C032F43A0DDCDD2D220842F6542BDA22BFCBFD01D458FAED546C798F5B195A1E67ADAF1580E4DE95CC38D2443A
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1241
Category:	downloaded
Size (bytes):	700
Entropy (8bit):	7.700837018870389
Encrypted:	false
SSDEEP:	12:XYlfZp+jYNMUmMCkF4++BKqwRf/molCJpnYgdCRr5YlVmtEbp0xbLJ:XY4jYNMRVI433wR3BsUgdCJ5YStMybd
MD5:	17CB62C2F13A55453288313DE6C3BC33
SHA1:	F4354998D8BA489CB76C5466B3002022639CDA43
SHA-256:	1EF57CB20BFB4D5FFF5891ACBD291F8434B64E6A8AEE019B080B4F1EE26785E3
SHA-512:	0DC25468FD324CE02CC6E898704EDD8EFEA16D306D92D950516032EDB70F16AB311C8A17F3317712627317452A1157F0D64B81070742DE73199DD73A44A1B025
Malicious:	false
Reputation:	low
URL:	https://aa6c90d0-02f3d9a4.ency.cloud/index.html
Preview:	...........TMs.0...WP.1.e..&Ml.9...&..I:BZ.R..!.....0`;.C.........n8.{.9.w.&M.'.bq.c...(6....c.~..:lJu..4..?....G..@.s..Li.p.......7S.a...v.v..F..3..i..5..&...YJ...2W.y`Zd...i.....~P...._.%.J.9..%..W......S....^4...%..h].C"a.\|..~.y...q..M.x...s...3....V...-.O.aS/D=.f...n...+gI..`..!fh......Q]Pd7_ .i...2.%...Dv)..d....2.....l....W<\|...jv..+.B.QO.w.F..{h..3.........D..R.......R..0't/...\|....hgUJq..2..$..k`..u).k!.pi\|.....C.`=.b.^.....a...Q...C.........kU..R.yhm.j]6.(\|.f...h!.Ze..j.e7)...gZ.U...B....>..........V.....y.`v;.g.W.r......\|O...[+.tW...&a.....nq~..%........}c.Y.I...zqQ..........ZM..kF.Sc.........\G...o.{.$[.,Q3......\|.p.E.R!...ycp..T.......9O.^....

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7812), with no line terminators
Category:	dropped
Size (bytes):	7812
Entropy (8bit):	5.760553317234023
Encrypted:	false
SSDEEP:	96:hisD/y2eAkP3hFalipf3fe5EYD397l6CFnEqOhl4nv4niY8MggwN6N7c9ELXju7H:csyp1aQpf3feSg3RLnDOXXiY8X6N7pW
MD5:	83B3A5F646579BD115C80EC1246C0B68
SHA1:	A44A966BE43955245E2C59B722BB39CB268B2021
SHA-256:	414EDADEFB772B95F1C946D51D3DB891F6AB960AC661CF7E05EF333B15504FBD
SHA-512:	FCF044E73EDE735E3CC50FD26A7459BB7B7531E63AAEC7460937C4E806CF5E1C21578D4805DDEE2CB54D0167CB6C18E0BDC0E8C23DC61E5FF1BB3019983DF116
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,m,n,x,y,A){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=-parseInt(U(337))/1(-parseInt(U(391))/2)+-parseInt(U(390))/3(parseInt(U(346))/4)+parseInt(U(362))/5*(-parseInt(U(420))/6)+-parseInt(U(414))/7+-parseInt(U(352))/8+parseInt(U(368))/9+parseInt(U(388))/10,e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,751691),g=this\|\|self,h=g[V(383)],m={},m[V(349)]='o',m[V(336)]='s',m[V(350)]='u',m[V(347)]='z',m[V(356)]='n',m[V(333)]='I',n=m,g[V(330)]=function(C,D,E,F,a4,H,I,J,K,L,M){if(a4=V,D===null\|\|void 0===D)return F;for(H=v(D),C[a4(361)][a4(321)]&&(H=H[a4(381)](C[a4(361)][a4(321)](D))),H=C[a4(339)][a4(327)]&&C[a4(365)]?C[a4(339)][a4(327)](new C[(a4(365))](H)):function(N,a5,O){for(a5=a4,N[a5(421)](),O=0;O<N[a5(354)];N[O]===N[O+1]?N[a5(332)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a4(398)][a4(403)](I),J=0;J<H[a4(354)];K=H[J],L=s(C,D,K),I(L)?(M=L==='s'&&!C[a4(331)](D[K]),a4(395)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G(

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449488
Category:	dropped
Size (bytes):	122147
Entropy (8bit):	7.997724768927474
Encrypted:	true
SSDEEP:	3072:qAvZbZEI92W+3x4MB00f5ZPYPFb+NeevNrdJQnXppagdI4wNEy6r:1xq07SI0f5yovrdMX/agdxwNh6r
MD5:	CA2D32DEE8CAAF756F7956DEC32B30D6
SHA1:	EA338EC8626E7B15AEB7235DBA2072C640EBF656
SHA-256:	600B4D5D0E2A72F0D2508998915A1F606110A86CA4C01CB3D4E74BF4D32BC7DC
SHA-512:	58523B95A1C44EDD1AD0CED7684020DBE10E81FB1D587C030DC343AC99E10BCE9A897833407573D6ABDED4C634F13E354C41D0C0038607276B0AB7BBEC02455F
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3.......V..@...LU.,.pd)m..W.y..~._Dd...e.jv...;[X..........?o._..+..._ex....N+7...+W...........`...7.~R.......0....(.....(vR.T..o.;Ae.G.J...8...iR..$.B#.D.T.{.+'N_+gW.:..6..P.f...!..Q......G...<.X\y~.....Q...J.\.?A#...M..'f....q........!E..5.[L..:..{P.........8...L...u..Ye..b.iTy....x.pR..M.j.......M.a&,~...A%..B.J....2..$x.Lb'D...`.I......cTt.Z.3...L..$.f3...R..~....?.(l..L.avv...a.x.C.......>.Gu...u7..../.O.'....0F......?.^..\.G..q4u.P6y.N.Ya...$.`.$..,.Z&'....E.....x....-..JX..+..O.......wz...;=...o..._.z..I.p....\|;.M.....O.. .....?8..9.....T....:._..vn...m.>.'.U..Vj:.....@..\.k.Ue..Pe..wv....o{......5..<..Z..b..b.;.....A........mxW.Y:........zL....I..B=..L]dZ...@.bX....z...\|.....-OE/.A...{{..v/..W%#.%.o(a.S....e#P4.eVK.b`r!{..@.I....uVva):)..4~%V..w.."X...........Q.....'s\.n...........Z...LK.~.\|."...D;ug6.^.....T$.#..~r%...U..!.k1=.e.)y! )....Y.c%.....{.K..?0.._oo..'.......\:SV..H..zSF..%C.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 902233
Category:	dropped
Size (bytes):	231269
Entropy (8bit):	7.998106860761752
Encrypted:	true
SSDEEP:	6144:C7PkWkPK+9LXHfDCO5U5OogdUIkqqmfMpegkGQ2d:1KoLPDCy1oO9kqvMWGHd
MD5:	4ADF448E6205A9A4819F5B0E5A623057
SHA1:	C5B8B819D129E73ACE7BEDB86C3EB80BBA0E9C22
SHA-256:	6BD89F1C28AD52350D6F832FDA4E39E90944F583DF7459FE1B2D721E7A2269EF
SHA-512:	10D8BFC0705761FB73D3120953115C814BBB7CAA650A82FE9B1BACD84447BCA2354A738A40D0998CF2B4002B5225339819201B11F081BDB2ADABA2EEB3743652
Malicious:	false
Reputation:	low
Preview:	...........iw.8.(.....n....dg...M....l.'.N.}}h...H...8.....+E9.g.g.{&...A.K..T.j..........r#.Fy1K.4.6.S.@V)..:...QrV..S...,./....::hW_......6G.l.....yRlHQ.L.".i\|..nw.ndJ....+..j.."..](..<..L..p?...zw9.e.....\{..C9J...M...9-....U2..cY=...."=....a...."/.3.../iF.9d..T.%.:S.Ne6.&.h.W...t....../f2.J~H.K.,..n......z6O....n..4.Z..ll...^..Z..F.N.r.CV?.....=.......r...rt........:...:..8!$(..g..A.Z.Lb%....B.....t>VZ.y....Y>-...SY..t^..:%..Yz=.c.o..'...</.26 ..!{x....bt6nm.......,.x.da/...7.x.........&......$N.......=X.........~.PL.No.(i3....'..Y..ONz..f......[[.%f[[3JL........x.d.,.U..U..:....:0.......),..Kq.o..}oI....N..W..t~+...Y..j....h..,....m.T.J.e..RB..._..b.u.ql.7u.Nz_.-2..li.......`.`O+..1h.2..S.+..F.:...l.M...t.6..B.".;u...T.g.t....@..[-.Q........b..P..<...TLm.2...K%.e6p:....]S.`Q..S.....m.#Ur..w#x....CUl.V.M.N.i.....Tv.....8k,2M.^."..ec..i>..Z...a..a.8...{_\4.,d9.33k...y...,U..vU..u..]N.# ~..bk+[L...$oUl..^y..f.;..).<R...a..?..g.?

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://dcd98dee-02f3d9a4.ency.cloud/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	244
Entropy (8bit):	3.956555851755316
Encrypted:	false
SSDEEP:	6:em/mZdyJCDORTKDAjf5nsxSUnTj9ccXFXLTGREg3gUTmBxGwdH5GZB:emgyUCyAjf5nzUBFXPgBTmmoZm
MD5:	685DCEF735344B27AB40093BF1FB989A
SHA1:	D658429C7B6CE2AEBCD5279B5BA40AA416777657
SHA-256:	B873796EB315B8EA56FF0DE16E97A25683769D3C241939484BC0CA46C81877E0
SHA-512:	BC54E19A36E46C693B6D06861B6B99E17C89DE3CADDACCB4BB38AA548557913289202738E558341343A6134D31EF10068596967FD514B7351E32EC8836A532A5
Malicious:	false
Reputation:	low
Preview:	0fdceff27098d27f0b2aa7b599a45524d1b2ae3266147a9100705c133f5375a6c8fee6ed4337432f997f5604918efa9c83fa521b760a7be043f3c001e455e021e400c460431fd35f22d6aebb047b461d90537367d96241890110a5f5c963d26035bb13a2dc9c4e4218470dddd408359c9ed2a5008b73293ced5d

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55107)
Category:	downloaded
Size (bytes):	55266
Entropy (8bit):	5.529539703940049
Encrypted:	false
SSDEEP:	768:Mwc94dTC6MdUY59Go1gYwQ2GKUBLAX0IPRV4fkRDMFIj:s+RML9EdUFu+fSMFW
MD5:	EEE931187060719AB17A352DE2424E0C
SHA1:	0AA427FA2D22D22E3E08C21F598CC9F2D09EFA61
SHA-256:	853D7EF6B54D838C009D01E4857B499D7EC4F71F6FCED1E2E3C463FD393CCB29
SHA-512:	0884238EB3A1AB61AA9AE343D84B0BE835D90F0643FAAEC237A66DB37346ACE5CB926D5697E1309ED1A6695F23DCE0EE05B1A3E5898FB23C15B4CACD4CFA7E90
Malicious:	false
Reputation:	low
URL:	https://cdn.instapagemetrics.com/t/js/3/it.js
Preview:	/!. Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js). * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang. * Licensed under BSD-3-Clause. */.."use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&0>n.indexOf(t)&&(r[t]=e[t]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var o=0;for(t=Object.getOwnPropertySymbols(e);o<t.length;o++)0>n.indexOf(t[o])&&Object.prototype.propertyIsEnumerable.call(e,t[o])&&(r[t[o]]=e[t[o]])}return r}function n(e,n){for(var t=0,r=n.length,o=e.length;t<r;t++,o++)e[o]=n[t];return e}function t(e){var n={exports:{}};return e(n,n.exports),n.exports}function r(e){if(!e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s)}while(n<e.length);n=r.join(""),e=((e=e.length%3)?n.slice(0,e-3):n)+"===".slic

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 23660
Category:	downloaded
Size (bytes):	10156
Entropy (8bit):	7.978318665924072
Encrypted:	false
SSDEEP:	192:Cxl8xxwWs/9lPPV8KldM6uhAxzzWcpeVcfpIFIvOaavSqpUGM0jVdjuh1Z:Cxl8xeDllPV8KbMzAFzWcptpKZa9UUQI
MD5:	05156F45162C900DA58D949B0E9DF54B
SHA1:	8EE236E329DAE42D00B0E53363D60C84B312C17C
SHA-256:	B867256B55A754E74BA9DBE2B5277EDF71FB67B7EFA5D67D64B4A9F78D7008F2
SHA-512:	E04FB90CB3FD1457F7054251A6C16FFB427DB2B12244A9F011B756BDD26B795F99E093162FC9B3EC0794F5702407496EFE36438A3805F8635DE862331CCE1848
Malicious:	false
Reputation:	low
URL:	https://a5031de5-02f3d9a4.ency.cloud/?session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	...........\|ys#.......].....4.7X.f.&.y...%.iF...T.P.....C.>.Z.......O..;...mYc.Xky?...d.{<...G...:P8.gG..../_.+.{...[..k...7R=.o....n.~S.}.r...y..w/.......t.J.F..%..........gx&..t7...].1....L[S..t...&..P..BI.J.P.K..Z.3K..5..;wo...x.R..UV...f2..o..v.5.R.u.\|a..T6U.e.@vi.t..R..V+.:.%.\..m.R..Z..(5.R...v....kk....zi.X.j.E.........kH%=W(W.\M.\.u..B.R...E..z..H.....]......5..6...H....rh5.....P.^.{....k..........Z........s./XU.k...](6.'..n..e..../.....q.......fG+...Z..6F...f..J..-.RU+...Q..Z...........J......1.......-.....a..O..ro..:.=u......h.....67..5f.x.+...n..<......;=>......G.......G..j.q.m.x.....o...]?.v.....G..F..Q..k.E.,.......c..`w$]...I.Tb..Q.r.N..+.u-..*.\..Qu.Sa.R..p].}fA.n....9........nS..........>s ..C..5.....X...p...m..,;.v.........P..@..Z..4..R.Z....z.D.t....i.........t..q.xg....}K....<..S.x!33..h...\|.Jy..^.dV..-,..%z.."..au...0..k..'L..VV....5.3.T.^.&A....#...Y.P...:b.<8.c...9v[.....9d.it{s....7..c{.v~.....q..u.,@.^:...

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 154898
Category:	dropped
Size (bytes):	64203
Entropy (8bit):	7.996329777425257
Encrypted:	true
SSDEEP:	1536:ZvQP5jNLx6Ku+m7d+TRf0TR2ttm9p7z5waECzy55:1QHu+HqV2tWdz5bW5
MD5:	E8618B9C398F1BBDDB426C351D9D336F
SHA1:	8DAB7C9912030F0C3409EF4EDECB95E4CECEA547
SHA-256:	3985D09F29655E11050CC98687FE7D3661A35B9D7F20EB6330FCA6B6409BD325
SHA-512:	899EA2159CA19DF7299302D0515B1F6E0C467CD00996C80A914004CC106E12D04AF9CB59C9CDD8A37F08958D426D605316CAF966866077F8648E62BA40EED580
Malicious:	false
Reputation:	low
Preview:	...........i{.(.....g.,{.....Nv.3..a.c..'`......o..[..k.{...k.&..T*.JU......<.....v0...^?ZR..%S7...n...........C.YR....#...w..._..~...R.]...x....%.... ZjC0.yng..;kA....Q......W.~\|.y~'x....o.F..K9...]z.T;.B...D^.....X...._.TW...(.!l)"^...c..HW..v0XYQ.40....+v...ISQZ!..M......`t\|.6v.n...e... ......4H._.........e.............Z.W........NB.w.6.......7...rZ..[V.?..0m.zH\|...bO.W...{i.#..ri....Zg.g........;.`.u..mj....oVa..j+..0.Sheb.=t5...#Z`2Q.\Vv.v0...!4TW6.^<....k.....or.......<)......p.v4V..k...Gj.m..._....O......Q......hG.4L...M&3....].w;..,..<Cds.G[..HQ..o...D[..`.......oK.....n...(...=...Q..G.R.,.G.kw`.....6,j.....7....KA.qC..k\d!...p,.tz.K.x.-..Ww.^..-.5......kSD'.b4..V'p.\....W..e.c..........-.......2..?......%...%.A..0...j.....T.<...c.(kC...C...-2..~......b...;.....B.f...\|.A.w...j.9.`.".9...@.z#.....{.Q......j[.....].a.J...R6..wv..........._\^]....?<.m......_.C?....Q.....K7.B.T.Tk.5h..Zk..!}....h..j..M.:...&..hG.M..H.......R.....mXa.....d.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63171)
Category:	downloaded
Size (bytes):	64365
Entropy (8bit):	5.403911530315902
Encrypted:	false
SSDEEP:	768:0CAEh06um2UQxy6y4QQyHMng8RgxChwOxW/Z06TvCcCvdgF:0pUQM4XPULIdY
MD5:	37A396805428BA004D7B537EA30B6D2A
SHA1:	B697C8B29857FAB2C3A7F5960CF1F0BE36C4ED50
SHA-256:	C9C19D88D9366BFA36FFD12F6237C58322E91C1F2E57A896172A05F41318134A
SHA-512:	57A3B4A9175185009E0C009716B78B91286E5151EFCDE802F8CD90BEEB85174AAF4F4217826EE266641C5F935F615FEE2630F08215666131635FACA0DEED19AA
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/sptw.2fff3c07e91a81e507a4.js
Preview:	(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(t)}function r(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function n(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?r(Object(n),!0).forEach((function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,n){return(r=function(t){var r=function(t,r){if("object"!=e(t)\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0!==n){var o=n.call(t,"string");if("object"!=e(

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 90673
Category:	dropped
Size (bytes):	32820
Entropy (8bit):	7.993128106725333
Encrypted:	true
SSDEEP:	768:gu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky4BmmSgI1zk0cCLQXr4:w00CfRpFpmAieDFpfBbqItkHE
MD5:	B01C6D770B2AEFD7EF9E86FC30413501
SHA1:	E8AFBE0D1FC8693D99D41D197815345511CA7473
SHA-256:	575D331EFC8334C799663DBD41085C92D4DB664455B8F2436DCD6C1EDAEC73CA
SHA-512:	F8F3412BA5E36E38342DC1E6B4A73C3005BC8B68EC55E20D65DDDE032CF807C16CDE66D2B053249D140FAF9ED9725D6F8BB9C3DA383ABB045D898E0B705703E9
Malicious:	false
Reputation:	low
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113797
Category:	dropped
Size (bytes):	35192
Entropy (8bit):	7.994603622349744
Encrypted:	true
SSDEEP:	768:T5j+Fu8BcuacTEjXEe8KT5ZRsn/lxNprej3dCCnBtLPIcwrikOf:38eu7TI8Q5MnNnprK3dR3LAcw+df
MD5:	41F67F5B64625840A69497D24356649C
SHA1:	6FD64F63144A4A2B2C4663F2F299731494934CBF
SHA-256:	9628CA8DD24A129D124ECD13CE4DD30E72DD69C041D428A406F478D6C8BC009C
SHA-512:	8DCEAE1747BCF2F71568838A346E7067373335BA7ADDA9958016DA76AD937F465FC4172C407CBB00E899D0F8D664EB69D042C55FE6BBF72525C549F03343BE86
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+..w[a..G.t9I..F.^..G..{.....r...I...v9.D.N.Y..u.o.$.r&..70....X".L..\|.?]$.J..O.&....n.."./...Z.V........2....:....Vg..?^.C.W=..?....y..aQ;..`^.q.AV......?OW....9T...=.k.<?._;............u.{..._m......../......Km...eR....u?GY..h<Lg.t>..K.....`......!^.........~.........g.$:.O...b>..m.M.........y_p.. .....V..No....U.;.b....[ ..z.....t...N.g5d..._c6....I....l_.l_.."..._oz..^lM....hc..^l..-.0M..'[.....,...A....7X....O^...y..4.i.f.......JGQ=...........y$?.cB.+h..2...n).9.....kb.Cdg....^'...."..Q:^.z.j~..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	3.969887932869843
Encrypted:	false
SSDEEP:	6:2cvGIT21TLxEvVnxDwhLqOSdG0tR+9WPeFNiUTGU7CKGxL:HGQc2Oiy9UUiUtOXL
MD5:	3238284437B923CB02C1D822C3D9DCD3
SHA1:	5CEDCE04369CCA3D32FEBC21B8CC818DDF803EF1
SHA-256:	7E05A29DB294BFE0004243CC24916344EEB8BFBF2B8B0429D184A9BB4C44B56E
SHA-512:	3BFB54DA41642F3D906F79DD6E3E6C03936CCD24C910D88EB4284E5C76D4C5FC268A1ED91961C4143A1B50B7B33E744CD342E6960F3E5A5599377153674BCEFA
Malicious:	false
Reputation:	low
URL:	https://9b36d051-02f3d9a4.ency.cloud/ns?c=ca0d5630-663b-11ef-b954-8b91b831308d
Preview:	7f6d57253e82368b5c7b88469be5eba689ef0510e445bc2f1e1a4382eb60da1bfc00e64e7d64fde23babd9a226cf3ae1b26ede6f902beed1cacef98378c571dc7b16b80b3073c45900203c04370d6ca444cdc61dfb24f98ea6b3e28d1be3f689deba25ee925b9616c4e99d97b4ba777b80f8524f5ce151d19097

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52118), with no line terminators
Category:	downloaded
Size (bytes):	52150
Entropy (8bit):	5.401084712667143
Encrypted:	false
SSDEEP:	768:xk4LftsbiuuaWhZI/kUkZaoaLDTjnh4GcVknH4HUbCJCx:LftNI/kyrkHS
MD5:	69201B044F9E912CC72B07E4FFBF9555
SHA1:	4A31F53B5A91F52B28F10A84BE73D6CFFCE01706
SHA-256:	DD8625BFA35604F050E4DCC7FF10C2C31D7CDF1CE7BDF4CDE0D0415DCC74E2FB
SHA-512:	3B95C143C19165B8A37283AE927AE8C7105C76AE26473E1008EB12880C1019891E4335CA4B26C9A8AED70AE539BBC4DBADB026EE876BB5046A8147B47C009081
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/cm.js
Preview:	(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,s=[null,null,null,null],u=-1;if(r.ie){for

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2507), with no line terminators
Category:	dropped
Size (bytes):	2507
Entropy (8bit):	5.1470151284317565
Encrypted:	false
SSDEEP:	48:icZct9sKqe/GvDoGu8E59ywtAWjOKSByR8aGboRh6xevO:a9HqQkDCpzUDYR89xevO
MD5:	27C8A49AC26ECEF4F41FE26CED69A58B
SHA1:	A2DACC66455DA6ECEAC53CDEF818C849FF405FC1
SHA-256:	F15DC2DF620A373AC551CEB8364BA4B2085B95FFC59FAC2BBC304AF57BF20E55
SHA-512:	021860F83E2473905245C67152491DC7D2B6CD9DFCBD707A9595D0CC2CF4176CB0BA41B775891A1FB02058E493BCAD9E0C0699281FDE91549D4F2B0B57ABD477
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}function i(t){return function(t){if(Array.isArray(t))return a(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|function(t,r){if(t){if("string"==typeof t)return a(t,r);var e={}.toString.call(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function a(t,r){(null==r\|\|r>t.length)&&(r

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3498
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	7.888392743792698
Encrypted:	false
SSDEEP:	24:XRFofakawIWmo74Zfpi/hWEAZKqdxP+2L+27yK/TLn+wReMVE8z1wGyG45QTDvCF:XzIa2IFoig/h+dZ1y2TLpeMVE8pMgTDO
MD5:	96B28EB45716E3E6DA72747CF10C9E88
SHA1:	A66CA79F2DF172B63449CA650D11A3F1EF590AB8
SHA-256:	5B0A48BC7E9F20E247C523A5EB8B17122543A9B62688909F999BC58E441C65E0
SHA-512:	5ED5E5437506250A40EC9E8B3B3334B014B8FC6B33DD9DE1FD6176F7E20DF45125316548839632C419BA554E0A945C7406E1813AB6D9A2D6F06CAF30C1748490
Malicious:	false
Reputation:	low
URL:	https://l1ve.ency.cloud/Me.htm?v=3
Preview:	...........WMo.8...W.D....".N..a...E]4mQu......es+..H;.....}Y..M.C......{..\|ex......{{./..._...Fq+.r,.x.....gzR...33...e.]IC.gp..{.Qx'#......nR..]q...I.(in.....2"C_.X.P.~..M.P..r.....$.....}.Y...t....(.S.r......3g..\.1....F.`N......Z...\.... 7O...V..^./H.#....~..S.8.4{.cD.l.j.Y.e]..7)\...:h.0.."....+9Q..x...".n..q......\|.;..I.....p..\|5./1....1..0W.P...I...\.Y..J.tj.8kih4.<...:-..)jk.>..4."...T.Z.U..d..^..T...}.yt.H.....N......1..wQj1... 4...r..jG.`....~..hf..s..T.1.tg.RM....~....hm."... ...^...C ..H......`..wcv`<..M...L"..s.....:...J.o.Y..U,..P..fge...hN..x.x4.....t._..O..]..O..>/..m..z]A.....L`4...:.;mYq.5...m...k[`.b.....1[....D].K .@AMC..8."X.o7f.pL..<..3...YS..j4{t.]..T...GG...e........?..9.Z.k...R.Xf%...$...:l)...+.C...8.\|..r..F...j.A>%n.o...M(..._....:..Z...?../.r..-....?...'_Jw6e.H....&\"R#.m.V..V..... ..2.]K_Q..5.Py.ls...S.1"}.p.lN...)A.lRg4...t.........X...a..\|...aAy..(&?.B.....T].Wu......IO...a..9\..2..@...dIG....nv......

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55107)
Category:	dropped
Size (bytes):	55266
Entropy (8bit):	5.529539703940049
Encrypted:	false
SSDEEP:	768:Mwc94dTC6MdUY59Go1gYwQ2GKUBLAX0IPRV4fkRDMFIj:s+RML9EdUFu+fSMFW
MD5:	EEE931187060719AB17A352DE2424E0C
SHA1:	0AA427FA2D22D22E3E08C21F598CC9F2D09EFA61
SHA-256:	853D7EF6B54D838C009D01E4857B499D7EC4F71F6FCED1E2E3C463FD393CCB29
SHA-512:	0884238EB3A1AB61AA9AE343D84B0BE835D90F0643FAAEC237A66DB37346ACE5CB926D5697E1309ED1A6695F23DCE0EE05B1A3E5898FB23C15B4CACD4CFA7E90
Malicious:	false
Reputation:	low
Preview:	/!. Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js). * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang. * Licensed under BSD-3-Clause. */.."use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&0>n.indexOf(t)&&(r[t]=e[t]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var o=0;for(t=Object.getOwnPropertySymbols(e);o<t.length;o++)0>n.indexOf(t[o])&&Object.prototype.propertyIsEnumerable.call(e,t[o])&&(r[t[o]]=e[t[o]])}return r}function n(e,n){for(var t=0,r=n.length,o=e.length;t<r;t++,o++)e[o]=n[t];return e}function t(e){var n={exports:{}};return e(n,n.exports),n.exports}function r(e){if(!e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s)}while(n<e.length);n=r.join(""),e=((e=e.length%3)?n.slice(0,e-3):n)+"===".slic

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59552), with no line terminators
Category:	dropped
Size (bytes):	59586
Entropy (8bit):	5.399493138817419
Encrypted:	false
SSDEEP:	768:3EUzC7wTML5H2TmcXQZPDIh4OiDIsyczTDwv1:fTMxqtA2Gev1
MD5:	5B9C1E18E7818E2D69550EC80E4936FD
SHA1:	4D6906D97B6F3FAC6EE66270A97E3D3F13B4E77D
SHA-256:	B0F04580DFC831EFFB265B29B88BC622D94E3676984FDD7B17D5FE7B21DC3CA5
SHA-512:	78357F3B2E7E7FA562E3FD76CB6CA5C5431F0C53BF3E457E88964EA361FE427C4BEA17ED35927BCDC356F0E531E29164346530D8CC88BD8CDC3A617FE815B414
Malicious:	false
Reputation:	low
Preview:	(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t.length,o=[];if(/^[\x00-\x7f]*$/.test(t))for(;++e<n;)o.push(t.charCodeAt(e));else for(;++e<n;)(r=t.charCodeAt(e))<128?o.push(r):r<2048?o.push(r>>6\|192,63&r\|128):o.push(r>>12\|224,r>>6&63\|128,63&r\|128);return o},fromUtf8:function(t){var e,n=-1,o=[],i=[null,null,null,null];if(!r.lookup){for(e=r.alphabet.length,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[2])<<6\|i[3]);return o},encode:function(t){var e,n,o,i=r.toUtf8(t),a=i.length,u=[null,null,null,null],s=-1;if(r.ie){for(var c=[];++s<a;)e=i[s],n=i[++s],u[0]=e>

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141810
Category:	dropped
Size (bytes):	49809
Entropy (8bit):	7.995612907120691
Encrypted:	true
SSDEEP:	768:B2sHIY3QN0O01Fi5B/H21s9v7UI1FhE+lpYyuSFp2YCouv9DT2BYxEoTui:AxYRO+snH21s9DBXXYe2hjlDLKoii
MD5:	3944C777502742C874A6E2F1C7D817B0
SHA1:	106B56E689049C53D90F169955B199E752284BE1
SHA-256:	D681A1278E1C107519F67E088EEE7A20157232EDF5D3017FBA192F3AA5CCB609
SHA-512:	23D7BF29D154983386336F2EF6232A056E9E166700D25B00C16831F27A8EC1AC1D1BE06EA7B0D7B95A9BBD15B9BA77CA29D52ED417FE692E0FD6C8C17F219E30
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y!.T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q........0...(..a.&".....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG./t......t....5"...oC%.+..L.>...V.o.1}.....l..s.E.M.L!.G.BV.m...)....m...r.9.8.6..^.....Tt.\.....U.q.N.b.cK.?...+2.T...U.#.T[...Zcs..49..I....~.'w.a]....h..u/..N..z0..}.....O............~x.....>...A8U..AP...E.M.N..[&A.Y_...6....\I....Q.....Y..\6.-.~..V.4..sy.w..D...]'...../.k.?D...$a.<..;7.?.................et..:.Og.]._.+...N......+..CU.V.UV.ep....F..#.Ng.Zj...?N.f...:/s+t^.vc.I..#..q5.L..H$.(..s....1.Pa.....N....d..2.wd!.....k.V...2qV.Y...l....x.....E...e.....>...C..+...c.23..@...r...Q..3..YY.Nt...I.L. ..T......<..v..a......0E.3...j...D........6.Qq.W.OU...H..N...jb.u...D_k.......J..._[X.....d....*.\|.i.Z."..iy..Q......^_..[..LH.........^T..2Ld7..)Q.$J&

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449488
Category:	downloaded
Size (bytes):	122147
Entropy (8bit):	7.997724768927474
Encrypted:	true
SSDEEP:	3072:qAvZbZEI92W+3x4MB00f5ZPYPFb+NeevNrdJQnXppagdI4wNEy6r:1xq07SI0f5yovrdMX/agdxwNh6r
MD5:	CA2D32DEE8CAAF756F7956DEC32B30D6
SHA1:	EA338EC8626E7B15AEB7235DBA2072C640EBF656
SHA-256:	600B4D5D0E2A72F0D2508998915A1F606110A86CA4C01CB3D4E74BF4D32BC7DC
SHA-512:	58523B95A1C44EDD1AD0CED7684020DBE10E81FB1D587C030DC343AC99E10BCE9A897833407573D6ABDED4C634F13E354C41D0C0038607276B0AB7BBEC02455F
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js
Preview:	...........{W.H.8....F3.......V..@...LU.,.pd)m..W.y..~._Dd...e.jv...;[X..........?o._..+..._ex....N+7...+W...........`...7.~R.......0....(.....(vR.T..o.;Ae.G.J...8...iR..$.B#.D.T.{.+'N_+gW.:..6..P.f...!..Q......G...<.X\y~.....Q...J.\.?A#...M..'f....q........!E..5.[L..:..{P.........8...L...u..Ye..b.iTy....x.pR..M.j.......M.a&,~...A%..B.J....2..$x.Lb'D...`.I......cTt.Z.3...L..$.f3...R..~....?.(l..L.avv...a.x.C.......>.Gu...u7..../.O.'....0F......?.^..\.G..q4u.P6y.N.Ya...$.`.$..,.Z&'....E.....x....-..JX..+..O.......wz...;=...o..._.z..I.p....\|;.M.....O.. .....?8..9.....T....:._..vn...m.>.'.U..Vj:.....@..\.k.Ue..Pe..wv....o{......5..<..Z..b..b.;.....A........mxW.Y:........zL....I..B=..L]dZ...@.bX....z...\|.....-OE/.A...{{..v/..W%#.%.o(a.S....e#P4.eVK.b`r!{..@.I....uVva):)..4~%V..w.."X...........Q.....'s\.n...........Z...LK.~.\|."...D;ug6.^.....T$.#..~r%...U..!.k1=.e.)y! )....Y.c%.....{.K..?0.._oo..'.......\:SV..H..zSF..%C.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (379), with no line terminators
Category:	dropped
Size (bytes):	379
Entropy (8bit):	5.182032506557214
Encrypted:	false
SSDEEP:	6:+hjgjYhrQNMbALm7FX4hHOv2hCrsmGmJ9LEinawXtsGteqjpXrLYVsjfn:+dcYJQMkLet4hHOuhCAmGXbAsBenYV2n
MD5:	29C24FF1E7D09EB3B67FCF90DE082749
SHA1:	84263358A2D879FF4773F657BAE4A438EF7AC89C
SHA-256:	2E065B142374BE24BCDFFF600DECCC28F6AF18F5401CC224342FBE8FCA3DE357
SHA-512:	F7E8C6374898C337F86D55FF959ADABE63E2E03497997104902D58BE5D2A6E931C0121CDCD956DB53ED9E3B8A4D22CFA4A92E8BA3EE7BBAAD33AE05502E8DB69
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size&&(n=a,document.querySelectorAll(c).forEach((function(a){a.href=(0,r.MM)(a.href,n)}))),(0,r.jS)("Links")}))}},n=>{n(n.s=2594)}]);

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18689), with no line terminators
Category:	downloaded
Size (bytes):	18689
Entropy (8bit):	5.257703312149586
Encrypted:	false
SSDEEP:	384:cMzMaL58SsGfvqBPgvy2xqWNU6tLEJS1MLZvtRAQb7:D5NU6tLuz
MD5:	29AC23CBA2B1AF397B7DE59A99A0E90C
SHA1:	1CC743D295ED584F2C79126335336C93CFEE43C7
SHA-256:	C96EF65197C2B41C1212E37C88C8DEE886D4EB44CDD3A31709C4C74E8F6E1092
SHA-512:	AFE23EF661AD32648E93753DFFAA188E17AE3DE496D29968090362125AD635EAD25E4DBF8F5B2B85E3FA5C8E3321471230202D98046F789C0E48EF61470F290A
Malicious:	false
Reputation:	low
URL:	https://g.fastcdn.co/js/Cradle.8725edce5135a9515d48.js
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},o(e)}function i(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,a(n.key),n)}}function a(e){var t=function(e,t){if("object"!=o(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=o(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==o(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e)},t=[{key:"setupVisitTracking",value:function(e,t){t.setVisited()}},{key:"setupSubmissi

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 64x64, 8 bits/pixel
Category:	downloaded
Size (bytes):	5694
Entropy (8bit):	2.490440089535343
Encrypted:	false
SSDEEP:	48:XArZMIbYQvlgI/kBdANE+Le5NeXKe+Epu:eZMCWIKgeeaJ
MD5:	645F04909379B62EDDA16F5F5206672B
SHA1:	545D1DB0ABEB80BB750D62D575E70A29DEC37C68
SHA-256:	45081FDA9C0A99C2C4D82ED4914F53F265517AE082352E334035635AE8B46D4D
SHA-512:	A22550AD009F8F10172E70ED5473609E22DBD4684D3EA851D93BA0A6E4D9054924E2830ABA1C568B10A1ADD63410D87F7B1F4AD3DEEF691512A5DA615C8BF1B1
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/instapage-assets/favicon/favicon-64x64.ico
Preview:	......@@......(.......(...@...................................................................!... ..."...%...#...%...$...'...* ..*!..+#...&!..'#.0($.3-).;41.>84.@:7.F@<.LGD.PJG.SNK.TOK.WQN.YTP.c]Z.ea^.gc`.ieb.tpl.upl.vqn.wso.yur.{vs.}yv.~zw..{x..\|x...}..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407057
Category:	dropped
Size (bytes):	116392
Entropy (8bit):	7.997242197770177
Encrypted:	true
SSDEEP:	3072:KlH/s6XMeHjItXT44dBPIZPTSgZvxTOx6FPyAVK8:KJffDItX3BPI9PxPvP
MD5:	83E89135EABA21A8CCECF43D79FF6025
SHA1:	99423829E0D7003FED6A8CAC6CB21750362D5149
SHA-256:	91FBEFB5931F2221430691BF6159CE6B8FE35D58FAFA7EC5EAC69AE3F96CD2FD
SHA-512:	185915E458A6C032D260078FCC095FBD79624CC8885258B3ACA884F79202A4D4C99B34EF6509F7BBE12B1420ADAF9E2608F1C9861675347A2DF0193CD9AF4934
Malicious:	false
Reputation:	low
Preview:	...........}[[.H........-...1DFxHBz.I..H.......X..<.pi....Z....,.I.>..L...K....W.....l.._......r..r...w..............`...\|.E..7....r#>..~%.+.?..Y..1.*7.7..ie..7.x.+.0..qT.zQ..].ipW1..pT9q...rtb5.~..y.._....\O....W\.D.M..x%.G<..M......A...J...F....`.7..q....F..K.Z#jF..Qq...7...4P.......,.A.7.?}hh.H+....P...C...g.......MD...:..(...0#..b...J....MV.}............q.Us.p.u....c.......w3....X.Gq0..).-U~.E...A..5..v.kT1..Vw....lY..$.g...y......Cc8....(H..n.#.~.1.6.vv.i.k$.. ...$W.....\|...G.E8Q.p.......19......<%..e.y..6......o....9%....%.......0t......>..y1N.!...g..x........._.~....g.b.......\...T).:^.,.a..M`]o..h.N.k~4....,p."'kO.....,t......l..3...2.OB.'._Y....h..?.q.0.7{....$j...i.....U".L..Y$jK.....y.9..1...a#.?..5.fw..d...'...u.8...?..............{..N..,...=.....]o............N.a.._..Lyh&..?.M..eGP\|..=]laY.(...k..2..X.0.X..2.FD..5..C...~..&...C..o#z.C.....3.o.W......P{.......\|.jk..l....U=_...h......o.....a#^...\..F..d........j..

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63171)
Category:	dropped
Size (bytes):	64365
Entropy (8bit):	5.403911530315902
Encrypted:	false
SSDEEP:	768:0CAEh06um2UQxy6y4QQyHMng8RgxChwOxW/Z06TvCcCvdgF:0pUQM4XPULIdY
MD5:	37A396805428BA004D7B537EA30B6D2A
SHA1:	B697C8B29857FAB2C3A7F5960CF1F0BE36C4ED50
SHA-256:	C9C19D88D9366BFA36FFD12F6237C58322E91C1F2E57A896172A05F41318134A
SHA-512:	57A3B4A9175185009E0C009716B78B91286E5151EFCDE802F8CD90BEEB85174AAF4F4217826EE266641C5F935F615FEE2630F08215666131635FACA0DEED19AA
Malicious:	false
Reputation:	low
Preview:	(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(t)}function r(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function n(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?r(Object(n),!0).forEach((function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,n){return(r=function(t){var r=function(t,r){if("object"!=e(t)\|\|!t)return t;var n=t[Symbol.toPrimitive];if(void 0!==n){var o=n.call(t,"string");if("object"!=e(

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 90673
Category:	downloaded
Size (bytes):	32820
Entropy (8bit):	7.993115472406382
Encrypted:	true
SSDEEP:	768:gu4jwkrxI2adXpo9SSwpmUPieDFpfy2Ky46mmSgI1zk0cCLQXre:w00CfRpFpmAieDFpfBb9ItkHi
MD5:	95EFB7EBFC34942BD4988BEC9E68AC81
SHA1:	4EBB22A556B7AB52437DCFA5DB06D45EA0862DD5
SHA-256:	E15D988359354883CB91CCD56F197E9538979AE8D3BC66F20081E5773EF3E8D6
SHA-512:	3F9D59CF9B2743349EABD4C9FA5872FAC076EF95E0635B7E9157243E18680C3CEBAD7CDBA6272D9F25FC4DA0EDEB0DC8E55C09B4670DDD0179142C51301BB239
Malicious:	false
Reputation:	low
URL:	https://dcd98dee-02f3d9a4.ency.cloud/shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js
Preview:	...........kW.H.?..\|.[g.[...$..Q..B&....e.a.....F.H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G..?..Q..=.u..'..&.G...?y........N.h.z....h...Q...\N'.ky:.F.......2..2)...$..9...j-.G.Ag6..........mos.G..<...~".(....2.Eg.Kq.l6.M.....L....L..,i.....".0.L..DK.\|.d.....;..>QS....r/e...O.gq.Ps./..4...ZA...c.O...[...f......"..4..{......,.b.@.6d2.i..{....&..>.......Q......Q.4.W.....!.'...~...J~.QrF.=;.W2#<i...z..N..$...,N..z.P.....3...'..".h.yG+......>.^.....k.Y:.Y...N..............B...S......5r.E#.........O.t...I..~...3.4%.G.....I........(M/b..*.....SB.3Y......I. .,E.?..i.s.s...$?..f....?.$WLS".M.....{.=.P.~~y.1..uZ2..=!.U.`.s.....n.c...x......O.3B...q...r........).D.z..?.H.HCo...$..<..{./.a.ei..73)F...+"..Q&.JbJ..M..n.$.w.\|.:1Y.....OJ...&..t.:..<M.kk^....NL8..i6,w....,.....y...0...#j;.C..6.%$..o}.A.q-..0.O..g..U..[]j.:.'a...C...2.x..50.\|..}gBlg..i4=<..S...eA.P.S....L.&.Z.f]k.YA@.J......._.!I.k-.L.....XP....{.....i.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkYdBqvzwWytxIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, truncated
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	3.3458519893382603
Encrypted:	false
SSDEEP:	3:Ftt/9Lqln:Xt/Bqln
MD5:	C2A6F097C3979CC0FDE03FC7493428D3
SHA1:	F7F6FDD646D34DED70526213DCB084377F803687
SHA-256:	7AA732E597ADE159D1FA8981EF325456642A9407E7D40A12728380EA30D4AF10
SHA-512:	5D7B0D0CF0778FDB1D0AF0C426729E955F8FB9A2B26C87DCDB20FF5E8012B04E94E51D83B3EC2DEE981080C7D380C92E190529D72ED80D2E8C70635414F1BBBC
Malicious:	false
Reputation:	low
URL:	https://a5031de5-02f3d9a4.ency.cloud/Images/Clear.PNG?ctx=jscb1.0&session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	..........KI+......e......

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18689), with no line terminators
Category:	dropped
Size (bytes):	18689
Entropy (8bit):	5.257703312149586
Encrypted:	false
SSDEEP:	384:cMzMaL58SsGfvqBPgvy2xqWNU6tLEJS1MLZvtRAQb7:D5NU6tLuz
MD5:	29AC23CBA2B1AF397B7DE59A99A0E90C
SHA1:	1CC743D295ED584F2C79126335336C93CFEE43C7
SHA-256:	C96EF65197C2B41C1212E37C88C8DEE886D4EB44CDD3A31709C4C74E8F6E1092
SHA-512:	AFE23EF661AD32648E93753DFFAA188E17AE3DE496D29968090362125AD635EAD25E4DBF8F5B2B85E3FA5C8E3321471230202D98046F789C0E48EF61470F290A
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},o(e)}function i(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,a(n.key),n)}}function a(e){var t=function(e,t){if("object"!=o(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=o(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==o(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e)},t=[{key:"setupVisitTracking",value:function(e,t){t.setVisited()}},{key:"setupSubmissi

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407057
Category:	downloaded
Size (bytes):	116394
Entropy (8bit):	7.99741427339202
Encrypted:	true
SSDEEP:	3072:KlH/s6CGs80ygI8rH1lYzwX4u1p3jx6FPyAV/Tqs:KJhkycrVlo24UIvpqs
MD5:	BF27E3C00409648A4570484693D54655
SHA1:	7761CA7AA1DE56D3484B8EAB082206191F6DB229
SHA-256:	8121D786B468B957161DEF0F08871C13A7D05590B9600D146793C52EA51F630E
SHA-512:	265E71A94D586008913E7418C5B2E77107ACF6BBB95E2D6AC6C03433659FA299B90B3FF0CE5441526F2220F175BE92AED445D2752A71A0A520ECF39977068DE1
Malicious:	false
Reputation:	low
URL:	https://86b155fe-02f3d9a4.ency.cloud/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	...........}[[.H........-...1DFxHBz.I..H.......X..<.pi....Z....,.I.>..L...K....W.....l.._......r..r...w..............`...\|.E..7....r#>..~%.+.?..Y..1.*7.7..ie..7.x.+.0..qT.zQ..].ipW1..pT9q...rtb5.~..y.._....\O....W\.D.M..x%.G<..M......A...J...F....`.7..q....F..K.Z#jF..Qq...7...4P.......,.A.7.?}hh.H+....P...C...g.......MD...:..(...0#..b...J....MV.}............q.Us.p.u....c.......w3....X.Gq0..).-U~.E...A..5..v.kT1..Vw....lY..$.g...y......Cc8....(H..n.#.~.1.6.vv.i.k$.. ...$W.....\|...G.E8Q.p.......19......<%..e.y..6......o....9%....%.......0t......>..y1N.!...g..x........._.~....g.b.......\...T).:^.,.a..M`]o..h.N.k~4....,p."'kO.....,t......l..3...2.OB.'._Y....h..?.q.0.7{....$j...i.....U".L..Y$jK.....y.9..1...a#.?..5.fw..d...'...u.8...?..............{..N..,...=.....]o............N.a.._..Lyh&..?.M..eGP\|..=]laY.(...k..2..X.0.X..2.FD..5..C...~..&...C..o#z.C.....3.o.W......P{.......\|.jk..l....U=_...h......o.....a#^...\..F..d........j..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, truncated
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.3458519893382603
Encrypted:	false
SSDEEP:	3:Ftt/9Lqln:Xt/Bqln
MD5:	C2A6F097C3979CC0FDE03FC7493428D3
SHA1:	F7F6FDD646D34DED70526213DCB084377F803687
SHA-256:	7AA732E597ADE159D1FA8981EF325456642A9407E7D40A12728380EA30D4AF10
SHA-512:	5D7B0D0CF0778FDB1D0AF0C426729E955F8FB9A2B26C87DCDB20FF5E8012B04E94E51D83B3EC2DEE981080C7D380C92E190529D72ED80D2E8C70635414F1BBBC
Malicious:	false
Reputation:	low
Preview:	..........KI+......e......

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://6ea3e58b-02f3d9a4.ency.cloud/images/favicon.ico?v=2
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Timestamp	Protocol	SID	Signature	Severity	Source Port	Dest Port	Source IP	Dest IP
2024-08-29T21:20:01.688486+0200	TCP	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	443	49778	172.233.123.231	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 21:19:37.428986073 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 29, 2024 21:19:46.351883888 CEST	49735	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:46.357079029 CEST	53	49735	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:46.359896898 CEST	49735	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:46.359961987 CEST	49735	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:46.359973907 CEST	49735	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:46.365772963 CEST	53	49735	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:46.365838051 CEST	53	49735	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:46.814914942 CEST	53	49735	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:46.817025900 CEST	49735	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:46.822294950 CEST	53	49735	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:46.825875044 CEST	49735	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:47.038450956 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 29, 2024 21:19:47.158827066 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.158854961 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.158951998 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.159229040 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.159259081 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.159418106 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.159431934 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.159466028 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.159638882 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.159648895 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.740008116 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.740231991 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.740245104 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.741182089 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.741249084 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.742043018 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.742273092 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.742340088 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.742449999 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.742465019 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.742582083 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.742588997 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.743365049 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.743413925 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.744426012 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.744518995 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.790832996 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.790834904 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.790847063 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.838634014 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.922550917 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.924552917 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.924623966 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.924634933 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.925729990 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.925761938 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.925791025 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.925800085 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.925842047 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.926542044 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.927243948 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.927298069 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.927309990 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.927401066 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.927445889 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.927450895 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.927490950 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.927540064 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.927802086 CEST	49736	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:47.927815914 CEST	443	49736	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:47.957252026 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:47.957288980 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:47.957365036 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:47.957463026 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.957504034 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:47.957556009 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.958530903 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.958538055 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:47.958595991 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.958729982 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.958760977 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:47.958811998 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.959069014 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.959084034 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:47.959363937 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.959376097 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:47.959505081 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:47.959516048 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:47.959639072 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:47.959655046 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.441394091 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.442816019 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.444387913 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.454812050 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.490736008 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.490736961 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.492173910 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.505456924 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.732801914 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.732829094 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.732958078 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.732968092 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.733953953 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.733971119 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.734013081 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.734071970 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.735553980 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.735575914 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.735718012 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.735734940 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.736537933 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.736599922 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.736989975 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.737051964 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.787950993 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.788031101 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.793637037 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.793709993 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.794054031 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.794131994 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.794197083 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.794261932 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.796819925 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.796832085 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.797095060 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.797112942 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.797386885 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.797394991 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.797646046 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.797660112 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.850564003 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.850564003 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.850564003 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.850779057 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.905040026 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.905102015 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.905150890 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.905163050 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.905605078 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.905648947 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.905654907 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.908227921 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.908267021 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.908269882 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.908277988 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.908319950 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.908607006 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.909773111 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.909822941 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.909830093 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.910203934 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.910278082 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.910330057 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.925529957 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.925570965 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.925611973 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.925621033 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.926206112 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.926248074 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.926253080 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.927987099 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.928016901 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.928033113 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.928039074 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.928092957 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.928935051 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.929930925 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.929958105 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.929975986 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.929982901 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.930069923 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.933877945 CEST	49743	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.933897018 CEST	443	49743	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.936100006 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.936419010 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.936455965 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.936461926 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.937087059 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.937115908 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.937128067 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.937133074 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.937165022 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.937661886 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.938448906 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.938493013 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.938496113 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.941171885 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.941219091 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.941221952 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.959832907 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.959853888 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.991513968 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.991561890 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.991580009 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.991782904 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:48.991797924 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:48.991949081 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.992000103 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.992005110 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.992028952 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:48.992074966 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.995177031 CEST	49741	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:48.995194912 CEST	443	49741	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.000535011 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:49.000565052 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:49.000631094 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:49.001445055 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:49.001456022 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:49.018002987 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.018163919 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.018208027 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.018217087 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.019752979 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.019787073 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.019803047 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.019809961 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.019853115 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.020693064 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.021701097 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.021725893 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.021745920 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.021753073 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.021794081 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.022604942 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.023411989 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.023438931 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.023454905 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.023459911 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.023499012 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.024439096 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.025343895 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.025368929 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.025381088 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.025387049 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.025433064 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.026082039 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.026887894 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.026915073 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.026938915 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.026942968 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.026995897 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.027549982 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.028695107 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.028743982 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.028748989 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.029932022 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.029964924 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.029978037 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.029983044 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.030023098 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.030462027 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.031166077 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.031193018 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.031203985 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.031207085 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.031245947 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.031979084 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.032696962 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.032728910 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.032737970 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.032742977 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.032792091 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.033413887 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.034099102 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.034126043 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.034140110 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.034143925 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.034185886 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.034790993 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.035537958 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.035563946 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.035583019 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.035586119 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.035634995 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.036144018 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.036202908 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.036243916 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.036247015 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.070118904 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.070125103 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.083735943 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.105732918 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.105756044 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.105792999 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.105798960 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.105834961 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.106210947 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.106900930 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.106939077 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.106944084 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.108740091 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.108766079 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.108788967 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.108793020 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.108834028 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.108880997 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.108922958 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.109800100 CEST	49742	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.109807968 CEST	443	49742	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.110888004 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.110991955 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.111028910 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.339487076 CEST	49740	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.339513063 CEST	443	49740	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.340717077 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.340735912 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.340783119 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.343080044 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.343103886 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.343157053 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.344425917 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.344432116 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.344501972 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.361443996 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.361454010 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.362045050 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.362060070 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.362446070 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.362462997 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.362668991 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.363714933 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:49.363735914 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:49.363795042 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:49.364447117 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:49.364459038 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:49.404505014 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.484533072 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.484587908 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.484720945 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.485290051 CEST	49737	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.485301971 CEST	443	49737	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.487962961 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.487984896 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.488040924 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.488521099 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.488535881 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.775809050 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:49.776148081 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:49.776170015 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:49.777106047 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:49.777162075 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:49.777865887 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.777904987 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.777954102 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.778234005 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.778264999 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.778327942 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.778781891 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:49.778803110 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:49.778891087 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:49.779570103 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.779578924 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.779658079 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.780242920 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:49.780257940 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:49.780661106 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.780668020 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.780714035 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.781380892 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.781397104 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.781580925 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.781596899 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.781748056 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:49.781759977 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:49.781924963 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.781936884 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.822164059 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.822376966 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.822388887 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.822721004 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.823024988 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.823096037 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.823196888 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.825633049 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.825862885 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.825871944 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.826766968 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.826829910 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.827187061 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.827245951 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.827374935 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.827382088 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.828561068 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:49.828735113 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:49.828747988 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:49.829180002 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.829404116 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.829417944 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.829617023 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:49.829670906 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:49.829761028 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.830224991 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.830285072 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.830317020 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.864499092 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.871432066 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.871432066 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.871438980 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.955768108 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.955822945 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.955873013 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.955882072 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.956343889 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.956389904 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.956891060 CEST	49747	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.956902027 CEST	443	49747	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.971640110 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.971831083 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.971842051 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.972157001 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.972846031 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.972901106 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:49.973073006 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:49.975805998 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.975852013 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.975944042 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.975955009 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.976432085 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.976509094 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.976516008 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.977926970 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.977953911 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.977977991 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.977987051 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.977996111 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.978019953 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.981054068 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.981108904 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.981117010 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.981725931 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.981769085 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.981842995 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.981857061 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.982295036 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.982361078 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.982367039 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.983100891 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.983320951 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.983326912 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.983861923 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.983895063 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.983922005 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.983943939 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:49.983952045 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:49.983978033 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.016495943 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.021822929 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.021835089 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.027631998 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.027643919 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.050978899 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:50.051074982 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:50.052341938 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.052422047 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.052500963 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.052510977 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.062427998 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.062505007 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.062515974 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.062833071 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.063023090 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.063030958 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.064321995 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.064357042 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.064405918 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.064414024 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.064587116 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.064958096 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.065660000 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.065689087 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.065737009 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.065745115 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.066013098 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.066395044 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.066447973 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.066524029 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.066530943 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.067991972 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.068030119 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.068056107 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.068063974 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.068150997 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.068561077 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.069134951 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.069169998 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.069175959 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.069181919 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.069417000 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.070395947 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.070456982 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.070465088 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.070735931 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.070765972 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.070789099 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.070795059 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.070851088 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.071588039 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.072093010 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.072319984 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.072324991 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.072567940 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.072654009 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.072659969 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.073457003 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.073489904 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.073501110 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.073508978 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.073648930 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.073652983 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.074242115 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.074317932 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.074322939 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.075102091 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.075129986 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.075165033 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.075171947 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.075227976 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.075958014 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.076006889 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.076030016 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.076061010 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.076066017 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.076106071 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.076767921 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.083285093 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.083312988 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.083544016 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.083874941 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.083887100 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.100286007 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:50.100286007 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.100294113 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:50.108409882 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.112588882 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.112643957 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.112718105 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.112728119 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.113743067 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.113775015 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.113782883 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.113787889 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.113830090 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.113833904 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.113873959 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.113914013 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.114893913 CEST	49751	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.114902973 CEST	443	49751	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.118737936 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.143395901 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:50.147929907 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.148241043 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.148272038 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.148283005 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.148292065 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.148338079 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.148344994 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.149024963 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.149054050 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.149075985 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.149080992 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.149116993 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.149542093 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.149559975 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.149837971 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.150005102 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.150058031 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.150063992 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.150501013 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.150542021 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.150548935 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.151314974 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.151351929 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.151360035 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.151366949 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.151410103 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.152096987 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.152889967 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.152900934 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.152940035 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.152945042 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.152980089 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.152987003 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.154613972 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.154649019 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.154690981 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.154699087 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.154710054 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.154731989 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.154748917 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.158973932 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.159122944 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.159279108 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.159286976 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.159527063 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.159581900 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.194683075 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.194689989 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.239017010 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.239065886 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.239073992 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.239747047 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.239797115 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.239803076 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.240587950 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.240624905 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.240634918 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.240639925 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.240695000 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.240699053 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.241250038 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.241280079 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.241343975 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.241348982 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.241453886 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.241833925 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.242146015 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.242171049 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.242218018 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.242223024 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.242263079 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.242811918 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.242866993 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.242980003 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.242985010 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.243583918 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.243655920 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.243660927 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.244338036 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.244366884 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.244391918 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.244394064 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.244402885 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.244441032 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.245090961 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.245142937 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.245393038 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.249887943 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.251415968 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.251435041 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.252310038 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.252397060 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.252964020 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.253017902 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.253132105 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.253138065 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.256462097 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.256736994 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.256755114 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.257649899 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.257724047 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.258214951 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.258275986 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.258536100 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.258543015 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.261121988 CEST	49748	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.261142015 CEST	443	49748	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.263322115 CEST	49749	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.263343096 CEST	443	49749	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.268912077 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.269153118 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.269169092 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.270148993 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.270215988 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.271481991 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.271539927 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.274837017 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.274842978 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.277781010 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.278053999 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.278063059 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.278915882 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.278980017 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.279321909 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.279376030 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.279648066 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.279654980 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.287055016 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.302369118 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.302408934 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.319219112 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.325552940 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.326080084 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.326143026 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.334534883 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.347877979 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.347899914 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.347995043 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.363697052 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.363708019 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.378541946 CEST	49750	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:50.378555059 CEST	443	49750	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:50.401973963 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.402009964 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.402184010 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.402194977 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.402568102 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.402595997 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.402612925 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.402620077 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.402708054 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.402717113 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.403539896 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.403593063 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.403599024 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.403799057 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.403847933 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.403853893 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.408133984 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.408402920 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.408410072 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.421289921 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.421360016 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.421464920 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.425165892 CEST	49752	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.425180912 CEST	443	49752	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.429096937 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.429337025 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.429368973 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.429395914 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.429416895 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.429428101 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.429447889 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.430341959 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.430367947 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.430418015 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.430423021 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.430722952 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.430727005 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.433994055 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.434048891 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.434055090 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.435440063 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.435476065 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.435534954 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.435543060 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.435604095 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.435655117 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.435659885 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.436146975 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.436177969 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.436204910 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.436216116 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.436223984 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.436258078 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.437087059 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.437130928 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.437138081 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.460052013 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.464235067 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:50.464307070 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:50.474947929 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.474952936 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.484096050 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.484102964 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.489957094 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.490354061 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.490418911 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.490427971 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.491065025 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.491091967 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.491126060 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.491133928 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.491175890 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.491570950 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.491619110 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.491708994 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.491714954 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.492580891 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.492667913 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.492676020 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493244886 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493269920 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493311882 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.493319988 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493364096 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.493705034 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493752956 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493777037 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493819952 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.493827105 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.493937016 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.494281054 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.494330883 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.494388103 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.494395018 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.496607065 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.496675968 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.496685028 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.520802021 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.520832062 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.520886898 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.520896912 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.520948887 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.522906065 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.522999048 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.523415089 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.529297113 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.529329062 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.529357910 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.529369116 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.529381037 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.529408932 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.529408932 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.529458046 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.529464960 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.530210018 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.530241966 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.530272961 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.530277967 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.530284882 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.530307055 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.531820059 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.531853914 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.531879902 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.531904936 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.531904936 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.531914949 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.531948090 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.531960964 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.531965971 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.532476902 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.532511950 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.532536030 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.532558918 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.532567978 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.532592058 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.533677101 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.533709049 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.533715963 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.533723116 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.533772945 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.535948992 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.538413048 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.538420916 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.564837933 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:50.564851999 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:50.565076113 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:50.565565109 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:50.565591097 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:50.565661907 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:50.566123009 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:50.566134930 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:50.568437099 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.568665981 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.568674088 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.569690943 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.569773912 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.570715904 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.570776939 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.572130919 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.572135925 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.576773882 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.576839924 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.576853991 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.577178001 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.577229977 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.577235937 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.577507019 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.577513933 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.577579975 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.577586889 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.578320980 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.578361988 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.578386068 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.578391075 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.578424931 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.579067945 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.579107046 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.579142094 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.579145908 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.579169989 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.579287052 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.584849119 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.585290909 CEST	49753	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.585302114 CEST	443	49753	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.586529016 CEST	49756	443	192.168.2.4	104.18.41.218
Aug 29, 2024 21:19:50.586539984 CEST	443	49756	104.18.41.218	192.168.2.4
Aug 29, 2024 21:19:50.616950989 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:50.617351055 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.620188951 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.620336056 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.620388985 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.620398045 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.620872974 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.620903969 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.620949984 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.620959044 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.621002913 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.621568918 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.621624947 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.621630907 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.621673107 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.621675014 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.621779919 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.627680063 CEST	49755	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.627690077 CEST	443	49755	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.713803053 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.713851929 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.714154005 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.714211941 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.743035078 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:50.747775078 CEST	49757	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:50.747790098 CEST	443	49757	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:50.788502932 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:50.844543934 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.854748011 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.854756117 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.855073929 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.860517979 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.860582113 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.860987902 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.861033916 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.861074924 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.861129045 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:50.904500008 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.934925079 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:50.934969902 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:50.935038090 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:50.992538929 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.992584944 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:50.992803097 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:51.037775993 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.092669964 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.150701046 CEST	49754	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:51.150734901 CEST	443	49754	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:51.174899101 CEST	49758	443	192.168.2.4	104.18.38.43
Aug 29, 2024 21:19:51.174910069 CEST	443	49758	104.18.38.43	192.168.2.4
Aug 29, 2024 21:19:51.183515072 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.183531046 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.184659004 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.184672117 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.184719086 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.241547108 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.241610050 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.278906107 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.278917074 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.324501991 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.362509966 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:51.362546921 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:51.362612963 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:51.362909079 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:51.362926006 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:51.430638075 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.430691957 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.430869102 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.431824923 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.431839943 CEST	443	49759	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.431849957 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.431886911 CEST	49759	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.433321953 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.433347940 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.433401108 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.434137106 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.434148073 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.895751953 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.906826973 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.906846046 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.907744884 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.907828093 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.917107105 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.917162895 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.925338030 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.925347090 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:51.925401926 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:51.925414085 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:52.020428896 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:52.020524979 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:52.046086073 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:52.046116114 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:52.046339035 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:52.049401999 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:52.092506886 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:52.167996883 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:52.168107986 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:52.168320894 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:52.205933094 CEST	49762	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:52.205950022 CEST	443	49762	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:52.298793077 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:52.298835993 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:52.298933983 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:52.310856104 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.310892105 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.310987949 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.315392017 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.315407038 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.326632977 CEST	49761	443	192.168.2.4	184.28.90.27
Aug 29, 2024 21:19:52.326654911 CEST	443	49761	184.28.90.27	192.168.2.4
Aug 29, 2024 21:19:52.337730885 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.337762117 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.337826967 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.338480949 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.338493109 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.355088949 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.355113029 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.355422020 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.355710983 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.355724096 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.421921015 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.421940088 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:52.422099113 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.423132896 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.423155069 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.423218966 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.423337936 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.423345089 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.423419952 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.424412012 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.424432039 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:52.424721003 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.424731970 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.425143003 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.425159931 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.777261972 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.777502060 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.777513981 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.777801991 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.778165102 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.778218985 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.778417110 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.798167944 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.798357964 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.798373938 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.798670053 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.798954010 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.799007893 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.799065113 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.812402010 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.812572956 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.812588930 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.813469887 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.813533068 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.813916922 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.813967943 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.814059019 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.814064980 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.824502945 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.840498924 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.849240065 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.854790926 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.883655071 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.883907080 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.883918047 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.884378910 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:52.884568930 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.884586096 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:52.884823084 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.884884119 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.885162115 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.885219097 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.885279894 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.885494947 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:52.885576010 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.886006117 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.886061907 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:52.886094093 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.894915104 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.895107985 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.895116091 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.896094084 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.896168947 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.896492958 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.896543980 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.896655083 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.896661043 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.913526058 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.913562059 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.913630009 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.913639069 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.913976908 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.914004087 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.914037943 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.914046049 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.914190054 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.914279938 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.914336920 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.914400101 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.914407015 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.914588928 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.914628029 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.914633989 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.915956020 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.916448116 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.916475058 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.916502953 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.916512012 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.916647911 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.916668892 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.916673899 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.916758060 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.916779041 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.917375088 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.917429924 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.917434931 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.917989016 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.918034077 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.918040037 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.924701929 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.924860954 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.924865961 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.927366018 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.927367926 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.927373886 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:52.927381039 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:52.942997932 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.948934078 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.948987007 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.949022055 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.949032068 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.949038029 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.949076891 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.949083090 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.949130058 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.949162006 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.949172020 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.949177027 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.949250937 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.949255943 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.954457045 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.954521894 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.954528093 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.958625078 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:52.958631992 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:52.965017080 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:52.965023041 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:52.974245071 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:52.974263906 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:52.999918938 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.000008106 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.000015020 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.000509024 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.000535965 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.000574112 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.000581980 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.000669003 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.000974894 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.001442909 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.001576900 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.001584053 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.001789093 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.001856089 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.001863003 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003217936 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003258944 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003272057 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.003278017 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003329039 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.003334999 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003575087 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003603935 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003631115 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.003668070 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.003668070 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.003675938 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.004473925 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.004512072 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.004523039 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.004528999 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.004690886 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.005479097 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.005484104 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.005510092 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.023896933 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.024214029 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.024239063 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.024261951 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.024266958 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.024393082 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.024719000 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.025341988 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.025387049 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.025392056 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.025602102 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.026578903 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.026647091 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:53.026654959 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.026755095 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.026796103 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:53.026808977 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.027373075 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027373075 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.027400970 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027416945 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:53.027425051 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.027431011 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027434111 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.027451992 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.027456045 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027466059 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.027486086 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:53.027538061 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027565002 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027575016 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.027580023 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027616024 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.027621031 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.027964115 CEST	49772	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:53.027978897 CEST	443	49772	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.028518915 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.028548002 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.028563976 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.028568029 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.028686047 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.028690100 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.029459953 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.029491901 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.029500961 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.029505014 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.029539108 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.029544115 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.030436993 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.030464888 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.030497074 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.030508041 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.030574083 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.044708967 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.044747114 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.044796944 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.044815063 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.044855118 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.045039892 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.045176029 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.046029091 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.046061993 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.046081066 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.046086073 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.046133041 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.046138048 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.046668053 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.046715021 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.046720982 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.047223091 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.047338963 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.047382116 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.047386885 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.047394037 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.047436953 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:53.047657967 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.047698975 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.047700882 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.047712088 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.047751904 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.047914982 CEST	49771	443	192.168.2.4	172.64.149.213
Aug 29, 2024 21:19:53.047929049 CEST	443	49771	172.64.149.213	192.168.2.4
Aug 29, 2024 21:19:53.048053980 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.048105001 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.048155069 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.048160076 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.048995018 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.049026012 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.049043894 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.049050093 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.049088001 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.049366951 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.049937963 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.049966097 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.049981117 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.049989939 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.050023079 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.086002111 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.086038113 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.086060047 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.086071014 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.086117029 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.086865902 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.086914062 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.086993933 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.087032080 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.087066889 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.087207079 CEST	49766	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.087213039 CEST	443	49766	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.108036041 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.108088017 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.108155966 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.110042095 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.112121105 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.112164021 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.112281084 CEST	49768	443	192.168.2.4	34.36.17.181
Aug 29, 2024 21:19:53.112292051 CEST	443	49768	34.36.17.181	192.168.2.4
Aug 29, 2024 21:19:53.132178068 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.132539034 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.132571936 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.132601023 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.132606030 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.132612944 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.132632017 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.133029938 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.133069992 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.133080006 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.133116961 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.133847952 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.133888960 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.133893013 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.133927107 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.133930922 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.133960962 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.134028912 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.134229898 CEST	49767	443	192.168.2.4	172.64.146.38
Aug 29, 2024 21:19:53.134243011 CEST	443	49767	172.64.146.38	192.168.2.4
Aug 29, 2024 21:19:53.168225050 CEST	49769	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.168241978 CEST	443	49769	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.169398069 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.169421911 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.169481993 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.169749022 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.169756889 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.645675898 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.645998955 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.646011114 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.646285057 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.647135973 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.647178888 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.647501945 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.688500881 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.847413063 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.847454071 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:53.847529888 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.848853111 CEST	49773	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:19:53.848860979 CEST	443	49773	172.67.185.227	192.168.2.4
Aug 29, 2024 21:19:58.568903923 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:58.568960905 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:58.569026947 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:58.569619894 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:58.569636106 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.075901985 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.076267958 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.076288939 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.076641083 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.077131987 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.077200890 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.077488899 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.124505043 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.270746946 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.270792961 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.270838976 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.271450043 CEST	49774	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.271470070 CEST	443	49774	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.272491932 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.272526026 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.272581100 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.273103952 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.273118019 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.553220987 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:59.553292990 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:59.553555965 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:59.567656994 CEST	49746	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:19:59.567670107 CEST	443	49746	142.250.185.68	192.168.2.4
Aug 29, 2024 21:19:59.590445042 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:19:59.590481997 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:19:59.590560913 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:19:59.591090918 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:19:59.591090918 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:19:59.591099024 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:19:59.591114044 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:19:59.591856003 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:19:59.595767975 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:19:59.595778942 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:19:59.738080978 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.797815084 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.878742933 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.878762960 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.879112959 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.921713114 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.926717997 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.926717997 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.926780939 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.926816940 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:19:59.926861048 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:19:59.966963053 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:20:00.186322927 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:20:00.186368942 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:20:00.186455011 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:20:00.187360048 CEST	49775	443	192.168.2.4	104.21.51.207
Aug 29, 2024 21:20:00.187376976 CEST	443	49775	104.21.51.207	192.168.2.4
Aug 29, 2024 21:20:00.191639900 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.191668987 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.191816092 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.192082882 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.192095041 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.278211117 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.278543949 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.278564930 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.279409885 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.279521942 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.280750990 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.280750990 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.280764103 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.280806065 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.282562017 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.282917976 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.282926083 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.283874989 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.284003019 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.284877062 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.284934044 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.322472095 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.322479963 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.337578058 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.337584019 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:00.369762897 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.385735989 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:00.674712896 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.675015926 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.675030947 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.675312042 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.675683022 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.675734997 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.675844908 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.720505953 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.874136925 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.874186993 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.874247074 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.875627041 CEST	49779	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.875641108 CEST	443	49779	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.876758099 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.876773119 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:00.876826048 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.877101898 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:00.877114058 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.340575933 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.341144085 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:01.341155052 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.341424942 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.342354059 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:01.342411041 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.343019962 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:01.384502888 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.478702068 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.478719950 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.478727102 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.478761911 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.478780985 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.478786945 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.478790045 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.478811026 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.478837967 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.478867054 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.481211901 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.481229067 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.481276035 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.481285095 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.481321096 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.536402941 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.536438942 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.536448956 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.536550999 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:01.545766115 CEST	49782	443	192.168.2.4	172.67.185.227
Aug 29, 2024 21:20:01.545774937 CEST	443	49782	172.67.185.227	192.168.2.4
Aug 29, 2024 21:20:01.581998110 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.582005978 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.582042933 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.582053900 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.582087040 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.582102060 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.582138062 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.582293987 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.585141897 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.585150003 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.585175991 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.585208893 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.585216999 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.585258007 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.585258007 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.587058067 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.587073088 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.587155104 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.587162971 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.587289095 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.589451075 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.589464903 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.589566946 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.589576006 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.589679956 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.681528091 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.681546926 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.681636095 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.681649923 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.681750059 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.684146881 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.684160948 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.684382915 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.684390068 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.684432983 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.685945988 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.685961962 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.686037064 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.686043978 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.686289072 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.688502073 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.688517094 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.688554049 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.688641071 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:01.688641071 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.688641071 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.688819885 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.729213953 CEST	49778	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:01.729235888 CEST	443	49778	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.202367067 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.202404976 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.202476025 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.210447073 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.210460901 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.227117062 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.227205038 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.227264881 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.869694948 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.871634960 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.871663094 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.871972084 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.872585058 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.872651100 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.912741899 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.958679914 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.958764076 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.958830118 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.962388039 CEST	49777	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:03.962410927 CEST	443	49777	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:03.965783119 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:04.008497000 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.430392027 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.430413008 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.430423975 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.430460930 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.430488110 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.430504084 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.430510998 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.430525064 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.430553913 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.490959883 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.491002083 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.491067886 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.491750956 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.491764069 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.533540964 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.533560038 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.533632040 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.533643961 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.533694029 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.637134075 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.637150049 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.637212038 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.637228012 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.637279034 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.638755083 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.638787985 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.638809919 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.638813972 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.638828993 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:06.638854980 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.638880014 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.644560099 CEST	49785	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:06.644575119 CEST	443	49785	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:07.195668936 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:07.239687920 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:07.515216112 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:07.515247107 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:07.516335011 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:07.516406059 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:07.519663095 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:07.519726992 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:07.519844055 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:07.519850969 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:07.574932098 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.726031065 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.726057053 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.726063967 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.726082087 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.726088047 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.726090908 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.726121902 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.726149082 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.726164103 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.733946085 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.733979940 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.733998060 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.734009981 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.734025955 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.734035015 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.734066963 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.737315893 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.737332106 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.737397909 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.737406969 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.737956047 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.738002062 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.738008976 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.738034964 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.738051891 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.738074064 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.738676071 CEST	49787	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.738688946 CEST	443	49787	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.772068024 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.772108078 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.772171974 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.773142099 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.773156881 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.809035063 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.809067011 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.809133053 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.809467077 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.809474945 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.809562922 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.809802055 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.809813023 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.809988022 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.809997082 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.841238976 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.841267109 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.841320038 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.842890024 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.842902899 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.854159117 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.854181051 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:09.854299068 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.854649067 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:09.854662895 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.447109938 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.447408915 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.447427988 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.447716951 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.448139906 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.448195934 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.448499918 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.462627888 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.462852001 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.462874889 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.463213921 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.463831902 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.463902950 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.463996887 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.469743967 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.469942093 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.469949961 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.470935106 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.470992088 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.471307039 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.471362114 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.471421003 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.496506929 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.504503965 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.510838032 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.512629032 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.512646914 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.513506889 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.513581991 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.514400005 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.514457941 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.516504049 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.522370100 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.522382975 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.531265020 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.531831980 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.531843901 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.532871962 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.532953978 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.536417007 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.536484957 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.536598921 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.536607027 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.568833113 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.568835020 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.568850994 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:10.585481882 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:10.617506981 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.251504898 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.251528978 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.251564980 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.251600027 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.251610994 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.251732111 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.257890940 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.257900000 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.257921934 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.257998943 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.257998943 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.258008003 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.258125067 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.266968012 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.266984940 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.267124891 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.267132044 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.267518997 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.268553019 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.268583059 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.268630028 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.268656015 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.268893003 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.268893003 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.526612043 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.526875973 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.527093887 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.528408051 CEST	49790	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.528424025 CEST	443	49790	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.554234028 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.554265022 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.554330111 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.554547071 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.554560900 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:12.569180012 CEST	49792	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:12.569190025 CEST	443	49792	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.081074953 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.081099987 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.081116915 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.081167936 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.081187963 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.081201077 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.081227064 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.082880974 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.082925081 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.082938910 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.082942963 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.082979918 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.103317976 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.103411913 CEST	443	49788	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.103475094 CEST	49788	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.111177921 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.111205101 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.111268044 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.111663103 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.111671925 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.112075090 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.112092018 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.112154961 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.112835884 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.112848997 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.112900019 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.113219023 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.113236904 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.113617897 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.113631010 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.181876898 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.181902885 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.181934118 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.181942940 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.181973934 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.181993961 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.183655024 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.183670998 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.183710098 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.183713913 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.183748007 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.184015036 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.184083939 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.184254885 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.184262991 CEST	443	49789	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.184283972 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.184315920 CEST	49789	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.237674952 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.237920046 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.237932920 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.239073038 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.239139080 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.240483999 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.240606070 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.240647078 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.284503937 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.287990093 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.287997961 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.340679884 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.774142981 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.774557114 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.774565935 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.775548935 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.775702000 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.776391983 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.776454926 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.776639938 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.776645899 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.788091898 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.788360119 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.788372040 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.788651943 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.789237976 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.789237976 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.789247990 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.789288998 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.791429996 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.791641951 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.791656017 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.791970015 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.792315960 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.792375088 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.792576075 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.827328920 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:13.836503029 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:13.842674971 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.707241058 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:14.707395077 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:14.707443953 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.707581043 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.707595110 CEST	443	49793	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:14.707603931 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.707638025 CEST	49793	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.708453894 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.708487988 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:14.708554029 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.709220886 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:14.709239960 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.162540913 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.162565947 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.162573099 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.162602901 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.162622929 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.162636995 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.162646055 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.162656069 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.162688971 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.167623997 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.167649031 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.167689085 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.167702913 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.167716980 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.167738914 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.215306997 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.261487007 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.261549950 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.261579990 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.261595011 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.261617899 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.261636019 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.262897015 CEST	49796	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.262908936 CEST	443	49796	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.266155005 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.266206980 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.266216040 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.266238928 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.266278982 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.268577099 CEST	49795	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.268585920 CEST	443	49795	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.276004076 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.276016951 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.276070118 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.276474953 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.276489973 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.283165932 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.283184052 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.283229113 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.283456087 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.283472061 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.393208027 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.393532991 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.393543005 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.393863916 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.394280910 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.394349098 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.394489050 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.436506033 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.661691904 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.661719084 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.661726952 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.661853075 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.661861897 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.661907911 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.763849020 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.763855934 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.763890028 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.763923883 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.763925076 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.763933897 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.763964891 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.764158010 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.838670969 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.838685036 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.838747025 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.838752985 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.838802099 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.865767956 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.865787029 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.865880966 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.865880966 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.865886927 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.866103888 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.867626905 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.867644072 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.867901087 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.867904902 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.867969990 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.935487032 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.940254927 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.940309048 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.940318108 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.940494061 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.940500021 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.941443920 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.941772938 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.942589045 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.942648888 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.942842007 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.942848921 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.947047949 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.947427988 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.947439909 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.947895050 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.950731993 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.950731993 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.950817108 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.965039015 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.965054035 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.965156078 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.965162992 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.965255022 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.967092037 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.967108011 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.967371941 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.967375994 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.967523098 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.967992067 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.968059063 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.968081951 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.968148947 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.968812943 CEST	49794	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.968823910 CEST	443	49794	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:15.991163015 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:15.997236967 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.012213945 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.012231112 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.012322903 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.013530970 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.013539076 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.033813953 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.076515913 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.083457947 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.083468914 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.083527088 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.084414005 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.084424973 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.089454889 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.089462996 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.093862057 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.094665051 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.094676018 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.679961920 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.680958033 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.680969954 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.681268930 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.681619883 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.681665897 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.682017088 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.724498987 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.741063118 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.762857914 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.762871981 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.763892889 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.763959885 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.774565935 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.814872026 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.815032005 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.835211992 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.853373051 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.853377104 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.853907108 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.854134083 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.854149103 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.854465008 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.854532003 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.854696989 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:16.896507025 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:16.899108887 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.281965017 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.281986952 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.282017946 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.282042027 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.282054901 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.282154083 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.382796049 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.382808924 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.382837057 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.382863998 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.382869005 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.382879972 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.382909060 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.383282900 CEST	49798	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.383292913 CEST	443	49798	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.649221897 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.649781942 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.649832964 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.649847984 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.649897099 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.650351048 CEST	49799	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.650363922 CEST	443	49799	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739615917 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739639997 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739646912 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739689112 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739708900 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739716053 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739727974 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.739752054 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.739767075 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.787178993 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.840748072 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.840756893 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.840781927 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.840792894 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.840812922 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.840817928 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.840842962 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.840886116 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.943115950 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.943125010 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.943152905 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.943183899 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.943186045 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.943201065 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.943236113 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.943248034 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.999752998 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.999769926 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.999828100 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:17.999840021 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:17.999882936 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.013933897 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.013948917 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.013973951 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.014012098 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.014023066 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.014049053 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.014060974 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.040925980 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.040941954 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.041011095 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.041019917 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.041059971 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.099272966 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.099303961 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.099339962 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.099344969 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.099355936 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.099396944 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.099402905 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.099433899 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.099478960 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.103337049 CEST	49791	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.103353024 CEST	443	49791	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.157001019 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.157027006 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.157260895 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.157749891 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.157763004 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.161241055 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.161267996 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.161331892 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.161587000 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.161601067 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.179469109 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.179476023 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.179651976 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.180011034 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.180022955 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.254374027 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.254383087 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.254458904 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.254714012 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.254724026 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.276180983 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.276207924 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.276290894 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.276808977 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.276823997 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.491189957 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.491218090 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.491369963 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.494478941 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.494491100 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.812155962 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.812638998 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.812653065 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.812980890 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.813515902 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.813580990 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.813697100 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.826263905 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.826680899 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.826689959 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.827069998 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.827513933 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.827588081 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.827816010 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.839535952 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.839761019 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.839767933 CEST	443	49800	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.839812994 CEST	49800	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.844327927 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.846302986 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.846312046 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.847623110 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.847712994 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.848505020 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.848567963 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.848788023 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.848794937 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.856498957 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.868500948 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.896934986 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.915693045 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.916137934 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.916146040 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.917020082 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.917083979 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.918188095 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.918272972 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.918813944 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.918819904 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.931472063 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.931775093 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.931787968 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.932106972 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.932786942 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.932852030 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.933001041 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.955307007 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.958511114 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.958584070 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.961265087 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.976497889 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:18.977509975 CEST	49801	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:18.977519035 CEST	443	49801	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.002875090 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.002902031 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.002909899 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.002934933 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.002948046 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.002957106 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.002964973 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.002974987 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.003041029 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.007354021 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.007373095 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.007412910 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.007419109 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.007456064 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.007477999 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.103347063 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.103406906 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.103444099 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.103463888 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.103511095 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.159174919 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.213139057 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.253319025 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.253325939 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.254482031 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.254496098 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.254544020 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.260123968 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.260215044 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.260998964 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.261007071 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.292058945 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.292081118 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.292128086 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.292138100 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.292169094 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.292190075 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.307043076 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.384593010 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.384614944 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.384670019 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.384677887 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.384721994 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.718997955 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.719007015 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.719044924 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.719079018 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.719088078 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.719119072 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.719139099 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.818007946 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.818027973 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.818067074 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.818075895 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:19.818104982 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:19.818124056 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.151437998 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.151628017 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.151655912 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.151670933 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.151700974 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.151715040 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.151756048 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.151834011 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.153502941 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.153512001 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.153531075 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.153558016 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.153559923 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.153567076 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.153585911 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.153614998 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.153640985 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.153640985 CEST	49804	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.153642893 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.153654099 CEST	443	49804	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.154226065 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.156162024 CEST	49805	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.156172991 CEST	443	49805	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.156439066 CEST	49802	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.156441927 CEST	443	49802	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.170042038 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.170099974 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.175450087 CEST	49803	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.175455093 CEST	443	49803	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.184017897 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.184046984 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.184222937 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.184567928 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.184581995 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.193059921 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.193133116 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.193147898 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.193348885 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.193401098 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.194448948 CEST	49806	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.194456100 CEST	443	49806	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.243345976 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.243370056 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.243467093 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.244121075 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.244129896 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.244307041 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.244601965 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.244609118 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.244654894 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.245069981 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.245080948 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.245412111 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.245423079 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.245663881 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.245675087 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762111902 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762139082 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762149096 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762176037 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762195110 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762202024 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762224913 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.762236118 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.762358904 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.809592009 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.837311983 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.837620974 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.837629080 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.837915897 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.838356018 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.838356018 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.838404894 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.858735085 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.858750105 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.858899117 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.859226942 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.859241962 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.862399101 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.862409115 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.862438917 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.862448931 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.863090992 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.863121033 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.863121986 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.863141060 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.863164902 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.865600109 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.868803978 CEST	49809	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.868810892 CEST	443	49809	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.870780945 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.870791912 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.870963097 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.871337891 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.871351004 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.890974998 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.891315937 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.891324043 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.892326117 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.892360926 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.892488003 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.893645048 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.893704891 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.893793106 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.893800020 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.896023989 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.896367073 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.896389961 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.896426916 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.896428108 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.896435022 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.896450043 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.896457911 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.896569967 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.897437096 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.897567034 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.898015022 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.898076057 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.898312092 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.898318052 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.904891968 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.905112982 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.905121088 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.905440092 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.905793905 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.905855894 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.905889034 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.934802055 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.948499918 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.950233936 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.950233936 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.950262070 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.998769999 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.998778105 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.998805046 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.998841047 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.998848915 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:20.998879910 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:20.998950958 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.097470999 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.097489119 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.097563982 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.097563982 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.097572088 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.097707987 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.099395990 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.099411011 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.099493980 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.099493980 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.099502087 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.099546909 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.099982977 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.100111961 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.174699068 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.174722910 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.174791098 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.174798965 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.174818039 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.174925089 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.176763058 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.176800966 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.176845074 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.176851988 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.176909924 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.199198961 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.199220896 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.199353933 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.199361086 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.199413061 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.200025082 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.200102091 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.200131893 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.200453043 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.202434063 CEST	49808	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.202440977 CEST	443	49808	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.512886047 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.513295889 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.513309956 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.514339924 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.514432907 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.514750957 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.514810085 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.515310049 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.515321016 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.543011904 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.543440104 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.543451071 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.543773890 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.544301987 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.544363022 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:21.544603109 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.569802046 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:21.588510036 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.039936066 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.039948940 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.039952993 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.040024996 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.040160894 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.040160894 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.058069944 CEST	49810	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.058082104 CEST	443	49810	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.064409971 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.072419882 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.085448027 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.116672039 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.116827965 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.126456022 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.126564980 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.126667023 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.127147913 CEST	49812	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.127154112 CEST	443	49812	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.146172047 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.146286964 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.146347046 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.147732973 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.147795916 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.147803068 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.147829056 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.148513079 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.149822950 CEST	49811	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.149831057 CEST	443	49811	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:22.150211096 CEST	49813	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:22.150216103 CEST	443	49813	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.133996964 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.134027958 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.134042025 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.134114981 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:23.134138107 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.134186029 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:23.135828972 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.135847092 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.135909081 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:23.135916948 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.136303902 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.136357069 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:23.136363983 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.136378050 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.136419058 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:23.211625099 CEST	49815	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:23.211637974 CEST	443	49815	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.616843939 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.617011070 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:23.617031097 CEST	443	49814	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:23.617075920 CEST	49814	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:25.524368048 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:25.524395943 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:25.525058031 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:25.525058031 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:25.525087118 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:25.551500082 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:25.551525116 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:25.551714897 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:25.552699089 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:25.552710056 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.187985897 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.188606977 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:26.188621998 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.188914061 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.189737082 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:26.189796925 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.190030098 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:26.190054893 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.207365990 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.261297941 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:26.533901930 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:26.533916950 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.534368992 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.576011896 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:26.657429934 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:26.657552958 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:26.711580038 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:27.837331057 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:27.837574959 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:27.837620974 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.049783945 CEST	49816	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.049802065 CEST	443	49816	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.084101915 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.084131956 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.084352016 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.084930897 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.084944963 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.388204098 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.388227940 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.388422966 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.388839960 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.388855934 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.746619940 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.747225046 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.747235060 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.748115063 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.748183966 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.750190020 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.750246048 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.750643015 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:28.750648975 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:28.802356005 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:29.073908091 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:29.075030088 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:29.075051069 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:29.075354099 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:29.076930046 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:29.076992989 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:29.077516079 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:29.120501995 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:30.436417103 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:30.436512947 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:30.436534882 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:30.439873934 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:30.473237991 CEST	49818	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:30.473237991 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:30.473253012 CEST	443	49818	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:30.473269939 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:31.411498070 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:31.411632061 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:31.411684990 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:31.411828995 CEST	49819	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:31.411844015 CEST	443	49819	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.082139969 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.082393885 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.082611084 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.085103035 CEST	49817	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.085138083 CEST	443	49817	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.086154938 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.086175919 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.087956905 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.091687918 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.091702938 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.754697084 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.754964113 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.754977942 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.755265951 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.756047010 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.756103039 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:32.756294012 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:32.800501108 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.579494953 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.579515934 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.579576969 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.579601049 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.579653025 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.584880114 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.584887028 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.584925890 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.584939003 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.584945917 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.584995031 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.589642048 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.589677095 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.589715958 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.589752913 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.589801073 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.597481966 CEST	49820	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.597491980 CEST	443	49820	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.616770983 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.616797924 CEST	443	49821	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.616956949 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.621408939 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.621423006 CEST	443	49821	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.629911900 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.629920959 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:35.630004883 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.634677887 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:35.634689093 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.311013937 CEST	443	49821	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.311320066 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.311332941 CEST	443	49821	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.312221050 CEST	443	49821	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.312328100 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.313673973 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.313731909 CEST	443	49821	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.330646038 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.330866098 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.330873013 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.331891060 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.331947088 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.332891941 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.332891941 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.332902908 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.332954884 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.360027075 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.360044003 CEST	443	49821	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.376101017 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.376107931 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:36.407108068 CEST	49821	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:36.423072100 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:38.385389090 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:38.385415077 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:38.385474920 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:38.386023998 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:38.386038065 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.055083036 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.055521965 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.055542946 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.056287050 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.056752920 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.056833982 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.057046890 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.100492001 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830631018 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830657005 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830666065 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830692053 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830705881 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830715895 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830728054 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.830759048 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.830775976 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.830807924 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.832515955 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.832524061 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.832552910 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.832577944 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.832595110 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.832611084 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.882133007 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.934809923 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.934819937 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.934854031 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.934868097 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.934870005 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.934904099 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.934914112 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.934926987 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.934957027 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.937024117 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.937038898 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.937076092 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.937083960 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.937114000 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.937130928 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.937289953 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.937340021 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.939892054 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.939920902 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.939968109 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.939975977 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.939997911 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.940026045 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.942182064 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.942220926 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.942241907 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.942255020 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:39.942285061 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:39.942296982 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.042762041 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.042785883 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.042850018 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.042879105 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.042896986 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.042962074 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.045273066 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.045289040 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.045331001 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.045342922 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.045372963 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.045397043 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.047036886 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.047053099 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.047092915 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.047101021 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.047148943 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.049515963 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.049535036 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.049587965 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.049603939 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.049628019 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.049645901 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.050929070 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.050945044 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.051023006 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.051032066 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.051069975 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.352011919 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.352021933 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.352061987 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.352092028 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.352124929 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.352145910 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.352174044 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.353843927 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.353889942 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.353908062 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.353915930 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.353945017 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.353965044 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.355663061 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.355684042 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.355720997 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.355741024 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.355747938 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.355776072 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.355798006 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.355803013 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.355957031 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.356368065 CEST	49822	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.356383085 CEST	443	49822	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.386499882 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.386532068 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.386594057 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.386908054 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.386920929 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.409818888 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.409832001 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.409895897 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.410109997 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.410120964 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.448246956 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.448283911 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.448357105 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.449549913 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.449563980 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.473464966 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.473481894 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.473550081 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.473912001 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.473932981 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.473982096 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.474093914 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.474104881 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.474232912 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.474240065 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.815928936 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.815968990 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.816188097 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.816409111 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.816421986 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.816994905 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.817035913 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:40.817162991 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.817464113 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:40.817482948 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.051517010 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.051889896 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.051903009 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.052930117 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.053005934 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.053594112 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.053627014 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.053652048 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.097951889 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.098424911 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.098450899 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.098762989 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.099358082 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.099427938 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.099631071 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.101497889 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.101510048 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.134634018 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.135119915 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.135143042 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.135452032 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.135962009 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.136018038 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.136212111 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.136235952 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.136274099 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.141460896 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.141746998 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.141755104 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.142723083 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.142822981 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.143270016 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.143323898 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.143419981 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.144494057 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.149068117 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.149069071 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.159157038 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.159420967 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.159434080 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.160293102 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.160358906 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.160725117 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.160784006 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.160888910 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.160896063 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.180499077 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.180529118 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.184509993 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.191946030 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.192325115 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.192358971 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.192379951 CEST	443	49823	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.192404985 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.193464041 CEST	49823	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.196403027 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.196412086 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.211765051 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.243516922 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.498004913 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.498253107 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.498414993 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.498429060 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.498588085 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.498603106 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.499403000 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.499469995 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.499589920 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.499716043 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.500989914 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.500991106 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.501005888 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.501048088 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.502024889 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.502101898 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.502348900 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.502365112 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.552804947 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.552824020 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:41.552850962 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:41.604197025 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.229449034 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.229724884 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.229737997 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.229762077 CEST	443	49797	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.229809999 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.229824066 CEST	49797	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.494515896 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.494723082 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.494779110 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.495157957 CEST	49827	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.495173931 CEST	443	49827	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.516005039 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.516025066 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.516083002 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.516303062 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.516313076 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.824086905 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.824100018 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.824131012 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.824182987 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.824197054 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.824218988 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.824237108 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.824249983 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.824301958 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.827853918 CEST	49828	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.827877045 CEST	443	49828	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.876854897 CEST	49829	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.876873970 CEST	443	49829	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.884850025 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.884879112 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.884928942 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.885179043 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.885193110 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.886176109 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.886212111 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.886353970 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.886538982 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.886549950 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.894068003 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.894088030 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.894094944 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.894131899 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.894149065 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.894160032 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.894167900 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.894200087 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.894222021 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.895921946 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.895945072 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.895982027 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.895988941 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.895992994 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.896032095 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.896039963 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.896049023 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.896089077 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.897001028 CEST	49826	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.897007942 CEST	443	49826	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.906609058 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.906629086 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:42.906804085 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.907058954 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:42.907068014 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.112921000 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.113059044 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.113090992 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.129004002 CEST	49831	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.129023075 CEST	443	49831	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.154870033 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.154896021 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.155076981 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.155271053 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.155282974 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.177321911 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.177531004 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.177546978 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.178955078 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.179017067 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.179573059 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.179645061 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.179698944 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.224503994 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.224567890 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.224575043 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.271991968 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.545280933 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.545519114 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.545537949 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.545985937 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.546294928 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.546369076 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.546463966 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.557522058 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.557742119 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.557754040 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.558029890 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.558335066 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.558383942 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.558548927 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.580874920 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.581087112 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.581094980 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.581940889 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.582004070 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.582237005 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.582287073 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.582348108 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.582353115 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.592490911 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.604509115 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.628868103 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.808198929 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.808495998 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.808507919 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.809365988 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.809452057 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.810347080 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.810404062 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.810592890 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:43.810600996 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:43.852293015 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.573427916 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.573448896 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.573455095 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.573487043 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.573501110 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.573504925 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.573529959 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.573549986 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.573584080 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.574665070 CEST	49830	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.574675083 CEST	443	49830	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.620785952 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.621046066 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.621103048 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.629278898 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.629288912 CEST	443	49833	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.629298925 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.629328966 CEST	49833	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.629955053 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.629971027 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.630892038 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.630892038 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.630913973 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631325006 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631354094 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631361008 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631377935 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631383896 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631391048 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631397963 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.631411076 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.631437063 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.631458998 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.633672953 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.633682013 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.633703947 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.633721113 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.633769989 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.633775949 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.679846048 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.731017113 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.731033087 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.731055021 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.731061935 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.731087923 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.731095076 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.731122017 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.731129885 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.732713938 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.732728004 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.732745886 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.732777119 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.732784986 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.732809067 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.732831001 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.734288931 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.734307051 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.734361887 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.734368086 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.734407902 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.736512899 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.736538887 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.736577988 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.736582994 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.736638069 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.834145069 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.834167004 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.834228992 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.834242105 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.834302902 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.835400105 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.835413933 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.835475922 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.835483074 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.835519075 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.838069916 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.838093996 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.838157892 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.838164091 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.838196039 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.838213921 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.839354992 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.839375019 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.839451075 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.839457035 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.839504004 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.841990948 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.842006922 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.842061996 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.842067003 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.842122078 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.843030930 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.843045950 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.843143940 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.843148947 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.843184948 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.920793056 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.920811892 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.920893908 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.920906067 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.920958996 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.933506012 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.933523893 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.933604002 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.933610916 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.933670044 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.934273958 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.934335947 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.934341908 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.934362888 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:44.934406042 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.938971996 CEST	49825	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:44.938986063 CEST	443	49825	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.006076097 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.009455919 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.009507895 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.010262966 CEST	49834	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.010276079 CEST	443	49834	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.137859106 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.140511990 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.140667915 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.140681982 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.140799999 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.140851974 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.143269062 CEST	49835	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.143282890 CEST	443	49835	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.289685965 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.291424990 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.291445971 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.292593956 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.299643040 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.299818993 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.303520918 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.343611956 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.343636036 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.343642950 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.343669891 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.343698978 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.343708038 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.343717098 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.343743086 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.343766928 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.344496012 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.345726013 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.345741987 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.345812082 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.345818043 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.345858097 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.345866919 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.345941067 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.345982075 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.385132074 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.385170937 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.385246992 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.385822058 CEST	49836	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.385838985 CEST	443	49836	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.388736010 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.388748884 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.395566940 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.395598888 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.395606041 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.395636082 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.395651102 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.395668030 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.395678997 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.395689011 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.395713091 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.400614977 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.400631905 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.400718927 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.402564049 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.402575016 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.528578997 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.528594971 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.528642893 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.528656960 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.528691053 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.528704882 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.551275969 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.551318884 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:45.551379919 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.551666975 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:45.551678896 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.041989088 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.042002916 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.042026043 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.042100906 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.042100906 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.042115927 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.042186022 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.105145931 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.105396986 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.105417967 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.106216908 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.106841087 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.106874943 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.106888056 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.106918097 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.107208014 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.108171940 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.108171940 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.108233929 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.108248949 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.108664989 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.108666897 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.108671904 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.108688116 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.125741959 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.125758886 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.125794888 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.125859022 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.125880957 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.126190901 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.131473064 CEST	49837	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.131494999 CEST	443	49837	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.152092934 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.180002928 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.180022001 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.180166006 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.181813955 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.181828976 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.187861919 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.187894106 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.188000917 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.188203096 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.188211918 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.206418037 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.206628084 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.206634998 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.207627058 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.207731009 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.208561897 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.208616972 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.208704948 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.234726906 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.234751940 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.234966993 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.235116005 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.235131979 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.256504059 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.264278889 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.264301062 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.309277058 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.643124104 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.643457890 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.643470049 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.644471884 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.644539118 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.645977974 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.646044016 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.646317005 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.646326065 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.685842991 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.776669025 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.776757956 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.777066946 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.778192997 CEST	49843	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.778203011 CEST	443	49843	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.839070082 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.839081049 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.839313030 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.839679956 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:46.839693069 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:46.843899965 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.844119072 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.844136953 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.845118999 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.845180988 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.846185923 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.846255064 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.846430063 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.846436024 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.885554075 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.885751009 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.885771036 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.886631966 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.886744022 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.887016058 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.887070894 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.887146950 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.887154102 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:46.898183107 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:46.928870916 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.017251015 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.017309904 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.017374039 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.017812967 CEST	49842	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.017829895 CEST	443	49842	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.058052063 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.058090925 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.058147907 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.058367014 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.058379889 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.197349072 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.197518110 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.197587967 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.197638035 CEST	49841	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.197659016 CEST	443	49841	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.318591118 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.318984985 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.318995953 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.319999933 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.320081949 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.320663929 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.320725918 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.320893049 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.320899963 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.365669966 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.386014938 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.386055946 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.386111021 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.386430979 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.386442900 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.434391975 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.435009003 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.435062885 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.435461998 CEST	49846	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.435468912 CEST	443	49846	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.507919073 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.507930994 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.508012056 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.508424044 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.508435011 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.710978985 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.711275101 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.711294889 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.712254047 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.712316036 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.713380098 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.713437080 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.713634968 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.713643074 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:47.755970001 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:47.973613024 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.973881006 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.973891973 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.974225998 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.974622011 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.974685907 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:47.974818945 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.974919081 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:47.974953890 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.065119982 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.065347910 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.065371037 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.066446066 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.066853046 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.066911936 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.067069054 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.108503103 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.147938967 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.148001909 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.148122072 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.149810076 CEST	49849	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.149817944 CEST	443	49849	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.161472082 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.161482096 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.161555052 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.161892891 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.161906004 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.211064100 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.211102009 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.211256027 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.211606026 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.211616039 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.281440973 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.281465054 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.281481981 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.281518936 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.281549931 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.281564951 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.281590939 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.283415079 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.283457041 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.283474922 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.283480883 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.283514977 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.285165071 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.285845041 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.285901070 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.286196947 CEST	49844	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.286209106 CEST	443	49844	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.310431957 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.310457945 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.310517073 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.310667992 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.310678959 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.384061098 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.384111881 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.384128094 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.384136915 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.384166956 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.384182930 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.385601044 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.385647058 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.385668993 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.385674000 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.385715008 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.418339968 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.418359995 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.418368101 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.418384075 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.418416977 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.418428898 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.418437004 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.418447018 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.418481112 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.465629101 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.465672016 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.465698004 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.465703964 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.465743065 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.465902090 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.465953112 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.465958118 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.466048002 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.466243982 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.466463089 CEST	49839	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.466475010 CEST	443	49839	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.519170046 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.519212961 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.519263983 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.519272089 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.519310951 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.521073103 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.521089077 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.521133900 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.521151066 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.521187067 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.619811058 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.619832993 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.619874001 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.619887114 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.619914055 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.619934082 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.620270967 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.620325089 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.620332956 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.620342970 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.620390892 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.621022940 CEST	49845	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.621037960 CEST	443	49845	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.625838995 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.626359940 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.626369953 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.626696110 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.628179073 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.628241062 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.631912947 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.658756018 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.659080982 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.659216881 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.660674095 CEST	49840	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.660681009 CEST	443	49840	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.672503948 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.677198887 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.677227974 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.677439928 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.679970026 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.679981947 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.736897945 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.736973047 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.744112968 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.765216112 CEST	49850	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:48.765224934 CEST	443	49850	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:48.867692947 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.915837049 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.965565920 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.981539011 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.981551886 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.982036114 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.986269951 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.986289978 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.987310886 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.987529993 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.994232893 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.994326115 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:48.997255087 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.997256041 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:48.997338057 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.032100916 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.032115936 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.041649103 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:20:49.041665077 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:49.041778088 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:20:49.043349028 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:20:49.043360949 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:49.044493914 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.071647882 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.330559015 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.331338882 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.331358910 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.332326889 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.332525015 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.333110094 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.333167076 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.335858107 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.335866928 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.383898973 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.489352942 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.489375114 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.489449978 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.489459991 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.491693020 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.491872072 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.493849993 CEST	49847	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.493861914 CEST	443	49847	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.511348963 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.511380911 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.511465073 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.511989117 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.512003899 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.676259041 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:49.697011948 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.697067976 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.697110891 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.722022057 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:20:49.751925945 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:20:49.751934052 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:49.752311945 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:49.752348900 CEST	49851	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:49.752362013 CEST	443	49851	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:49.754818916 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:20:49.754882097 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:49.804704905 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:20:50.008656979 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.008850098 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.008907080 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.013254881 CEST	49848	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.013273954 CEST	443	49848	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.175741911 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.176011086 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.176033020 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.177053928 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.177115917 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.177498102 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.177556038 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.177658081 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.177664042 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.218167067 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.271919966 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.272330046 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.272388935 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.273104906 CEST	49852	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.273123980 CEST	443	49852	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.741579056 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.741610050 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:50.741756916 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.742345095 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:50.742358923 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.408624887 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.408771038 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:51.408808947 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:51.408920050 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:51.409025908 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.409153938 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.419418097 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:51.419435978 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:51.421618938 CEST	49853	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.421628952 CEST	443	49853	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.453926086 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.509968996 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.572021008 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.572036028 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.573467016 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.577836037 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.578056097 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.581834078 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.622186899 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.622195959 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.683202028 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.683224916 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.683269978 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.683291912 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.683330059 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:51.683367968 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.804234982 CEST	49855	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:51.804253101 CEST	443	49855	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.015662909 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.015957117 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.015980959 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.016320944 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.016798019 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.016856909 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.016992092 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.017050982 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.017065048 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.191225052 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.191689014 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.191735983 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.192337036 CEST	49857	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.192353010 CEST	443	49857	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.223978996 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.224049091 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.224091053 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.226180077 CEST	49856	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.226200104 CEST	443	49856	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.302778959 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.302813053 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.302876949 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.303833961 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.303849936 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.403220892 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.403261900 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.403321981 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.404139042 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.404151917 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.880234003 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.887881041 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.887898922 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.888278008 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.888979912 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.888979912 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.889039993 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.931865931 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:52.957504988 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.957969904 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.957988024 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.959134102 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.962008953 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.962193966 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:52.962568045 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:52.996148109 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.996520996 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:52.996697903 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:53.004499912 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:53.005644083 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:53.017579079 CEST	49859	443	192.168.2.4	35.190.10.96
Aug 29, 2024 21:20:53.017607927 CEST	443	49859	35.190.10.96	192.168.2.4
Aug 29, 2024 21:20:53.686218023 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:53.686297894 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:53.686353922 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:53.687156916 CEST	49858	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:20:53.687166929 CEST	443	49858	172.233.123.231	192.168.2.4
Aug 29, 2024 21:20:54.538386106 CEST	49723	80	192.168.2.4	2.19.126.163
Aug 29, 2024 21:20:54.538640976 CEST	49724	80	192.168.2.4	199.232.214.172
Aug 29, 2024 21:20:54.543524981 CEST	80	49723	2.19.126.163	192.168.2.4
Aug 29, 2024 21:20:54.543575048 CEST	49723	80	192.168.2.4	2.19.126.163
Aug 29, 2024 21:20:54.543852091 CEST	80	49724	199.232.214.172	192.168.2.4
Aug 29, 2024 21:20:54.543895960 CEST	49724	80	192.168.2.4	199.232.214.172
Aug 29, 2024 21:20:59.650403976 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:59.650476933 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:20:59.650525093 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:21:00.398293018 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:00.398318052 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:00.398380995 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:00.399219990 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:00.399235010 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:01.054663897 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:01.055010080 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:01.055027008 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:01.055464983 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:01.055902958 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:01.055991888 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:01.056103945 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:01.100498915 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:01.462519884 CEST	49854	443	192.168.2.4	142.250.185.68
Aug 29, 2024 21:21:01.462541103 CEST	443	49854	142.250.185.68	192.168.2.4
Aug 29, 2024 21:21:03.133358955 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:03.133548975 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:03.133739948 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:03.133774042 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:03.133774042 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:03.133790970 CEST	443	49860	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:03.133899927 CEST	49860	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:05.852087975 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:05.852119923 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:05.852293015 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:05.852648973 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:05.852659941 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:06.587424994 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:06.587730885 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:06.587747097 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:06.588982105 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:06.589590073 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:06.589590073 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:06.589607000 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:06.589832067 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:06.631489038 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:07.392761946 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:07.392832994 CEST	443	49861	172.233.123.231	192.168.2.4
Aug 29, 2024 21:21:07.392878056 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:07.393090963 CEST	49861	443	192.168.2.4	172.233.123.231
Aug 29, 2024 21:21:07.393105030 CEST	443	49861	172.233.123.231	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 29, 2024 21:19:45.305926085 CEST	53	49573	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:45.306545019 CEST	53	53239	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:46.351177931 CEST	53	59898	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:47.111521006 CEST	64861	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:47.111715078 CEST	52605	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:47.141171932 CEST	53	64861	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:47.213716984 CEST	53	52605	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:47.940888882 CEST	54687	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:47.941190004 CEST	65047	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:47.941844940 CEST	55980	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:47.941996098 CEST	60238	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:47.956445932 CEST	53	55980	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:47.956578970 CEST	53	60238	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:47.956696033 CEST	53	65047	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:47.956870079 CEST	53	54687	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:48.990503073 CEST	51643	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:48.991175890 CEST	60060	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:48.997514963 CEST	53	51643	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:48.998837948 CEST	53	60060	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:49.341922998 CEST	49921	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:49.342309952 CEST	53197	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:49.349881887 CEST	53	49921	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:49.353669882 CEST	53	53197	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:49.544609070 CEST	54676	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:49.544960976 CEST	56500	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:49.552026987 CEST	52605	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:49.553848028 CEST	50927	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:49.776118040 CEST	53	54676	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:49.776308060 CEST	53	56500	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:49.776354074 CEST	53	52605	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:49.776362896 CEST	53	50927	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:50.551301956 CEST	54158	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:50.551661015 CEST	60932	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:50.559533119 CEST	53	54158	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:50.563589096 CEST	53	60932	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:50.593653917 CEST	53	57038	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:52.282267094 CEST	57758	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:52.285799980 CEST	49859	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:52.313528061 CEST	53	49859	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:52.344758987 CEST	55831	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:52.345470905 CEST	62391	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:52.353668928 CEST	53	62391	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:52.353688002 CEST	53	55831	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:52.391465902 CEST	50277	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:52.391705990 CEST	58807	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:52.398797989 CEST	53	57758	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:52.400566101 CEST	53	59804	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:52.403480053 CEST	53	50277	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:52.403634071 CEST	53	58807	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:59.545183897 CEST	50298	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:59.545592070 CEST	62484	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:19:59.571594954 CEST	53	50298	1.1.1.1	192.168.2.4
Aug 29, 2024 21:19:59.654474974 CEST	53	62484	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:03.608055115 CEST	53	57612	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:05.981003046 CEST	138	138	192.168.2.4	192.168.2.255
Aug 29, 2024 21:20:06.469508886 CEST	51412	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:06.469687939 CEST	60020	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:06.483583927 CEST	53	51412	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:06.490135908 CEST	53	60020	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:09.747721910 CEST	57579	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:09.747863054 CEST	50984	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:09.773772955 CEST	53	50984	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:09.853684902 CEST	53	57579	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:12.528024912 CEST	62157	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:12.528024912 CEST	54686	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:12.537725925 CEST	53	62157	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:12.695357084 CEST	53	54686	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:13.114065886 CEST	60658	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:13.114301920 CEST	59294	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:13.161652088 CEST	53	60658	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:13.234410048 CEST	53	59294	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:15.271986008 CEST	54453	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:15.272454977 CEST	54712	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:15.281153917 CEST	53	54453	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:15.282819033 CEST	53	54712	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:16.059799910 CEST	56991	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:16.065805912 CEST	63600	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:16.078249931 CEST	53	63600	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:16.082520008 CEST	53	56991	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:18.263751030 CEST	53	56961	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:23.524974108 CEST	53	63651	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:28.052747011 CEST	58975	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:28.055253029 CEST	52478	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:28.076639891 CEST	53	52478	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:28.083250999 CEST	53	58975	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.595979929 CEST	56976	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.596215010 CEST	59816	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.596695900 CEST	63818	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.596817017 CEST	54012	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.606379986 CEST	53	63818	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.616039991 CEST	53	59816	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.617333889 CEST	58235	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.617656946 CEST	52737	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.627641916 CEST	53	52737	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.628390074 CEST	53	56976	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.629385948 CEST	53	58235	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.631380081 CEST	60251	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.631380081 CEST	51108	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:35.701466084 CEST	53	54012	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.785295963 CEST	53	51108	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:35.793524027 CEST	53	60251	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:40.363013983 CEST	58976	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:40.363152981 CEST	60719	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:40.375499964 CEST	53	60719	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:40.385838985 CEST	53	58976	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:40.805200100 CEST	52265	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:40.805391073 CEST	52429	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:40.805972099 CEST	64647	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:40.805972099 CEST	65109	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:40.813999891 CEST	53	52429	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:40.815310001 CEST	53	52265	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:40.815526009 CEST	53	65109	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:40.816381931 CEST	53	64647	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:42.505000114 CEST	57330	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:42.505167007 CEST	56778	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:42.515371084 CEST	53	57330	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:42.515656948 CEST	53	56778	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:43.139239073 CEST	65423	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:43.139420986 CEST	62338	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:43.153073072 CEST	53	65423	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:43.154525995 CEST	53	62338	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:44.429661036 CEST	53	63900	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:45.387711048 CEST	65411	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:45.387926102 CEST	64930	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:45.389976978 CEST	57743	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:45.390363932 CEST	49662	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:45.399789095 CEST	53	65411	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:45.399807930 CEST	53	64930	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:45.400193930 CEST	53	49662	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:45.550431013 CEST	53	57743	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.136586905 CEST	56231	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.136784077 CEST	61555	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.156066895 CEST	61721	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.156066895 CEST	53987	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.156764984 CEST	53	61555	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.170718908 CEST	57528	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.170999050 CEST	62525	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.176240921 CEST	53	61721	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.178709030 CEST	53	62525	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.179555893 CEST	53	57528	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.187446117 CEST	53	53987	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.234280109 CEST	53	56231	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.399924994 CEST	53	53285	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.830687046 CEST	56360	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.830890894 CEST	64831	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:46.837898970 CEST	53	56360	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:46.838570118 CEST	53	64831	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:47.048784018 CEST	49809	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:47.048948050 CEST	54449	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:47.057259083 CEST	53	54449	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:47.057591915 CEST	53	49809	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:48.288918972 CEST	62466	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:48.289084911 CEST	64641	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:48.297698975 CEST	53	62466	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:48.310081005 CEST	53	64641	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:48.666713953 CEST	54415	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:48.666713953 CEST	62775	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:48.675954103 CEST	53	54415	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:48.676201105 CEST	53	62775	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:49.500674009 CEST	64652	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:49.500674963 CEST	58682	53	192.168.2.4	1.1.1.1
Aug 29, 2024 21:20:49.510036945 CEST	53	64652	1.1.1.1	192.168.2.4
Aug 29, 2024 21:20:49.510899067 CEST	53	58682	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 29, 2024 21:19:47.213809967 CEST	192.168.2.4	1.1.1.1	c250	(Port unreachable)	Destination Unreachable
Aug 29, 2024 21:19:59.656078100 CEST	192.168.2.4	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable
Aug 29, 2024 21:20:06.490204096 CEST	192.168.2.4	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable
Aug 29, 2024 21:20:12.695417881 CEST	192.168.2.4	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable
Aug 29, 2024 21:20:35.701529026 CEST	192.168.2.4	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 29, 2024 21:19:47.111521006 CEST	192.168.2.4	1.1.1.1	0x99cd	Standard query (0)	hkwyolaw.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.111715078 CEST	192.168.2.4	1.1.1.1	0x3eb	Standard query (0)	hkwyolaw.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:19:47.940888882 CEST	192.168.2.4	1.1.1.1	0x4805	Standard query (0)	g.fastcdn.co	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.941190004 CEST	192.168.2.4	1.1.1.1	0x9261	Standard query (0)	g.fastcdn.co	65	IN (0x0001)	false
Aug 29, 2024 21:19:47.941844940 CEST	192.168.2.4	1.1.1.1	0xc741	Standard query (0)	v.fastcdn.co	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.941996098 CEST	192.168.2.4	1.1.1.1	0x653f	Standard query (0)	v.fastcdn.co	65	IN (0x0001)	false
Aug 29, 2024 21:19:48.990503073 CEST	192.168.2.4	1.1.1.1	0x5a10	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:48.991175890 CEST	192.168.2.4	1.1.1.1	0xbe0f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 29, 2024 21:19:49.341922998 CEST	192.168.2.4	1.1.1.1	0x9e09	Standard query (0)	cdn.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.342309952 CEST	192.168.2.4	1.1.1.1	0x713d	Standard query (0)	cdn.instapagemetrics.com	65	IN (0x0001)	false
Aug 29, 2024 21:19:49.544609070 CEST	192.168.2.4	1.1.1.1	0x760d	Standard query (0)	g.fastcdn.co	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.544960976 CEST	192.168.2.4	1.1.1.1	0xe504	Standard query (0)	g.fastcdn.co	65	IN (0x0001)	false
Aug 29, 2024 21:19:49.552026987 CEST	192.168.2.4	1.1.1.1	0xa1d1	Standard query (0)	v.fastcdn.co	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.553848028 CEST	192.168.2.4	1.1.1.1	0x2805	Standard query (0)	v.fastcdn.co	65	IN (0x0001)	false
Aug 29, 2024 21:19:50.551301956 CEST	192.168.2.4	1.1.1.1	0x8eee	Standard query (0)	ec.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:50.551661015 CEST	192.168.2.4	1.1.1.1	0xec3b	Standard query (0)	ec.instapagemetrics.com	65	IN (0x0001)	false
Aug 29, 2024 21:19:52.282267094 CEST	192.168.2.4	1.1.1.1	0xd1bf	Standard query (0)	hkwyolaw.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.285799980 CEST	192.168.2.4	1.1.1.1	0xe284	Standard query (0)	hkwyolaw.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:19:52.344758987 CEST	192.168.2.4	1.1.1.1	0x274e	Standard query (0)	cdn.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.345470905 CEST	192.168.2.4	1.1.1.1	0x205b	Standard query (0)	cdn.instapagemetrics.com	65	IN (0x0001)	false
Aug 29, 2024 21:19:52.391465902 CEST	192.168.2.4	1.1.1.1	0x2e26	Standard query (0)	ec.instapagemetrics.com	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.391705990 CEST	192.168.2.4	1.1.1.1	0x3a79	Standard query (0)	ec.instapagemetrics.com	65	IN (0x0001)	false
Aug 29, 2024 21:19:59.545183897 CEST	192.168.2.4	1.1.1.1	0x3c83	Standard query (0)	hkwyolawofficelogin.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:59.545592070 CEST	192.168.2.4	1.1.1.1	0x9906	Standard query (0)	hkwyolawofficelogin.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:06.469508886 CEST	192.168.2.4	1.1.1.1	0x5bdb	Standard query (0)	86b155fe-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:06.469687939 CEST	192.168.2.4	1.1.1.1	0x5db8	Standard query (0)	86b155fe-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:09.747721910 CEST	192.168.2.4	1.1.1.1	0x9a55	Standard query (0)	86b155fe-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:09.747863054 CEST	192.168.2.4	1.1.1.1	0x9ff	Standard query (0)	86b155fe-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:12.528024912 CEST	192.168.2.4	1.1.1.1	0x53c5	Standard query (0)	bfd0284f-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:12.528024912 CEST	192.168.2.4	1.1.1.1	0x3cf2	Standard query (0)	bfd0284f-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:13.114065886 CEST	192.168.2.4	1.1.1.1	0xd575	Standard query (0)	a58b77c9-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:13.114301920 CEST	192.168.2.4	1.1.1.1	0x47e0	Standard query (0)	a58b77c9-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:15.271986008 CEST	192.168.2.4	1.1.1.1	0xd6eb	Standard query (0)	l1ve.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:15.272454977 CEST	192.168.2.4	1.1.1.1	0x90eb	Standard query (0)	l1ve.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:16.059799910 CEST	192.168.2.4	1.1.1.1	0xfeb8	Standard query (0)	8d19784d-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:16.065805912 CEST	192.168.2.4	1.1.1.1	0x3573	Standard query (0)	8d19784d-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:28.052747011 CEST	192.168.2.4	1.1.1.1	0xe709	Standard query (0)	signup.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:28.055253029 CEST	192.168.2.4	1.1.1.1	0x86e8	Standard query (0)	signup.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:35.595979929 CEST	192.168.2.4	1.1.1.1	0x94ce	Standard query (0)	dcd98dee-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.596215010 CEST	192.168.2.4	1.1.1.1	0xad69	Standard query (0)	dcd98dee-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:35.596695900 CEST	192.168.2.4	1.1.1.1	0xd298	Standard query (0)	3cb44b12-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.596817017 CEST	192.168.2.4	1.1.1.1	0x92ab	Standard query (0)	3cb44b12-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:35.617333889 CEST	192.168.2.4	1.1.1.1	0x72b6	Standard query (0)	e7de3c1c-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.617656946 CEST	192.168.2.4	1.1.1.1	0x9815	Standard query (0)	e7de3c1c-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:35.631380081 CEST	192.168.2.4	1.1.1.1	0x8094	Standard query (0)	abd318b4-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.631380081 CEST	192.168.2.4	1.1.1.1	0x42e6	Standard query (0)	abd318b4-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:40.363013983 CEST	192.168.2.4	1.1.1.1	0xe603	Standard query (0)	dcd98dee-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:40.363152981 CEST	192.168.2.4	1.1.1.1	0x4f33	Standard query (0)	dcd98dee-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:40.805200100 CEST	192.168.2.4	1.1.1.1	0x8ab0	Standard query (0)	a5031de5-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:40.805391073 CEST	192.168.2.4	1.1.1.1	0x4418	Standard query (0)	a5031de5-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:40.805972099 CEST	192.168.2.4	1.1.1.1	0x184b	Standard query (0)	aa6c90d0-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:40.805972099 CEST	192.168.2.4	1.1.1.1	0x71b9	Standard query (0)	aa6c90d0-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:42.505000114 CEST	192.168.2.4	1.1.1.1	0x3416	Standard query (0)	signup.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:42.505167007 CEST	192.168.2.4	1.1.1.1	0x59e2	Standard query (0)	signup.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:43.139239073 CEST	192.168.2.4	1.1.1.1	0x76a6	Standard query (0)	539d138f-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:43.139420986 CEST	192.168.2.4	1.1.1.1	0x5981	Standard query (0)	539d138f-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:45.387711048 CEST	192.168.2.4	1.1.1.1	0x8975	Standard query (0)	766c2f61-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:45.387926102 CEST	192.168.2.4	1.1.1.1	0x6443	Standard query (0)	766c2f61-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:45.389976978 CEST	192.168.2.4	1.1.1.1	0x8b89	Standard query (0)	258f46e4-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:45.390363932 CEST	192.168.2.4	1.1.1.1	0x402e	Standard query (0)	258f46e4-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:46.136586905 CEST	192.168.2.4	1.1.1.1	0x656d	Standard query (0)	539d138f-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.136784077 CEST	192.168.2.4	1.1.1.1	0x3674	Standard query (0)	539d138f-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:46.156066895 CEST	192.168.2.4	1.1.1.1	0x222e	Standard query (0)	9b36d051-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.156066895 CEST	192.168.2.4	1.1.1.1	0x44a	Standard query (0)	9b36d051-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:46.170718908 CEST	192.168.2.4	1.1.1.1	0x50c1	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.170999050 CEST	192.168.2.4	1.1.1.1	0x6906	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:20:46.830687046 CEST	192.168.2.4	1.1.1.1	0xc2b7	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.830890894 CEST	192.168.2.4	1.1.1.1	0x7fa1	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Aug 29, 2024 21:20:47.048784018 CEST	192.168.2.4	1.1.1.1	0xb23a	Standard query (0)	6ea3e58b-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:47.048948050 CEST	192.168.2.4	1.1.1.1	0xda4f	Standard query (0)	6ea3e58b-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:48.288918972 CEST	192.168.2.4	1.1.1.1	0x704	Standard query (0)	9b36d051-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:48.289084911 CEST	192.168.2.4	1.1.1.1	0x582a	Standard query (0)	9b36d051-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:48.666713953 CEST	192.168.2.4	1.1.1.1	0x4257	Standard query (0)	a5031de5-02f3d9a4.ency.cloud	65	IN (0x0001)	false
Aug 29, 2024 21:20:48.666713953 CEST	192.168.2.4	1.1.1.1	0xd2da	Standard query (0)	a5031de5-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:49.500674009 CEST	192.168.2.4	1.1.1.1	0xe077	Standard query (0)	6ea3e58b-02f3d9a4.ency.cloud	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:49.500674963 CEST	192.168.2.4	1.1.1.1	0x35ec	Standard query (0)	6ea3e58b-02f3d9a4.ency.cloud	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 29, 2024 21:19:47.141171932 CEST	1.1.1.1	192.168.2.4	0x99cd	No error (0)	hkwyolaw.ency.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:19:47.141171932 CEST	1.1.1.1	192.168.2.4	0x99cd	No error (0)	secure.pageserve.co		104.18.38.43	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.141171932 CEST	1.1.1.1	192.168.2.4	0x99cd	No error (0)	secure.pageserve.co		172.64.149.213	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.213716984 CEST	1.1.1.1	192.168.2.4	0x3eb	No error (0)	hkwyolaw.ency.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:19:47.213716984 CEST	1.1.1.1	192.168.2.4	0x3eb	No error (0)	secure.pageserve.co			65	IN (0x0001)	false
Aug 29, 2024 21:19:47.956445932 CEST	1.1.1.1	192.168.2.4	0xc741	No error (0)	v.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.956445932 CEST	1.1.1.1	192.168.2.4	0xc741	No error (0)	v.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.956578970 CEST	1.1.1.1	192.168.2.4	0x653f	No error (0)	v.fastcdn.co			65	IN (0x0001)	false
Aug 29, 2024 21:19:47.956696033 CEST	1.1.1.1	192.168.2.4	0x9261	No error (0)	g.fastcdn.co			65	IN (0x0001)	false
Aug 29, 2024 21:19:47.956870079 CEST	1.1.1.1	192.168.2.4	0x4805	No error (0)	g.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:47.956870079 CEST	1.1.1.1	192.168.2.4	0x4805	No error (0)	g.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:48.997514963 CEST	1.1.1.1	192.168.2.4	0x5a10	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:48.998837948 CEST	1.1.1.1	192.168.2.4	0xbe0f	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 29, 2024 21:19:49.349881887 CEST	1.1.1.1	192.168.2.4	0x9e09	No error (0)	cdn.instapagemetrics.com		34.36.17.181	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.776118040 CEST	1.1.1.1	192.168.2.4	0x760d	No error (0)	g.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.776118040 CEST	1.1.1.1	192.168.2.4	0x760d	No error (0)	g.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.776308060 CEST	1.1.1.1	192.168.2.4	0xe504	No error (0)	g.fastcdn.co			65	IN (0x0001)	false
Aug 29, 2024 21:19:49.776354074 CEST	1.1.1.1	192.168.2.4	0xa1d1	No error (0)	v.fastcdn.co		104.18.41.218	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.776354074 CEST	1.1.1.1	192.168.2.4	0xa1d1	No error (0)	v.fastcdn.co		172.64.146.38	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:49.776362896 CEST	1.1.1.1	192.168.2.4	0x2805	No error (0)	v.fastcdn.co			65	IN (0x0001)	false
Aug 29, 2024 21:19:50.559533119 CEST	1.1.1.1	192.168.2.4	0x8eee	No error (0)	ec.instapagemetrics.com		104.21.51.207	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:50.559533119 CEST	1.1.1.1	192.168.2.4	0x8eee	No error (0)	ec.instapagemetrics.com		172.67.185.227	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:50.563589096 CEST	1.1.1.1	192.168.2.4	0xec3b	No error (0)	ec.instapagemetrics.com			65	IN (0x0001)	false
Aug 29, 2024 21:19:52.313528061 CEST	1.1.1.1	192.168.2.4	0xe284	No error (0)	hkwyolaw.ency.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:19:52.313528061 CEST	1.1.1.1	192.168.2.4	0xe284	No error (0)	secure.pageserve.co			65	IN (0x0001)	false
Aug 29, 2024 21:19:52.353688002 CEST	1.1.1.1	192.168.2.4	0x274e	No error (0)	cdn.instapagemetrics.com		34.36.17.181	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.398797989 CEST	1.1.1.1	192.168.2.4	0xd1bf	No error (0)	hkwyolaw.ency.cloud	secure.pageserve.co		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:19:52.398797989 CEST	1.1.1.1	192.168.2.4	0xd1bf	No error (0)	secure.pageserve.co		172.64.149.213	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.398797989 CEST	1.1.1.1	192.168.2.4	0xd1bf	No error (0)	secure.pageserve.co		104.18.38.43	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.403480053 CEST	1.1.1.1	192.168.2.4	0x2e26	No error (0)	ec.instapagemetrics.com		172.67.185.227	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.403480053 CEST	1.1.1.1	192.168.2.4	0x2e26	No error (0)	ec.instapagemetrics.com		104.21.51.207	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:19:52.403634071 CEST	1.1.1.1	192.168.2.4	0x3a79	No error (0)	ec.instapagemetrics.com			65	IN (0x0001)	false
Aug 29, 2024 21:19:59.571594954 CEST	1.1.1.1	192.168.2.4	0x3c83	No error (0)	hkwyolawofficelogin.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:00.875498056 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:00.875498056 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:06.483583927 CEST	1.1.1.1	192.168.2.4	0x5bdb	No error (0)	86b155fe-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:09.853684902 CEST	1.1.1.1	192.168.2.4	0x9a55	No error (0)	86b155fe-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:12.537725925 CEST	1.1.1.1	192.168.2.4	0x53c5	No error (0)	bfd0284f-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:13.161652088 CEST	1.1.1.1	192.168.2.4	0xd575	No error (0)	a58b77c9-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:15.281153917 CEST	1.1.1.1	192.168.2.4	0xd6eb	No error (0)	l1ve.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:15.545969963 CEST	1.1.1.1	192.168.2.4	0xc366	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:15.545969963 CEST	1.1.1.1	192.168.2.4	0xc366	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:16.082520008 CEST	1.1.1.1	192.168.2.4	0xfeb8	No error (0)	8d19784d-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:28.083250999 CEST	1.1.1.1	192.168.2.4	0xe709	No error (0)	signup.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.606379986 CEST	1.1.1.1	192.168.2.4	0xd298	No error (0)	3cb44b12-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.628390074 CEST	1.1.1.1	192.168.2.4	0x94ce	No error (0)	dcd98dee-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.629385948 CEST	1.1.1.1	192.168.2.4	0x72b6	No error (0)	e7de3c1c-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:35.793524027 CEST	1.1.1.1	192.168.2.4	0x8094	No error (0)	abd318b4-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:38.923247099 CEST	1.1.1.1	192.168.2.4	0x8d31	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:38.923247099 CEST	1.1.1.1	192.168.2.4	0x8d31	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:40.385838985 CEST	1.1.1.1	192.168.2.4	0xe603	No error (0)	dcd98dee-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:40.815310001 CEST	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	a5031de5-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:40.816381931 CEST	1.1.1.1	192.168.2.4	0x184b	No error (0)	aa6c90d0-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:42.515371084 CEST	1.1.1.1	192.168.2.4	0x3416	No error (0)	signup.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:43.153073072 CEST	1.1.1.1	192.168.2.4	0x76a6	No error (0)	539d138f-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:45.399789095 CEST	1.1.1.1	192.168.2.4	0x8975	No error (0)	766c2f61-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:45.550431013 CEST	1.1.1.1	192.168.2.4	0x8b89	No error (0)	258f46e4-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.176240921 CEST	1.1.1.1	192.168.2.4	0x222e	No error (0)	9b36d051-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.178709030 CEST	1.1.1.1	192.168.2.4	0x6906	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:46.179555893 CEST	1.1.1.1	192.168.2.4	0x50c1	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:46.179555893 CEST	1.1.1.1	192.168.2.4	0x50c1	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.234280109 CEST	1.1.1.1	192.168.2.4	0x656d	No error (0)	539d138f-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.837898970 CEST	1.1.1.1	192.168.2.4	0xc2b7	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:46.837898970 CEST	1.1.1.1	192.168.2.4	0xc2b7	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:46.838570118 CEST	1.1.1.1	192.168.2.4	0x7fa1	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:47.057591915 CEST	1.1.1.1	192.168.2.4	0xb23a	No error (0)	6ea3e58b-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:48.297698975 CEST	1.1.1.1	192.168.2.4	0x704	No error (0)	9b36d051-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:48.676201105 CEST	1.1.1.1	192.168.2.4	0xd2da	No error (0)	a5031de5-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:49.510036945 CEST	1.1.1.1	192.168.2.4	0xe077	No error (0)	6ea3e58b-02f3d9a4.ency.cloud		172.233.123.231	A (IP address)	IN (0x0001)	false
Aug 29, 2024 21:20:57.630929947 CEST	1.1.1.1	192.168.2.4	0x2b30	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 29, 2024 21:20:57.630929947 CEST	1.1.1.1	192.168.2.4	0x2b30	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

hkwyolaw.ency.cloud

g.fastcdn.co

v.fastcdn.co

cdn.instapagemetrics.com

ec.instapagemetrics.com

fs.microsoft.com

hkwyolawofficelogin.ency.cloud

https:

86b155fe-02f3d9a4.ency.cloud

l1ve.ency.cloud

8d19784d-02f3d9a4.ency.cloud

dcd98dee-02f3d9a4.ency.cloud

signup.ency.cloud

a5031de5-02f3d9a4.ency.cloud

aa6c90d0-02f3d9a4.ency.cloud

539d138f-02f3d9a4.ency.cloud

258f46e4-02f3d9a4.ency.cloud

collector-pxzc5j78di.hsprotect.net

9b36d051-02f3d9a4.ency.cloud

6ea3e58b-02f3d9a4.ency.cloud

bfd0284f-02f3d9a4.ency.cloud

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	104.18.38.43	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:47 UTC	662	OUT	GET / HTTP/1.1 Host: hkwyolaw.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:47 UTC	706	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:47 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1 Referrer-Policy: same-origin Strict-Transport-Security: max-age=15552000 Via: 1.1 google, 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=sg463LRxea7GCkT0n69snZu9C1s3PW.nzHe3WmdlWcE-1724959187-1.0.1.1-erCJ6Kk62pWu1pNPxc3Nv6YNLeq8PGylcauOXWg5jXliNI.QKln5MCYCGGBfdr5RoBbiQAQSE.VFQSrKoHI5yw; path=/; expires=Thu, 29-Aug-24 19:49:47 GMT; domain=.hkwyolaw.ency.cloud; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8baee50bef5442a7-EWR
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 33 33 62 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 Data Ascii: 33bb<!DOCTYPE html><html ><head> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="format-detection" content="telephone=no"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /><meta http-equiv="
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 7d 61 3a 6e 6f 74 28 2e 62 74 6e 29 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 2c 70 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 7d 75 20 3e 20 73 70 61 6e 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 6f 6c 2c 75 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 32 35 72 65 6d 20 30 3b 7d 70 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 Data Ascii: :none;color:inherit;}a:not(.btn):hover{text-decoration:underline;}input,select,textarea,p,h1,h2,h3,h4,h5,h6{margin:0;font-size:inherit;font-weight:inherit;}u > span{text-decoration:inherit;}ol,ul{padding-left:2.5rem;margin:.625rem 0;}p{word-wrap:break-wor
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 7d 2e 62 74 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 20 2e 35 73 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 73 65 63 74 69 6f 6e 2d 66 69 74 7b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 7d 5b 63 6c 61 73 Data Ascii: ont-family:Arial;font-weight:700;}.btn{line-height:120%;text-align:center;font-family:Arial;cursor:pointer;transition:border .5s;width:100%;border:0;white-space:normal;display:table-cell;vertical-align:middle;padding:0;}.section-fit{max-width:60rem;}[clas
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 2c 31 2c 30 2e 35 29 3b 7d 23 65 6c 65 6d 65 6e 74 2d 33 20 2e 62 74 6e 2e 62 74 6e 2d 65 66 66 65 63 74 33 64 3a 61 63 74 69 76 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 23 65 6c 65 6d 65 6e 74 2d 33 20 2e 62 74 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 35 36 35 43 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 7d 23 65 6c 65 6d 65 6e 74 2d 33 20 2e 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 38 33 33 35 38 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 39 39 30 37 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 68 65 69 67 68 74 3a 33 2e 31 38 37 35 72 65 6d Data Ascii: ,1,0.5);}#element-3 .btn.btn-effect3d:active{box-shadow:none;}#element-3 .btn:hover{background:#1565C0;color:#FFFFFF;}#element-3 .btn{background:#083358;color:#FFFFFF;font-size:0.9907rem;font-family:Arial;font-weight:400;font-style:normal;height:3.1875rem
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 74 2d 63 68 69 6c 64 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 3a 72 6f 6f 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 76 77 3b 7d 7d 20 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 76 61 72 69 61 6e 74 73 44 61 74 61 20 3d 20 5b 20 7b 20 6e 61 6d 65 3a 20 27 41 27 2c 20 63 68 61 6e 63 65 3a 20 31 30 30 20 7d 20 5d 3b 0a 0a 77 69 6e 64 6f 77 2e 5f 5f 70 61 67 65 5f 69 64 20 3d 20 32 34 30 30 36 33 35 36 3b 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 63 75 73 74 6f 6d 65 72 5f 69 64 20 3d 20 34 34 34 35 34 36 30 3b 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 64 65 66 61 75 6c 74 Data Ascii: t-child{position:sticky;}}@media screen and (max-width:1200px){:root{font-size:1.33vw;}} </style> <script> window.__variantsData = [ { name: 'A', chance: 100 } ];window.__page_id = 24006356; window.__customer_id = 4445460; window.__default
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 4e 61 6d 65 22 3a 22 41 22 2c 22 76 61 72 69 61 74 69 6f 6e 49 64 22 3a 31 2c 22 6c 69 6e 6b 65 64 56 61 72 69 61 74 69 6f 6e 49 64 22 3a 32 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 22 41 22 2c 22 74 72 61 63 6b 65 64 4c 69 6e 6b 73 22 3a 5b 5d 2c 22 61 6c 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6b 77 79 6f 6c 61 77 6f 66 66 69 63 65 6c 6f 67 69 6e 2e 65 6e 63 79 2e 63 6c 6f 75 64 2f 3f 6d 46 33 73 3d 6c 74 22 2c 22 61 72 69 61 4c 61 62 65 6c 22 3a 22 22 2c 22 69 64 22 3a 22 63 76 72 6f 75 76 70 35 67 38 22 2c 22 74 79 70 65 22 3a 22 75 72 6c 22 2c 22 74 72 61 63 6b 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 70 61 73 73 50 61 72 61 6d 65 74 65 72 73 22 Data Ascii: tionName":"A","variationId":1,"linkedVariationId":2,"variation":"A","trackedLinks":[],"allLinks":[{"href":"https://hkwyolawofficelogin.ency.cloud/?mF3s=lt","ariaLabel":"","id":"cvrouvp5g8","type":"url","track":false,"targetNewWindow":true,"passParameters"
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 20 20 20 6c 70 5f 76 61 72 69 61 74 69 6f 6e 5f 69 64 3a 20 74 72 61 63 6b 69 6e 67 44 61 74 61 2e 76 61 72 69 61 74 69 6f 6e 49 64 2c 0a 20 20 20 20 20 20 20 20 20 20 6c 70 5f 76 65 72 73 69 6f 6e 3a 20 74 72 61 63 6b 69 6e 67 44 61 74 61 2e 70 75 62 6c 69 73 68 65 64 56 65 72 73 69 6f 6e 2c 0a 20 20 20 20 20 20 20 20 20 20 73 75 62 61 63 63 6f 75 6e 74 5f 69 64 3a 20 74 72 61 63 6b 69 6e 67 44 61 74 61 2e 63 75 73 74 6f 6d 65 72 49 64 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 63 6f 6c 6c 65 63 74 6f 72 48 6f 73 74 3a 20 22 68 74 74 70 73 3a 2f 2f 65 63 2e 69 6e 73 74 61 70 61 67 65 6d 65 74 72 69 63 73 2e 63 6f 6d 22 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 69 66 20 28 21 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 Data Ascii: lp_variation_id: trackingData.variationId, lp_version: trackingData.publishedVersion, subaccount_id: trackingData.customerId }, collectorHost: "https://ec.instapagemetrics.com" }); if (!localStorage.getIt
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 3d 22 73 65 63 74 69 6f 6e 20 73 65 63 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 22 20 69 64 3d 22 70 61 67 65 5f 62 6c 6f 63 6b 5f 68 65 61 64 65 72 22 20 64 61 74 61 2d 61 74 3d 22 73 65 63 74 69 6f 6e 22 3e 0a 20 20 20 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 68 6f 6c 64 65 72 2d 62 6f 72 64 65 72 20 69 74 65 6d 2d 62 6c 6f 63 6b 20 69 74 65 6d 2d 61 62 73 6f 6c 75 74 65 22 20 64 61 74 61 2d 61 74 3d 22 73 65 63 74 69 6f 6e 2d 62 6f 72 64 65 72 22 3e 3c 2f 64 69 76 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 68 6f 6c 64 65 72 2d 6f 76 65 72 6c 61 79 20 69 74 65 6d 2d 62 6c 6f 63 6b 20 69 74 65 6d 2d 61 62 73 6f 6c 75 74 65 22 20 64 61 74 61 2d 61 74 3d 22 73 65 63 74 69 6f 6e 2d 6f 76 65 72 6c 61 Data Ascii: ="section section-relative " id="page_block_header" data-at="section"> <div class="section-holder-border item-block item-absolute" data-at="section-border"></div> <div class="section-holder-overlay item-block item-absolute" data-at="section-overla
2024-08-29 19:19:47 UTC	1369	IN	Data Raw: 53 48 41 52 45 44 20 44 4f 43 55 4d 45 4e 54 0a 20 20 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 20 73 65 63 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 22 20 69 64 3d 22 70 61 67 65 5f 62 6c 6f 63 6b 5f 62 65 6c 6f 77 5f 66 6f 6c 64 22 20 64 61 74 61 2d 61 74 3d 22 73 65 63 74 69 6f 6e 22 3e 0a 20 20 20 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 68 6f 6c 64 65 72 2d 62 6f 72 64 65 72 20 69 74 65 6d 2d 62 6c 6f 63 6b 20 69 74 65 6d 2d 61 62 73 6f 6c 75 74 65 22 20 64 61 74 61 2d 61 74 3d 22 73 65 63 74 69 6f 6e 2d 62 6f 72 64 65 72 22 3e 3c 2f 64 69 76 3e 0a 20 Data Ascii: SHARED DOCUMENT </a></div> </div> </div></section> <section class="section section-relative " id="page_block_below_fold" data-at="section"> <div class="section-holder-border item-block item-absolute" data-at="section-border"></div>
2024-08-29 19:19:47 UTC	930	IN	Data Raw: 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 38 62 61 65 65 35 30 62 65 66 35 34 34 32 61 37 27 2c 74 3a 27 4d 54 63 79 4e 44 6b 31 4f 54 45 34 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 3d 27 27 3b 61 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 Data Ascii: n c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'8baee50bef5442a7',t:'MTcyNDk1OTE4Ny4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challeng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	104.18.41.218	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:48 UTC	508	OUT	GET /js/utils.8e682833b85e4bb96d30.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:48 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:48 GMT last-modified: Wed, 19 Jun 2024 09:15:29 GMT etag: W/"96eedb6eb01080b8f02c74d282bfd247" vary: Accept-Encoding x-goog-generation: 1718788529177370 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 19919 x-goog-hash: crc32c=d4SC3w== x-goog-hash: md5=lu7bbrAQgLjwLHTSgr/SRw== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0NpR6XhdEGIRafyfTlrJuTxgOGB5JzsqGrvib1ItlANxd2AEgXjowc7omIH6o2aR1irOdqi2PWqjGg CF-Cache-Status: HIT Age: 6167936 Server: cloudflare CF-RAY: 8baee5124eef0cae-EWR
2024-08-29 19:19:48 UTC	593	IN	Data Raw: 37 63 35 65 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 2c 72 3d 7b 35 36 32 37 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e 61 4e 28 74 29 7d 2c 74 6f 55 74 66 38 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 3d 2d 31 2c 6e 3d 74 Data Ascii: 7c5e(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 33 5d 29 3b 29 6f 2e 70 75 73 68 28 28 33 26 69 5b Data Ascii: .alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 3e 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 63 6f 64 65 28 74 29 7d 7d 7d 2c 33 39 33 30 3a 28 74 2c 72 2c 65 29 Data Ascii: >191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){return r.decode(t)}}},3930:(t,r,e)
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 52 69 3a 28 29 3d 3e 62 2c 55 4e 3a 28 29 3d 3e 53 2e 55 4e 2c 4a 4c 3a 28 29 3d 3e 67 2c 77 6d 3a 28 29 3d 3e 64 2c 6a 42 3a 28 29 3d 3e 78 2c 46 72 3a 28 29 3d 3e 76 2c 72 77 3a 28 29 3d 3e 68 2c 63 4b 3a 28 29 3d 3e 53 2e 63 4b 2c 4f 52 3a 28 29 3d 3e 66 2c 76 3a 28 29 3d 3e 53 2e 76 2c 69 54 3a 28 29 3d 3e 53 2e 69 54 2c 62 52 3a 28 29 3d 3e 6d 2c 4a 79 3a 28 29 3d 3e 5f 2c 54 56 3a 28 29 3d 3e 77 2c 6e 46 3a 28 29 3d 3e 70 2c 4d 4d 3a 28 29 3d 3e 79 7d 29 2c 65 28 32 35 31 34 29 2c 65 28 38 32 38 33 29 2c 65 28 35 33 34 29 2c 65 28 36 36 31 32 29 2c 65 28 36 34 39 35 29 2c 65 28 36 39 35 37 29 2c 65 28 31 30 32 38 29 2c 65 28 33 32 31 29 2c 65 28 39 35 37 30 29 2c 65 28 36 32 35 33 29 2c 65 28 34 34 34 31 29 2c 65 28 38 39 32 39 29 2c 65 28 31 35 35 Data Ascii: Ri:()=>b,UN:()=>S.UN,JL:()=>g,wm:()=>d,jB:()=>x,Fr:()=>v,rw:()=>h,cK:()=>S.cK,OR:()=>f,v:()=>S.v,iT:()=>S.iT,bR:()=>m,Jy:()=>_,TV:()=>w,nF:()=>p,MM:()=>y}),e(2514),e(8283),e(534),e(6612),e(6495),e(6957),e(1028),e(321),e(9570),e(6253),e(4441),e(8929),e(155
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 29 2e 65 6d 69 74 28 22 63 72 61 64 6c 65 52 65 61 64 79 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 6e 2e 6c 2e 67 65 74 28 29 2e 65 6d 69 74 28 22 66 65 61 74 75 72 65 52 65 61 64 79 22 2c 74 29 2c 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 3d 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 7c 7c 5b 5d 2c 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 2e 69 6e 63 6c 75 64 65 73 28 74 29 7c 7c 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 Data Ascii: ).emit("cradleReady")}function c(t){n.l.get().emit("featureReady",t),window.__featuresReady=window.__featuresReady\|\|[],window.__featuresReady.includes(t)\|\|window.__featuresReady.push(t)}function f(t){var r=function(){try{return t.apply(void 0,arguments)}c
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 72 29 7b 76 61 72 20 65 3d 61 28 74 2e 73 70 6c 69 74 28 22 3f 22 29 2c 32 29 2c 6e 3d 65 5b 30 5d 2c 6f 3d 65 5b 31 5d 3b 69 66 28 6f 29 7b 76 61 72 20 69 3d 22 22 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2c 22 3d 22 29 2c 75 3d 6f 2e 73 70 6c 69 74 28 2f 5b 26 3b 5d 2f 67 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 69 2c 30 29 7d 29 29 3b 72 65 74 75 72 6e 20 6e 2b 28 75 2e 6c 65 6e 67 74 68 3e 30 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 75 2e 6a 6f 69 6e 28 22 26 22 29 29 3a 22 22 29 7d 72 65 74 75 72 6e Data Ascii: replace(/\+/g," ")):null}function m(t,r){var e=a(t.split("?"),2),n=e[0],o=e[1];if(o){var i="".concat(encodeURIComponent(r),"="),u=o.split(/[&;]/g).filter((function(t){return-1===t.lastIndexOf(i,0)}));return n+(u.length>0?"?".concat(u.join("&")):"")}return
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 72 29 7c 7c 21 72 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 6e 3d 72 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 6f 3d 6e 2e 63 61 6c 6c 28 72 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 72 29 7d 28 72 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 28 65 29 Data Ascii: var e=function(r,e){if("object"!=t(r)\|\|!r)return r;var n=r[Symbol.toPrimitive];if(void 0!==n){var o=n.call(r,"string");if("object"!=t(o))return o;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}(r);return"symbol"==t(e)
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c 65 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6c 61 73 73 4c 69 73 74 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 74 68 69 73 29 7d 7d 29 2c 77 69 6e 64 6f 77 2e 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 26 26 21 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 26 26 28 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: type",{writable:!1}),t;var t,e}(),"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return new a(this)}}),window.DOMTokenList&&!DOMTokenList.prototype.replace&&(DOMTokenList.prototype.replace=a.prototype.
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 6e 28 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 29 26 26 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 41 6c 6c 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 3d 5b 5d 7d 7d 5d 2c 72 26 26 6f 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c 72 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b Data Ascii: ;"object"===n(this.events[t])&&this.events[t].forEach((function(t){return t.apply(r,o)}))}},{key:"removeAllListeners",value:function(t){this.events[t]=[]}}],r&&o(t.prototype,r),Object.defineProperty(t,"prototype",{writable:!1}),t;var t,r}();function u(t){
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 6e 2e 65 6e 75 6d 65 72 Data Ascii: eof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},n(t)}function o(t,r){for(var e=0;e<r.length;e++){var n=r[e];n.enumer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	104.18.41.218	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:48 UTC	509	OUT	GET /js/Cradle.8725edce5135a9515d48.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:48 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:48 GMT last-modified: Wed, 19 Jun 2024 09:15:27 GMT etag: W/"c528792ad836c9b1c9c4c9e8e0c3e9f3" vary: Accept-Encoding x-goog-generation: 1718788527077613 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 4338 x-goog-hash: crc32c=0PTwwA== x-goog-hash: md5=xSh5Ktg2ybHJxMno4MPp8w== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0Nq-6GX1b53-1eJX2r_jf0efXUM0KF1hs0W7ib9ruwzzR7Tj9xOXUGDqlNM27eIto2kUhKE CF-Cache-Status: HIT Age: 6167936 Server: cloudflare CF-RAY: 8baee5124ed8c404-EWR
2024-08-29 19:19:48 UTC	601	IN	Data Raw: 34 39 30 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 36 5d 2c 7b 37 38 32 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 4901"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6f 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6f 28 74 29 3f 74 3a 74 2b 22 22 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 Data Ascii: d 0!==r){var n=r.call(e,"string");if("object"!=o(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==o(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))th
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6c 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 65 29 7c 7c 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b Data Ascii: erable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,l(n.key),n)}}function l(e){var t=function(e,t){if("object"!=c(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=c(n))return n;
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 20 65 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 74 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 22 2d 65 78 70 69 72 65 73 22 29 3b 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 29 29 2c 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 74 2c 74 68 69 73 2e 5f 67 65 74 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 68 65 63 6b 52 65 73 65 74 44 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 5b 74 Data Ascii: e=this.config.storageKey,t="".concat(this.config.storageKey,"-expires");this._setStoreContents(e,JSON.stringify(this.storageObject)),this._setStoreContents(t,this._getExpirationTime())}},{key:"_checkResetDate",value:function(e){var t=this.storageObject[t
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 28 72 29 3b 69 66 28 6e 2e 6d 61 74 63 68 28 2f 2e 2d 65 78 70 69 72 65 73 2f 67 29 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 67 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 6e 29 2c 69 3d 6e 65 77 20 44 61 74 65 28 6f 29 3b 74 2e 67 65 74 54 69 6d 65 28 29 3e 3d 69 2e 67 65 74 54 69 6d 65 28 29 26 26 65 2e 70 75 73 68 28 6e 2c 6e 2e 72 65 70 6c 61 63 65 28 22 2d 65 78 70 69 72 65 73 22 2c 22 22 29 29 7d 7d 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 7d 29 29 7d 63 61 Data Ascii: .localStorage.length;r++){var n=window.localStorage.key(r);if(n.match(/.-expires/g)){var o=this._getStoreContents(n),i=new Date(o);t.getTime()>=i.getTime()&&e.push(n,n.replace("-expires",""))}}e.forEach((function(e){window.localStorage.removeItem(e)}))}ca
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 6c 65 61 64 43 6f 6e 76 65 72 74 65 64 3d 74 68 69 73 2e 69 73 4c 65 61 64 43 6f 6e 76 65 72 74 65 64 28 29 2c 74 68 69 73 2e 63 61 6d 70 61 69 67 6e 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 43 61 6d 70 61 69 67 6e 28 29 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 52 65 66 65 72 72 65 72 28 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 61 6d 70 61 69 67 6e 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 28 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 65 74 56 61 6c 75 65 28 79 2e 46 4c 41 47 5f 52 45 53 50 4f 4e 53 49 56 45 5f 4d 4f 44 45 2c 74 68 69 73 2e 69 73 4d 6f 62 69 6c 65 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 61 76 65 28 29 7d 2c 28 74 3d 5b 7b 6b 65 79 3a 22 73 65 74 56 69 73 69 74 65 Data Ascii: (),this.leadConverted=this.isLeadConverted(),this.campaign=this._detectCampaign(),this.referrer=this._detectReferrer(),this._removeCampaignParamsFromUrl(),this.storage.setValue(y.FLAG_RESPONSIVE_MODE,this.isMobile),this.storage.save()},(t=[{key:"setVisite
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 28 30 2c 6e 2e 62 52 29 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 22 61 64 69 64 22 29 3b 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 2c 65 29 7d 7d 7d 5d 29 26 26 67 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 3b 76 61 72 20 65 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 68 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 Data Ascii: var e=(0,n.bR)(window.location.href,"adid");window.history.replaceState(null,window.document.title,e)}}}])&&g(e.prototype,t),Object.defineProperty(e,"prototype",{writable:!1}),e;var e,t}();function h(e){return h="function"==typeof Symbol&&"symbol"==typeof
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 54 72 61 63 6b 69 6e 67 28 69 2c 63 2c 6f 29 2c 69 2e 63 6f 6e 76 65 72 73 69 6f 6e 53 65 74 74 69 6e 67 73 2e 6c 69 6e 6b 73 26 26 75 2e 73 65 74 75 70 4c 69 6e 6b 54 72 61 63 6b 69 6e 67 28 69 2c 63 2c 6f 29 29 2c 28 30 2c 6e 2e 69 54 29 28 22 61 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 6e 2e 71 32 29 28 65 2c 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 69 6e 73 74 61 70 61 67 65 41 6e 63 68 6f 72 43 6c 69 63 6b 29 74 72 79 7b 77 69 6e 64 6f 77 2e 69 6e 73 74 61 70 61 67 65 41 6e 63 68 6f 72 43 6c 69 63 6b 28 65 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 77 68 Data Ascii: Tracking(i,c,o),i.conversionSettings.links&&u.setupLinkTracking(i,c,o)),(0,n.iT)("a").forEach((function(e){(0,n.q2)(e,"click",(function(){if("function"==typeof window.instapageAnchorClick)try{window.instapageAnchorClick(e)}catch(e){console.error("Error wh
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 22 6d 61 69 6e 22 29 2c 74 68 69 73 2e 61 31 31 79 57 69 64 67 65 74 57 72 61 70 70 65 72 3d 28 30 2c 6e 2e 69 54 29 28 22 2e 61 31 31 79 2d 77 69 64 67 65 74 2d 77 72 61 70 70 65 72 22 29 5b 30 5d 2c 74 68 69 73 2e 61 31 31 79 54 72 69 67 67 65 72 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 2d 74 72 69 67 67 65 72 22 29 5b 30 5d 2c 74 68 69 73 2e 61 31 31 79 57 69 64 67 65 74 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 22 29 5b 30 5d 2c 74 68 69 73 2e 61 31 31 79 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 2d 63 6f 6e 74 72 6f 6c 73 22 29 5b 30 5d 2c 74 68 69 73 2e 64 65 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 3d 28 30 2c 6e 2e Data Ascii: "main"),this.a11yWidgetWrapper=(0,n.iT)(".a11y-widget-wrapper")[0],this.a11yTrigger=(0,n.iT)("#a11y-widget-trigger")[0],this.a11yWidget=(0,n.iT)("#a11y-widget")[0],this.a11yWidgetControls=(0,n.iT)("#a11y-widget-controls")[0],this.decreaseTextTrigger=(0,n.
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 30 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 31 33 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 7c 7c 65 2e 5f 73 68 6f 77 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 28 29 2c 32 37 3d 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 65 2e 5f 68 69 64 65 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 28 74 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 68 61 6e 64 6c 65 43 6f 6e 74 72 6f 6c 73 4b 65 79 62 6f 61 72 64 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 30 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 31 33 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 7c 7c 65 2e 5f 68 61 6e 64 6c 65 4c 65 76 65 6c 43 68 61 6e 67 65 28 74 29 2c 32 37 3d 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 65 2e 5f 68 69 64 65 57 69 64 67 65 74 43 6f 6e Data Ascii: ue:function(t){0!==t.keyCode&&13!==t.keyCode\|\|e._showWidgetControls(),27===t.keyCode&&e._hideWidgetControls(t)}},{key:"_handleControlsKeyboardEvents",value:function(t){0!==t.keyCode&&13!==t.keyCode\|\|e._handleLevelChange(t),27===t.keyCode&&e._hideWidgetCon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	172.64.146.38	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:48 UTC	582	OUT	GET /u/da0b7436/65136922-0-Screenshot-2024-08-2.png HTTP/1.1 Host: v.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:48 UTC	987	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:48 GMT Content-Type: image/webp Content-Length: 48876 Connection: close Cache-Control: public, max-age=315360000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=103232 Content-Disposition: inline; filename="65136922-0-Screenshot-2024-08-2.webp" Vary: Accept etag: "1ea2777fa2b76069a19c92fef6aa9c00" expires: Sun, 27 Aug 2034 19:19:48 GMT last-modified: Thu, 29 Aug 2024 18:02:54 GMT x-goog-generation: 1724954574796052 x-goog-hash: crc32c=pAdPMQ== x-goog-hash: md5=HqJ3f6K3YGmhnJL+9qqcAA== x-goog-meta-content-length: 0 x-goog-meta-expires: Mon, 20 Oct 2025 10:02:54 GMT x-goog-metageneration: 2 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 103232 x-guploader-uploadid: AHxI1nOiEw0gi7tz94KCnmzbgmK5QuyIwUOoWIScpCcz-sPucgPKZSCab6LIo68urHx0Ka2SnWk CF-Cache-Status: HIT Age: 3442 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8baee5124a61c413-EWR
2024-08-29 19:19:48 UTC	382	IN	Data Raw: 52 49 46 46 e4 be 00 00 57 45 42 50 56 50 38 4c d8 be 00 00 2f 7d 43 54 00 8d 40 72 db 48 92 04 3b aa 26 22 61 e5 ff 1f 5c d9 db 6d 8e 11 fd 9f 00 fd 6f e6 01 49 14 83 82 04 88 07 f1 f7 b4 bb ef 12 7b a7 fc e7 92 24 23 47 52 f0 2f 7c 77 fc 62 d5 1b 7c 39 ef ed 58 d9 6d 53 ef c5 47 f0 1c 3c b3 d6 5b ee 47 b7 5d fb 14 08 47 1b 03 cc e2 f9 59 94 de ae dd 73 f8 bc a4 fa 93 58 1f ec 8e 45 b7 fd aa c0 12 01 1f ce 50 55 6f dd 6d 2b ea cc ee 9e 87 07 10 94 44 88 2e 40 9f bb 3b 96 ef f8 9a be 67 24 15 17 11 8c 42 20 66 ad af e4 d1 b1 a7 bb af 4b 32 57 b7 cc 8c cf 6b f9 b3 24 92 12 29 32 49 90 5a a8 95 a0 1c 49 f2 d9 bf f2 44 8e 23 49 8e 24 d9 b2 46 89 fb ff d7 ed 03 8e d3 40 20 51 ca 70 6d 45 c9 aa 6d bb 8d b4 28 72 d5 a5 39 34 15 34 f4 ff 7f 8e 11 c2 a1 06 a2 72 Data Ascii: RIFFWEBPVP8L/}CT@rH;&"a\moI{$#GR/\|wb\|9XmSG<[G]GYsXEPUom+D.@;g$B fK2Wk$)2IZID#I$F@ QpmEm(r944r
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: b5 35 6f 33 1b aa 4e 55 51 5b 55 5f ea 54 d5 56 d5 69 aa b4 29 33 65 de 55 8a a2 98 3d 60 46 38 24 f0 ea 7a fd 3a cb c1 d9 7a 43 ca 7c 69 4b 3f 7f 04 e0 07 a8 3a f5 25 a2 a8 6a ab aa 52 e2 29 aa e8 1a f9 50 84 00 e0 90 43 02 5e 76 6d ee e2 e4 07 73 53 76 67 8f a5 4d 4d d5 69 e6 a3 7e 35 2f 55 7b 51 a6 0c 75 aa 53 55 15 45 55 5b 6d f5 ab b6 ae 83 22 20 c4 ca 3a a4 28 5e d6 3f 0e 71 4e 60 5e b4 cf 42 65 6c af da a7 ed b3 f4 61 1e e2 49 df be c9 22 9a bb f6 69 f9 ba 45 86 2c aa 2a ba 4a 11 42 31 7b e0 87 15 76 09 37 eb 90 10 67 0c 55 6d 01 73 55 da 18 26 9a bf 70 75 9a fe 4c 3f ba ce 8c 10 53 00 33 8a 10 2b 94 0b 56 45 d3 9a b7 e6 cd 80 4e ed b3 b2 69 ce 9a b3 ac 8a e6 6e f6 69 f3 d3 9f cc bf dc 2a dc ae 23 20 00 bb 14 45 18 41 08 e5 79 13 80 b9 9b b6 e6 ad Data Ascii: 5o3NUQ[U_TVi)3eU=`F8$z:zC\|iK?:%jR)PC^vmsSvgMMi~5/U{QuSUEU[m" :(^?qN`^BelaI"iE,JB1{v7gUmsU&puL?S3+VENini# EAy
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: cb df e7 ef f0 af fe f3 cf 0f 94 3b d6 1d ec df 33 d2 65 28 ac db 6a a3 e9 ca fc de cc ba f8 02 20 de eb 33 6b 77 d8 e3 6d bd 8a b0 2d 74 fc f4 06 3c 14 a4 38 be 0d f8 ee 9a 7f e0 ec d1 54 c0 be ba 75 d9 03 9e 72 dc 96 6c 02 b6 36 79 72 78 fa dd e5 b7 07 d6 e9 75 bc 31 b7 9c 6c bd ba 5e 59 ed 97 ff fd d7 7f fa 7f ff e3 97 ff fd b7 2f 7e 5f 33 50 da 3a 70 37 e6 e8 83 0e 51 2b b9 63 ac 5f 75 ea 13 1f 80 0d 28 15 93 7f 6f 2e e1 e3 e1 4e ef a7 d5 82 8e de 4f d7 be eb ef e7 fc 8e d2 68 6f 99 fb e4 f7 e6 f8 e9 99 42 97 df cf c3 41 bb d3 7b ce 03 30 6c b0 85 c8 1d 14 5a 6b a6 fd f7 b1 ba d3 aa 9c 15 da 33 b9 ec 95 27 ff ff 7f 7b 18 95 09 6d 48 6a ce 80 b6 04 2f 7c 1b d7 ee 37 1f ff dc c5 fc 16 93 24 00 00 b4 8e b8 bd ef bb cf 3b aa 43 bf 74 86 7e 6c 27 10 45 e4 Data Ascii: ;3e(j 3kwm-t<8Turl6yrxu1l^Y/~_3P:p7Q+c_u(o.NOhoBA{0lZk3'{mHj/\|7$;Ct~l'E
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: e3 6c de 71 87 50 41 a0 93 80 4f b6 2d 22 b0 12 cf 91 68 d5 58 f9 b4 10 11 66 f0 6a 37 48 08 87 e7 90 97 aa 25 c8 8a 6b 19 d5 82 22 08 ab cc b5 3b db e8 ca 11 9d 31 5b 68 a1 99 b5 b2 ba bb 82 f5 58 20 5b e0 b4 0a a8 14 1f fe 5e 23 30 78 ef e8 32 c9 09 ec 29 04 84 22 5e 6b 02 8f 75 e6 d5 a3 3a 62 21 46 31 af 5a 60 82 18 29 d4 ad d4 07 6c ab 87 25 af f2 8d 02 1d 49 df a0 6a 11 80 1e 5d 56 2a b5 9a 35 42 a2 79 d4 d8 dd 5d 38 9b 5f 16 b8 30 96 b9 30 22 35 00 66 8b fe 36 be c3 fb ff 9a 6f 7f 5f 18 d9 8d 0d 3b 4c 78 ea 57 6d 4a 09 9b cd 66 6c 2b d5 a4 52 73 68 8a 21 d7 c2 b3 fe 95 2b 07 a0 b0 17 00 a7 af fe e1 47 26 09 a3 23 fa e2 05 c1 6b 22 8d 33 62 c4 56 d3 5a da 6c b2 d6 f1 56 0a 24 43 32 04 77 4d 30 37 c1 a5 1e 8b 37 77 2f 9f c4 1b 6e 53 fd 5d fe fd 96 12 Data Ascii: lqPAO-"hXfj7H%k";1[hX [^#0x2)"^ku:b!F1Z`)l%Ij]V*5By]8_00"5f6o_;LxWmJfl+Rsh!+G&#k"3bVZlV$C2wM077w/nS]
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: ac c1 57 5a 4b 39 e6 f0 69 66 8c 05 9c 52 c3 3b 82 07 9f 38 4b 00 34 fc 08 e4 f6 db d0 57 c2 6d 27 97 9e ee 8c e4 5d dd 02 33 a0 e4 07 40 cf eb 16 00 a0 08 ee 9f f1 85 fb 41 1e 21 29 96 00 a8 59 9f 6d 35 ce 32 ab 31 a6 21 3a 1b cc 1e d5 44 81 09 84 79 2a 2a c8 48 b5 c8 54 e5 40 c3 25 0a d3 8b 22 53 f9 bb 9b cb f1 3d 39 94 c0 99 83 3e 82 6b bd ff f8 63 c0 c9 8d 03 82 57 29 b0 e3 86 84 38 13 7c c8 f6 7e 5b 56 08 51 7b b5 88 2b 6b 07 c1 a0 85 7b 5a 80 58 ad 4e 05 05 08 33 84 24 b3 82 de f4 6b f7 59 dc 41 61 00 d5 85 2f 45 2f 7f e1 5f 5e ff be d2 67 d2 67 54 91 5c a5 51 d4 04 16 49 ba 87 82 22 38 bc d0 e1 50 d0 22 18 dd 66 61 59 70 02 89 64 05 d1 c5 90 2a 08 5c 84 4c ef 86 09 94 96 1c 31 6b 56 c0 69 69 52 d2 03 28 49 69 e0 d7 a0 27 1d f2 be 12 59 e9 71 5b f6 Data Ascii: WZK9ifR;8K4Wm']3@A!)Ym521!:Dy*HT@%"S=9>kcW)8\|~[VQ{+k{ZXN3$kYAa/E/_^ggT\QI"8P"faYpd\L1kViiR(Ii'Yq[
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: b4 ac f2 ee b6 24 0f 4a f5 7a 94 8a 45 a6 b4 a9 6b 95 52 a0 9a 7a e6 da 2e 41 85 b7 5d c9 e1 1e 7d fd 64 bf 5e f5 81 56 8f 6f 72 73 11 7d 79 0a 08 4a 71 b8 9c 75 94 d2 09 73 d9 d3 e8 31 c4 96 2c 06 f0 03 32 5b 87 37 df ad 7f ff 76 73 3b 81 d6 eb 26 0a ee 53 fc 64 cb b0 8c 71 24 51 16 f5 54 c6 71 a9 4a 77 2b 60 96 75 9a 94 0a a3 32 2f 0b 75 39 0a ac a7 a5 a7 17 01 ca 28 4a 45 a1 5d d5 4f 7e 7f 1b 13 5a 19 0e 2f e1 df ba b8 74 41 40 2c 13 0e 19 ca 0c 09 2e 0a b8 84 ba 6d 87 f5 78 ea a2 f2 ec 98 e9 41 7d 46 87 62 86 b3 b6 22 37 66 6a 17 eb e8 f3 ca bd f1 eb 22 a0 fa bc cb 6d 08 ad 5c 05 23 3a 8a 47 71 0e 14 45 11 0d dc 45 4f ad 31 85 02 f8 e1 28 69 b7 87 e5 79 f3 15 bf e5 e1 b6 48 b9 b9 6e 02 00 ed ff e4 48 ea f8 b1 03 29 c3 b2 32 22 63 20 03 83 c0 54 4d bc Data Ascii: $JzEkRz.A]}d^Vors}yJqus1,2[7vs;&Sdq$QTqJw+`u2/u9(JE]O~Z/tA@,.mxA}Fb"7fj"m\#:GqEEO1(iyHnH)2"c TM
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: a5 11 59 cd 6e 4c 52 6a ce d1 6e 54 8e 7b ba e0 6f e0 d1 77 f5 41 bc b3 8d 92 03 28 24 17 47 69 50 ec 10 42 55 c6 a9 09 02 73 af 69 2a 65 b6 6b 8f ee a9 f6 ff 5e c8 5b f8 c5 6c d1 6d a6 4b ad bd b0 e9 28 db 63 b6 ed f2 96 d1 b1 57 31 fe ef 37 9f 36 d3 e5 9a 1f e2 70 f6 88 26 f4 55 ce db db 76 df f6 93 c3 5d da 55 6f c9 73 32 22 d1 03 46 b3 ba cb 8a 59 ff f5 e3 36 10 e4 9b c7 d9 7c 69 c9 38 99 b6 ba 1d b2 dd ba 67 d9 3f 7f d4 a5 87 b5 c5 f3 c2 d7 27 0c a5 53 ce 0e 76 6c a4 f4 4f d7 de 65 c4 70 40 f4 12 96 b2 7a ef b8 1e b5 e5 b2 3f 74 05 be 54 8b 76 36 5d e0 62 4a 4c f8 1a 1c e8 91 f6 94 6d 59 2b 59 1b b3 7f 5a d9 b9 b7 ae 24 f9 9c 48 00 00 b0 8c 32 da f7 65 d6 33 9b a1 f7 22 c9 b9 b6 74 1b 2e 60 7a 5e 46 87 2a ac 37 b4 97 11 09 2f a8 79 76 4e 51 0f 68 94 Data Ascii: YnLRjnT{owA($GiPBUsiek^[lmK(cW176p&Uv]Uos2"FY6\|i8g?'SvlOep@z?tTv6]bJLmY+YZ$H2e3"t.`z^F7/yvNQh
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: 35 27 7d c1 dd e9 7e bf be cf eb 3e 71 7a f7 e8 43 0a 9d 2a 60 08 aa 1c d0 3c 94 54 e7 1f dd 6a be ef f3 5f 63 8b fd 4b 8f c5 cc 85 4c 22 a3 e6 be 3e 7f 16 e7 ad aa 38 3a 9c 9f 4e 44 8e c5 9c 67 39 0a a6 13 c0 b0 d5 53 87 1d db 27 b1 b7 b8 bb 46 60 44 43 51 2d a7 f5 b7 34 b9 89 98 c0 9d 7d 56 31 d3 0e 7b 63 8b ba 61 89 b9 45 36 d0 ec 0e 6c 97 b2 9c c1 29 34 45 77 79 9f b8 ea 93 eb 2e ec 2c 25 70 1c 15 7b b8 cf 1c bf 21 00 30 47 f6 a5 a0 b2 ba 14 dd ad fd fc 34 c5 96 c2 bd be ff 16 da 45 2c 36 df 89 33 d9 a3 4c dc 7c 17 65 01 38 6b 6e ad c7 93 e4 42 5a 7c d2 dc 93 af 05 97 99 59 d9 ad eb 65 76 97 81 36 df b7 d2 2c 49 10 51 f2 6b ee 5d fe e4 56 61 8f dc be a7 c4 b3 29 4e ad 68 2e 58 7d bc f2 d0 83 c8 4f 69 5a be 04 79 5d bf 4f ee e0 0c 6c 9a e2 57 62 0b fe Data Ascii: 5'}~>qzC*`<Tj_cKL">8:NDg9S'F`DCQ-4}V1{caE6l)4Ewy.,%p{!0G4E,63L\|e8knBZ\|Yev6,IQk]Va)Nh.X}OiZy]OlWb
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: b2 0a fc 9c d7 fa f7 c5 82 3b 2f c2 e4 8e 88 0a 4f 53 b0 32 32 0d 15 ce a8 d0 60 42 4d 96 c0 6c 80 5c 62 c8 51 14 c5 51 90 9a b3 0e 1c a8 b8 dd 59 e9 7e 8b 27 0f cf b7 ca 42 74 72 8c 8c 5b 6d 28 f2 54 02 f3 af 6d fd 78 f2 72 5a b2 b9 fc 79 a2 80 e7 0e e6 40 96 57 2f 00 00 00 df 3c 28 ea 8d 3d b6 67 80 6e 05 6a d7 cf 92 5b 9a b9 dc c0 eb cc 1e 09 8e fe 66 6e bf e9 5d 22 f2 07 3e 43 26 03 44 49 d2 5d 81 bd f2 cd 80 67 03 3c 71 e8 ad dc e3 88 36 6f 12 44 18 02 da aa 28 fb 38 c7 56 f2 cf 27 21 ee 03 00 40 dc 08 ee bc 28 f5 68 a1 c1 02 00 01 27 89 4f 9c 19 19 62 01 cf cb da ab 9f 85 6b 6e d1 22 00 00 10 d5 7c f2 3f ff a7 cb 2f eb 35 60 9b a2 79 36 24 49 3e e0 39 52 d4 4b dc f2 ab 46 0f 5d 8b 29 c6 14 13 fd 5c 08 02 46 45 b6 58 21 53 b9 a6 35 8c 7b ee f9 96 95 Data Ascii: ;/OS22`BMl\bQQY~'Btr[m(TmxrZy@W/<(=gnj[fn]">C&DI]g<q6oD(8V'!@(h'Obkn"\|?/5`y6$I>9RKF])\FEX!S5{
2024-08-29 19:19:48 UTC	1369	IN	Data Raw: de 22 2f c3 ae fa 65 8f 8d d8 ea 53 07 d5 82 0a 9d c4 08 00 10 01 94 cd 6a 46 01 9a e9 78 7c 9d 07 00 00 40 c5 19 07 15 30 2c 9c 2c 0f 9e 3f 35 b5 47 46 00 00 08 72 12 0a f7 99 c9 8a 6d c8 aa c9 fa 25 92 47 9e 04 01 00 40 24 b2 39 6e be ea ed 2e ca 9c 5d 36 1b b3 ab 4b b6 09 79 4b 12 62 0a 38 14 9c 98 79 b5 a4 d4 af 9c b7 7f d3 ad 79 8e 05 50 6a 35 42 60 5a d7 9f bb fd 87 77 18 d6 e5 a7 51 83 c0 00 91 e6 71 93 3a ed 94 81 1c 46 02 30 d0 85 84 ac 09 9d da 9d b9 87 3c fa 0b 5a d1 11 49 ed 75 dd 3d 95 69 9a 2a 38 91 76 9f 91 f1 bd 36 ef ce 9c 15 f8 90 9a 46 6a 04 78 86 93 b3 36 b9 dc f4 62 95 7b 2a ab ef 93 46 e7 3c 09 78 70 ed 64 66 18 41 e9 06 f4 d2 09 2a 3d 7f d7 34 df 4f b8 d3 bc b7 69 17 ef ef f0 98 9d 5c 2e 4c a6 89 0d 18 f6 67 be 93 fb f5 59 fd c8 d6 Data Ascii: "/eSjFx\|@0,,?5GFrm%G@$9n.]6KyKb8yyPj5B`ZwQq:F0<ZIu=i8v6Fjx6b{F<xpdfA*=4Oi\.LgY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	104.18.41.218	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:48 UTC	508	OUT	GET /js/Links.7722c547d653e74ec16f.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:48 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:48 GMT last-modified: Wed, 19 Jun 2024 09:15:27 GMT etag: W/"813cfa21f919254e225528873cd4250c" vary: Accept-Encoding x-goog-generation: 1718788527801540 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 285 x-goog-hash: crc32c=WSORaQ== x-goog-hash: md5=gTz6IfkZJU4iVSiHPNQlDA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0NrMpzZ_MAsfH8RQ6zLDUxwMWMY3w3olkCwI9YDVVTI1vQot647KtB89Bfg1m-b2z8ock9aWbnqWlQ CF-Cache-Status: HIT Age: 6167936 Server: cloudflare CF-RAY: 8baee5124b5619f7-EWR
2024-08-29 19:19:48 UTC	386	IN	Data Raw: 31 37 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 30 5d 2c 7b 32 35 39 34 3a 28 6e 2c 61 2c 65 29 3d 3e 7b 76 61 72 20 72 3d 65 28 34 35 39 34 29 2c 63 3d 5b 22 75 72 6c 2d 6c 69 6e 6b 22 2c 22 6c 61 6e 64 69 6e 67 2d 70 61 67 65 2d 6c 69 6e 6b 22 5d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 61 2e 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 5b 64 61 74 61 2d 70 61 73 73 2d 70 61 72 61 6d 73 5d 22 29 7d 29 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 28 30 2c 72 2e 76 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 3d 28 30 2c 72 2e 77 6d 29 28 29 3b 61 2e 73 69 7a 65 Data Ascii: 17b"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size
2024-08-29 19:19:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49737	104.18.38.43	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:49 UTC	697	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: hkwyolaw.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sg463LRxea7GCkT0n69snZu9C1s3PW.nzHe3WmdlWcE-1724959187-1.0.1.1-erCJ6Kk62pWu1pNPxc3Nv6YNLeq8PGylcauOXWg5jXliNI.QKln5MCYCGGBfdr5RoBbiQAQSE.VFQSrKoHI5yw
2024-08-29 19:19:49 UTC	389	IN	HTTP/1.1 302 Found Date: Thu, 29 Aug 2024 19:19:49 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8baee515dfa219cb-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	104.18.41.218	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:49 UTC	512	OUT	GET /js/LazyImage.a698675f6fd38cb87757.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:49 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:49 GMT last-modified: Wed, 19 Jun 2024 09:15:27 GMT etag: W/"67ce7db2b9d01eb08e0ee3f7eddd1bbf" vary: Accept-Encoding x-goog-generation: 1718788527554276 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1162 x-goog-hash: crc32c=YCOE0Q== x-goog-hash: md5=Z859srnQHrCODuP37d0bvw== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0Nr_1CuJU6loHvMwwZVYizdYJuowZRvrWRXHR-cjvDSFVLnQjv1E0XV2gxSbu1dp2ExXBzo CF-Cache-Status: HIT Age: 6167937 Server: cloudflare CF-RAY: 8baee518de192369-EWR
2024-08-29 19:19:49 UTC	601	IN	Data Raw: 39 63 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 30 5d 2c 7b 38 32 33 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: 9cb"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 65 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 65 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 65 29 3f 61 28 74 2c 72 29 3a 76 6f 69 64 20 30 7d 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d Data Ascii: slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-
2024-08-29 19:19:49 UTC	544	IN	Data Raw: 6f 66 20 72 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 74 29 7d 2c 72 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 2e 63 6f 6e 63 61 74 28 69 28 28 30 2c 6e 2e 69 54 29 28 22 2e 69 6d 67 2d 6c 61 7a 79 22 29 29 2c 69 28 28 30 2c 6e 2e 69 54 29 28 22 2e 69 66 72 61 6d 65 2d 6c 61 7a 79 22 29 29 29 3b 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 7b 76 61 72 20 72 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 73 2c 66 29 3b 74 2e 66 6f 72 45 61 63 Data Ascii: of r))throw new TypeError("Cannot call a class as a function")}(this,t)},r=[{key:"init",value:function(){var t=[].concat(i((0,n.iT)(".img-lazy")),i((0,n.iT)(".iframe-lazy")));if("IntersectionObserver"in window){var r=new IntersectionObserver(s,f);t.forEac
2024-08-29 19:19:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	104.18.41.218	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:49 UTC	507	OUT	GET /js/sptw.2fff3c07e91a81e507a4.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:49 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-goog-generation: 1718788529050056 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20505 x-goog-hash: crc32c=ddebnQ== x-goog-hash: md5=bvf0kBfoGQ8io4n0oEYvrg== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0Nqu6eMYvI5wFFfz62Th-HKqUUdU_ZnD_D947AAW_YVapo4qcreA87OSYryS8K4dfXGQO8vZpzOkYA expires: Fri, 29 Aug 2025 19:19:49 GMT Cache-Control: public, max-age=31536000 last-modified: Wed, 19 Jun 2024 09:15:29 GMT etag: W/"6ef7f49017e8190f22a389f4a0462fae" vary: Accept-Encoding Age: 5996235 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8baee518ff1b8ce8-EWR
2024-08-29 19:19:49 UTC	593	IN	Data Raw: 37 63 35 65 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 38 34 31 32 3a 74 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 65 28 Data Ascii: 7c5e(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 72 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 65 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 2c Data Ascii: rEach((function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 2b 65 2b 22 29 7d 2c 20 24 7b 6e 61 76 54 69 6d 69 6e 67 28 22 2b 65 2b 22 29 7d 2c 20 30 29 22 29 29 7d 29 2c 7b 7d 29 7d 29 2e 72 65 70 6c 61 63 65 28 2f 5c 22 28 5c 24 5b 5c 24 5c 73 2c 5c 77 7b 7d 28 29 5d 2b 29 5c 22 2f 67 2c 22 24 31 22 29 7d 2c 67 65 74 53 6e 6f 77 70 6c 6f 77 50 65 72 66 6f 72 6d 61 6e 63 65 54 69 6d 69 6e 67 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 6f 7a 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 73 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 77 65 62 6b 69 74 50 65 72 66 6f 72 6d 61 6e 63 65 3b 69 66 28 65 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 2e 74 69 6d 69 6e 67 29 61 28 6e 2c 69 29 26 26 6e 75 Data Ascii: +e+")}, ${navTiming("+e+")}, 0)"))}),{})}).replace(/\"(\$[\$\s,\w{}()]+)\"/g,"$1")},getSnowplowPerformanceTimingContext:function(t){var e=t.performance\|\|t.mozPerformance\|\|t.msPerformance\|\|t.webkitPerformance;if(e){var r={};for(var n in e.timing)a(n,i)&&nu
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 5d 2c 75 3d 2d 31 3b 69 66 28 65 2e 69 65 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 3b 2b 2b 75 3c 61 3b 29 72 3d 69 5b 75 5d 2c 6e 3d 69 5b 2b 2b 75 5d 2c 73 5b 30 5d 3d 72 3e 3e 32 2c 73 5b 31 5d 3d 28 33 26 72 29 3c 3c 34 7c 6e 3e 3e 34 2c 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6e 29 3f 28 73 5b 32 5d 3d 36 34 2c 73 5b 33 5d 3d 36 34 29 3a 28 6f 3d 69 5b 2b 2b 75 5d 2c 73 5b 32 5d 3d 28 31 35 26 6e 29 3c 3c 32 7c 6f 3e 3e 36 2c 73 5b 33 5d 3d 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6f 29 3f 36 34 3a 36 33 26 6f 29 2c 63 2e 70 75 73 68 28 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 30 5d 29 2c 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 31 5d 29 2c 65 2e 61 6c 70 Data Ascii: [null,null,null,null],u=-1;if(e.ie){for(var c=[];++u<a;)r=i[u],n=i[++u],s[0]=r>>2,s[1]=(3&r)<<4\|n>>4,e.checkIsNaN(n)?(s[2]=64,s[3]=64):(o=i[++u],s[2]=(15&n)<<2\|o>>6,s[3]=e.checkIsNaN(o)?64:63&o),c.push(e.alphabet.charAt(s[0]),e.alphabet.charAt(s[1]),e.alp
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 35 37 29 2c 72 28 31 30 32 38 29 2c 72 28 33 32 31 29 2c 72 28 39 35 37 30 29 2c 72 28 36 32 35 33 29 2c 72 28 34 34 34 31 29 2c 72 28 38 39 32 39 29 2c 72 28 31 35 35 34 29 2c 72 28 37 36 32 31 29 2c 72 28 35 36 32 37 29 3b 76 61 72 20 6e 3d 72 28 37 34 37 39 29 7d 2c 37 36 32 31 3a 28 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 Data Ascii: 57),r(1028),r(321),r(9570),r(6253),r(4441),r(8929),r(1554),r(7621),r(5627);var n=r(7479)},7621:()=>{function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Sy
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 61 3d 30 3b 61 3c 65 3b 61 2b 2b 29 72 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 69 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 6e 28 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 6f 28 65 29 2c 22 20 22 29 29 7d 29 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 67 67 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3f 28 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 21 31 29 3a 28 74 68 69 73 2e 61 64 64 28 74 29 2c 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 74 61 69 6e 73 22 2c 76 61 Data Ascii: s.length,r=new Array(e),a=0;a<e;a++)r[a]=arguments[a];i(r,(function(e){t.element.className=n(t.element.className.replace(o(e)," "))}),this)}},{key:"toggle",value:function(t){return this.contains(t)?(this.remove(t),!1):(this.add(t),!0)}},{key:"contains",va
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 65 29 3f 65 3a 65 2b 22 22 7d 72 2e 64 28 65 2c 7b 6c 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: w new TypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==n(e)?e:e+""}r.d(e,{l:()=>f});var a=function(){return t=function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a func
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 73 28 65 29 3f 65 3a 65 2b 22 22 7d 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 65 3d 74 2c 72 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 65 76 65 6e 74 42 75 73 3d 6e Data Ascii: ve value.")}return String(t)}(t);return"symbol"==s(e)?e:e+""}var f=function(){function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t)}return e=t,r=[{key:"init",value:function(){window.__eventBus=n
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 32 29 2c 72 28 32 31 37 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 31 33 31 37 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 38 35 37 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 39 38 35 36 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 32 36 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 33 38 38 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 36 37 31 30 29 3b 76 61 72 20 6e 3d 72 28 36 39 33 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 36 35 31 32 3a 28 74 2c 65 2c 72 29 3d 3e 7b Data Ascii: 2),r(2178);var n=r(8355);t.exports=n.Number},1317:(t,e,r)=>{r(1857);var n=r(8355);t.exports=n.Object.assign},9856:(t,e,r)=>{r(1268);var n=r(8355);t.exports=n.Object.keys},3889:(t,e,r)=>{r(6710);var n=r(6931);t.exports=n("String","padEnd")},6512:(t,e,r)=>{
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 34 33 37 31 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 36 39 30 33 29 2c 6f 3d 72 28 35 34 34 36 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 38 33 36 30 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 Data Ascii: .prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},4371:(t,e,r)=>{var n=r(6903),o=r(5446),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},8360:(t,e,r)=>{"u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	104.18.41.218	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:49 UTC	484	OUT	GET /js/cm.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:49 UTC	767	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-goog-generation: 1656555137097208 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 17906 x-goog-hash: crc32c=ZpZBfw== x-goog-hash: md5=jkZtmPofdGx0sbQJ0goM8w== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ABPtcPpQ_LHM-K8bazeZGCR0h28B-h-Typ8hD3VAz0-cQkVr-V1-3PfT6OQtuuXRZOwBtdj0X_A expires: Fri, 29 Aug 2025 19:19:49 GMT Cache-Control: public, max-age=31536000 last-modified: Thu, 30 Jun 2022 02:12:17 GMT etag: W/"8e466d98fa1f746c74b1b409d20a0cf3" vary: Accept-Encoding CF-Cache-Status: HIT Age: 72138 Server: cloudflare CF-RAY: 8baee518fddfc3f5-EWR
2024-08-29 19:19:49 UTC	602	IN	Data Raw: 37 63 36 37 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 36 32 31 33 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 69 65 6f 3a 2f 4d 53 49 45 20 5b 36 37 5d 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e Data Ascii: 7c67(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isN
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 68 2c 72 2e 6c 6f 6f 6b 75 70 3d 7b 7d 3b 2b 2b 6e 3c 65 3b 29 72 2e 6c 6f 6f 6b 75 70 5b 72 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 Data Ascii: h,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 5b 6f 2b 2b 5d 29 3a 65 5b 6f 5d 3e 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 Data Ascii: tring.fromCharCode(e[o++]):e[o]>191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){ret
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 79 3a 22 69 74 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 5b 74 5d 7c 7c 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 72 65 70 6c 61 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 74 68 69 73 2e 61 64 64 28 72 29 7d 7d 5d 2c 61 26 26 74 28 69 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 6f 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c Data Ascii: y:"item",value:function(t){return this.element.className.split(/\s+/)[t]\|\|null}},{key:"replace",value:function(t,r){this.remove(t),this.add(r)}}],a&&t(i.prototype,a),Object.defineProperty(i,"prototype",{writable:!1}),o}(),"classList"in Element.prototype\|\|
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 65 28 32 37 34 29 2c 65 28 39 34 33 39 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 34 39 34 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 39 39 31 34 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 38 32 32 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 37 32 35 30 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 38 33 38 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 34 34 35 37 29 3b 76 61 72 20 6e 3d 65 28 31 30 39 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 37 31 35 30 3a 28 74 2c 72 2c 65 Data Ascii: e(274),e(9439);var n=e(6386);t.exports=n.Number},4945:(t,r,e)=>{e(9914);var n=e(6386);t.exports=n.Object.assign},8229:(t,r,e)=>{e(7250);var n=e(6386);t.exports=n.Object.keys},8385:(t,r,e)=>{e(4457);var n=e(1099);t.exports=n("String","padEnd")},7150:(t,r,e
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 79 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 35 31 35 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 35 35 38 37 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 32 33 35 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 Data Ascii: y.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},5151:(t,r,e)=>{var n=e(3083),o=e(5587),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},2355:(t,r,e)=>{"
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 53 5b 4f 5d 3d 6d 3b 65 6c 73 65 20 69 66 28 6d 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 62 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 4f 3b 63 61 73 65 20 32 3a 63 28 53 2c 62 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 20 37 3a 63 28 53 2c 62 29 7d 72 65 74 75 72 6e 20 70 3f 2d 31 3a 6f 7c 7c 66 3f 66 3a 53 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 66 6f 72 45 61 63 68 3a 66 28 30 29 2c 6d 61 70 3a 66 28 31 29 2c 66 69 6c 74 65 72 3a 66 28 32 29 2c 73 6f 6d 65 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 72 52 Data Ascii: S[O]=m;else if(m)switch(t){case 3:return!0;case 5:return b;case 6:return O;case 2:c(S,b)}else switch(t){case 4:return!1;case 7:c(S,b)}return p?-1:o\|\|f?f:S}};t.exports={forEach:f(0),map:f(1),filter:f(2),some:f(3),every:f(4),find:f(5),findIndex:f(6),filterR
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 38 30 35 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 38 35 35 36 29 2c 69 3d 65 28 33 39 35 37 29 2c 61 3d 65 28 32 30 38 33 29 2c 73 3d 65 28 37 39 37 38 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 75 3d 6e 2e 4f 62 6a 65 63 74 2c 63 3d 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 8056:(t,r,e)=>{var n=e(3083),o=e(8556),i=e(3957),a=e(2083),s=e(7978)("toStringTag"),u=n.Object,c="Arguments"==a(function(){return arguments}());t.exports=o?a:function(t){var r,e,n;return void 0===t?"Undefined":null===t?"Null":"string"==typeof(e=function(t
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 61 3d 6e 28 72 29 3b 61 20 69 6e 20 74 3f 6f 2e 66 28 74 2c 61 2c 69 28 30 2c 65 29 29 3a 74 5b 61 5d 3d 65 7d 7d 2c 37 33 35 34 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 39 37 32 29 2c 6f 3d 65 28 36 39 37 29 2c 69 3d 65 28 37 31 34 31 29 2c 61 3d 65 28 32 37 31 39 29 2c 73 3d 65 28 33 39 35 37 29 2c 75 3d 65 28 35 39 37 37 29 2c 63 3d 65 28 36 34 33 39 29 2c 66 3d 65 28 34 37 33 30 29 2c 70 3d 65 28 37 31 31 34 29 2c 6c 3d 65 28 36 37 38 35 29 2c 68 3d 65 28 34 33 33 39 29 2c 76 3d 65 28 37 39 37 38 29 2c 67 3d 65 28 35 31 39 36 29 2c 64 3d 65 28 32 34 36 36 29 2c 79 3d 61 2e 50 52 4f 50 45 52 2c 62 3d 61 2e 43 Data Ascii: .exports=function(t,r,e){var a=n(r);a in t?o.f(t,a,i(0,e)):t[a]=e}},7354:(t,r,e)=>{"use strict";var n=e(8972),o=e(697),i=e(7141),a=e(2719),s=e(3957),u=e(5977),c=e(6439),f=e(4730),p=e(7114),l=e(6785),h=e(4339),v=e(7978),g=e(5196),d=e(2466),y=a.PROPER,b=a.C
2024-08-29 19:19:49 UTC	1369	IN	Data Raw: 74 29 3a 7b 7d 7d 7d 2c 36 34 35 33 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 37 32 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 6e 61 76 69 67 61 74 6f 72 22 2c 22 75 73 65 72 41 67 65 6e 74 22 29 7c 7c 22 22 7d 2c 33 31 37 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 2c 6f 2c 69 3d 65 28 33 30 38 33 29 2c 61 3d 65 28 36 34 35 33 29 2c 73 3d 69 2e 70 72 6f 63 65 73 73 2c 75 3d 69 2e 44 65 6e 6f 2c 63 3d 73 26 26 73 2e 76 65 72 73 69 6f 6e 73 7c 7c 75 26 26 75 2e 76 65 72 73 69 6f 6e 2c 66 3d 63 26 26 63 2e 76 38 3b 66 26 26 28 6f 3d 28 6e 3d 66 2e 73 70 6c 69 74 28 22 2e 22 29 29 5b 30 5d 3e 30 26 26 6e 5b 30 5d 3c 34 3f 31 3a 2b 28 6e 5b 30 5d 2b 6e 5b 31 5d 29 29 2c 21 6f 26 26 61 26 26 28 21 28 6e 3d 61 2e 6d 61 74 63 68 28 2f Data Ascii: t):{}}},6453:(t,r,e)=>{var n=e(727);t.exports=n("navigator","userAgent")\|\|""},3171:(t,r,e)=>{var n,o,i=e(3083),a=e(6453),s=i.process,u=i.Deno,c=s&&s.versions\|\|u&&u.version,f=c&&c.v8;f&&(o=(n=f.split("."))[0]>0&&n[0]<4?1:+(n[0]+n[1])),!o&&a&&(!(n=a.match(/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	104.18.38.43	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:49 UTC	715	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js? HTTP/1.1 Host: hkwyolaw.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sg463LRxea7GCkT0n69snZu9C1s3PW.nzHe3WmdlWcE-1724959187-1.0.1.1-erCJ6Kk62pWu1pNPxc3Nv6YNLeq8PGylcauOXWg5jXliNI.QKln5MCYCGGBfdr5RoBbiQAQSE.VFQSrKoHI5yw
2024-08-29 19:19:50 UTC	368	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 7875 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8baee519d93242bc-EWR
2024-08-29 19:19:50 UTC	1001	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 33 31 31 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 32 39 39 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 36 32 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 32 31 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 55 28 33 32 39 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 35 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 36 31 29 29 2f 37 2b 2d 70 61 72 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=-parseInt(U(311))/1(parseInt(U(299))/2)+-parseInt(U(362))/3+-parseInt(U(321))/4+parseInt(U(329))/5(parseInt(U(358))/6)+parseInt(U(361))/7+-par
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 3a 4d 7c 7c 47 28 45 2b 4b 2c 44 5b 4b 5d 29 29 3a 47 28 45 2b 4b 2c 4c 29 2c 4a 2b 2b 29 3b 72 65 74 75 72 6e 20 46 3b 66 75 6e 63 74 69 6f 6e 20 47 28 4e 2c 4f 2c 5a 29 7b 5a 3d 62 2c 4f 62 6a 65 63 74 5b 5a 28 33 36 38 29 5d 5b 5a 28 32 38 34 29 5d 5b 5a 28 32 38 36 29 5d 28 46 2c 4f 29 7c 7c 28 46 5b 4f 5d 3d 5b 5d 29 2c 46 5b 4f 5d 5b 5a 28 33 33 34 29 5d 28 4e 29 7d 7d 2c 6e 3d 56 28 33 35 31 29 5b 56 28 33 32 36 29 5d 28 27 3b 27 29 2c 6f 3d 6e 5b 56 28 32 37 35 29 5d 5b 56 28 33 37 36 29 5d 28 6e 29 2c 67 5b 56 28 33 37 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 2c 61 32 2c 45 2c 46 2c 47 2c 48 29 7b 66 6f 72 28 61 32 3d 56 2c 45 3d 4f 62 6a 65 63 74 5b 61 32 28 33 31 38 29 5d 28 44 29 2c 46 3d 30 3b 46 3c 45 5b 61 32 28 33 34 37 29 5d 3b 46 Data Ascii: :M\|\|G(E+K,D[K])):G(E+K,L),J++);return F;function G(N,O,Z){Z=b,Object[Z(368)][Z(284)][Z(286)](F,O)\|\|(F[O]=[]),F[O][Z(334)](N)}},n=V(351)[V(326)](';'),o=n[V(275)][V(376)](n),g[V(375)]=function(C,D,a2,E,F,G,H){for(a2=V,E=Object[a2(318)](D),F=0;F<E[a2(347)];F
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 2c 4e 5b 61 61 28 33 33 34 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 4a 3d 28 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 33 32 38 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 48 5b 53 5d 3d 4c 2b 2b 2c 53 74 72 69 6e 67 28 52 29 29 7d 69 66 28 27 27 21 3d 3d 4a 29 7b 69 66 28 4f 62 6a 65 63 74 5b 61 61 28 33 36 38 29 5d 5b 61 61 28 32 38 34 29 5d 5b 61 61 28 32 38 36 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 61 28 32 38 39 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 33 33 34 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 32 38 39 29 5d 28 30 29 2c Data Ascii: ,N[aa(334)](F(O)),O=0):P++,T>>=1,G++);J=(K--,K==0&&(K=Math[aa(328)](2,M),M++),H[S]=L++,String(R))}if(''!==J){if(Object[aa(368)][aa(284)][aa(286)](I,J)){if(256>J[aa(289)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[aa(334)](F(O)),O=0):P++,G++);for(T=J[aa(289)](0),
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 4c 3d 47 5b 33 5d 3d 54 2c 4b 5b 61 64 28 33 33 34 29 5d 28 54 29 3b 3b 29 7b 69 66 28 50 3e 44 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 32 38 29 5d 28 32 2c 4a 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 54 3d 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 32 38 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c Data Ascii: k;case 2:return''}for(L=G[3]=T,K[ad(334)](T);;){if(P>D)return'';for(Q=0,R=Math[ad(328)](2,J),M=1;M!=R;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(T=Q){case 0:for(Q=0,R=Math[ad(328)](2,8),M=1;R!=M;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=M(0<
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 3b 65 3d 65 5b 59 28 33 32 30 29 5d 28 4f 62 6a 65 63 74 5b 59 28 33 31 38 29 5d 28 64 29 29 2c 64 3d 4f 62 6a 65 63 74 5b 59 28 33 31 36 29 5d 28 64 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 65 2c 64 2c 65 2c 66 2c 43 29 7b 69 66 28 61 65 3d 56 2c 64 3d 67 5b 61 65 28 33 30 31 29 5d 2c 21 64 29 72 65 74 75 72 6e 3b 69 66 28 21 78 28 29 29 72 65 74 75 72 6e 3b 28 65 3d 21 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 66 2c 44 29 7b 28 61 66 3d 61 65 2c 21 65 29 26 26 28 65 3d 21 21 5b 5d 2c 44 3d 73 28 29 2c 79 28 64 2e 72 2c 44 2e 72 29 2c 44 2e 65 26 26 7a 28 61 66 28 33 33 30 29 2c 44 2e 65 2c 61 66 28 33 30 36 29 29 29 7d 2c 68 5b 61 65 28 33 36 37 29 5d 21 3d 3d 61 65 28 32 37 36 29 29 3f 66 28 29 3a 67 5b 61 65 28 32 38 Data Ascii: ;e=e[Y(320)](Object[Y(318)](d)),d=Object[Y(316)](d));return e}function B(ae,d,e,f,C){if(ae=V,d=g[ae(301)],!d)return;if(!x())return;(e=![],f=function(af,D){(af=ae,!e)&&(e=!![],D=s(),y(d.r,D.r),D.e&&z(af(330),D.e,af(306)))},h[ae(367)]!==ae(276))?f():g[ae(28
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 51 67 2c 66 72 6f 6d 2c 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2c 73 70 6c 69 63 65 2c 73 74 72 69 6e 67 2c 64 2e 63 6f 6f 6b 69 65 2c 74 61 62 49 6e 64 65 78 2c 4f 62 6a 65 63 74 2c 6c 65 6e 67 74 68 2c 73 74 72 69 6e 67 69 66 79 2c 58 66 4f 54 70 46 4d 65 76 56 76 2c 74 6f 53 74 72 69 6e 67 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 6b 69 51 63 43 35 3b 52 6c 79 4e 54 38 3b 61 49 48 65 42 33 3b 57 67 6c 66 73 37 3b 56 52 43 52 37 3b 53 63 43 72 34 3b 6a 58 4f 75 5a 32 3b 46 57 74 48 30 3b 4e 56 77 4a 52 35 3b 69 51 51 55 6f 38 3b 65 59 67 4b 69 33 3b 6a 6f 70 75 38 3b 6e 4d 59 6a 68 32 3b 61 46 4e 69 30 3b 77 71 58 72 4f 35 2c 6e 61 76 69 67 61 74 6f 72 2c 2f 62 65 61 63 6f 6e 2f 6f 76 2c 72 65 70 6c 61 63 65 2c 43 6f 6e 74 65 6e 74 2d 74 79 70 65 2c Data Ascii: Qg,from,contentDocument,splice,string,d.cookie,tabIndex,Object,length,stringify,XfOTpFMevVv,toString,_cf_chl_opt;kiQcC5;RlyNT8;aIHeB3;Wglfs7;VRCR7;ScCr4;jXOuZ2;FWtH0;NVwJR5;iQQUo8;eYgKi3;jopu8;nMYjh2;aFNi0;wqXrO5,navigator,/beacon/ov,replace,Content-type,
2024-08-29 19:19:50 UTC	29	IN	Data Raw: 72 6e 20 61 34 3d 56 2c 4d 61 74 68 5b 61 34 28 32 37 39 29 5d 28 29 3c 64 7d 7d 28 29 Data Ascii: rn a4=V,Math[a4(279)]()<d}}()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	34.36.17.181	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	500	OUT	GET /t/js/3/it.js HTTP/1.1 Host: cdn.instapagemetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:50 UTC	724	IN	HTTP/1.1 200 OK x-goog-generation: 1686655294888925 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 55266 x-goog-hash: crc32c=JVvUKA== x-goog-hash: md5=7ukxGHBgcZqxejUt4kJODA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes X-GUploader-UploadID: AHxI1nOAh6MX4xI1GlDY5H7ZYUyXI23gr8w51535uhP9CSRWZgew9EYrhdzR7iM_ATkbK7q89M9CSUCXSA Server: UploadServer Date: Thu, 29 Aug 2024 18:54:19 GMT Age: 1531 Last-Modified: Tue, 13 Jun 2023 11:21:34 GMT ETag: "eee931187060719ab17a352de2424e0c" Content-Type: text/javascript Content-Length: 55266 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:19:50 UTC	666	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 65 62 20 61 6e 61 6c 79 74 69 63 73 20 66 6f 72 20 53 6e 6f 77 70 6c 6f 77 20 76 33 2e 31 2e 30 20 28 68 74 74 70 3a 2f 2f 62 69 74 2e 6c 79 2f 73 70 2d 6a 73 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 53 6e 6f 77 70 6c 6f 77 20 41 6e 61 6c 79 74 69 63 73 20 4c 74 64 2c 20 32 30 31 30 20 41 6e 74 68 6f 6e 20 50 61 6e 67 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 20 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 Data Ascii: /! Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js) * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang * Licensed under BSD-3-Clause */"use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.ca
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 20 72 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 30 2c 74 3d 30 2c 72 3d 5b 5d 3b 69 66 28 65 29 7b 65 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 3b 64 6f 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 61 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 73 3d 6f 3c 3c 31 36 7c 69 3c 3c 38 7c 61 3b 6f 3d 73 3e 3e 31 38 26 36 33 2c 69 3d 73 3e 3e 31 32 26 36 33 2c 61 3d 73 3e 3e 36 26 36 33 2c 73 26 3d 36 33 2c 72 5b 74 2b 2b 5d 3d 64 65 2e 63 68 61 72 41 74 28 6f 29 2b 64 65 2e 63 68 61 72 41 74 28 69 29 2b 64 65 2e 63 68 61 72 41 74 28 61 29 2b 64 65 2e 63 68 61 72 41 74 28 73 Data Ascii: r(e){if(!e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 28 74 29 3f 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 3a 67 28 74 29 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 29 7d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 28 74 5b 6f 5d 29 7d 2c 67 65 74 41 70 70 6c 69 63 61 62 6c 65 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3a 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 74 2e 67 65 74 4a 73 6f 6e 28 29 3b 72 3c 6f 2e 6c 65 6e Data Ascii: (t)?n=n.filter((function(e){return JSON.stringify(e)===JSON.stringify(t)})):g(t)&&(e=e.filter((function(e){return JSON.stringify(e)===JSON.stringify(t)})))},o=0;o<t.length;o++)r(t[o])},getApplicableContexts:function(t){e:{for(var r=0,o=t.getJson();r<o.len
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 69 66 28 6e 75 6c 6c 21 3d 3d 28 65 3d 2f 5e 69 67 6c 75 3a 28 28 3f 3a 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 2e 29 2b 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 29 5c 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 2e 5d 2b 7c 5c 2a 29 5c 2f 6a 73 6f 6e 73 63 68 65 6d 61 5c 2f 28 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 24 2f 2e 65 78 65 63 28 65 29 29 26 26 63 28 65 5b 31 5d 29 29 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 31 2c 36 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 69 66 28 65 3d 75 28 65 29 29 7b 76 61 72 20 6e 3d 65 5b 30 5d 3b 72 65 74 75 72 6e 20 35 3d 3d 3d 65 2e 6c 65 6e 67 74 Data Ascii: if(null!==(e=/^iglu:((?:(?:[a-zA-Z0-9-_]+\|\).)+(?:[a-zA-Z0-9-_]+\|\))\/([a-zA-Z0-9-_.]+\|\)\/jsonschema\/([1-9][0-9]\|\)-(0\|[1-9][0-9]\|\)-(0\|[1-9][0-9]\|\*)$/.exec(e))&&c(e[1]))return e.slice(1,6)}function l(e){if(e=u(e)){var n=e[0];return 5===e.lengt
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 69 74 28 22 2e 22 29 2c 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 26 26 65 29 7b 69 66 28 6e 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 77 28 6e 5b 74 5d 2c 65 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 65 5b 30 5d 2c 6e 5b 30 5d 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 31 3b 35 3e 74 3b 74 2b 2b 29 69 66 28 21 77 28 65 5b 74 5d 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 26 26 22 2a 22 3d 3d 3d 65 7c 7c Data Ascii: it("."),e=e.split("."),n&&e){if(n.length!==e.length)return!1;for(var t=0;t<e.length;t++)if(!w(n[t],e[t]))return!1;return!0}return!1}(e[0],n[0]))return!1;for(var t=1;5>t;t++)if(!w(e[t],n[t]))return!1;return!0}return!1}function w(e,n){return e&&n&&"*"===e\|\|
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 6c 65 6e 67 74 68 3d 30 7d 7d 28 75 29 29 2c 65 2e 61 64 64 28 22 65 69 64 22 2c 66 65 2e 76 34 28 29 29 2c 65 2e 61 64 64 44 69 63 74 28 6c 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 7d 3a 22 74 74 6d 22 3d 3d 3d 65 2e 74 79 70 65 3f 7b 74 79 70 65 3a 22 74 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7d 3a 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 28 73 29 2c 65 2e Data Ascii: length=0}}(u)),e.add("eid",fe.v4()),e.addDict(l),s=function(e){return null==e?{type:"dtm",value:(new Date).getTime()}:"number"==typeof e?{type:"dtm",value:e}:"ttm"===e.type?{type:"ttm",value:e.value}:{type:"dtm",value:e.value\|\|(new Date).getTime()}}(s),e.
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 61 64 64 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 2c 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 29 7d 2c 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 7d 7d 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2c 6f 2c 65 2e 63 61 6c 6c 62 61 63 6b 29 3b 76 61 72 20 69 3d 24 28 24 28 7b 7d 2c 65 29 2c 7b 61 64 64 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3b 65 3d 65 2e 70 6c 75 67 69 6e 2c 6f 2e 70 75 Data Ascii: lobalContexts:function(e){c.addGlobalContexts(e)},clearGlobalContexts:function(){c.clearGlobalContexts()},removeGlobalContexts:function(e){c.removeGlobalContexts(e)}}}(null==n\|\|n,o,e.callback);var i=$($({},e),{addPlugin:function(e){var n,t;e=e.plugin,o.pu
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 65 74 2c 65 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 3a 65 2e 65 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 7d 3b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 7b 7d 29 3b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 28 6e 5b 74 5d 7c 7c 6e 75 6c 6c 21 3d 3d 65 5b 74 5d 26 26 76 6f 69 64 20 30 21 3d 3d 65 5b 74 5d 29 26 26 28 72 5b 74 5d 3d 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 53 28 7b 65 76 65 6e 74 3a 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 6c 69 6e 6b 5f 63 6c 69 63 6b 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 31 22 2c 64 61 74 61 3a 72 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 Data Ascii: et,elementContent:e.elementContent};var n=void 0;void 0===n&&(n={});var t,r={};for(t in e)(n[t]\|\|null!==e[t]&&void 0!==e[t])&&(r[t]=e[t]);return S({event:{schema:"iglu:com.snowplowanalytics.snowplow/link_click/jsonschema/1-0-1",data:r}})}function x(e){ret
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 6e 20 4e 28 65 29 7b 74 72 79 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 2b 22 2e 65 78 70 69 72 65 73 22 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 6e 2c 74 2c 72 2c 6f 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 22 29 2b 28 74 3f 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 31 65 33 2a Data Ascii: n N(e){try{var n=window.localStorage;return n.removeItem(e),n.removeItem(e+".expires"),!0}catch(e){return!1}}function U(e,n,t,r,o,i,a){return 1<arguments.length?document.cookie=e+"="+encodeURIComponent(null!=n?n:"")+(t?"; Expires="+new Date(+new Date+1e3*
2024-08-29 19:19:50 UTC	1390	IN	Data Raw: 6e 7d 2c 72 3d 76 6f 69 64 20 30 3b 69 66 28 45 28 41 29 29 76 61 72 20 6f 3d 6d 28 72 3d 68 2c 21 30 2c 65 29 2c 69 3d 6e 28 41 29 3b 65 6c 73 65 20 72 3d 76 28 41 5b 30 5d 29 2c 6f 3d 6d 28 72 2c 21 31 2c 65 29 2c 69 3d 31 3b 76 61 72 20 73 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 61 62 6f 72 74 28 29 2c 79 3d 21 31 7d 29 2c 75 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 41 2e 73 68 69 66 74 28 29 3b 74 26 26 42 28 4f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 2e 73 6c 69 63 65 28 30 2c 63 29 29 29 2c 64 28 29 7d 3b 69 66 28 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 6f 2e 72 65 61 Data Ascii: n},r=void 0;if(E(A))var o=m(r=h,!0,e),i=n(A);else r=v(A[0]),o=m(r,!1,e),i=1;var s=setTimeout((function(){o.abort(),y=!1}),u),f=function(e){for(var n=0;n<e;n++)A.shift();t&&B(O,JSON.stringify(A.slice(0,c))),d()};if(o.onreadystatechange=function(){4===o.rea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	104.18.41.218	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	382	OUT	GET /u/da0b7436/65136922-0-Screenshot-2024-08-2.png HTTP/1.1 Host: v.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:50 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:50 GMT Content-Type: image/png Content-Length: 69064 Connection: close Cache-Control: public, max-age=315360000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=103232 Vary: Accept etag: "1ea2777fa2b76069a19c92fef6aa9c00" expires: Sun, 27 Aug 2034 19:19:50 GMT last-modified: Thu, 29 Aug 2024 18:02:54 GMT x-goog-generation: 1724954574796052 x-goog-hash: crc32c=pAdPMQ== x-goog-hash: md5=HqJ3f6K3YGmhnJL+9qqcAA== x-goog-meta-content-length: 0 x-goog-meta-expires: Mon, 20 Oct 2025 10:02:54 GMT x-goog-metageneration: 2 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 103232 x-guploader-uploadid: AHxI1nOiEw0gi7tz94KCnmzbgmK5QuyIwUOoWIScpCcz-sPucgPKZSCab6LIo68urHx0Ka2SnWk CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8baee51b797f0f49-EWR
2024-08-29 19:19:50 UTC	485	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 7e 00 00 01 52 08 02 00 00 00 22 ba 9a 27 00 00 0a 93 69 43 43 50 69 63 63 00 00 78 da ad 96 77 50 d3 d9 16 c7 cf ef 97 1e 12 5a 42 28 52 42 6f d2 5b 00 29 21 b4 00 0a d2 c1 46 48 28 a1 84 18 12 54 ec 88 b8 82 6b 41 45 04 2b ba 2a a2 e0 5a 00 59 2b a2 d8 16 05 7b 5d 90 45 41 59 17 0b a2 a2 f2 02 3e c2 be dd 79 7f bc 99 f7 9d 39 73 3f bf 33 e7 7e ef b9 33 bf 3b 73 00 a8 aa 3c b1 38 0b 55 05 c8 16 49 25 91 41 7e cc f8 84 44 26 a1 17 70 80 00 1e 0c c1 8e c7 cf 15 b3 23 22 c2 40 ae b1 f5 1f fa 70 17 10 90 eb 96 cd a8 17 fc 6f 52 13 a4 e4 f2 01 90 08 39 27 0b 72 f9 d9 72 3e 2e 8f 97 7c b1 44 0a 80 d9 05 00 c6 f3 a4 e2 51 6e 91 33 5d 22 6f 50 ce f7 47 39 ed 3b f7 8f 72 f2 18 63 61 ac 26 3a 92 23 67 3a 00 Data Ascii: PNGIHDR~R"'iCCPiccxwPZB(RBo[)!FH(TkAE+*ZY+{]EAY>y9s?3~3;s<8UI%A~D&p#"@poR9'rr>.\|DQn3]"oPG9;rca&:#g:
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: d4 8b a5 7e 91 0a ce 8a 08 53 d4 64 05 29 f2 b9 79 51 8a bd 52 f9 0f 39 b1 37 22 7a 9c 33 78 21 11 e3 0c 1c c8 81 2c 79 48 80 09 61 f2 2f 7f 00 69 ca 7c 29 c8 c5 c9 11 2f 90 08 d3 d2 a5 4c b6 fc 85 a5 30 b9 22 be ed 64 a6 a3 bd a3 33 c0 e8 7b 85 31 bd 63 8c bd 43 84 71 75 22 57 f0 1e c0 4b 30 32 32 72 6a 22 17 66 02 70 7c 25 00 f9 f9 44 ce fc 0c 80 b2 26 c0 e5 12 be 4c 92 07 63 c2 82 5c 38 20 83 0a d0 41 1b f4 c1 18 2c c0 06 1c c1 15 3c c1 17 02 20 04 c2 21 1a 12 60 36 f0 21 1d b2 41 02 f3 60 11 2c 87 22 28 81 f5 b0 19 2a 60 27 ec 81 03 70 18 8e 42 03 9c 82 f3 70 09 ae c1 4d b8 03 8f a0 13 7a e0 15 0c c0 07 18 46 10 84 80 50 11 1a a2 8d 18 20 a6 88 35 e2 88 b0 10 6f 24 00 09 43 22 91 04 24 09 49 43 44 88 0c 59 84 ac 40 4a 90 52 a4 02 d9 8d 54 23 3f 23 27 Data Ascii: ~Sd)yQR97"z3x!,yHa/i\|)/L0"d3{1cCqu"WK022rj"fp\|%D&Lc\8 A,< !`6!A`,"(*`'pBpMzFP 5o$C"$ICDY@JRT#?#'
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: e0 8c 80 19 9b 67 f4 cc 74 99 59 34 f3 ee 2c f3 59 f3 67 5d 99 ad 33 3b 6b f6 e9 39 2a 73 78 73 8e 25 e1 92 e2 92 0e 26 7d e1 85 f3 aa 78 83 c9 dc e4 6d c9 03 7c 0e 7f 0b ff 95 c0 57 b0 49 d0 97 e2 95 52 9a f2 22 d5 2b b5 34 b5 37 cd 2b 6d 63 5a 5f ba 4f 7a 59 7a bf 90 23 ac 10 be c9 08 ce d8 99 31 94 19 9e b9 3f 73 24 2b 2e ab 2e 9b 98 9d 94 7d 52 a4 2e ca 14 b5 e4 e8 e7 cc cf 69 17 5b 8b 8b c4 9d 73 3d e6 6e 9e 3b 20 09 95 ec cb 45 72 67 e5 36 4a e9 f2 c1 e8 ba cc 42 b6 52 d6 95 e7 9d 57 99 f7 71 5e ec bc 63 f3 d5 e6 8b e6 5f 5f 60 b5 60 f5 82 17 f9 81 f9 3f 2d c4 2e e4 2f 6c 5e 64 b8 68 f9 a2 ae c5 ec c5 bb 97 20 4b 92 97 34 2f 35 5e 5a b8 b4 67 59 d0 b2 03 cb c9 cb 33 97 ff 5a 60 5f 50 5a f0 7e 45 dc 8a a6 42 bd c2 65 85 dd 2b 83 56 d6 14 29 17 49 8a Data Ascii: gtY4,Yg]3;k9*sxs%&}xm\|WIR"+47+mcZ_OzYz#1?s$+..}R.i[s=n; Erg6JBRWq^c__``?-./l^dh K4/5^ZgY3Z`_PZ~EBe+V)I
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 9d 96 c3 f1 b8 ff 39 4c f3 f7 38 ed c7 dd 34 8c f3 f6 af dd 3c 6c a7 61 9c 37 c3 b8 fe 1a 37 c3 74 77 7b f3 fa fc f8 f9 f1 fe f6 f2 f4 70 7f bb 5a 5d 05 f8 3f ac 27 00 97 b1 2c cb 2f 7b e6 d2 1b 47 11 c4 f1 ee ea 79 ed 3a 8e 6d 58 f2 c0 58 11 51 04 4a 38 c0 05 21 71 e3 03 f0 19 f9 06 9c b9 83 72 20 1c 08 02 14 45 10 ec 3c f0 63 d7 bb de f5 3e 66 fa 51 45 57 f5 64 c5 21 87 c4 97 28 c9 fc d6 3d bb d3 dd 55 53 55 dd d2 fe b7 1d 02 3a 1f ac 73 ab da ce 17 ab c9 74 3e 9e 9c 0f c7 b3 93 d1 64 38 9e 8e c6 b3 d1 64 1a e5 66 1c b2 ce 63 40 22 ba 32 d8 be 3a d8 6a ac 23 22 a5 e2 5f 27 3d 3b 3a de 24 3a e9 d9 d1 d1 d1 d1 f1 1a 20 22 e7 c3 74 b6 38 1e 4e 1e ff 7b 72 f0 6c 78 34 9c 9c 4d e7 f3 45 3d 5f d6 8b c5 6a 55 37 75 e3 1a eb ac f3 71 26 22 6a a5 b4 d6 44 aa a3 Data Ascii: 9L84<la77tw{pZ]?',/{Gy:mXXQJ8!qr E<c>fQEWd!(=USU:st>d8dfc@"2:j#"_'=;:$: "t8N{rlx4ME=_jU7uq&"jD
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 4e 91 58 2b 42 f2 49 77 87 20 ca 9c 31 00 12 95 4e ce 50 4c 93 2b 42 e2 65 ca 4c 70 95 01 23 f5 e4 a7 3a d7 1e b8 e4 46 17 19 40 96 2b d0 5a 26 5c 1c 76 60 e2 8e aa b3 dc d9 95 6d 56 4d 5d 7b e7 11 40 a1 0b c8 71 e9 76 e3 b4 02 14 40 6a e5 3d 21 0f 34 a0 41 42 d4 cf 0f e0 51 68 6d 14 df 3a e7 9e bb 50 06 78 39 30 50 f8 8f 9d 2b eb 89 e3 08 c2 33 7d ce 7d ed ec 01 cb 12 63 64 0e d9 49 6c 14 3b 71 1e f2 12 e5 37 59 f9 8f 79 c9 5b 24 47 4a 7c 02 5e 30 97 30 72 60 ba 53 55 3d bb 58 8a 85 d6 ce 83 2d bc df 0e c7 4e 77 55 77 d5 8c e0 e3 ab 1a 28 66 43 5f 04 e7 52 8a 8b b7 8a 94 57 4c 12 f8 84 f0 c1 de e5 e4 1d c1 14 03 17 5c 82 85 10 0a 7d e1 d2 9f 1a d6 d3 5a f6 ba e5 d7 eb 2b 75 95 8f f7 8f 5f ee ee 3d 7d 31 7e f2 7c 17 28 69 d3 18 ef 03 11 47 01 c8 8d 4b 83 Data Ascii: NX+BIw 1NPL+BeLp#:F@+Z&\v`mVM]{@qv@j=!4ABQhm:Px90P+3}}cdIl;q7Yy[$GJ\|^00r`SU=X-NwUw(fC_RWL\}Z+u_=}1~\|(iGK
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 1f 3e 63 71 9a 67 45 95 17 55 5a 54 71 5a e8 30 0a c2 50 a9 40 2a e9 39 49 0a 61 a6 cf c7 30 84 4f e5 51 1a a7 17 8d a2 6e d7 4a 6b 64 e4 c6 00 93 d2 ba ef de 1a f7 41 44 d6 69 a2 c4 3a 2f 9b 38 0d 39 77 2b 4a 29 61 10 16 6a a8 55 70 ba 6d 22 58 e4 df 75 10 12 18 31 08 1d c4 40 a7 3a fd 51 7f 71 65 30 5a 85 a3 ac 07 69 51 43 74 40 3d 51 bc 9c 0d ad b3 28 06 e6 9a a4 45 94 66 61 9c 2a 15 4a ad 05 97 10 16 10 50 47 fb d8 65 97 61 fb b0 94 ab 19 37 53 ea 89 31 32 8e c0 61 4b 0a 25 e5 90 04 39 02 9f 94 ec 21 34 9a c8 85 c0 73 18 df a4 c9 0f 79 29 95 d5 5b 43 34 99 30 2f 3c ac 7f 29 c0 80 e1 b4 8b 94 b5 8b 0b 21 94 4e d2 b2 a8 07 f5 60 b9 37 5c e9 2f ad 56 bd 61 56 f4 c2 24 d7 51 cc 85 82 89 ff af de 2e 14 aa 89 69 94 14 41 9c ea 30 56 2a 10 4a ba bf 2d da dc Data Ascii: >cqgEUZTqZ0P@9Ia0OQnJkdADi:/89w+J)ajUpm"Xu1@:Qqe0ZiQCt@=Q(EfaJPGea7S12aK%9!4sy)[C40/<)!N`7\/VaV$Q.iA0V*J-
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: f7 c1 23 1a 93 23 5b 7a fb 77 7f 94 9d 34 c9 b3 34 32 5a 32 89 d6 81 6f e0 e9 e5 b5 80 7a fb fe d2 9c a1 b4 31 9d ee 60 63 e7 e2 85 cb ef 6d ef 5f a5 c0 a1 52 86 7d d6 88 58 32 0e c2 3c 0e 3c 02 10 41 4d 46 1e c1 4b b0 14 02 81 16 51 59 0e 1a 2b a8 46 1b 4a 94 45 1e 71 a1 67 6b 94 a1 65 56 58 ff bd 3b 95 4b 15 db 74 21 52 fa 40 1c 18 95 28 ab 3e 5e db 59 df bd 3c 9a ac 27 59 ae 4e 00 ad e8 82 da 44 94 b7 5d dd bc b0 bd 7f 9d 48 37 8a 53 cb a3 56 96 a5 0b be e1 b2 70 46 f5 a6 4f 25 b3 fa 6b fc 1d 40 73 ab 96 1d 1e 70 2a ad 1e cd ac 88 41 e9 01 dd 46 07 f4 6e 8c 21 9c eb 7a 63 35 07 20 7a ea 72 b5 5a c5 51 a4 b5 05 cf 2c 1f 8c 57 36 37 2e 5c 1f 4f b7 f3 de 88 b6 9c 1a 16 68 13 51 94 91 0a 40 d7 77 af d0 b8 f5 87 2b 3a 8a f9 fe 43 c9 f1 e0 28 32 c6 28 92 90 Data Ascii: ##[zw442Z2oz1`cm_R}X2<<AMFKQY+FJEqgkeVX;Kt!R@(>^Y<'YND]H7SVpFO%k@sp*AFn!zc5 zrZQ,W67.\OhQ@w+:C(2(
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 48 cd 1b ad 00 92 ed fc 3d 15 4a 27 d9 8a d4 26 a6 39 6a 28 e8 0b c7 70 b2 9e c8 c3 32 2b 66 63 77 08 c3 56 f8 aa b6 94 46 2b fd e1 84 6a fb b2 bc 77 ca e5 65 26 4e b2 bc 4f 2c 45 a3 44 ad 3f 11 9e 6c 67 cb 81 0d 0b 9d a5 aa 26 38 69 e7 81 14 56 ae 7a b5 46 0c 78 6e ae 2a d9 c6 1e b2 b8 d5 12 86 18 dc f5 5a 97 a5 96 64 8b 52 69 25 a4 ac 9b da 47 f4 0f a0 2f a9 54 9c d8 56 53 b6 bc 32 8e cf 9e c3 50 e8 96 76 06 93 e9 b7 b7 6f da 7b 9e 1d 55 e8 7b ca a1 df 9a 1b a3 1a 61 30 db a8 0c 24 9d 82 28 3b 4e a6 27 2b b8 04 16 c3 15 c7 59 af 3f 5a 5e db 1a af 6e 0e 46 2b 14 52 4d d2 3c 5c 98 2e 3e 6f 9b 1a 13 37 fe 2d 54 d0 93 cb 8d 0a 0a 76 fe ff c7 bf bf f5 f5 dd 3f be 7c 65 b3 13 de 1e e4 e5 e5 e5 a3 9e 27 e4 3a ca f3 fe ea c6 ce ea da 56 14 c7 c8 92 bf ee bf 6e Data Ascii: H=J'&9j(p2+fcwVF+jwe&NO,ED?lg&8iVzFxn*ZdRi%G/TVS2Pvo{U{a0$(;N'+Y?Z^nF+RM<\.>o7-Tv?\|e':Vn
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: f8 9c 66 30 7a f1 d2 a7 da bd bc bc 3c 7a 9e 8a 38 1e a9 a2 38 49 f3 9e 36 31 b6 60 de 76 d8 41 d0 cd 07 13 f0 80 2a 2d 44 56 0d 53 c2 1d 53 21 6f 0e ee b4 eb 21 93 19 ef 44 e8 13 e2 c3 44 08 8a 62 c4 64 81 dc e8 05 e8 89 80 a3 54 4a 47 84 56 5a 99 33 21 10 c0 a5 31 31 2d 4a 47 42 48 e6 c2 f6 7e ed 5e a9 24 09 47 4a 21 ea 56 60 47 52 59 bb 3c 3c 89 d1 ba aa 6c fd 2b b5 9a 2f 19 de 5b b9 22 d1 f9 f4 48 0d e2 37 66 24 58 af f8 ac da a6 a6 93 d4 66 db b5 3e 87 3d 86 6a 3c 27 3f 1f af 34 95 15 dc 81 8b 04 06 c5 00 5a 53 51 da 59 1a ad ae ed d8 78 27 f5 9a cd f2 25 a5 8c 8f 77 7a 9d 5c 7d e7 e1 d1 ec e1 f7 4f 29 d8 79 e3 93 9b 1f 7f fa 25 75 92 9f cd 0a 9f 6a f7 f2 f2 f2 cd 95 4e 4f 4a 9b 5e 6f 29 eb 74 94 56 48 1f bb 10 26 db 65 e8 15 b3 7d 10 30 01 11 81 59 Data Ascii: f0z<z88I61`vA*-DVSS!o!DDbdTJGVZ3!11-JGBH~^$GJ!V`GRY<<l+/["H7f$Xf>=j<'?4ZSQYx'%wz\}O)y%ujNOJ^o)tVH&e}0Y
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: b2 24 df 0b 40 05 3f e9 23 b9 8e c1 97 ba 3e bb b6 50 0b b4 74 a4 60 26 b7 54 3e e9 c0 26 c0 19 df b3 00 d2 53 f0 94 af df a8 d0 52 3f 2d 94 5b 34 0d 8d 38 35 16 b7 8a 88 a1 be 10 7d 49 9f 4a 34 a8 f8 12 28 2c e9 27 9c d2 6b a5 c4 a6 50 9b 0a a0 f2 59 32 d2 4b 0e 54 47 ed a1 74 88 48 d7 f9 4a 02 e1 39 88 d4 07 22 bc 9d 38 a3 1a ac 66 58 70 f2 e9 f4 6e 7a 7f 37 93 d9 e7 44 8b 91 dd b6 1d 87 53 a9 71 33 2a b1 ad 50 63 2c 4e a9 f7 de c1 71 6a b2 d3 11 fa 55 b3 ce 03 75 39 bf 48 b0 61 9e c1 91 cb 1f a8 57 01 a0 b9 b4 ba 31 bf b4 be be b9 0d 0d c9 32 03 3b 84 67 33 23 5c e7 d0 60 e0 63 15 68 6e 6a ec ee 6c ed 4f 74 f4 76 b7 75 b6 35 47 a3 91 70 43 90 97 54 64 30 4f 7b 24 17 f5 35 45 75 22 70 1b e5 31 1f 3d 5b f8 d5 ef ee 7f f5 ed f3 85 a5 24 6b 5c 25 27 8f e4 Data Ascii: $@?#>Pt`&T>&SR?-[485}IJ4(,'kPY2KTGtHJ9"8fXpnz7DSq3*Pc,NqjUu9HaW12;g3#\`chnjlOtvu5GpCTd0O{$5Eu"p1=[$k\%'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	172.64.146.38	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	368	OUT	GET /js/Links.7722c547d653e74ec16f.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:50 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:50 GMT last-modified: Wed, 19 Jun 2024 09:15:27 GMT etag: W/"813cfa21f919254e225528873cd4250c" vary: Accept-Encoding x-goog-generation: 1718788527801540 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 285 x-goog-hash: crc32c=WSORaQ== x-goog-hash: md5=gTz6IfkZJU4iVSiHPNQlDA== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0NrMpzZ_MAsfH8RQ6zLDUxwMWMY3w3olkCwI9YDVVTI1vQot647KtB89Bfg1m-b2z8ock9aWbnqWlQ CF-Cache-Status: HIT Age: 6167938 Server: cloudflare CF-RAY: 8baee51bbf0f42bd-EWR
2024-08-29 19:19:50 UTC	386	IN	Data Raw: 31 37 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 30 5d 2c 7b 32 35 39 34 3a 28 6e 2c 61 2c 65 29 3d 3e 7b 76 61 72 20 72 3d 65 28 34 35 39 34 29 2c 63 3d 5b 22 75 72 6c 2d 6c 69 6e 6b 22 2c 22 6c 61 6e 64 69 6e 67 2d 70 61 67 65 2d 6c 69 6e 6b 22 5d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 61 2e 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 5b 64 61 74 61 2d 70 61 73 73 2d 70 61 72 61 6d 73 5d 22 29 7d 29 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 28 30 2c 72 2e 76 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 3d 28 30 2c 72 2e 77 6d 29 28 29 3b 61 2e 73 69 7a 65 Data Ascii: 17b"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[250],{2594:(n,a,e)=>{var r=e(4594),c=["url-link","landing-page-link"].map((function(n){return"a.".concat(n,"[data-pass-params]")})).join(", ");(0,r.v)((function(){var n,a=(0,r.wm)();a.size
2024-08-29 19:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	172.64.146.38	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	369	OUT	GET /js/Cradle.8725edce5135a9515d48.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:50 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:50 GMT last-modified: Wed, 19 Jun 2024 09:15:27 GMT etag: W/"c528792ad836c9b1c9c4c9e8e0c3e9f3" vary: Accept-Encoding x-goog-generation: 1718788527077613 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 4338 x-goog-hash: crc32c=0PTwwA== x-goog-hash: md5=xSh5Ktg2ybHJxMno4MPp8w== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0Nq-6GX1b53-1eJX2r_jf0efXUM0KF1hs0W7ib9ruwzzR7Tj9xOXUGDqlNM27eIto2kUhKE CF-Cache-Status: HIT Age: 6167938 Server: cloudflare CF-RAY: 8baee51bca474288-EWR
2024-08-29 19:19:50 UTC	601	IN	Data Raw: 34 39 30 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 36 5d 2c 7b 37 38 32 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 4901"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[846],{7829:(e,t,r)=>{var n=r(4594);function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6f 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6f 28 74 29 3f 74 3a 74 2b 22 22 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 Data Ascii: d 0!==r){var n=r.call(e,"string");if("object"!=o(n))return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==o(t)?t:t+""}var u=function(){return e=function e(){!function(e,t){if(!(e instanceof t))th
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6c 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 65 29 7c 7c 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 63 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b Data Ascii: erable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,l(n.key),n)}}function l(e){var t=function(e,t){if("object"!=c(e)\|\|!e)return e;var r=e[Symbol.toPrimitive];if(void 0!==r){var n=r.call(e,"string");if("object"!=c(n))return n;
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 20 65 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 74 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 74 6f 72 61 67 65 4b 65 79 2c 22 2d 65 78 70 69 72 65 73 22 29 3b 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 29 29 2c 74 68 69 73 2e 5f 73 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 74 2c 74 68 69 73 2e 5f 67 65 74 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 68 65 63 6b 52 65 73 65 74 44 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 74 6f 72 61 67 65 4f 62 6a 65 63 74 5b 74 Data Ascii: e=this.config.storageKey,t="".concat(this.config.storageKey,"-expires");this._setStoreContents(e,JSON.stringify(this.storageObject)),this._setStoreContents(t,this._getExpirationTime())}},{key:"_checkResetDate",value:function(e){var t=this.storageObject[t
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 28 72 29 3b 69 66 28 6e 2e 6d 61 74 63 68 28 2f 2e 2d 65 78 70 69 72 65 73 2f 67 29 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 67 65 74 53 74 6f 72 65 43 6f 6e 74 65 6e 74 73 28 6e 29 2c 69 3d 6e 65 77 20 44 61 74 65 28 6f 29 3b 74 2e 67 65 74 54 69 6d 65 28 29 3e 3d 69 2e 67 65 74 54 69 6d 65 28 29 26 26 65 2e 70 75 73 68 28 6e 2c 6e 2e 72 65 70 6c 61 63 65 28 22 2d 65 78 70 69 72 65 73 22 2c 22 22 29 29 7d 7d 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 7d 29 29 7d 63 61 Data Ascii: .localStorage.length;r++){var n=window.localStorage.key(r);if(n.match(/.-expires/g)){var o=this._getStoreContents(n),i=new Date(o);t.getTime()>=i.getTime()&&e.push(n,n.replace("-expires",""))}}e.forEach((function(e){window.localStorage.removeItem(e)}))}ca
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 28 29 2c 74 68 69 73 2e 6c 65 61 64 43 6f 6e 76 65 72 74 65 64 3d 74 68 69 73 2e 69 73 4c 65 61 64 43 6f 6e 76 65 72 74 65 64 28 29 2c 74 68 69 73 2e 63 61 6d 70 61 69 67 6e 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 43 61 6d 70 61 69 67 6e 28 29 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 74 68 69 73 2e 5f 64 65 74 65 63 74 52 65 66 65 72 72 65 72 28 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 61 6d 70 61 69 67 6e 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 28 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 65 74 56 61 6c 75 65 28 79 2e 46 4c 41 47 5f 52 45 53 50 4f 4e 53 49 56 45 5f 4d 4f 44 45 2c 74 68 69 73 2e 69 73 4d 6f 62 69 6c 65 29 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 73 61 76 65 28 29 7d 2c 28 74 3d 5b 7b 6b 65 79 3a 22 73 65 74 56 69 73 69 74 65 Data Ascii: (),this.leadConverted=this.isLeadConverted(),this.campaign=this._detectCampaign(),this.referrer=this._detectReferrer(),this._removeCampaignParamsFromUrl(),this.storage.setValue(y.FLAG_RESPONSIVE_MODE,this.isMobile),this.storage.save()},(t=[{key:"setVisite
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 28 30 2c 6e 2e 62 52 29 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 22 61 64 69 64 22 29 3b 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 2c 65 29 7d 7d 7d 5d 29 26 26 67 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 3b 76 61 72 20 65 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 72 65 74 75 72 6e 20 68 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 Data Ascii: var e=(0,n.bR)(window.location.href,"adid");window.history.replaceState(null,window.document.title,e)}}}])&&g(e.prototype,t),Object.defineProperty(e,"prototype",{writable:!1}),e;var e,t}();function h(e){return h="function"==typeof Symbol&&"symbol"==typeof
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 54 72 61 63 6b 69 6e 67 28 69 2c 63 2c 6f 29 2c 69 2e 63 6f 6e 76 65 72 73 69 6f 6e 53 65 74 74 69 6e 67 73 2e 6c 69 6e 6b 73 26 26 75 2e 73 65 74 75 70 4c 69 6e 6b 54 72 61 63 6b 69 6e 67 28 69 2c 63 2c 6f 29 29 2c 28 30 2c 6e 2e 69 54 29 28 22 61 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 6e 2e 71 32 29 28 65 2c 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 69 6e 73 74 61 70 61 67 65 41 6e 63 68 6f 72 43 6c 69 63 6b 29 74 72 79 7b 77 69 6e 64 6f 77 2e 69 6e 73 74 61 70 61 67 65 41 6e 63 68 6f 72 43 6c 69 63 6b 28 65 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 77 68 Data Ascii: Tracking(i,c,o),i.conversionSettings.links&&u.setupLinkTracking(i,c,o)),(0,n.iT)("a").forEach((function(e){(0,n.q2)(e,"click",(function(){if("function"==typeof window.instapageAnchorClick)try{window.instapageAnchorClick(e)}catch(e){console.error("Error wh
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 22 6d 61 69 6e 22 29 2c 74 68 69 73 2e 61 31 31 79 57 69 64 67 65 74 57 72 61 70 70 65 72 3d 28 30 2c 6e 2e 69 54 29 28 22 2e 61 31 31 79 2d 77 69 64 67 65 74 2d 77 72 61 70 70 65 72 22 29 5b 30 5d 2c 74 68 69 73 2e 61 31 31 79 54 72 69 67 67 65 72 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 2d 74 72 69 67 67 65 72 22 29 5b 30 5d 2c 74 68 69 73 2e 61 31 31 79 57 69 64 67 65 74 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 22 29 5b 30 5d 2c 74 68 69 73 2e 61 31 31 79 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 3d 28 30 2c 6e 2e 69 54 29 28 22 23 61 31 31 79 2d 77 69 64 67 65 74 2d 63 6f 6e 74 72 6f 6c 73 22 29 5b 30 5d 2c 74 68 69 73 2e 64 65 63 72 65 61 73 65 54 65 78 74 54 72 69 67 67 65 72 3d 28 30 2c 6e 2e Data Ascii: "main"),this.a11yWidgetWrapper=(0,n.iT)(".a11y-widget-wrapper")[0],this.a11yTrigger=(0,n.iT)("#a11y-widget-trigger")[0],this.a11yWidget=(0,n.iT)("#a11y-widget")[0],this.a11yWidgetControls=(0,n.iT)("#a11y-widget-controls")[0],this.decreaseTextTrigger=(0,n.
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 30 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 31 33 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 7c 7c 65 2e 5f 73 68 6f 77 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 28 29 2c 32 37 3d 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 65 2e 5f 68 69 64 65 57 69 64 67 65 74 43 6f 6e 74 72 6f 6c 73 28 74 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 68 61 6e 64 6c 65 43 6f 6e 74 72 6f 6c 73 4b 65 79 62 6f 61 72 64 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 30 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 31 33 21 3d 3d 74 2e 6b 65 79 43 6f 64 65 7c 7c 65 2e 5f 68 61 6e 64 6c 65 4c 65 76 65 6c 43 68 61 6e 67 65 28 74 29 2c 32 37 3d 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 65 2e 5f 68 69 64 65 57 69 64 67 65 74 43 6f 6e Data Ascii: ue:function(t){0!==t.keyCode&&13!==t.keyCode\|\|e._showWidgetControls(),27===t.keyCode&&e._hideWidgetControls(t)}},{key:"_handleControlsKeyboardEvents",value:function(t){0!==t.keyCode&&13!==t.keyCode\|\|e._handleLevelChange(t),27===t.keyCode&&e._hideWidgetCon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	172.64.146.38	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	368	OUT	GET /js/utils.8e682833b85e4bb96d30.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:50 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:50 GMT last-modified: Wed, 19 Jun 2024 09:15:29 GMT etag: W/"96eedb6eb01080b8f02c74d282bfd247" vary: Accept-Encoding x-goog-generation: 1718788529177370 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 19919 x-goog-hash: crc32c=d4SC3w== x-goog-hash: md5=lu7bbrAQgLjwLHTSgr/SRw== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0NpR6XhdEGIRafyfTlrJuTxgOGB5JzsqGrvib1ItlANxd2AEgXjowc7omIH6o2aR1irOdqi2PWqjGg CF-Cache-Status: HIT Age: 6167938 Server: cloudflare CF-RAY: 8baee51bcc7c19bf-EWR
2024-08-29 19:19:50 UTC	593	IN	Data Raw: 37 63 35 65 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 2c 72 3d 7b 35 36 32 37 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e 61 4e 28 74 29 7d 2c 74 6f 55 74 66 38 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 3d 2d 31 2c 6e 3d 74 Data Ascii: 7c5e(()=>{var t,r={5627:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isNaN(t)},toUtf8:function(t){var r,e=-1,n=t
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 33 5d 29 3b 29 6f 2e 70 75 73 68 28 28 33 26 69 5b Data Ascii: .alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt(++n)],64!==i[3]);)o.push((3&i[
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 3e 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 63 6f 64 65 28 74 29 7d 7d 7d 2c 33 39 33 30 3a 28 74 2c 72 2c 65 29 Data Ascii: >191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){return r.decode(t)}}},3930:(t,r,e)
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 52 69 3a 28 29 3d 3e 62 2c 55 4e 3a 28 29 3d 3e 53 2e 55 4e 2c 4a 4c 3a 28 29 3d 3e 67 2c 77 6d 3a 28 29 3d 3e 64 2c 6a 42 3a 28 29 3d 3e 78 2c 46 72 3a 28 29 3d 3e 76 2c 72 77 3a 28 29 3d 3e 68 2c 63 4b 3a 28 29 3d 3e 53 2e 63 4b 2c 4f 52 3a 28 29 3d 3e 66 2c 76 3a 28 29 3d 3e 53 2e 76 2c 69 54 3a 28 29 3d 3e 53 2e 69 54 2c 62 52 3a 28 29 3d 3e 6d 2c 4a 79 3a 28 29 3d 3e 5f 2c 54 56 3a 28 29 3d 3e 77 2c 6e 46 3a 28 29 3d 3e 70 2c 4d 4d 3a 28 29 3d 3e 79 7d 29 2c 65 28 32 35 31 34 29 2c 65 28 38 32 38 33 29 2c 65 28 35 33 34 29 2c 65 28 36 36 31 32 29 2c 65 28 36 34 39 35 29 2c 65 28 36 39 35 37 29 2c 65 28 31 30 32 38 29 2c 65 28 33 32 31 29 2c 65 28 39 35 37 30 29 2c 65 28 36 32 35 33 29 2c 65 28 34 34 34 31 29 2c 65 28 38 39 32 39 29 2c 65 28 31 35 35 Data Ascii: Ri:()=>b,UN:()=>S.UN,JL:()=>g,wm:()=>d,jB:()=>x,Fr:()=>v,rw:()=>h,cK:()=>S.cK,OR:()=>f,v:()=>S.v,iT:()=>S.iT,bR:()=>m,Jy:()=>_,TV:()=>w,nF:()=>p,MM:()=>y}),e(2514),e(8283),e(534),e(6612),e(6495),e(6957),e(1028),e(321),e(9570),e(6253),e(4441),e(8929),e(155
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 29 2e 65 6d 69 74 28 22 63 72 61 64 6c 65 52 65 61 64 79 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 6e 2e 6c 2e 67 65 74 28 29 2e 65 6d 69 74 28 22 66 65 61 74 75 72 65 52 65 61 64 79 22 2c 74 29 2c 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 3d 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 7c 7c 5b 5d 2c 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 2e 69 6e 63 6c 75 64 65 73 28 74 29 7c 7c 77 69 6e 64 6f 77 2e 5f 5f 66 65 61 74 75 72 65 73 52 65 61 64 79 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 Data Ascii: ).emit("cradleReady")}function c(t){n.l.get().emit("featureReady",t),window.__featuresReady=window.__featuresReady\|\|[],window.__featuresReady.includes(t)\|\|window.__featuresReady.push(t)}function f(t){var r=function(){try{return t.apply(void 0,arguments)}c
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 72 29 7b 76 61 72 20 65 3d 61 28 74 2e 73 70 6c 69 74 28 22 3f 22 29 2c 32 29 2c 6e 3d 65 5b 30 5d 2c 6f 3d 65 5b 31 5d 3b 69 66 28 6f 29 7b 76 61 72 20 69 3d 22 22 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2c 22 3d 22 29 2c 75 3d 6f 2e 73 70 6c 69 74 28 2f 5b 26 3b 5d 2f 67 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 69 2c 30 29 7d 29 29 3b 72 65 74 75 72 6e 20 6e 2b 28 75 2e 6c 65 6e 67 74 68 3e 30 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 75 2e 6a 6f 69 6e 28 22 26 22 29 29 3a 22 22 29 7d 72 65 74 75 72 6e Data Ascii: replace(/\+/g," ")):null}function m(t,r){var e=a(t.split("?"),2),n=e[0],o=e[1];if(o){var i="".concat(encodeURIComponent(r),"="),u=o.split(/[&;]/g).filter((function(t){return-1===t.lastIndexOf(i,0)}));return n+(u.length>0?"?".concat(u.join("&")):"")}return
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 72 29 7c 7c 21 72 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 6e 3d 72 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 6f 3d 6e 2e 63 61 6c 6c 28 72 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 72 29 7d 28 72 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 28 65 29 Data Ascii: var e=function(r,e){if("object"!=t(r)\|\|!r)return r;var n=r[Symbol.toPrimitive];if(void 0!==n){var o=n.call(r,"string");if("object"!=t(o))return o;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(r)}(r);return"symbol"==t(e)
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c 65 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6c 61 73 73 4c 69 73 74 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 74 68 69 73 29 7d 7d 29 2c 77 69 6e 64 6f 77 2e 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 26 26 21 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 26 26 28 44 4f 4d 54 6f 6b 65 6e 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: type",{writable:!1}),t;var t,e}(),"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return new a(this)}}),window.DOMTokenList&&!DOMTokenList.prototype.replace&&(DOMTokenList.prototype.replace=a.prototype.
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 6e 28 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 29 26 26 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 41 6c 6c 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 5b 74 5d 3d 5b 5d 7d 7d 5d 2c 72 26 26 6f 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 74 3b 76 61 72 20 74 2c 72 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b Data Ascii: ;"object"===n(this.events[t])&&this.events[t].forEach((function(t){return t.apply(r,o)}))}},{key:"removeAllListeners",value:function(t){this.events[t]=[]}}],r&&o(t.prototype,r),Object.defineProperty(t,"prototype",{writable:!1}),t;var t,r}();function u(t){
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 6e 2e 65 6e 75 6d 65 72 Data Ascii: eof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},n(t)}function o(t,r){for(var e=0;e<r.length;e++){var n=r[e];n.enumer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	172.64.146.38	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	372	OUT	GET /js/LazyImage.a698675f6fd38cb87757.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:50 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 expires: Fri, 29 Aug 2025 19:19:50 GMT last-modified: Wed, 19 Jun 2024 09:15:27 GMT etag: W/"67ce7db2b9d01eb08e0ee3f7eddd1bbf" vary: Accept-Encoding x-goog-generation: 1718788527554276 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1162 x-goog-hash: crc32c=YCOE0Q== x-goog-hash: md5=Z859srnQHrCODuP37d0bvw== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0Nr_1CuJU6loHvMwwZVYizdYJuowZRvrWRXHR-cjvDSFVLnQjv1E0XV2gxSbu1dp2ExXBzo CF-Cache-Status: HIT Age: 6167938 Server: cloudflare CF-RAY: 8baee51d8cb41a34-EWR
2024-08-29 19:19:50 UTC	601	IN	Data Raw: 39 63 62 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 30 5d 2c 7b 38 32 33 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 34 35 39 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: 9cb"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[180],{8239:(t,r,e)=>{var n=e(4594);function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof
2024-08-29 19:19:50 UTC	1369	IN	Data Raw: 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 65 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 65 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 65 29 3f 61 28 74 2c 72 29 3a 76 6f 69 64 20 30 7d 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d Data Ascii: slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e)?a(t,r):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-
2024-08-29 19:19:50 UTC	544	IN	Data Raw: 6f 66 20 72 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 74 29 7d 2c 72 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5b 5d 2e 63 6f 6e 63 61 74 28 69 28 28 30 2c 6e 2e 69 54 29 28 22 2e 69 6d 67 2d 6c 61 7a 79 22 29 29 2c 69 28 28 30 2c 6e 2e 69 54 29 28 22 2e 69 66 72 61 6d 65 2d 6c 61 7a 79 22 29 29 29 3b 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 29 7b 76 61 72 20 72 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 73 2c 66 29 3b 74 2e 66 6f 72 45 61 63 Data Ascii: of r))throw new TypeError("Cannot call a class as a function")}(this,t)},r=[{key:"init",value:function(){var t=[].concat(i((0,n.iT)(".img-lazy")),i((0,n.iT)(".iframe-lazy")));if("IntersectionObserver"in window){var r=new IntersectionObserver(s,f);t.forEac
2024-08-29 19:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 19:19:50 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=137823 Date: Thu, 29 Aug 2024 19:19:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	104.18.38.43	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:50 UTC	793	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/8baee50bef5442a7 HTTP/1.1 Host: hkwyolaw.ency.cloud Connection: keep-alive Content-Length: 15784 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://hkwyolaw.ency.cloud Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sg463LRxea7GCkT0n69snZu9C1s3PW.nzHe3WmdlWcE-1724959187-1.0.1.1-erCJ6Kk62pWu1pNPxc3Nv6YNLeq8PGylcauOXWg5jXliNI.QKln5MCYCGGBfdr5RoBbiQAQSE.VFQSrKoHI5yw
2024-08-29 19:19:50 UTC	15784	OUT	Data Raw: 7b 22 77 70 22 3a 22 4b 36 57 55 74 4a 51 73 74 34 57 74 37 39 6b 51 64 51 70 68 65 55 4a 50 68 6e 6c 68 6d 4d 6d 76 76 4a 73 51 62 46 68 38 56 50 31 56 30 57 68 61 38 4c 72 6b 56 34 51 79 68 37 64 57 41 53 36 36 68 6e 24 76 68 4e 68 76 50 76 57 51 68 58 76 51 49 6b 59 55 24 34 36 75 54 4f 55 38 56 5a 36 6c 6e 42 79 70 39 41 43 55 49 5a 74 47 6c 7a 51 42 46 38 24 6d 68 74 57 57 45 6d 61 4a 75 53 68 2d 41 53 30 33 75 68 33 55 39 61 68 4a 47 57 68 6d 55 4a 4a 55 5a 37 55 6d 68 51 56 68 65 34 63 68 51 7a 75 68 69 35 73 6e 41 36 4c 51 6e 24 53 57 68 4a 35 75 68 4a 6b 72 65 68 72 4a 68 51 75 58 30 77 57 4f 79 6c 50 4a 41 4a 51 33 49 6c 36 46 74 5a 52 6f 33 38 68 4d 55 4a 6d 66 48 36 68 73 63 36 56 39 30 38 32 58 41 68 72 6f 33 24 5a 4d 6e 55 68 77 24 4d 30 6d Data Ascii: {"wp":"K6WUtJQst4Wt79kQdQpheUJPhnlhmMmvvJsQbFh8VP1V0Wha8LrkV4Qyh7dWAS66hn$vhNhvPvWQhXvQIkYU$46uTOU8VZ6lnByp9ACUIZtGlzQBF8$mhtWWEmaJuSh-AS03uh3U9ahJGWhmUJJUZ7UmhQVhe4chQzuhi5snA6LQn$SWhJ5uhJkrehrJhQuX0wWOylPJAJQ3Il6FtZRo38hMUJmfH6hsc6V9082XAhro3$ZMnUhw$M0m
2024-08-29 19:19:50 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:50 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.hkwyolaw.ency.cloud; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=C00L8BQYBOlbPyf91oChVraFOAHXMw1CrbQZiiR3pVM-1724959190-1.2.1.1-TjVlMAKU_PE0rdoJA2SDU3XXKV89zclmuxj_LZI4gEhL42lerYWlPXR3CBkUnotcOamDQOwmNkCfP.U06bZgQ0kyS7bFItYpO467s_ds8W9hCVldJHLqPWam.XETyUZq_plZA2kk2.J3Ye4NaivU0q4Tfb2gwap17Vgkq2OE_qrOnOP7Gz64XJInzi1Zl1AAPMizgtEVsQJhuienl9AlALq.ghYSb3tCanQAdX9.1nKb6phD8k3GbBq1k.W3OZF0kRNly1bpAshZY8mGir8Aw8pXJjOqJQDqvxvE8BQL7wpqszcB5O_cs6dYf5Hfb4kvHHze1lDopbRaWabfQeklnb3MSeKMWOTxE6jpPhZgdy82OT858cyv0t0bi2moRVb7; Path=/; Expires=Fri, 29-Aug-25 19:19:50 GMT; Domain=.hkwyolaw.ency.cloud; HttpOnly; Secure; SameSite=None; Partitioned Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8baee51f3a41c34e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	104.21.51.207	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:51 UTC	482	OUT	OPTIONS /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://hkwyolaw.ency.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:51 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:51 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://hkwyolaw.ency.cloud access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qKkgrvvIRZvul%2B%2FYuZUSSxi7KNkeXpZgwAjS7BcpwCN4XjwQP%2F7gIO4w%2FxXLYtWeuUcRh8r52e7%2BVhIyXrbiPOiLadu3Q5uU4L0O4c8GPRNIFRmlC8yBG6kPgfc%2BQM9KSeSTLojnV9OGNQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee521dcf2435b-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49762	104.21.51.207	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:51 UTC	595	OUT	POST /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive Content-Length: 1937 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://hkwyolaw.ency.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:51 UTC	1937	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 76 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6b 77 79 6f 6c 61 77 2e 65 6e 63 79 2e 63 6c 6f 75 64 2f 22 2c 22 70 61 67 65 22 3a 22 48 61 74 68 61 77 61 79 20 26 20 4b 75 6e 7a 2c 20 4c 4c 50 22 2c 22 65 69 64 22 3a 22 39 37 33 61 61 35 30 37 2d 37 63 64 33 2d 34 35 38 34 2d 38 65 33 31 2d 33 39 62 64 65 36 62 64 66 62 39 38 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 31 2e 30 22 2c 22 74 6e 61 22 3a 22 69 6e 73 74 61 70 61 67 65 2d 73 70 22 2c 22 61 69 64 22 3a 22 69 6e 73 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pv","url":"https://hkwyolaw.ency.cloud/","page":"Hathaway & Kunz, LLP","eid":"973aa507-7cd3-4584-8e31-39bde6bdfb98","tv":"js-3.1.0","tna":"instapage-sp","aid":"ins
2024-08-29 19:19:52 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:52 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://hkwyolaw.ency.cloud access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HPVnWvPE39%2Fy%2BqTqoFv4ZWbqik2fLtMCXyJkAoQGt3%2F8V6%2BEB8irBT%2FZzX2MogafYL22Vt84CgXluJFjFrdkxchBpC3%2BP5zunXAYDEPhN3EouWJaYX8BRptcUtKbAWkLCOtF4%2Bodq1Yy4g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee525dac57d0b-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 19:19:52 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-29 19:19:52 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=137774 Date: Thu, 29 Aug 2024 19:19:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-29 19:19:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49766	172.64.146.38	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:52 UTC	344	OUT	GET /js/cm.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:52 UTC	767	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-goog-generation: 1656555137097208 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 17906 x-goog-hash: crc32c=ZpZBfw== x-goog-hash: md5=jkZtmPofdGx0sbQJ0goM8w== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ABPtcPpQ_LHM-K8bazeZGCR0h28B-h-Typ8hD3VAz0-cQkVr-V1-3PfT6OQtuuXRZOwBtdj0X_A expires: Fri, 29 Aug 2025 19:19:52 GMT Cache-Control: public, max-age=31536000 last-modified: Thu, 30 Jun 2022 02:12:17 GMT etag: W/"8e466d98fa1f746c74b1b409d20a0cf3" vary: Accept-Encoding CF-Cache-Status: HIT Age: 72141 Server: cloudflare CF-RAY: 8baee52b5df2c340-EWR
2024-08-29 19:19:52 UTC	602	IN	Data Raw: 37 63 36 37 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 36 32 31 33 3a 74 3d 3e 7b 76 61 72 20 72 3d 7b 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6c 6f 6f 6b 75 70 3a 6e 75 6c 6c 2c 69 65 3a 2f 4d 53 49 45 20 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 69 65 6f 3a 2f 4d 53 49 45 20 5b 36 37 5d 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 63 68 65 63 6b 49 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 4e 75 6d 62 65 72 2e 69 73 4e Data Ascii: 7c67(()=>{var t={6213:t=>{var r={alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",lookup:null,ie:/MSIE /.test(navigator.userAgent),ieo:/MSIE [67]/.test(navigator.userAgent),checkIsNaN:function(t){return void 0===t\|\|Number.isN
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 68 2c 72 2e 6c 6f 6f 6b 75 70 3d 7b 7d 3b 2b 2b 6e 3c 65 3b 29 72 2e 6c 6f 6f 6b 75 70 5b 72 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 6e 29 5d 3d 6e 3b 6e 3d 2d 31 7d 66 6f 72 28 65 3d 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 3c 65 26 26 28 69 5b 30 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 6e 29 5d 2c 69 5b 31 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 6f 2e 70 75 73 68 28 69 5b 30 5d 3c 3c 32 7c 69 5b 31 5d 3e 3e 34 29 2c 69 5b 32 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 28 2b 2b 6e 29 5d 2c 36 34 21 3d 3d 69 5b 32 5d 29 26 26 28 6f 2e 70 75 73 68 28 28 31 35 26 69 5b 31 5d 29 3c 3c 34 7c 69 5b 32 5d 3e 3e 32 29 2c 69 5b 33 5d 3d 72 2e 6c 6f 6f 6b 75 70 5b 74 2e 63 68 61 72 41 74 Data Ascii: h,r.lookup={};++n<e;)r.lookup[r.alphabet.charAt(n)]=n;n=-1}for(e=t.length;++n<e&&(i[0]=r.lookup[t.charAt(n)],i[1]=r.lookup[t.charAt(++n)],o.push(i[0]<<2\|i[1]>>4),i[2]=r.lookup[t.charAt(++n)],64!==i[2])&&(o.push((15&i[1])<<4\|i[2]>>2),i[3]=r.lookup[t.charAt
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 5b 6f 2b 2b 5d 29 3a 65 5b 6f 5d 3e 31 39 31 26 26 65 5b 6f 5d 3c 32 32 34 3f 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 33 31 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3a 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 31 35 26 65 5b 6f 2b 2b 5d 29 3c 3c 31 32 7c 28 36 33 26 65 5b 6f 2b 2b 5d 29 3c 3c 36 7c 36 33 26 65 5b 6f 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 62 61 73 65 36 34 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 65 6e 63 6f 64 65 28 74 29 7d 2c 62 61 73 65 36 34 44 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 Data Ascii: tring.fromCharCode(e[o++]):e[o]>191&&e[o]<224?a+=String.fromCharCode((31&e[o++])<<6\|63&e[o++]):a+=String.fromCharCode((15&e[o++])<<12\|(63&e[o++])<<6\|63&e[o++]);return a}};t.exports={base64Encode:function(t){return r.encode(t)},base64Decode:function(t){ret
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 79 3a 22 69 74 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 5b 74 5d 7c 7c 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 72 65 70 6c 61 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 74 68 69 73 2e 61 64 64 28 72 29 7d 7d 5d 2c 61 26 26 74 28 69 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 6f 7d 28 29 2c 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c Data Ascii: y:"item",value:function(t){return this.element.className.split(/\s+/)[t]\|\|null}},{key:"replace",value:function(t,r){this.remove(t),this.add(r)}}],a&&t(i.prototype,a),Object.defineProperty(i,"prototype",{writable:!1}),o}(),"classList"in Element.prototype\|\|
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 65 28 32 37 34 29 2c 65 28 39 34 33 39 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 34 39 34 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 39 39 31 34 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 38 32 32 39 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 37 32 35 30 29 3b 76 61 72 20 6e 3d 65 28 36 33 38 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 38 33 38 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 65 28 34 34 35 37 29 3b 76 61 72 20 6e 3d 65 28 31 30 39 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 37 31 35 30 3a 28 74 2c 72 2c 65 Data Ascii: e(274),e(9439);var n=e(6386);t.exports=n.Number},4945:(t,r,e)=>{e(9914);var n=e(6386);t.exports=n.Object.assign},8229:(t,r,e)=>{e(7250);var n=e(6386);t.exports=n.Object.keys},8385:(t,r,e)=>{e(4457);var n=e(1099);t.exports=n("String","padEnd")},7150:(t,r,e
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 79 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 35 31 35 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 35 35 38 37 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 32 33 35 35 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 Data Ascii: y.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},5151:(t,r,e)=>{var n=e(3083),o=e(5587),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},2355:(t,r,e)=>{"
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 53 5b 4f 5d 3d 6d 3b 65 6c 73 65 20 69 66 28 6d 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 62 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 4f 3b 63 61 73 65 20 32 3a 63 28 53 2c 62 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 20 37 3a 63 28 53 2c 62 29 7d 72 65 74 75 72 6e 20 70 3f 2d 31 3a 6f 7c 7c 66 3f 66 3a 53 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 66 6f 72 45 61 63 68 3a 66 28 30 29 2c 6d 61 70 3a 66 28 31 29 2c 66 69 6c 74 65 72 3a 66 28 32 29 2c 73 6f 6d 65 3a 66 28 33 29 2c 65 76 65 72 79 3a 66 28 34 29 2c 66 69 6e 64 3a 66 28 35 29 2c 66 69 6e 64 49 6e 64 65 78 3a 66 28 36 29 2c 66 69 6c 74 65 72 52 Data Ascii: S[O]=m;else if(m)switch(t){case 3:return!0;case 5:return b;case 6:return O;case 2:c(S,b)}else switch(t){case 4:return!1;case 7:c(S,b)}return p?-1:o\|\|f?f:S}};t.exports={forEach:f(0),map:f(1),filter:f(2),some:f(3),every:f(4),find:f(5),findIndex:f(6),filterR
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 38 30 35 36 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 33 30 38 33 29 2c 6f 3d 65 28 38 35 35 36 29 2c 69 3d 65 28 33 39 35 37 29 2c 61 3d 65 28 32 30 38 33 29 2c 73 3d 65 28 37 39 37 38 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 2c 75 3d 6e 2e 4f 62 6a 65 63 74 2c 63 3d 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 65 2c 6e 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 8056:(t,r,e)=>{var n=e(3083),o=e(8556),i=e(3957),a=e(2083),s=e(7978)("toStringTag"),u=n.Object,c="Arguments"==a(function(){return arguments}());t.exports=o?a:function(t){var r,e,n;return void 0===t?"Undefined":null===t?"Null":"string"==typeof(e=function(t
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 61 3d 6e 28 72 29 3b 61 20 69 6e 20 74 3f 6f 2e 66 28 74 2c 61 2c 69 28 30 2c 65 29 29 3a 74 5b 61 5d 3d 65 7d 7d 2c 37 33 35 34 3a 28 74 2c 72 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 38 39 37 32 29 2c 6f 3d 65 28 36 39 37 29 2c 69 3d 65 28 37 31 34 31 29 2c 61 3d 65 28 32 37 31 39 29 2c 73 3d 65 28 33 39 35 37 29 2c 75 3d 65 28 35 39 37 37 29 2c 63 3d 65 28 36 34 33 39 29 2c 66 3d 65 28 34 37 33 30 29 2c 70 3d 65 28 37 31 31 34 29 2c 6c 3d 65 28 36 37 38 35 29 2c 68 3d 65 28 34 33 33 39 29 2c 76 3d 65 28 37 39 37 38 29 2c 67 3d 65 28 35 31 39 36 29 2c 64 3d 65 28 32 34 36 36 29 2c 79 3d 61 2e 50 52 4f 50 45 52 2c 62 3d 61 2e 43 Data Ascii: .exports=function(t,r,e){var a=n(r);a in t?o.f(t,a,i(0,e)):t[a]=e}},7354:(t,r,e)=>{"use strict";var n=e(8972),o=e(697),i=e(7141),a=e(2719),s=e(3957),u=e(5977),c=e(6439),f=e(4730),p=e(7114),l=e(6785),h=e(4339),v=e(7978),g=e(5196),d=e(2466),y=a.PROPER,b=a.C
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 74 29 3a 7b 7d 7d 7d 2c 36 34 35 33 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 3d 65 28 37 32 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 6e 61 76 69 67 61 74 6f 72 22 2c 22 75 73 65 72 41 67 65 6e 74 22 29 7c 7c 22 22 7d 2c 33 31 37 31 3a 28 74 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 6e 2c 6f 2c 69 3d 65 28 33 30 38 33 29 2c 61 3d 65 28 36 34 35 33 29 2c 73 3d 69 2e 70 72 6f 63 65 73 73 2c 75 3d 69 2e 44 65 6e 6f 2c 63 3d 73 26 26 73 2e 76 65 72 73 69 6f 6e 73 7c 7c 75 26 26 75 2e 76 65 72 73 69 6f 6e 2c 66 3d 63 26 26 63 2e 76 38 3b 66 26 26 28 6f 3d 28 6e 3d 66 2e 73 70 6c 69 74 28 22 2e 22 29 29 5b 30 5d 3e 30 26 26 6e 5b 30 5d 3c 34 3f 31 3a 2b 28 6e 5b 30 5d 2b 6e 5b 31 5d 29 29 2c 21 6f 26 26 61 26 26 28 21 28 6e 3d 61 2e 6d 61 74 63 68 28 2f Data Ascii: t):{}}},6453:(t,r,e)=>{var n=e(727);t.exports=n("navigator","userAgent")\|\|""},3171:(t,r,e)=>{var n,o,i=e(3083),a=e(6453),s=i.process,u=i.Deno,c=s&&s.versions\|\|u&&u.version,f=c&&c.v8;f&&(o=(n=f.split("."))[0]>0&&n[0]<4?1:+(n[0]+n[1])),!o&&a&&(!(n=a.match(/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49767	172.64.146.38	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:52 UTC	367	OUT	GET /js/sptw.2fff3c07e91a81e507a4.js HTTP/1.1 Host: g.fastcdn.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:52 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-goog-generation: 1718788529050056 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 20505 x-goog-hash: crc32c=ddebnQ== x-goog-hash: md5=bvf0kBfoGQ8io4n0oEYvrg== x-goog-storage-class: MULTI_REGIONAL x-guploader-uploadid: ACJd0Nqu6eMYvI5wFFfz62Th-HKqUUdU_ZnD_D947AAW_YVapo4qcreA87OSYryS8K4dfXGQO8vZpzOkYA expires: Fri, 29 Aug 2025 19:19:52 GMT Cache-Control: public, max-age=31536000 last-modified: Wed, 19 Jun 2024 09:15:29 GMT etag: W/"6ef7f49017e8190f22a389f4a0462fae" vary: Accept-Encoding Age: 5996238 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8baee52b8fa9c344-EWR
2024-08-29 19:19:52 UTC	593	IN	Data Raw: 37 63 35 65 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 38 34 31 32 3a 74 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 2c 65 28 Data Ascii: 7c5e(()=>{var t={8412:t=>{function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},e(
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 74 2c 65 2c 6e 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 72 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 65 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 72 2c Data Ascii: rEach((function(e){o(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,r,
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 2b 65 2b 22 29 7d 2c 20 24 7b 6e 61 76 54 69 6d 69 6e 67 28 22 2b 65 2b 22 29 7d 2c 20 30 29 22 29 29 7d 29 2c 7b 7d 29 7d 29 2e 72 65 70 6c 61 63 65 28 2f 5c 22 28 5c 24 5b 5c 24 5c 73 2c 5c 77 7b 7d 28 29 5d 2b 29 5c 22 2f 67 2c 22 24 31 22 29 7d 2c 67 65 74 53 6e 6f 77 70 6c 6f 77 50 65 72 66 6f 72 6d 61 6e 63 65 54 69 6d 69 6e 67 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 6f 7a 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 6d 73 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 74 2e 77 65 62 6b 69 74 50 65 72 66 6f 72 6d 61 6e 63 65 3b 69 66 28 65 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 2e 74 69 6d 69 6e 67 29 61 28 6e 2c 69 29 26 26 6e 75 Data Ascii: +e+")}, ${navTiming("+e+")}, 0)"))}),{})}).replace(/\"(\$[\$\s,\w{}()]+)\"/g,"$1")},getSnowplowPerformanceTimingContext:function(t){var e=t.performance\|\|t.mozPerformance\|\|t.msPerformance\|\|t.webkitPerformance;if(e){var r={};for(var n in e.timing)a(n,i)&&nu
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 5d 2c 75 3d 2d 31 3b 69 66 28 65 2e 69 65 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 3b 2b 2b 75 3c 61 3b 29 72 3d 69 5b 75 5d 2c 6e 3d 69 5b 2b 2b 75 5d 2c 73 5b 30 5d 3d 72 3e 3e 32 2c 73 5b 31 5d 3d 28 33 26 72 29 3c 3c 34 7c 6e 3e 3e 34 2c 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6e 29 3f 28 73 5b 32 5d 3d 36 34 2c 73 5b 33 5d 3d 36 34 29 3a 28 6f 3d 69 5b 2b 2b 75 5d 2c 73 5b 32 5d 3d 28 31 35 26 6e 29 3c 3c 32 7c 6f 3e 3e 36 2c 73 5b 33 5d 3d 65 2e 63 68 65 63 6b 49 73 4e 61 4e 28 6f 29 3f 36 34 3a 36 33 26 6f 29 2c 63 2e 70 75 73 68 28 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 30 5d 29 2c 65 2e 61 6c 70 68 61 62 65 74 2e 63 68 61 72 41 74 28 73 5b 31 5d 29 2c 65 2e 61 6c 70 Data Ascii: [null,null,null,null],u=-1;if(e.ie){for(var c=[];++u<a;)r=i[u],n=i[++u],s[0]=r>>2,s[1]=(3&r)<<4\|n>>4,e.checkIsNaN(n)?(s[2]=64,s[3]=64):(o=i[++u],s[2]=(15&n)<<2\|o>>6,s[3]=e.checkIsNaN(o)?64:63&o),c.push(e.alphabet.charAt(s[0]),e.alphabet.charAt(s[1]),e.alp
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 35 37 29 2c 72 28 31 30 32 38 29 2c 72 28 33 32 31 29 2c 72 28 39 35 37 30 29 2c 72 28 36 32 35 33 29 2c 72 28 34 34 34 31 29 2c 72 28 38 39 32 39 29 2c 72 28 31 35 35 34 29 2c 72 28 37 36 32 31 29 2c 72 28 35 36 32 37 29 3b 76 61 72 20 6e 3d 72 28 37 34 37 39 29 7d 2c 37 36 32 31 3a 28 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 Data Ascii: 57),r(1028),r(321),r(9570),r(6253),r(4441),r(8929),r(1554),r(7621),r(5627);var n=r(7479)},7621:()=>{function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Sy
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 61 3d 30 3b 61 3c 65 3b 61 2b 2b 29 72 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 69 28 72 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 6e 28 74 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 6f 28 65 29 2c 22 20 22 29 29 7d 29 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 67 67 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3f 28 74 68 69 73 2e 72 65 6d 6f 76 65 28 74 29 2c 21 31 29 3a 28 74 68 69 73 2e 61 64 64 28 74 29 2c 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 74 61 69 6e 73 22 2c 76 61 Data Ascii: s.length,r=new Array(e),a=0;a<e;a++)r[a]=arguments[a];i(r,(function(e){t.element.className=n(t.element.className.replace(o(e)," "))}),this)}},{key:"toggle",value:function(t){return this.contains(t)?(this.remove(t),!1):(this.add(t),!0)}},{key:"contains",va
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 65 29 3f 65 3a 65 2b 22 22 7d 72 2e 64 28 65 2c 7b 6c 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: w new TypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==n(e)?e:e+""}r.d(e,{l:()=>f});var a=function(){return t=function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a func
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 73 28 65 29 3f 65 3a 65 2b 22 22 7d 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 65 3d 74 2c 72 3d 5b 7b 6b 65 79 3a 22 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 65 76 65 6e 74 42 75 73 3d 6e Data Ascii: ve value.")}return String(t)}(t);return"symbol"==s(e)?e:e+""}var f=function(){function t(){!function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,t)}return e=t,r=[{key:"init",value:function(){window.__eventBus=n
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 32 29 2c 72 28 32 31 37 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4e 75 6d 62 65 72 7d 2c 31 33 31 37 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 38 35 37 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7d 2c 39 38 35 36 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 31 32 36 38 29 3b 76 61 72 20 6e 3d 72 28 38 33 35 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 4f 62 6a 65 63 74 2e 6b 65 79 73 7d 2c 33 38 38 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 28 36 37 31 30 29 3b 76 61 72 20 6e 3d 72 28 36 39 33 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 22 53 74 72 69 6e 67 22 2c 22 70 61 64 45 6e 64 22 29 7d 2c 36 35 31 32 3a 28 74 2c 65 2c 72 29 3d 3e 7b Data Ascii: 2),r(2178);var n=r(8355);t.exports=n.Number},1317:(t,e,r)=>{r(1857);var n=r(8355);t.exports=n.Object.assign},9856:(t,e,r)=>{r(1268);var n=r(8355);t.exports=n.Object.keys},3889:(t,e,r)=>{r(6710);var n=r(6931);t.exports=n("String","padEnd")},6512:(t,e,r)=>{
2024-08-29 19:19:52 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 75 6c 6c 3d 3d 73 5b 61 5d 26 26 69 2e 66 28 73 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6f 28 6e 75 6c 6c 29 7d 29 2c 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 61 5d 5b 74 5d 3d 21 30 7d 7d 2c 34 33 37 31 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3d 72 28 36 39 30 33 29 2c 6f 3d 72 28 35 34 34 36 29 2c 69 3d 6e 2e 53 74 72 69 6e 67 2c 61 3d 6e 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 61 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 7d 2c 38 33 36 30 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 Data Ascii: .prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},4371:(t,e,r)=>{var n=r(6903),o=r(5446),i=n.String,a=n.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},8360:(t,e,r)=>{"u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	34.36.17.181	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:52 UTC	360	OUT	GET /t/js/3/it.js HTTP/1.1 Host: cdn.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:52 UTC	715	IN	HTTP/1.1 200 OK x-goog-generation: 1686655294888925 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 55266 x-goog-hash: crc32c=JVvUKA== x-goog-hash: md5=7ukxGHBgcZqxejUt4kJODA== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes X-GUploader-UploadID: AHxI1nPtu7Br-PATTqdyP_LPlhTkkkXU_v3jSqHER9gKKNVZLn59YToonzyh2oKtGBruAhSBFg Server: UploadServer Date: Thu, 29 Aug 2024 19:11:59 GMT Age: 473 Last-Modified: Tue, 13 Jun 2023 11:21:34 GMT ETag: "eee931187060719ab17a352de2424e0c" Content-Type: text/javascript Content-Length: 55266 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:19:52 UTC	675	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 65 62 20 61 6e 61 6c 79 74 69 63 73 20 66 6f 72 20 53 6e 6f 77 70 6c 6f 77 20 76 33 2e 31 2e 30 20 28 68 74 74 70 3a 2f 2f 62 69 74 2e 6c 79 2f 73 70 2d 6a 73 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 31 20 53 6e 6f 77 70 6c 6f 77 20 41 6e 61 6c 79 74 69 63 73 20 4c 74 64 2c 20 32 30 31 30 20 41 6e 74 68 6f 6e 20 50 61 6e 67 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 20 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 Data Ascii: /! Web analytics for Snowplow v3.1.0 (http://bit.ly/sp-js) * Copyright 2021 Snowplow Analytics Ltd, 2010 Anthon Pang * Licensed under BSD-3-Clause */"use strict";!function(){function e(e,n){var t,r={};for(t in e)Object.prototype.hasOwnProperty.ca
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 30 2c 74 3d 30 2c 72 3d 5b 5d 3b 69 66 28 65 29 7b 65 3d 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 3b 64 6f 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 61 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 2b 29 2c 73 3d 6f 3c 3c 31 36 7c 69 3c 3c 38 7c 61 3b 6f 3d 73 3e 3e 31 38 26 36 33 2c 69 3d 73 3e 3e 31 32 26 36 33 2c 61 3d 73 3e 3e 36 26 36 33 2c 73 26 3d 36 33 2c 72 5b 74 2b 2b 5d 3d 64 65 2e 63 68 61 72 41 74 28 6f 29 2b 64 65 2e 63 68 61 72 41 74 28 69 29 2b 64 65 2e 63 68 61 72 41 74 28 61 29 2b 64 65 2e 63 68 61 72 41 74 28 73 29 7d 77 68 69 6c 65 28 6e Data Ascii: !e)return e;var n=0,t=0,r=[];if(e){e=unescape(encodeURIComponent(e));do{var o=e.charCodeAt(n++),i=e.charCodeAt(n++),a=e.charCodeAt(n++),s=o<<16\|i<<8\|a;o=s>>18&63,i=s>>12&63,a=s>>6&63,s&=63,r[t++]=de.charAt(o)+de.charAt(i)+de.charAt(a)+de.charAt(s)}while(n
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 3a 67 28 74 29 26 26 28 65 3d 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 29 29 29 7d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 28 74 5b 6f 5d 29 7d 2c 67 65 74 41 70 70 6c 69 63 61 62 6c 65 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3a 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 74 2e 67 65 74 4a 73 6f 6e 28 29 3b 72 3c 6f 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b Data Ascii: ilter((function(e){return JSON.stringify(e)===JSON.stringify(t)})):g(t)&&(e=e.filter((function(e){return JSON.stringify(e)===JSON.stringify(t)})))},o=0;o<t.length;o++)r(t[o])},getApplicableContexts:function(t){e:{for(var r=0,o=t.getJson();r<o.length;r++){
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 3d 28 65 3d 2f 5e 69 67 6c 75 3a 28 28 3f 3a 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 2e 29 2b 28 3f 3a 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 5d 2b 7c 5c 2a 29 29 5c 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 2d 5f 2e 5d 2b 7c 5c 2a 29 5c 2f 6a 73 6f 6e 73 63 68 65 6d 61 5c 2f 28 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 2d 28 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 7c 5c 2a 29 24 2f 2e 65 78 65 63 28 65 29 29 26 26 63 28 65 5b 31 5d 29 29 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 31 2c 36 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 69 66 28 65 3d 75 28 65 29 29 7b 76 61 72 20 6e 3d 65 5b 30 5d 3b 72 65 74 75 72 6e 20 35 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 63 28 6e 29 7d 72 Data Ascii: =(e=/^iglu:((?:(?:[a-zA-Z0-9-_]+\|\).)+(?:[a-zA-Z0-9-_]+\|\))\/([a-zA-Z0-9-_.]+\|\)\/jsonschema\/([1-9][0-9]\|\)-(0\|[1-9][0-9]\|\)-(0\|[1-9][0-9]\|\*)$/.exec(e))&&c(e[1]))return e.slice(1,6)}function l(e){if(e=u(e)){var n=e[0];return 5===e.length&&c(n)}r
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 26 26 65 29 7b 69 66 28 6e 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 77 28 6e 5b 74 5d 2c 65 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 65 5b 30 5d 2c 6e 5b 30 5d 29 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 31 3b 35 3e 74 3b 74 2b 2b 29 69 66 28 21 77 28 65 5b 74 5d 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 26 26 22 2a 22 3d 3d 3d 65 7c 7c 65 3d 3d 3d 6e 7d 66 75 6e Data Ascii: =e.split("."),n&&e){if(n.length!==e.length)return!1;for(var t=0;t<e.length;t++)if(!w(n[t],e[t]))return!1;return!0}return!1}(e[0],n[0]))return!1;for(var t=1;5>t;t++)if(!w(e[t],n[t]))return!1;return!0}return!1}function w(e,n){return e&&n&&"*"===e\|\|e===n}fun
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 7d 28 75 29 29 2c 65 2e 61 64 64 28 22 65 69 64 22 2c 66 65 2e 76 34 28 29 29 2c 65 2e 61 64 64 44 69 63 74 28 6c 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 7d 3a 22 74 74 6d 22 3d 3d 3d 65 2e 74 79 70 65 3f 7b 74 79 70 65 3a 22 74 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7d 3a 7b 74 79 70 65 3a 22 64 74 6d 22 2c 76 61 6c 75 65 3a 65 2e 76 61 6c 75 65 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 28 73 29 2c 65 2e 61 64 64 28 73 2e 74 79 70 Data Ascii: }(u)),e.add("eid",fe.v4()),e.addDict(l),s=function(e){return null==e?{type:"dtm",value:(new Date).getTime()}:"number"==typeof e?{type:"dtm",value:e}:"ttm"===e.type?{type:"ttm",value:e.value}:{type:"dtm",value:e.value\|\|(new Date).getTime()}}(s),e.add(s.typ
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 61 64 64 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 2c 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 6c 65 61 72 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 29 7d 2c 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 72 65 6d 6f 76 65 47 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 73 28 65 29 7d 7d 7d 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2c 6f 2c 65 2e 63 61 6c 6c 62 61 63 6b 29 3b 76 61 72 20 69 3d 24 28 24 28 7b 7d 2c 65 29 2c 7b 61 64 64 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3b 65 3d 65 2e 70 6c 75 67 69 6e 2c 6f 2e 70 75 73 68 28 65 29 2c 6e 75 6c Data Ascii: exts:function(e){c.addGlobalContexts(e)},clearGlobalContexts:function(){c.clearGlobalContexts()},removeGlobalContexts:function(e){c.removeGlobalContexts(e)}}}(null==n\|\|n,o,e.callback);var i=$($({},e),{addPlugin:function(e){var n,t;e=e.plugin,o.push(e),nul
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 74 43 6f 6e 74 65 6e 74 3a 65 2e 65 6c 65 6d 65 6e 74 43 6f 6e 74 65 6e 74 7d 3b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 7b 7d 29 3b 76 61 72 20 74 2c 72 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 28 6e 5b 74 5d 7c 7c 6e 75 6c 6c 21 3d 3d 65 5b 74 5d 26 26 76 6f 69 64 20 30 21 3d 3d 65 5b 74 5d 29 26 26 28 72 5b 74 5d 3d 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 53 28 7b 65 76 65 6e 74 3a 7b 73 63 68 65 6d 61 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 6c 69 6e 6b 5f 63 6c 69 63 6b 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 31 22 2c 64 61 74 61 3a 72 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 Data Ascii: tContent:e.elementContent};var n=void 0;void 0===n&&(n={});var t,r={};for(t in e)(n[t]\|\|null!==e[t]&&void 0!==e[t])&&(r[t]=e[t]);return S({event:{schema:"iglu:com.snowplowanalytics.snowplow/link_click/jsonschema/1-0-1",data:r}})}function x(e){return Numbe
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 79 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 6e 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 2b 22 2e 65 78 70 69 72 65 73 22 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 6e 2c 74 2c 72 2c 6f 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 22 29 2b 28 74 3f 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 31 65 33 2a 74 29 2e 74 6f 55 54 43 53 Data Ascii: y{var n=window.localStorage;return n.removeItem(e),n.removeItem(e+".expires"),!0}catch(e){return!1}}function U(e,n,t,r,o,i,a){return 1<arguments.length?document.cookie=e+"="+encodeURIComponent(null!=n?n:"")+(t?"; Expires="+new Date(+new Date+1e3*t).toUTCS
2024-08-29 19:19:52 UTC	1390	IN	Data Raw: 20 30 3b 69 66 28 45 28 41 29 29 76 61 72 20 6f 3d 6d 28 72 3d 68 2c 21 30 2c 65 29 2c 69 3d 6e 28 41 29 3b 65 6c 73 65 20 72 3d 76 28 41 5b 30 5d 29 2c 6f 3d 6d 28 72 2c 21 31 2c 65 29 2c 69 3d 31 3b 76 61 72 20 73 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 61 62 6f 72 74 28 29 2c 79 3d 21 31 7d 29 2c 75 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 41 2e 73 68 69 66 74 28 29 3b 74 26 26 42 28 4f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 2e 73 6c 69 63 65 28 30 2c 63 29 29 29 2c 64 28 29 7d 3b 69 66 28 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 6f 2e 72 65 61 64 79 53 74 61 74 65 26 26 Data Ascii: 0;if(E(A))var o=m(r=h,!0,e),i=n(A);else r=v(A[0]),o=m(r,!1,e),i=1;var s=setTimeout((function(){o.abort(),y=!1}),u),f=function(e){for(var n=0;n<e;n++)A.shift();t&&B(O,JSON.stringify(A.slice(0,c))),d()};if(o.onreadystatechange=function(){4===o.readyState&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49772	172.64.149.213	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:52 UTC	722	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/6790c32b9fc9/main.js? HTTP/1.1 Host: hkwyolaw.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sg463LRxea7GCkT0n69snZu9C1s3PW.nzHe3WmdlWcE-1724959187-1.0.1.1-erCJ6Kk62pWu1pNPxc3Nv6YNLeq8PGylcauOXWg5jXliNI.QKln5MCYCGGBfdr5RoBbiQAQSE.VFQSrKoHI5yw; instap-spses.6ed8=*; instap-spid.6ed8=ad7273e7-521a-47ee-9772-bd33cc61035d.1724959189.1.1724959189.1724959189.f1333eb3-1b25-45d0-950d-0203a94d862f
2024-08-29 19:19:53 UTC	368	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:52 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 7812 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8baee52bfd90192a-EWR
2024-08-29 19:19:53 UTC	1001	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 6d 2c 6e 2c 78 2c 79 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 2d 70 61 72 73 65 49 6e 74 28 55 28 33 33 37 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 33 39 31 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 39 30 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 34 36 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 36 32 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 34 32 30 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 34 31 34 29 29 2f 37 2b Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,g,h,m,n,x,y,A){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=-parseInt(U(337))/1(-parseInt(U(391))/2)+-parseInt(U(390))/3(parseInt(U(346))/4)+parseInt(U(362))/5*(-parseInt(U(420))/6)+-parseInt(U(414))/7+
2024-08-29 19:19:53 UTC	1369	IN	Data Raw: 2b 4b 2c 4c 29 2c 4a 2b 2b 29 3b 72 65 74 75 72 6e 20 46 3b 66 75 6e 63 74 69 6f 6e 20 47 28 4e 2c 4f 2c 61 33 29 7b 61 33 3d 62 2c 4f 62 6a 65 63 74 5b 61 33 28 33 37 34 29 5d 5b 61 33 28 33 36 37 29 5d 5b 61 33 28 34 30 38 29 5d 28 46 2c 4f 29 7c 7c 28 46 5b 4f 5d 3d 5b 5d 29 2c 46 5b 4f 5d 5b 61 33 28 34 31 37 29 5d 28 4e 29 7d 7d 2c 78 3d 56 28 34 32 32 29 5b 56 28 33 38 30 29 5d 28 27 3b 27 29 2c 79 3d 78 5b 56 28 33 39 38 29 5d 5b 56 28 34 30 33 29 5d 28 78 29 2c 67 5b 56 28 33 35 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 2c 61 36 2c 45 2c 46 2c 47 2c 48 29 7b 66 6f 72 28 61 36 3d 56 2c 45 3d 4f 62 6a 65 63 74 5b 61 36 28 34 30 32 29 5d 28 44 29 2c 46 3d 30 3b 46 3c 45 5b 61 36 28 33 35 34 29 5d 3b 46 2b 2b 29 69 66 28 47 3d 45 5b 46 5d 2c 47 Data Ascii: +K,L),J++);return F;function G(N,O,a3){a3=b,Object[a3(374)][a3(367)][a3(408)](F,O)\|\|(F[O]=[]),F[O][a3(417)](N)}},x=V(422)[V(380)](';'),y=x[V(398)][V(403)](x),g[V(357)]=function(C,D,a6,E,F,G,H){for(a6=V,E=Object[a6(402)](D),F=0;F<E[a6(354)];F++)if(G=E[F],G
2024-08-29 19:19:53 UTC	1369	IN	Data Raw: 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 4a 3d 28 4b 2d 2d 2c 30 3d 3d 4b 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 33 37 37 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 48 5b 53 5d 3d 4c 2b 2b 2c 53 74 72 69 6e 67 28 52 29 29 7d 69 66 28 27 27 21 3d 3d 4a 29 7b 69 66 28 4f 62 6a 65 63 74 5b 61 61 28 33 37 34 29 5d 5b 61 61 28 33 36 37 29 5d 5b 61 61 28 34 30 38 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 61 28 34 31 33 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 34 31 37 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 34 31 33 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 4f 3c 3c 31 2e 35 35 7c 54 26 31 2c 45 Data Ascii: P++,T>>=1,G++);J=(K--,0==K&&(K=Math[aa(377)](2,M),M++),H[S]=L++,String(R))}if(''!==J){if(Object[aa(374)][aa(367)][aa(408)](I,J)){if(256>J[aa(413)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[aa(417)](F(O)),O=0):P++,G++);for(T=J[aa(413)](0),G=0;8>G;O=O<<1.55\|T&1,E
2024-08-29 19:19:53 UTC	1369	IN	Data Raw: 72 28 4c 3d 47 5b 33 5d 3d 54 2c 4b 5b 61 64 28 34 31 37 29 5d 28 54 29 3b 3b 29 7b 69 66 28 50 3e 44 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 37 37 29 5d 28 32 2c 4a 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 54 3d 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 37 37 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 47 5b 49 2b 2b 5d Data Ascii: r(L=G[3]=T,K[ad(417)](T);;){if(P>D)return'';for(Q=0,R=Math[ad(377)](2,J),M=1;M!=R;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(T=Q){case 0:for(Q=0,R=Math[ad(377)](2,8),M=1;M!=R;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);G[I++]
2024-08-29 19:19:53 UTC	1369	IN	Data Raw: 63 65 6f 66 20 63 5b 61 30 28 33 34 32 29 5d 26 26 30 3c 63 5b 61 30 28 33 34 32 29 5d 5b 61 30 28 33 37 34 29 5d 5b 61 30 28 33 33 38 29 5d 5b 61 30 28 34 30 38 29 5d 28 65 29 5b 61 30 28 33 39 39 29 5d 28 61 30 28 33 34 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 65 2c 63 2c 65 2c 66 2c 43 29 7b 69 66 28 61 65 3d 56 2c 63 3d 67 5b 61 65 28 33 35 39 29 5d 2c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 21 6a 28 29 29 72 65 74 75 72 6e 3b 28 65 3d 21 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 66 2c 44 29 7b 28 61 66 3d 61 65 2c 21 65 29 26 26 28 65 3d 21 21 5b 5d 2c 44 3d 7a 28 29 2c 6b 28 63 2e 72 2c 44 2e 72 29 2c 44 2e 65 26 26 6c 28 61 66 28 33 38 32 29 2c 44 2e 65 2c 61 66 28 33 37 38 29 29 29 7d 2c 68 5b 61 65 28 33 34 33 29 5d 21 3d 3d 61 65 28 33 Data Ascii: ceof c[a0(342)]&&0<c[a0(342)][a0(374)][a0(338)][a0(408)](e)[a0(399)](a0(341))}function B(ae,c,e,f,C){if(ae=V,c=g[ae(359)],!c)return;if(!j())return;(e=![],f=function(af,D){(af=ae,!e)&&(e=!![],D=z(),k(c.r,D.r),D.e&&l(af(382),D.e,af(378)))},h[ae(343)]!==ae(3
2024-08-29 19:19:53 UTC	1335	IN	Data Raw: 39 30 32 34 36 30 35 32 36 31 33 38 37 31 3a 31 37 32 34 39 35 36 32 32 35 3a 63 48 2d 49 41 53 57 51 31 5a 65 75 4e 52 5a 77 6d 44 32 69 47 4d 4f 6e 55 77 6c 41 2d 32 70 41 32 6e 48 61 39 73 4c 30 53 65 30 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2c 64 2e 63 6f 6f 6b 69 65 2c 2f 62 65 61 63 6f 6e 2f 6f 76 2c 73 65 6e 64 2c 69 6e 63 6c 75 64 65 73 2c 69 6e 64 65 78 4f 66 2c 6f 6e 74 69 6d 65 6f 75 74 2c 76 65 78 5a 51 4a 65 2c 6b 65 79 73 2c 62 69 6e 64 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 4d 65 73 73 61 67 65 3a 20 2c 2f 6a 73 64 2f 72 2f 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 63 61 6c 6c 2c 74 61 62 49 6e 64 65 78 2c 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 2c 6d 61 70 2c 61 70 Data Ascii: 90246052613871:1724956225:cH-IASWQ1ZeuNRZwmD2iGMOnUwlA-2pA2nHa9sL0Se0,XMLHttpRequest,contentDocument,d.cookie,/beacon/ov,send,includes,indexOf,ontimeout,vexZQJe,keys,bind,Content-Type,Message: ,/jsd/r/,display: none,call,tabIndex,onreadystatechange,map,ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49769	172.67.185.227	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:52 UTC	352	OUT	GET /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:53 UTC	991	IN	HTTP/1.1 302 Found Date: Thu, 29 Aug 2024 19:19:53 GMT Content-Length: 0 Connection: close location: https://ec.instapagemetrics.com/t/two?3thpc=true Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T%2F%2By7hLrqShzklnMlxPvc5%2F%2BuV%2BJCE7fpOHWhm4EtUXP177Py4sx9bXwXNqSwBW2%2FYEFsBiFkZ2JcKixEjh1Qh7D%2BfLUpkkTI7hDI4vEKDQ0A%2BgHcgPM1kktqmlZpyNnbwYEeSNs%2FvecdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee52c1d33438e-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49771	172.64.149.213	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:52 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/8baee50bef5442a7 HTTP/1.1 Host: hkwyolaw.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=sg463LRxea7GCkT0n69snZu9C1s3PW.nzHe3WmdlWcE-1724959187-1.0.1.1-erCJ6Kk62pWu1pNPxc3Nv6YNLeq8PGylcauOXWg5jXliNI.QKln5MCYCGGBfdr5RoBbiQAQSE.VFQSrKoHI5yw; instap-spses.6ed8=*; instap-spid.6ed8=ad7273e7-521a-47ee-9772-bd33cc61035d.1724959189.1.1724959189.1724959189.f1333eb3-1b25-45d0-950d-0203a94d862f
2024-08-29 19:19:53 UTC	218	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 19:19:52 GMT Content-Length: 0 Connection: close allow: POST Strict-Transport-Security: max-age=15552000 Server: cloudflare CF-RAY: 8baee52c1b387c84-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	172.67.185.227	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:53 UTC	363	OUT	GET /t/two?3thpc=true HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:53 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8dNgsNxlZO0yMT%2FrHpWARvf2aoPCGS0uKQskhWzLphJF3y98qYS1DOU27goLCLCLADqtF0seHrpf8tLBgzAz%2BkSIneCHpfiRmth5x9ZkNlSo5DdR0AznjyK2D3TZ3SnEvMqkuVWQ2O7v3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee530df024314-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 19:19:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49774	104.21.51.207	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:59 UTC	482	OUT	OPTIONS /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://hkwyolaw.ency.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:59 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:19:59 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://hkwyolaw.ency.cloud access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XLSFFd8gAKX5NDAwa3ILa5SqE2RsGWNog1n%2FAYxz4sTwbHM49c0G%2FaxPydPFTEwJPQDsvPu1s37jfwcdZGvZ9lidMwUwF1B7CoUKxjS3QbHksO0FDY6s2VgsmVwLJn030IaXyb57kLN1Ug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee552c8d542c8-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49775	104.21.51.207	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:19:59 UTC	595	OUT	POST /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive Content-Length: 1937 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: https://hkwyolaw.ency.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:19:59 UTC	1937	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 65 22 3a 22 70 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6b 77 79 6f 6c 61 77 2e 65 6e 63 79 2e 63 6c 6f 75 64 2f 22 2c 22 70 61 67 65 22 3a 22 48 61 74 68 61 77 61 79 20 26 20 4b 75 6e 7a 2c 20 4c 4c 50 22 2c 22 65 69 64 22 3a 22 33 34 33 39 38 35 62 31 2d 36 65 61 37 2d 34 39 31 39 2d 39 35 61 64 2d 30 30 31 62 35 66 34 33 62 30 39 36 22 2c 22 74 76 22 3a 22 6a 73 2d 33 2e 31 2e 30 22 2c 22 74 6e 61 22 3a 22 69 6e 73 74 61 70 61 67 65 2d 73 70 22 2c 22 61 69 64 22 3a 22 69 6e 73 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"e":"pp","url":"https://hkwyolaw.ency.cloud/","page":"Hathaway & Kunz, LLP","eid":"343985b1-6ea7-4919-95ad-001b5f43b096","tv":"js-3.1.0","tna":"instapage-sp","aid":"ins
2024-08-29 19:20:00 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:20:00 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://hkwyolaw.ency.cloud access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f2yvri1ij73yc2d0QRMdpZLAemD5YesgNP5QXlJBsLnGhYCHh%2FIvUYtpCVrJRORByRCFIAZC5CYCnS2c5fGF0KzNFVjDimjgiapA0BgmGYR4tXdy00Tl9pE6DA18GoV8OiX%2FruggMK3Rvw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee5586b1a4216-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 19:20:00 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49778	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:00 UTC	661	OUT	GET /?mF3s=lt HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:01 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-08-29 19:20:01 UTC	16199	IN	Data Raw: 33 66 33 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 44 34 28 29 7b 76 61 72 20 64 52 3d 5b 27 66 54 66 52 42 27 2c 27 6f 62 6a 65 63 74 27 2c 27 4d 6f 7a 41 70 70 65 61 72 61 6e 63 65 27 2c 27 64 6f 63 75 6d 65 6e 74 2e 46 3d 4f 62 6a 65 63 74 27 2c 27 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 27 2c 27 2f 6e 70 6d 2d 6d 6f 6e 69 74 6f 72 69 6e 67 27 2c 27 63 6f 6e 6e 65 63 74 69 6f 6e 27 2c 27 44 49 56 2e 61 67 6f 72 65 73 33 30 30 27 2c 27 48 61 65 74 74 65 6e 73 63 68 77 65 69 6c 65 72 27 2c 27 27 2c 27 63 6f 6e 74 65 78 74 Data Ascii: 3f3f<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0D4(){var dR=['fTfRB','object','MozAppearance','document.F=Object','DateTimeFormat','/npm-monitoring','connection','DIV.agores300','Haettenschweiler','','context
2024-08-29 19:20:01 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 34 28 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 30 44 35 28 44 2c 49 29 7b 76 61 72 20 6f 3d 61 30 44 34 28 29 3b 72 65 74 75 72 6e 20 61 30 44 35 3d 66 75 6e 63 74 69 6f 6e 28 71 2c 59 29 7b 71 3d 71 2d 30 78 31 35 61 3b 76 61 72 20 58 3d 6f 5b 71 5d 3b 72 65 74 75 72 6e 20 58 3b 7d 2c 61 30 44 35 28 44 2c 49 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 44 2c 49 29 7b 76 61 72 20 71 47 3d 61 30 44 35 2c 6f 3d 44 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 71 3d 2d 70 61 72 73 65 49 6e 74 28 71 47 28 30 78 32 38 38 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 71 47 28 30 78 34 63 31 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 71 47 28 30 78 31 66 64 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 71 47 28 30 Data Ascii: 40004();}function a0D5(D,I){var o=a0D4();return a0D5=function(q,Y){q=q-0x15a;var X=o[q];return X;},a0D5(D,I);}(function(D,I){var qG=a0D5,o=D();while(!![]){try{var q=-parseInt(qG(0x288))/0x1*(parseInt(qG(0x4c1))/0x2)+parseInt(qG(0x1fd))/0x3+parseInt(qG(0
2024-08-29 19:20:01 UTC	8	IN	Data Raw: 2c 27 27 5b 6f 41 0d 0a Data Ascii: ,''[oA
2024-08-29 19:20:01 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 5d 2c 66 75 6e 63 74 69 6f 6e 28 6f 4c 2c 6f 46 2c 6f 4e 2c 6f 56 2c 6f 79 29 7b 76 61 72 20 59 57 3d 59 75 3b 69 66 28 59 57 28 30 78 35 39 32 29 3d 3d 3d 59 57 28 30 78 32 62 61 29 29 7b 66 6f 72 28 76 61 72 20 6f 75 3d 27 27 2c 6f 57 3d 30 78 30 2c 6f 45 3d 44 75 5b 59 57 28 30 78 33 30 62 29 5d 28 44 57 29 5b 59 57 28 30 78 32 33 39 29 5d 28 29 3b 6f 57 3c 6f 45 5b 59 57 28 30 78 31 38 66 29 5d 3b 6f 57 2b 2b 29 7b 76 61 72 20 6f 48 3d 6f 45 5b 6f 57 5d 2c 6f 6a 3d 44 6a 5b 6f 48 5d 2c 6f 61 3d 59 57 28 30 78 34 30 61 29 69 6e 20 6f 6a 3f 27 65 72 72 6f 72 27 3a 6f 75 5b 59 57 28 30 78 31 38 34 29 5d 28 6f 6a 5b 59 57 28 30 78 35 32 62 29 5d 29 3b 6f 75 2b 3d 27 27 5b 59 57 28 30 78 34 34 39 29 5d 28 6f 75 3f 27 7c 27 3a 27 27 29 5b Data Ascii: 4000],function(oL,oF,oN,oV,oy){var YW=Yu;if(YW(0x592)===YW(0x2ba)){for(var ou='',oW=0x0,oE=Du[YW(0x30b)](DW)[YW(0x239)]();oW<oE[YW(0x18f)];oW++){var oH=oE[oW],oj=Dj[oH],oa=YW(0x40a)in oj?'error':ou[YW(0x184)](oj[YW(0x52b)]);ou+=''[YW(0x449)](ou?'\|':'')[
2024-08-29 19:20:01 UTC	8	IN	Data Raw: 27 5d 2c 6f 7a 3d 0d 0a Data Ascii: '],oz=
2024-08-29 19:20:01 UTC	16384	IN	Data Raw: 63 30 30 30 0d 0a 53 74 72 69 6e 67 2c 6f 68 3d 4f 62 6a 65 63 74 5b 70 37 28 30 78 35 32 65 29 5d 2c 6f 4d 3d 6f 77 28 27 27 5b 27 73 6c 69 63 65 27 5d 29 2c 6f 47 3d 6f 77 28 27 27 5b 70 37 28 30 78 35 35 30 29 5d 29 2c 6f 51 3d 6f 77 28 5b 5d 5b 70 37 28 30 78 32 35 33 29 5d 29 2c 6f 69 3d 6f 6d 26 26 21 6f 4b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 38 3d 70 37 3b 72 65 74 75 72 6e 20 30 78 38 21 3d 3d 6f 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 38 28 30 78 31 38 66 29 2c 7b 27 76 61 6c 75 65 27 3a 30 78 38 7d 29 5b 27 6c 65 6e 67 74 68 27 5d 3b 7d 29 2c 6f 63 3d 53 74 72 69 6e 67 28 53 74 72 69 6e 67 29 5b 70 37 28 30 78 32 36 34 29 5d 28 27 53 74 72 69 6e 67 27 29 2c 6f 50 3d 6f 55 5b 70 37 28 30 78 33 34 33 29 5d 3d 66 75 6e 63 74 Data Ascii: c000String,oh=Object[p7(0x52e)],oM=ow(''['slice']),oG=ow(''[p7(0x550)]),oQ=ow([][p7(0x253)]),oi=om&&!oK(function(){var p8=p7;return 0x8!==oh(function(){},p8(0x18f),{'value':0x8})['length'];}),oc=String(String)[p7(0x264)]('String'),oP=oU[p7(0x343)]=funct
2024-08-29 19:20:01 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6f 55 2c 6f 42 2c 6f 43 29 7b 76 61 72 20 55 6f 3d 61 30 44 35 2c 6f 77 3d 6f 43 28 30 78 32 31 31 39 29 2c 6f 4b 3d 6f 43 28 30 78 31 35 63 61 29 5b 55 6f 28 30 78 33 65 36 29 5d 3b 6f 55 5b 55 6f 28 30 78 33 34 33 29 5d 3d 6f 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 71 3d 55 6f 2c 6f 64 3d 6f 4b 28 27 2e 27 2c 27 73 27 29 3b 72 65 74 75 72 6e 21 28 6f 64 5b 27 64 6f 74 41 6c 6c 27 5d 26 26 6f 64 5b 55 71 28 30 78 32 66 36 29 5d 28 27 5c 78 30 61 27 29 26 26 27 73 27 3d 3d 3d 6f 64 5b 27 66 6c 61 67 73 27 5d 29 3b 7d 29 3b 7d 2c 30 78 31 31 62 30 3a 66 75 6e 63 74 69 6f 6e 28 6f 55 2c 6f 42 2c 6f 43 29 7b 76 61 72 20 55 59 3d 61 30 44 35 3b 69 66 28 55 59 28 30 78 31 66 66 29 21 3d 3d 55 59 28 30 78 32 39 63 29 Data Ascii: :function(oU,oB,oC){var Uo=a0D5,ow=oC(0x2119),oK=oC(0x15ca)[Uo(0x3e6)];oU[Uo(0x343)]=ow(function(){var Uq=Uo,od=oK('.','s');return!(od['dotAll']&&od[Uq(0x2f6)]('\x0a')&&'s'===od['flags']);});},0x11b0:function(oU,oB,oC){var UY=a0D5;if(UY(0x1ff)!==UY(0x29c)
2024-08-29 19:20:01 UTC	16384	IN	Data Raw: 7d 63 61 74 63 68 28 6f 41 29 7b 69 66 28 27 6d 55 72 79 65 27 21 3d 3d 42 51 28 30 78 33 33 34 29 29 44 75 28 44 57 2c 44 42 2c 7b 27 76 61 6c 75 65 27 3a 44 5a 2c 27 63 6f 6e 66 69 67 75 72 61 62 6c 65 27 3a 21 30 78 30 2c 27 77 72 69 74 61 62 6c 65 27 3a 21 30 78 30 7d 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 27 27 3b 7d 7d 7d 29 3b 7d 2c 30 78 31 38 32 38 3a 66 75 6e 63 74 69 6f 6e 28 6f 55 2c 6f 42 2c 6f 43 29 7b 76 61 72 20 42 63 3d 61 30 44 35 2c 6f 77 3d 6f 43 28 30 78 32 31 61 34 29 2c 6f 4b 3d 6f 43 28 30 78 35 38 31 29 2c 6f 64 3d 6f 43 28 30 78 62 66 62 29 2c 6f 52 3d 6f 43 28 30 78 37 30 66 29 2c 6f 6d 3d 6f 43 28 30 78 31 32 39 61 29 2c 6f 65 3d 6f 43 28 30 78 32 31 31 39 29 2c 6f 4a 3d 6f 43 28 30 78 35 63 62 29 2c 6f 54 3d 6f 43 28 30 78 35 Data Ascii: }catch(oA){if('mUrye'!==BQ(0x334))Du(DW,DB,{'value':DZ,'configurable':!0x0,'writable':!0x0});else return'';}}});},0x1828:function(oU,oB,oC){var Bc=a0D5,ow=oC(0x21a4),oK=oC(0x581),od=oC(0xbfb),oR=oC(0x70f),om=oC(0x129a),oe=oC(0x2119),oJ=oC(0x5cb),oT=oC(0x5
2024-08-29 19:20:01 UTC	8	IN	Data Raw: 6f 43 28 30 78 31 0d 0a Data Ascii: oC(0x1
2024-08-29 19:20:01 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 37 65 29 2c 6f 4a 3d 6f 43 28 30 78 31 37 38 64 29 2c 6f 54 3d 6f 43 28 30 78 32 31 31 39 29 2c 6f 62 3d 6f 43 28 30 78 31 36 37 62 29 2c 6f 41 3d 6f 43 28 30 78 31 32 63 66 29 2c 6f 7a 3d 6f 43 28 30 78 38 66 35 29 2c 6f 68 3d 6f 43 28 30 78 31 35 64 66 29 2c 6f 4d 3d 6f 43 28 30 78 65 65 37 29 2c 6f 47 3d 6f 43 28 30 78 31 38 37 35 29 2c 6f 51 3d 6f 43 28 30 78 31 65 33 61 29 2c 6f 69 3d 6f 43 28 30 78 31 34 61 61 29 2c 6f 63 3d 6f 43 28 30 78 65 34 61 29 2c 6f 50 3d 6f 43 28 30 78 38 65 36 29 2c 6f 6b 3d 6f 43 28 30 78 37 65 34 29 2c 6f 4c 3d 6f 43 28 30 78 31 30 66 62 29 2c 6f 46 3d 6f 43 28 30 78 31 33 36 31 29 2c 6f 4e 3d 6f 43 28 30 78 31 36 63 62 29 2c 6f 56 3d 6f 43 28 30 78 31 36 61 37 29 2c 6f 79 3d 6f 43 28 30 78 31 64 62 62 Data Ascii: 40007e),oJ=oC(0x178d),oT=oC(0x2119),ob=oC(0x167b),oA=oC(0x12cf),oz=oC(0x8f5),oh=oC(0x15df),oM=oC(0xee7),oG=oC(0x1875),oQ=oC(0x1e3a),oi=oC(0x14aa),oc=oC(0xe4a),oP=oC(0x8e6),ok=oC(0x7e4),oL=oC(0x10fb),oF=oC(0x1361),oN=oC(0x16cb),oV=oC(0x16a7),oy=oC(0x1dbb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49779	172.67.185.227	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:00 UTC	352	OUT	GET /t/two HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:00 UTC	985	IN	HTTP/1.1 302 Found Date: Thu, 29 Aug 2024 19:20:00 GMT Content-Length: 0 Connection: close location: https://ec.instapagemetrics.com/t/two?3thpc=true Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Irr0SJU9MhUXJTim2Ao%2FDoE304p1Aym%2FToCb3Ok%2FTjfeCJEFpzM%2BI5jI9kOHCtz2FjelaJ3KdK5CeXCGwMDJ9e%2FHWbc1BT3oYEGvCKAUmd3ZKz25A6rcY25H4b8Yz0QTD%2BJa5dhVMDIWCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee55cc93b197c-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49782	172.67.185.227	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:01 UTC	363	OUT	GET /t/two?3thpc=true HTTP/1.1 Host: ec.instapagemetrics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:01 UTC	948	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:20:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: * access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CPBYHeYncUHla%2FxZLoJpLsizzH23QZA%2BIMUucnmQXc%2FqF38n0fIeID87r%2F%2FwcL2odmGHJ47QKWQv48joaIs6BmAQBQn3Wmk4AIXjjo%2BWcJTzNYasVRM54ryRHbXkSAYeuRERt8M3nyiedA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8baee560d88042b8-EWR alt-svc: h3=":443"; ma=86400
2024-08-29 19:20:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49777	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:03 UTC	872	OUT	POST /?mF3s=lt HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: keep-alive Content-Length: 4865 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://hkwyolawofficelogin.ency.cloud Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:03 UTC	4865	OUT	Data Raw: 68 65 6c 61 78 34 6a 6b 6a 72 3d 25 35 42 25 35 42 25 32 32 37 35 37 38 36 39 33 31 33 37 32 35 33 33 34 32 37 31 36 25 32 32 25 32 43 25 32 32 62 37 30 36 32 33 32 32 35 33 33 34 35 36 37 36 66 37 34 25 32 32 25 32 43 25 32 32 37 32 37 32 37 34 37 65 36 62 36 39 33 37 33 38 32 35 33 25 32 32 25 32 43 25 32 32 33 34 34 36 37 37 38 37 61 33 30 33 33 33 35 33 37 33 35 25 32 32 25 32 43 25 32 32 33 31 33 39 33 39 33 30 33 37 33 38 33 33 33 32 33 36 33 25 32 32 25 32 43 25 32 32 39 33 36 33 37 25 32 32 25 35 44 25 32 43 25 32 32 30 33 35 37 35 31 39 39 30 37 25 32 32 25 32 43 25 32 32 30 30 35 38 33 39 36 25 32 32 25 32 43 35 25 35 44 26 73 68 77 32 35 3d 25 35 42 25 35 42 25 32 32 32 35 33 33 34 32 36 66 32 35 33 37 34 32 36 61 37 34 37 39 25 32 32 25 32 43 Data Ascii: helax4jkjr=%5B%5B%227578693137253342716%22%2C%22b706232253345676f74%22%2C%227272747e6b693738253%22%2C%2234467787a3033353735%22%2C%223139393037383332363%22%2C%2293637%22%5D%2C%220357519907%22%2C%220058396%22%2C5%5D&shw25=%5B%5B%222533426f2537426a7479%22%2C
2024-08-29 19:20:03 UTC	403	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Aug 2024 19:20:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt set-cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; Domain=ency.cloud; HttpOnly; Path=/; SameSite=None; Secure
2024-08-29 19:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49785	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:03 UTC	871	OUT	GET /?mF3s=lt HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:06 UTC	775	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 57479 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 503664f2-e94c-4df4-9d7a-fe48aeaa5e00 x-ms-ests-server: 2.1.18794.6 - KRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:06 UTC	13685	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 7d 7b 5f e2 c8 b6 e8 ff f3 29 94 3b 3f 21 db 88 bc 41 e8 8c 07 10 5b ba 45 68 40 bb 95 e1 78 43 12 30 48 12 4c 42 7c 74 fb dd ef 5a ab aa 92 80 30 33 67 9f 7d 67 ff 76 9b 54 ea b1 6a d5 7a d7 aa e2 d3 fe 59 b7 39 bc ed b5 f6 1e 7c 6b f1 c7 6f 9f d8 9f bd 4f 0f 86 aa c3 df bd 4f be e9 2f 0c 7c da eb 1b ba e9 1a 9a 6f da 33 fc 70 1c 7e f9 64 19 be ba a7 39 b6 6f d8 be 92 f0 8d 17 ff 18 fb a9 ed 69 0f aa eb 19 be b2 f2 a7 47 95 04 8c e1 2f 8f 8c a7 95 19 28 89 26 ab 7e 34 7c 5d 1a 89 e3 2d dd b4 5b 8a a1 cf 8c f5 56 3f 8e ae eb 47 4d c7 5a aa be 39 59 6c 6f f8 6c ea fe 83 a2 1b 81 a9 19 47 f4 22 ef 99 b6 e9 9b ea e2 c8 d3 d4 85 a1 64 d3 19 79 cf 52 5f 4c 6b 65 f1 a2 1c 16 ad 3c c3 a5 77 15 fa 56 5e 0d 2f b1 67 ab 96 a1 24 02 Data Ascii: }{_);?!A[Eh@xC0HLB\|tZ03g}gvTjzY9\|koOO/\|o3p~d9oiG/(&~4\|]-[V?GMZ9YlolG"dyR_Lke<wV^/g$
2024-08-29 19:20:06 UTC	16384	IN	Data Raw: cf 8a 76 e5 78 bb f0 f6 be a0 79 8a d4 5b 45 b2 0e ae 4e 83 ab aa e7 09 52 8e e9 80 9f 61 9e 72 35 40 6f 03 09 19 23 70 ec 0d 34 37 df cf e4 05 b0 08 b4 3d c8 5f f3 f0 6a 04 86 fb ca df 0b 12 0f b1 b3 d7 22 7f 65 39 a7 ac ac 14 76 c9 82 d9 bc b8 cc b9 a5 a4 e6 76 72 4b 71 43 98 22 83 6c 4c 07 68 05 a9 be 88 a0 6a 59 b2 7f 51 a7 e4 0a 3b 3b 2d 6d 74 8a cc 12 f2 20 73 93 ae e3 ea 66 21 6c 9a d4 bc 84 35 26 a5 98 b1 42 72 a2 b4 c3 ba c0 d1 ca ca bc 84 86 9e 58 24 92 da 68 60 02 c3 d6 47 f3 32 f6 98 85 a6 32 29 21 83 7f 42 73 07 56 11 2a 1b bc 0e 9a 43 92 04 65 d7 ac 16 3f 3d 45 fd 18 e4 2f 89 5e 39 fd 4b 52 dc c7 09 8c d3 a0 5f 45 83 93 9b 38 da 4e 63 6e 5e 59 47 10 e0 92 90 3e af ec b0 6b 78 b3 13 65 5e a1 18 ca 09 ae 45 65 82 46 36 3d e7 41 eb b1 1b 02 2c Data Ascii: vxy[ENRar5@o#p47=_j"e9vvrKqC"lLhjYQ;;-mt sf!l5&BrX$h`G22)!BsV*Ce?=E/^9KR_E8Ncn^YG>kxe^EeF6=A,
2024-08-29 19:20:06 UTC	16384	IN	Data Raw: df c5 5a 41 58 d1 a5 08 b4 b8 61 f5 dd b6 90 9d 2d 3f 34 0b 04 41 86 9a b3 b2 2d 93 d7 da 22 77 ac 1d 4f 75 3d 73 6f 5c 2f 9c cd 65 05 19 0e be 31 82 2b 12 ef 9c 1c 3c 11 54 bb bb 88 ac b1 15 8a 07 e5 5e 43 1d 22 b9 31 4d 00 c1 b3 ee d0 dd 3a 1d 2b 20 2a 43 d8 21 cf 67 58 4e 59 b6 ee 9a f5 78 ac 77 27 56 60 86 0b e6 29 22 d5 0e 09 54 07 c8 ca b8 8d 2b 20 1c cf 88 01 77 f6 f3 dd 47 28 25 b7 09 43 8d da 83 dc c6 4b 75 35 d7 dc 6d d9 0d c1 16 77 70 af 35 cf ec 27 83 9f bc e2 9c df 9b 66 05 3a 89 b4 c6 9c 4c e5 e2 30 c8 70 a5 11 d2 11 6e 38 f7 80 8a 6f e7 6f 4a a3 aa d8 7c 61 06 a2 88 d1 00 cd 3b 9a 2a b8 c8 cd 67 ff 35 bd ed 2b 22 07 c7 71 f0 d7 74 3b b9 44 78 3a ea 5b f4 90 6d 88 e1 b4 98 7b ff ee e7 c3 71 2e e0 b2 4a bb 1e 5a c0 93 86 de 8d bb 02 bd db 35 Data Ascii: ZAXa-?4A-"wOu=so\/e1+<T^C"1M:+ C!gXNYxw'V`)"T+ wG(%CKu5mwp5'f:L0pn8ooJ\|a;g5+"qt;Dx:[m{q.JZ5
2024-08-29 19:20:06 UTC	11026	IN	Data Raw: 87 47 e8 31 6c b2 87 11 f6 19 6c bd 07 45 cd ec 8f 6c 93 28 04 59 1f ef 19 dc d1 6f 10 76 3a bf d6 3e 3e 05 70 95 1d e7 1b 96 a9 dc db 55 ae db d5 92 c6 4f bf 7f c7 5d 3a 12 ae 32 68 c3 07 d5 66 ba 16 e1 9e 96 0a a6 75 70 9d 08 3f 68 82 9f 6a dd 1e 45 25 e7 d7 c6 03 09 4d fb e0 9d 10 cb 63 f4 0e f5 8d 96 eb e3 d1 78 a7 57 74 f6 68 bc cb 18 0d 6b e6 b6 97 45 fc 6e b9 83 5c a7 7b 6b 82 0e a6 70 b3 32 3b 79 eb 76 32 48 b5 38 a7 e3 57 2d 7d 2d 4d f6 be 16 36 70 27 f6 bc 19 b5 08 3b 5f be e6 08 3f ea 5d 04 73 f5 08 46 a4 b9 5e f2 6d 38 c9 f1 4d 7b e8 c0 24 13 73 e8 c3 24 93 8c e7 62 0f db dc 8e 8f 77 68 41 92 29 f8 f9 4a ef 45 8b 1a 96 e5 ca 94 69 3a cd 45 e3 42 4b 6a 59 b6 10 96 9e fe a8 87 1f 8d de 0b 56 db e5 22 76 10 0c d2 55 93 1b f9 0c 9e 16 bc 1f f7 50 Data Ascii: G1llEl(Yov:>>pUO]:2hfup?hjE%McxWthkEn\{kp2;yv2H8W-}-M6p';_?]sF^m8M{$s$bwhA)JEi:EBKjYV"vUP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49787	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:07 UTC	653	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hkwyolawofficelogin.ency.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:09 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:08 GMT Content-Type: application/x-javascript Content-Length: 49809 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1868246 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: db1a76e5-401e-00cf-7f4a-e9447e000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:09 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 21 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 df a1 1b 0b af 12 06 95 30 aa f8 c1 28 8c a6 61 e4 26 22 ae dc c3 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_y!TRUTZO28W_+Ipw~\Q0(a&"w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N*
2024-08-29 19:20:09 UTC	16384	IN	Data Raw: df cc 46 8a 1b 85 11 2e bf e1 92 99 a1 bf 81 0e e6 26 77 08 9c a6 da c6 42 52 06 95 d2 5b 06 95 26 65 50 fd 89 97 e5 c3 8b 14 bd b8 0e 9b 29 5c 0b 49 59 f9 3d fe ec c7 59 a6 a5 a9 a3 d9 8d ef c3 64 f5 30 3e 30 10 9b 73 70 22 7d 3e 43 0a d7 6b 7a 0b 2a e5 56 15 79 6c e4 df a5 d2 04 73 66 36 68 d0 b5 85 b4 25 14 b5 38 92 3f 04 96 7d 35 5d 3b 8a 67 93 24 fb 70 2e 39 83 de 17 01 4d 39 f9 f7 2c 9f ac 1d 0e 57 d1 a0 f4 d4 02 25 66 48 e3 05 6a 1d bd 3f 08 98 7d fd 53 e4 ce 3c 8e 51 d0 3f 9f 4b 06 d5 06 5f 73 28 2b a6 30 ae 0f 95 4a ca 38 4d 5f b3 ef a1 4d 12 4e 9f 35 c2 5f 96 63 58 24 db 80 5f de 1a ba ef c3 94 d5 f3 16 0a ff 0a f4 1b ca f8 f9 d8 b5 8d a5 b9 25 2a 3a 15 58 48 2d 51 d8 0b 35 cb d4 25 ea 7b 01 58 cb 81 02 d3 29 3a 08 70 16 c3 1a 80 ab 81 9f 59 e7 Data Ascii: F.&wBR[&eP)\IY=Yd0>0sp"}>CkzVylsf6h%8?}5];g$p.9M9,W%fHj?}S<Q?K_s(+0J8M_MN5_cX$_%:XH-Q5%{X):pY
2024-08-29 19:20:09 UTC	16384	IN	Data Raw: 49 78 d0 e7 50 90 d3 a3 cd f8 1c a3 d2 e7 f2 95 33 18 55 e1 5e b2 c5 de 3f 87 93 7f 5f 39 0e 0b c8 37 b2 ea f9 37 96 73 6a b9 02 24 f2 ac 01 29 a7 c8 f6 9e 9f 1f f3 c3 13 cf 95 1c df f6 ce b7 04 ff 04 21 fc 26 3c df 45 28 f2 21 f1 0a 88 8e d3 d1 b5 00 35 56 df 77 97 21 ae 0f c4 5f c1 ef 6b ce 32 ba ab 3d cb 88 1b 54 c9 ce 6c 24 29 c5 e7 59 17 8c 98 bc ae d7 23 e7 a1 5c 6f 18 e3 a8 19 a7 62 01 5a 11 41 4c c5 b0 c6 29 15 f9 d5 a8 d7 38 40 b2 0b bc 8a a3 11 e3 00 f3 19 a3 81 0c 44 7d ad 9e 34 fd 91 58 67 5c 09 f2 b0 15 b6 52 80 d2 f6 e9 d3 48 42 a4 fd 9a 88 20 9c 43 60 80 dc a8 b7 70 0d c7 49 cf 6f 06 e7 d1 15 82 e8 66 37 c8 e2 5b c3 2b dd e0 a4 2f b4 96 7b 00 50 e2 dc ad 64 72 8c fa 6c 17 de 99 02 ab 0d 63 65 ea bf 9a 05 1c 9b 83 71 c0 fe 17 cc 2e 37 d7 dd Data Ascii: IxP3U^?_977sj$)!&<E(!5Vw!_k2=Tl$)Y#\obZAL)8@D}4Xg\RHB C`pIof7[+/{Pdrlceq.7
2024-08-29 19:20:09 UTC	3352	IN	Data Raw: a5 a9 ae 0f cc 56 00 90 86 9f 0c f4 98 48 33 36 6a 08 c2 35 2b 23 53 ff 52 31 e7 91 1f 27 d3 95 e1 d5 1d 97 96 c1 40 3e cd 2c 9e fc 1c 3a de 80 1e 34 06 5a 58 40 fb 8e 4f 85 67 17 ef b1 10 03 20 d8 94 2f 68 c9 2e e0 01 6e 44 8f 26 d1 e2 29 a6 f6 d5 87 29 37 52 31 3a 29 63 45 16 bc 4e 82 a5 0f 68 19 fc ea 5b 44 4a 10 b4 0f 18 eb 5c 09 ad 27 be 8a 5c b7 6e 79 d8 40 59 c8 98 b6 75 0f 3c 04 1d 8b 0c 8f 55 3e b1 2f 20 f7 38 2a 30 d8 26 e0 32 b8 39 2b 7c cd 08 e7 23 f5 4b 46 9a ae ed 11 97 31 e3 cd 1b d0 76 95 d5 08 ae f4 7c 03 a3 ae 6c 36 91 07 57 9e 6f 6e 28 51 6d 1f 6b c3 dc 54 68 66 be 8b f5 c5 2e 6c 68 c8 ed ed 19 f5 05 59 e7 01 34 af 0c 42 b4 25 23 b9 ec d5 9b 6f f1 a0 3d 72 d7 c2 a4 4a 47 eb 3e b6 b6 d1 4e 3d f9 f0 11 f0 d8 8f 96 c3 29 b1 1d e1 82 69 9f Data Ascii: VH36j5+#SR1'@>,:4ZX@Og /h.nD&))7R1:)cENh[DJ\'\ny@Yu<U>/ 8*0&29+\|#KF1v\|l6Won(QmkThf.lhY4B%#o=rJG>N=)i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49788	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:10 UTC	676	OUT	GET /02f3d9a46eef4029b93e04119111d9c5/ HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://hkwyolawofficelogin.ency.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw==" Sec-WebSocket-Key: fGHJpIguuorBDacx6fjKBQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49789	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:10 UTC	903	OUT	GET /?mF3s=lt&sso_reload=true HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-08-29 19:20:13 UTC	778	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 63370 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 2cdc81e4-7c88-4f1d-83a2-90a68d2d1602 x-ms-ests-server: 2.1.18794.6 - KRSLR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:13 UTC	15606	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 7a 22 c9 92 30 78 5f 4f 41 32 d5 99 d0 42 88 7d 91 8a a3 66 95 90 d8 04 68 6f 8d be 20 c2 81 40 b1 a0 58 40 28 53 dc cd 93 cc c5 7c ff c5 dc cd 1b 9c 17 1b 33 73 8f 20 40 52 55 d6 39 a7 67 7a e6 af d3 5d 49 84 87 2f e6 b6 9b b9 45 e8 b7 2f b5 6e 75 78 db ab 87 a6 8e ae fd ed 97 df f0 27 24 6b 92 6d 97 c2 e1 90 a2 5a a5 b0 e6 58 e1 90 26 19 93 52 98 19 e1 bf fd 12 fa 6d ca 24 05 7e 43 bf 39 aa a3 31 bc 0a 0d d4 89 11 52 8d 90 63 86 56 a6 6b 85 24 59 36 5d c3 c1 4e 07 7e af df 74 e6 48 21 d9 34 1c 66 38 a5 b0 c3 5e 9c 03 5c f0 28 24 4f 25 cb 66 4e c9 75 c6 fb 85 30 00 e3 cc f7 d9 b3 ab 2e 4a e1 2a ef be 3f 5c cd 59 f8 e0 83 69 9a f5 12 53 26 6c 7b d4 cd fe 65 79 bf 6a ea 73 c9 51 47 da c7 03 97 aa e2 4c 4b 0a 5b a8 32 Data Ascii: z"0x_OA2B}fho @X@(S\|3s @RU9gz]I/E/nux'$kmZX&Rm$~C91RcVk$Y6]N~tH!4f8^\($O%fNu0.J*?\YiS&l{eyjsQGLK[2
2024-08-29 19:20:13 UTC	14460	IN	Data Raw: 5e 03 a3 b6 4c 8a c5 1e 81 1b 7c cf a2 db bb ab a3 b9 54 5f 5a 53 e4 39 99 fb d3 10 07 1a 06 48 df c0 63 93 b3 b2 3d 1b 7a 8a 12 51 d3 d4 67 83 6f bb 16 08 73 90 c4 b0 3e 2b 11 b3 ef ea 9f 01 18 3b 98 c7 30 5d 7b eb af d5 43 bf ff f8 0f 55 c4 da 08 85 a4 28 3e a4 fc 43 d3 c4 87 81 88 1c b7 ee c7 45 1d ae 87 40 ac dc 09 37 22 01 f6 31 bc 3f ec e6 c7 e4 e2 23 3b c8 5a 92 2c d1 be 47 37 a6 8a 1e b8 0d 26 9f 93 cb 96 5e 65 83 86 d3 67 f6 71 4f 97 9e 1b 2b 5c 00 2f 30 f5 bd 5c 94 38 fb c5 41 ee c0 3f f4 4d 14 90 57 e0 24 6e 22 c6 47 c0 30 04 1b 33 fb 91 27 84 28 ac e9 de a8 53 44 ea b4 35 98 8c 68 14 7d 4a 53 78 dc d7 b3 f1 29 c2 d8 ba d6 0c f4 ad 1e c7 c2 9b 23 f7 0d 9c 95 2a 50 99 82 74 fc 5b 50 3e 52 1c 46 10 88 d4 8d ef 3c 62 9a c2 75 84 09 94 84 4f 23 33 Data Ascii: ^L\|T_ZS9Hc=zQgos>+;0]{CU(>CE@7"1?#;Z,G7&^egqO+\/0\8A?MW$n"G03'(SD5h}JSx)#*Pt[P>RF<buO#3
2024-08-29 19:20:13 UTC	16384	IN	Data Raw: 99 9b b0 45 9e 25 2d 76 08 19 d0 21 42 9e 17 93 8a 1e 19 f2 ee 63 7d 6d 47 4f e7 d6 96 c0 17 b8 04 47 2a 72 60 74 dd e7 62 07 65 1d 95 ac 0e a3 7d a8 76 06 1b af dd 56 3a 38 c0 c0 01 80 30 28 fa 24 7c 98 e6 ed 0e 9a e6 47 bc 34 3e ad 2d 0d f2 bd 28 b2 cf 9c f7 d7 5f 44 af fd f5 97 22 11 7e 3d 35 d2 da 80 d6 8f b0 f5 49 44 d1 0c a1 38 d1 f1 5c 30 4a 3f 48 5e c8 a3 a4 9f 65 94 0e c2 88 a8 d8 54 88 ea e8 21 db d8 31 81 00 db ba 55 c5 59 43 d0 6d 75 2b 37 cc 4d dd 6f dd 6a 1e c3 84 a8 c6 30 33 c8 8b c6 2a e3 e6 90 75 18 3d 52 8c 19 4e 94 18 33 13 8e 31 a3 ce 92 89 1b 63 86 03 6b 6a 6a e0 20 2b cc 8c b5 3d 6c 8d dc 86 76 98 d4 98 33 9d c1 c6 aa 3e c1 19 ca 37 c0 3a 6e 8d a4 35 6a 05 d2 e9 22 31 c6 fc c0 46 8f d5 ee e3 a5 cd e2 bf 87 e7 42 c3 91 b7 06 cd fe 83 Data Ascii: E%-v!Bc}mGOGr`tbe}vV:80($\|G4>-(_D"~=5ID8\0J?H^eT!1UYCmu+7Moj03u=RN31ckjj +=lv3>7:n5j"1FB
2024-08-29 19:20:13 UTC	16384	IN	Data Raw: 0a 0e 51 d1 b4 94 c3 85 50 8d 69 21 d4 54 5b 77 5d 29 2a a1 0e e2 4e 47 b5 4a 0b a1 60 4e 5c 17 fd b1 90 00 9d bf b5 56 96 da 8f b2 6c 95 bd 9b 41 84 55 db 63 c0 ee 91 26 cb 8e ac b4 e1 48 4b 1b c8 75 29 9a 67 28 c4 4e 34 55 48 c1 85 ca 6c c3 49 ae 08 bb d5 20 c9 32 c9 17 87 ea bd 38 90 f4 0e 9f 63 91 30 cf 87 7e de b5 5b d5 49 36 6c 26 92 84 be 63 63 3d da 4c 6b 82 57 e7 d3 6a 39 5d 5a a9 54 b1 a5 65 32 04 29 d6 f5 24 83 24 d1 0c fb a9 ea 1e 0d c8 29 9d 42 bb 34 20 f4 5c 98 5a fb 63 21 86 89 92 70 31 90 49 dd 75 6a e9 94 15 e9 aa ec 75 a8 a6 1c 96 3f 15 02 58 7b 90 ac 29 80 35 2d b4 b8 53 f5 1a 3b 64 98 f0 27 40 ac 96 f3 86 46 4f 9a d7 75 38 4c 2d 9c 38 b1 fb 98 e6 72 90 81 9e f8 98 97 9e 3e 72 00 1d 72 6a f1 86 dd db ab 13 cf b1 c4 35 96 be 8e b1 5e c7 Data Ascii: QPi!T[w])*NGJ`N\VlAUc&HKu)g(N4UHlI 28c0~[I6l&cc=LkWj9]ZTe2)$$)B4 \Zc!p1Iuju?X{)5-S;d'@FOu8L-8r>rrj5^
2024-08-29 19:20:13 UTC	536	IN	Data Raw: 7e dd 10 7f 6c 34 39 00 0d 8b 88 72 df f3 e1 33 fa 88 0b fb d8 c2 88 3d e8 26 cb 2e 8e ba 8f d8 e8 63 e1 4e 3c 34 d2 06 66 f3 e9 29 ec b0 96 3d 95 d6 4d 5a 65 1e 02 d3 ed 4e 3a b9 a5 67 39 9f 64 68 89 90 52 ec 97 c1 cc 02 23 1d ca 10 07 42 a5 b8 5a 6b a7 4b 37 2d 2d 6a 99 6c 42 8a 1b 45 76 5f 9b e5 39 79 e0 6a c7 24 f5 14 ad a5 9e b6 59 34 5b 4c 81 df 57 91 18 32 f0 52 30 38 ab 4d 1c 21 9b aa 3c 37 44 8d e6 8b 0e 40 3b 36 a4 03 38 48 d3 b4 7e c9 38 1d 57 8b 13 26 d5 e1 b3 92 04 92 db e1 ff ad 43 87 8e 16 85 ae 62 ea 30 1b 62 e7 e5 ef d7 40 62 e1 03 46 08 5e 19 60 78 18 af 34 e8 af b0 17 c0 8b 69 78 15 87 2f 66 d1 8b 29 31 69 a5 95 c0 4f fd 17 a8 3e f3 4a ec f7 f9 d7 28 ee fb a3 69 6b e5 8c cc 0e 0f e1 bd bb 82 8d 1d 4c a7 14 6d a6 04 24 e0 c3 28 84 fa d1 Data Ascii: ~l49r3=&.cN<4f)=MZeN:g9dhR#BZkK7--jlBEv_9yj$Y4[LW2R08M!<7D@;68H~8W&Cb0b@bF^`x4ix/f)1iO>J(ikLm$(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49790	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:10 UTC	743	OUT	GET /favicon.ico HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:12 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:20:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: a842e37b-0e1b-482f-9d13-19a5d8ec2b00 x-ms-ests-server: 2.1.18794.6 - SEASLR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49792	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:10 UTC	538	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:12 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:11 GMT Content-Type: application/x-javascript Content-Length: 49809 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1868249 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: db1a76e5-401e-00cf-7f4a-e9447e000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:12 UTC	6449	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 21 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 df a1 1b 0b af 12 06 95 30 aa f8 c1 28 8c a6 61 e4 26 22 ae dc c3 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_y!TRUTZO28W_+Ipw~\Q0(a&"w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N*
2024-08-29 19:20:12 UTC	16384	IN	Data Raw: 9c 91 81 64 e4 c4 29 0b c9 91 1e 0a 98 74 f1 a7 93 05 75 84 ba 43 b0 6b 10 ef 66 09 7f 83 b9 8b 62 9f 7c d0 bb 29 8e 09 58 c9 df 0d cd 6e 95 02 b6 b4 f5 79 1f 37 68 8f ea 5a 98 58 ce 87 e8 d7 9a 20 3f 56 81 f5 1d b0 8e 6d aa 34 5c 5d a5 3a fd c5 da 70 1e 7a a3 b6 70 59 6d b2 a9 7f bd 3a 6c bf aa f0 2f 74 44 8a ff 17 0e 76 e9 05 de a9 9b dc d9 89 45 db 99 ec c0 1a 47 ee 2d 0d 5b 34 5f 88 9b cc e2 a5 72 a5 31 0e 32 0b 81 a0 8a b0 47 35 07 86 a7 36 e3 30 09 99 9e b5 03 54 43 f5 29 09 fc 37 0d 58 65 69 f0 60 4d 4a 05 83 a5 09 91 d1 a9 1b c1 0c 03 8a f9 e1 f8 24 4c 0e 9e fc 42 1c 0c b7 f7 49 86 86 4a 5d 64 12 8e a4 bf 24 12 e3 d4 c8 ce 62 3f e5 de 2e 7d 5a 44 c5 40 40 3d c0 dc d9 97 a4 c6 80 c1 7a 42 35 ae 34 c4 47 7d 5f 2c 0e 54 d6 c3 34 ee 88 bf ee c8 5f 19 Data Ascii: d)tuCkfb\|)Xny7hZX ?Vm4\]:pzpYm:l/tDvEG-[4_r12G560TC)7Xei`MJ$LBIJ]d$b?.}ZD@@=zB54G}_,T4_
2024-08-29 19:20:12 UTC	16384	IN	Data Raw: 83 da 48 3a 1e b2 22 84 be 8d aa 6c 8c 6a 9c 99 35 b8 a1 7a 51 95 89 d0 c7 b4 87 b2 7f aa 2b aa 6b 52 b4 15 1a 33 c9 b9 b9 55 19 a1 07 58 e6 70 13 f3 69 4c f8 6c 52 6d e7 7a 6f c8 27 c9 0d b7 f6 4c 6b af fe 6f 7e 91 eb 20 7b ce cb bf f3 42 5c d4 2f 9c 17 b9 ff ed f2 7a 8e 51 37 23 a7 39 b7 62 45 7c 4b 82 61 69 85 86 76 c6 ab 3d c1 32 9a 14 e7 61 ec 62 35 b2 92 ae 90 8d 35 ed 7c 98 a8 f4 34 46 f5 0b 54 5c 43 5c 37 be 1b a2 5b e2 6e c8 cb cb d9 22 cb af 2e a6 ff ea 22 bf 30 3c 0c 15 3f 38 a8 ce f3 23 6b d6 78 08 81 e2 05 8d 7b 16 05 8b 6a b3 43 46 6c 92 75 c2 94 db 88 3f 0f d5 c0 7e 75 29 24 81 e5 b8 56 2e 91 90 b8 4b 9c 1e 2e 70 bb 68 ba 48 84 dc 8c de d0 27 a0 90 8e ee 96 06 ed c7 c1 2d bd 1d d4 d9 22 a2 3c 50 e8 79 6b b4 e4 6c 2c 07 bc 55 25 bf 62 38 2c Data Ascii: H:"lj5zQ+kR3UXpiLlRmzo'Lko~ {B\/zQ7#9bE\|Kaiv=2ab55\|4FT\C\7[n"."0<?8#kx{jCFlu?~u)$V.K.phH'-"<Pykl,U%b8,
2024-08-29 19:20:12 UTC	10592	IN	Data Raw: a5 00 2b 68 a1 ec 63 d1 a0 52 e6 e5 37 c5 10 49 8b c4 55 63 7a b7 0d c3 ec 58 11 7f 18 08 8a 3d ea 2f 89 50 c6 ea 67 f4 99 78 09 da 13 4b 13 ed 43 e7 b1 ee b3 7f 16 9e ef 2e 6f 6f f7 fd cb 70 39 3c 1f ee 8f 75 0f d3 27 e1 92 cd 1e b8 b1 0a 4b 7f 2e 42 2d 80 84 01 ce b1 70 cf fd 74 78 06 3e 30 76 f7 fc 74 77 df 1b 47 4f c2 d9 38 a2 77 4a 24 f7 8c 26 29 49 8c f4 e0 04 5a ac e3 88 7e 4c 56 fc 27 58 b8 f4 83 a4 ea 4b bf e4 1b f4 cb 1b ee 07 11 fd 97 aa 36 2c d0 e6 18 ff 9c e1 9f 34 5c d2 97 ce c7 e9 ed 6d 34 f6 ce c3 39 0d 3f 55 b1 bb ef d3 56 38 a7 0f c8 0d 7c 23 96 86 2e 8e 17 aa 93 27 e1 9a f8 dd 6a 55 06 99 2f f8 24 d5 f1 ee 6e 04 b8 18 9a 0a e4 ff 42 ca 24 55 09 d5 40 f5 4e ce b6 57 52 a8 4a 12 aa 24 d5 95 a4 30 ee 53 a5 3e dd f3 73 9a 5c 38 ab de de 2e Data Ascii: +hcR7IUczX=/PgxKC.oop9<u'K.B-ptx>0vtwGO8wJ$&)IZ~LV'XK6,4\m49?UV8\|#.'jU/$nB$U@NWRJ$0S>s\8.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49793	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:13 UTC	437	OUT	OPTIONS /api/report?catId=GW+estsfd+sin HTTP/1.1 Host: bfd0284f-02f3d9a4.ency.cloud Connection: keep-alive Origin: https://hkwyolawofficelogin.ency.cloud Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:14 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-08-29 19:20:14 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2024-08-29 19:20:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49796	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:13 UTC	678	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hkwyolawofficelogin.ency.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:15 UTC	729	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:15 GMT Content-Type: text/css Content-Length: 20414 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 4835373 cache-control: public, max-age=31536000 etag: 0x8DC9BAA0E5931F9 last-modified: Wed, 03 Jul 2024 21:49:46 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1fa59e4f-601e-00e5-264e-cec85b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:15 UTC	13705	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-08-29 19:20:15 UTC	6709	IN	Data Raw: 92 0c 2b b5 10 18 11 95 ea 17 fd 0e 48 f4 09 a8 0e 68 22 46 ad 15 33 4c b6 d9 26 21 a3 89 c3 d5 0b 59 ac 94 76 92 95 07 51 45 4c de 2a db 92 71 17 24 74 c1 b1 25 df 5c b2 c6 74 44 2d 3a 22 76 c2 3a 86 65 71 17 52 29 8a b7 43 8c 61 d2 b3 a0 3c c2 d9 8b c3 e3 98 4d b0 e7 29 10 13 07 61 96 00 7f 5f d4 41 ac 1b ee 30 ca 87 56 74 40 6a c5 30 5b 09 2e d4 8b ce dd 26 f7 97 29 35 af e1 60 5c 59 ad 34 20 05 5e 8e 15 7a ab 8f 1b aa 8f 7d b5 c7 78 e5 31 52 77 ec af 7a d8 50 f5 d0 db f3 a1 a7 e7 43 ac e7 c3 86 9e 8f 1a aa f7 d6 ee a9 1c ab bb a1 ea 71 43 d5 13 6f dd 13 4f e5 13 ac 76 52 88 1a 1c ad 9d 87 c1 97 bd 78 f0 a5 74 3b dd 06 d5 d9 86 ae 13 56 fb 2d df d0 49 93 2a a5 57 d5 80 29 29 1e 7f a9 0c 57 74 1c 8e 05 b5 d1 f8 cb 0e f4 e8 c4 92 94 c7 89 fc 6a 32 e8 f2 Data Ascii: +Hh"F3L&!YvQELq$t%\tD-:"v:eqR)Ca<M)a_A0Vt@j0[.&)5`\Y4 ^z}x1RwzPCqCoOvRxt;V-IW))Wtj2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49794	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:13 UTC	655	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hkwyolawofficelogin.ency.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:15 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:15 GMT Content-Type: application/x-javascript Content-Length: 122147 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1866312 cache-control: public, max-age=31536000 etag: 0x8DCB563CA8588E7 last-modified: Mon, 05 Aug 2024 15:32:18 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a7cf692a-401e-00ad-454f-e98659000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:15 UTC	6448	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b e1 92 fc 02 8b 56 b3 c6 40 15 d3 80 19 4c 55 f7 2c c5 70 64 29 6d d4 c8 92 57 92 79 8c f1 7e f6 5f 44 64 a6 94 b2 65 aa 6a 76 cf bd e7 9e db 3b 5b 58 99 91 af c8 c8 c8 88 c8 c8 c8 0f 3f 6f fd 5f 95 9f 2b bb df ff 5f 65 78 d3 bb be a9 0c 4e 2b 37 9f ce ae 8f 2b 57 f0 f5 8f ca e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 37 0f 7e 52 19 fb 01 ab c0 df 91 93 30 af 12 85 95 28 ae f8 a1 1b c5 b3 28 76 52 96 54 a6 f0 6f ec 3b 41 65 1c 47 d3 4a fa c0 2a b3 38 fa 93 b9 69 52 09 fc 24 85 42 23 16 44 cf 95 2a 54 17 7b 95 2b 27 4e 5f 2b 67 57 b5 3a d4 cf a0 36 7f e2 87 50 da 8d 66 af f0 fb 21 ad 84 51 ea bb ac e2 84 1e d5 16 c0 47 98 b0 ca 3c f4 58 5c 79 7e f0 dd 87 ca 85 ef c6 51 12 8d d3 4a cc Data Ascii: {WH8F3V@LU,pd)mWy~_Ddejv;[X?o_+_exN+7+W`7~R0((vRTo;AeGJ8iR$B#DT{+'N_+gW:6Pf!QG<X\y~QJ
2024-08-29 19:20:15 UTC	16384	IN	Data Raw: a9 a5 19 4d 43 e7 ae 81 f7 62 d1 e3 b5 21 d0 77 41 e3 bd ba ba 3f b9 3f 3e ba bf 38 b9 38 3a b9 3e 1e 9c 0c 2f 07 37 27 7f 9c 0d 61 49 f6 4f e1 bf be d9 d6 38 d4 c9 1f fd f3 cf c7 27 b0 60 f6 0d a3 85 73 28 32 78 d9 fb f3 41 ff 37 25 d7 14 b9 47 bd e3 fb ab de 70 f8 fb e0 3a cf 6c c8 a2 67 c3 e1 d9 e5 47 51 05 5f bc 1c a4 69 ae 80 ac d6 d1 94 75 9c 9e 1c 9f 5c f7 6e 68 a1 5d 9e 9f c1 c2 1d 7c 3c bb bc 3f 3e 1b f6 ce cf 07 bf cb 2e ed ed f7 fa a2 c4 d5 c9 fd f5 e7 73 58 b0 e7 43 d1 5e ab 6b c8 cc 8b c1 11 b0 8c 3e ac e0 e1 fd d5 a7 c1 e5 c9 e5 67 1a de d1 79 ef f2 37 0e dd de 37 cc 6f 40 df 0c 06 c3 4f 03 e4 82 a2 40 e7 db 05 ce 07 97 1f 33 f8 bd 6f c0 9f 5d 7e e9 9d 9f 1d 67 f0 72 32 10 87 6a 5f 4d 33 cb 3a b9 e8 9d 01 53 bb ec 0f 2e ae ce 4f 6e 4e 32 80 Data Ascii: MCb!wA??>88:>/7'aIO8'`s(2xA7%Gp:lgGQ_iu\nh]\|<?>.sXC^k>gy77o@O@3o]~gr2j_M3:S.OnN2
2024-08-29 19:20:15 UTC	16384	IN	Data Raw: 87 43 45 9c 00 c3 a1 05 58 26 d2 7e 03 2b 7c b4 65 b8 82 a2 87 41 7d 75 15 ca 94 7f 0f 25 bc ce 72 76 10 fc bb c8 4a e9 36 63 81 1f e4 57 4a 0e 04 a2 4a e8 85 ab 38 b8 82 c9 ca 88 b2 e4 58 2e 41 4a c1 a0 07 62 29 bf bd b9 75 c9 ff 29 5c f6 4c 62 9f de 53 a7 2f 7e 81 14 ca c5 e4 ed 97 8d 8c 2e 77 ce 7d 7a 2a 0e dd a2 03 d7 f7 74 3c 25 9b 29 cb 94 0a ce 56 12 fb 74 41 43 5c fb 9c 17 17 2e b9 34 ce 56 97 a8 fe 64 b3 fa 0a 3b 39 40 e1 e8 76 5e 97 fc ea 0e af 6a f1 a4 0c e6 ce 4e 65 9a e0 62 77 b6 2f 53 c4 92 bb b3 f1 9a 36 4f 9c 54 1d 3d ae dd d9 91 9e a0 92 23 1a 20 de 74 67 83 fa e8 89 54 1a ac ed d5 f4 18 c4 96 2d db 2e d2 d8 f6 f6 4a 1a 51 23 3e 35 22 ba a2 e0 e2 ce 0e f4 92 e4 3e b5 38 ab e9 53 a5 1f 45 4c dd d9 d3 9a 3e ca b3 d7 f8 da 9d 3d aa a1 ed 4d Data Ascii: CEX&~+\|eA}u%rvJ6cWJJ8X.AJb)u)\LbS/~.w}z*t<%)VtAC\.4Vd;9@v^jNebw/S6OT=# tgT-.JQ#>5">8SEL>=M
2024-08-29 19:20:15 UTC	16384	IN	Data Raw: 7c 5a 99 59 6e 7e 1e 5d b8 49 d7 62 59 97 85 31 cb 87 5d 0b 65 3b 9e 85 c2 25 f4 64 8e 6e 7d 82 47 58 bc 53 71 13 e8 85 ef 9b 51 bb 30 52 63 5f df 71 7f 00 df 1c d6 c3 7f 52 d1 6d bc 2b 57 52 6f de 2d d6 e8 cb 61 61 98 ed fc 20 be ba 26 2e 78 15 17 0c ed 4b fb da e5 90 25 57 18 09 72 7c f3 6c c1 36 c9 a0 fb c6 71 f1 ef 20 21 ce 64 40 0c 72 72 2f 64 f8 56 1b 15 5a 0c 6d 76 4d 89 3a 8b 2d c0 e0 0b 87 c1 e2 ca 50 82 0a ae 54 75 76 d8 6f 06 7a f4 ae b2 55 11 8e 85 66 0c 27 49 ae 6d d5 dc 18 4b 7d 46 17 4f fd 60 78 82 3a 6c 73 8a b6 b9 a8 cc 3d 20 8c bd ae 4c 9a f0 3d 2b 45 85 d2 c2 35 c8 8d bb 0c cc 22 06 c1 32 a7 1d 36 ca 29 26 7e 89 9c 10 3e 13 15 d3 e0 d2 02 72 38 03 3e 45 c5 aa 9a 9d 1a 0b 8a 16 19 95 36 5a d4 c6 84 2c 8e e5 75 af 1a 1e 74 50 14 96 21 12 Data Ascii: \|ZYn~]IbY1]e;%dn}GXSqQ0Rc_qRm+WRo-aa &.xK%Wr\|l6q !d@rr/dVZmvM:-PTuvozUf'ImK}FO`x:ls= L=+E5"26)&~>r8>E6Z,utP!
2024-08-29 19:20:15 UTC	16384	IN	Data Raw: f4 ee 43 c5 d1 df a7 f2 da 94 27 2f fd 3c 42 76 01 4b 84 aa 64 b0 b6 3a 24 5e d4 84 13 8b 8b b6 aa 08 1b d9 68 df 84 8e 00 b9 c7 6e d3 03 7a f9 87 38 fa 10 26 e1 aa 5e 71 51 48 1e 75 64 40 aa 32 c1 88 e2 01 a5 d2 e0 f7 b8 0d b0 0c 56 95 8d 6b 89 60 43 a7 49 39 2a 58 2c 4f fc 1c cc 9b f3 ba 75 b5 96 22 30 95 64 ae 26 44 2a a8 ad 24 88 4f 96 c2 4c 80 b4 e9 98 56 99 d0 49 c4 1b b8 52 65 3d a1 a0 97 a9 cc 22 c8 b2 d0 f1 cd c5 57 5e 9f 49 ea 90 ad 7e 42 ac 0f c3 35 24 fd b7 56 8f 66 b5 44 1a 24 d7 6c d4 d2 67 0f 12 28 6a 2e fb c7 0c 0a e1 30 40 a3 d5 ab 7e e3 1c 13 f8 66 22 c6 c4 28 4a d8 1a b1 5c 6a d7 28 f0 0c 3a 85 2c 38 53 76 01 5d bd 54 dc 56 ea 9e 3d 7d 3a 77 18 ce cf b4 70 52 cb 54 a9 70 c1 2f fa ef 41 5b 8e 3d 64 f8 40 42 af cb b1 38 e4 0a f7 d6 09 95 Data Ascii: C'/<BvKd:$^hnz8&^qQHud@2Vk`CI9X,Ou"0d&D$OLVIRe="W^I~B5$VfD$lg(j.0@~f"(J\j(:,8Sv]TV=}:wpRTp/A[=d@B8
2024-08-29 19:20:15 UTC	9480	IN	Data Raw: 2e 59 4a e7 44 24 11 9f 92 48 cb ab 64 8e 95 09 b5 78 9e c7 fd de e0 63 d0 55 3f 0d 2c a2 23 9a b2 8a 08 29 40 fc c6 43 eb 2d 79 50 f5 e0 40 ed c5 c7 2a a9 4a bf b6 e4 98 ff 17 83 c2 4c 43 df 5b 61 7a 8f 91 0c cc f8 f2 a7 fd a8 a2 24 50 de d0 fa 11 f4 05 2c 29 45 fc e5 fc 45 26 bb d5 b9 d5 80 7d ab 01 87 e9 e3 9f f9 37 1a 21 34 5d 58 02 dd 92 aa 11 ef ac 46 bc 4f e5 43 4c bf 44 26 53 3c c4 f2 fb 66 76 aa 2a 3f 58 55 9e ff 9f eb 97 1c bd 8d 21 ae 5a f1 d9 6a c5 87 66 c7 e6 b3 ee 8e 59 f7 3b 3a f6 56 1d 33 48 2f 53 63 65 71 24 d5 83 8e e4 24 ca 38 ec b4 2e 78 39 7b b4 62 f7 62 56 9c 54 06 b9 8e 5b 4c 86 eb ef 42 5d d4 59 e7 6d 2c fe 25 74 88 bc c3 b9 32 36 4f 72 18 c9 53 6f 75 4f b2 84 a5 ac de 23 d6 a7 3a 6b 82 fb b9 a2 f7 fe 5d 1f 29 7d d3 22 d6 27 00 3a Data Ascii: .YJD$HdxcU?,#)@C-yP@JLC[az$P,)EE&}7!4]XFOCLD&S<fv?XU!ZjfY;:V3H/Sceq$$8.x9{bbVT[LB]Ym,%t26OrSouO#:k])}"':
2024-08-29 19:20:15 UTC	15928	IN	Data Raw: ef 87 97 27 29 30 9b 71 48 08 cf 0f 7c 17 1a 84 1d 05 a1 e3 05 5e 92 73 c8 8f 78 2f 53 67 9c ba 10 eb 11 03 d9 70 1b 14 c4 bd 20 f6 12 ac 51 9c c7 2e b3 1d 26 f6 22 72 dd d4 86 b9 2b b9 93 e4 3e cf c0 1c 3c 4f b0 0c ac 41 d8 82 83 95 0b 7f 2f bd 18 2d 22 96 91 c8 85 c8 92 04 a2 2f 4a 58 22 33 0f e8 01 26 8b 19 f5 a4 d8 4f 67 a9 cd 42 c6 80 07 76 18 ba 58 7f 74 c2 b8 ed 31 97 45 91 27 bd 60 2f 98 67 bc 95 69 e8 c7 b9 17 82 6c a5 1b 3b 19 0c e8 30 4f 58 28 1c 9b c9 04 42 6b 2f a2 d0 75 d2 2c 4e 82 d0 77 6c ce 6c 1f ba 49 02 4c cf 3d 74 26 44 92 71 f7 8e 7b 09 ab dd 18 d4 73 e2 20 92 50 52 84 88 20 7a 33 68 b2 22 97 b6 eb e5 90 1f 79 10 f3 fd 74 96 fa 0e 54 bd c4 13 10 e7 50 8f 3d e0 36 98 a0 60 c2 f6 42 16 25 de 7e d6 c9 68 46 76 10 e5 c2 8e 93 18 4a 8a eb Data Ascii: ')0qH\|^sx/Sgp Q.&"r+><OA/-"/JX"3&OgBvXt1E'`/gil;0OX(Bk/u,NwllIL=t&Dq{s PR z3h"ytTP=6`B%~hFvJ
2024-08-29 19:20:15 UTC	16384	IN	Data Raw: cd 2b f1 74 59 aa b1 11 bb cb b2 5e 62 8b de 4e a5 08 15 0c da 3f 91 15 ef 34 b8 a9 d0 5e 19 68 1d fa f3 d7 8b aa d0 41 fa 4a 40 17 4f f4 6b b5 b3 5b df f9 70 30 99 4c 0e 88 e0 a3 d1 b8 f5 7e fc 02 da 3b 45 4b 3c ff e9 c9 83 3e 62 ab 67 6f fe b2 73 4d c8 1a 46 77 3f 6f a4 b9 4a 9f 82 ec cc 53 fd 72 a3 e7 60 4a 7e 6f a6 f7 ea 5b f5 da 1f 36 f5 57 67 ae fc 81 d1 66 f4 72 5d 8d f9 db 85 e3 13 85 37 ad 5b 39 3f 2b 17 86 67 ae 19 f9 eb 9f bf 1c 8f c3 e7 f3 aa 7c 99 be 0c 6d 2f 7f bb 24 b4 4d b6 f1 b7 9f a0 3a 9d a2 56 ed 0b f5 ca f0 e5 e7 fd 7b 55 54 3e dc e7 cd 3e 7b db b3 59 bf fc 7b 33 41 cb 82 9b 55 92 6f 18 7f a3 d5 69 25 c9 da 2e f9 a5 cc ef 14 f9 d5 d4 9b 4f 1b 22 27 d5 df e6 8f 4b 21 9f 17 98 f4 7a 73 69 27 03 a4 69 ee 37 52 7e fe 49 01 05 42 1e d2 75 Data Ascii: +tY^bN?4^hAJ@Ok[p0L~;EK<>bgosMFw?oJSr`J~o[6Wgfr]7[9?+g\|m/$M:V{UT>>{Y{3AUoi%.O"'K!zsi'i7R~IBu
2024-08-29 19:20:15 UTC	8371	IN	Data Raw: 0f 7f 24 d9 49 44 30 f0 31 a2 92 f6 77 f6 f4 dd c7 70 f9 af cc d7 fe 8a 83 3c cc be 68 ff a0 a3 05 c8 79 e5 7b 90 da 3f e1 45 58 c3 24 ed 5f 58 fe 2d c1 80 3d 87 31 e8 04 5e c6 53 b0 6a 84 48 af 58 a2 ae a5 16 49 0f a1 e0 cb 98 85 58 07 95 0a 9e 27 f4 31 9d 2a ba ac 84 e7 5a 88 8f 71 d5 de 82 9a 83 b7 31 29 c2 f3 97 0e c9 e1 74 88 c4 b7 d0 62 32 db d9 a1 d2 d7 f3 d0 8f 73 53 ba 96 90 1c 70 40 4f 50 d8 49 ae b5 94 30 10 e0 c2 c1 94 30 24 95 e6 f1 67 3f 86 d9 8b 2b 17 9f f8 e2 49 1c 9f 2f 08 3e 59 f0 27 cf 1d 8f b8 30 1e 7c 76 c5 9f 9d 70 14 66 98 aa 81 7a d3 a3 c3 a1 48 fe 34 81 7f 13 0d 1e bc 01 42 20 c9 41 9a c6 5e 88 b4 0f 20 81 45 60 00 7f 4d cd 5c 01 36 18 be e1 91 90 78 b4 2c 4a b6 e7 f8 06 38 a8 e2 1d a3 8a 4b 0e 04 3c 4c 66 48 86 e7 87 6c 46 27 d1 Data Ascii: $ID01wp<hy{?EX$_X-=1^SjHXIX'1*Zq1)tb2sSp@OPI00$g?+I/>Y'0\|vpfzH4B A^ E`M\6x,J8K<LfHlF'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49795	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:13 UTC	674	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hkwyolawofficelogin.ency.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:15 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:15 GMT Content-Type: application/x-javascript Content-Length: 16112 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2258090 cache-control: public, max-age=31536000 etag: 0x8DCB32DEE62CF26 last-modified: Fri, 02 Aug 2024 20:01:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d8bb7daa-401e-004c-14be-e5c4fe000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:15 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 6a df b3 42 31 44 77 55 65 55 65 65 65 65 66 65 66 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d e0 65 79 ef d3 cb 1f 93 69 38 81 e3 c1 e0 5f 56 f7 68 94 7e c3 7b 59 01 f8 f0 e7 60 cf 09 e1 cf Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9jB1DwUeUeeeefeffOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<w(eyi8_Vh~{Y`
2024-08-29 19:20:15 UTC	2423	IN	Data Raw: 8b bb 3d 5d 27 52 9a 3c a2 13 b0 9b eb 24 70 18 1f e8 89 cd 25 78 90 3e 0c 91 c2 4d 48 db 6a e9 dd aa 3c 8f 8b f6 b3 14 9a e0 cc 4c 16 0d a6 96 79 b7 81 a2 b2 2b f9 a4 6a 49 af fa ee 28 5a 2f e2 a4 63 eb 75 52 bb 2d 7c 3a 72 ec e7 a4 9c b4 1d 76 57 31 6a 99 6f 53 94 98 20 8d 2f a8 4d f4 3e b1 62 d2 fb 59 e8 ae 67 ec a3 60 76 6f bd 06 d1 06 1f 2d 94 a5 df 30 ae bb 4a 24 65 9c ea c7 a4 3f d4 49 82 d5 83 41 f8 9b 4a 8a 0e f1 36 d8 2f db 96 6e 77 9d 3c 38 db 50 f8 9c da 5b 84 f1 f1 8d 5b 2f 6e 2c cd 11 d1 a9 41 e6 6d 8e c0 9e 82 2c df 6e 10 df 53 95 8d 12 68 b0 a2 94 92 43 99 78 07 76 35 ec 67 96 f9 37 16 31 5f 5b ae 40 6e 83 f3 0a aa 69 c9 31 ff 7d 56 a3 a7 11 a5 5f d2 60 16 52 1c c4 7e ba 68 bf 69 fa ea 12 10 fe ea b1 3c e4 a8 85 07 35 56 cc 34 9a 37 d4 a9 Data Ascii: =]'R<$p%x>MHj<Ly+jI(Z/cuR-\|:rvW1joS /M>bYg`vo-0J$e?IAJ6/nw<8P[[/n,Am,nShCxv5g71_[@ni1}V_`R~hi<5V47

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49797	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:15 UTC	364	OUT	POST /api/report?catId=GW+estsfd+sin HTTP/1.1 Host: bfd0284f-02f3d9a4.ency.cloud Connection: keep-alive Content-Length: 461 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:15 UTC	461	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 37 31 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6b 77 79 6f 6c 61 77 6f 66 66 69 63 65 6c 6f 67 69 6e 2e 65 6e 63 79 2e 63 6c 6f 75 64 2f 3f 6d 46 33 73 3d 6c 74 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 32 33 33 2e 31 32 33 2e 32 33 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 Data Ascii: [{"age":0,"body":{"elapsed_time":2718,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://hkwyolawofficelogin.ency.cloud/?mF3s=lt","sampling_fraction":1.0,"server_ip":"172.233.123.231","status_code":404,"type":"http.error"},"typ
2024-08-29 19:20:42 UTC	301	IN	HTTP/1.1 504 Gateway Timeout Server: nginx Date: Thu, 29 Aug 2024 19:20:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close mime-version: 1.0 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-08-29 19:20:42 UTC	289	IN	Data Raw: 31 31 61 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 45 72 72 6f 72 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 77 68 69 6c 65 20 70 72 6f 63 65 73 73 69 6e 67 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 32 32 31 26 23 34 36 3b 39 35 65 64 31 30 30 32 26 23 34 36 3b 31 37 32 34 39 35 39 32 33 31 26 23 34 36 3b 33 35 36 31 34 36 39 30 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 32 32 31 26 23 34 36 3b 39 35 65 64 31 30 30 32 26 23 34 36 3b 31 37 32 34 39 35 39 32 33 31 26 Data Ascii: 11a<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY>An error occurred while processing your request.<p>Reference #221.95ed1002.1724959231.35614690<P>https://errors.edgesuite.net/221.95ed1002.1724959231&
2024-08-29 19:20:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49799	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:15 UTC	807	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:17 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1432 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C531_SN1 x-ms-request-id: ba3416dd-eeea-4a87-bb95-39fd3ef6b89f ppserver: PPV: 30 H: SN1PEPF0002F8DE V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:17 UTC	1432	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 4d 6f db 38 10 bd f7 57 d8 44 11 88 1b ae 22 c7 4e 9c c8 61 82 a2 db 45 5d 34 6d 51 75 b1 07 d7 0b d0 14 65 73 2b 93 82 48 3b 09 1c fd f7 1d 7d 59 b2 da 4d d0 43 0f 89 e5 e1 cc e3 7b c3 99 a1 7c 65 78 2a 13 db b3 0f 89 a0 c8 8a 7b 7b f2 2f db b2 d2 8a ae 5f f4 fa d1 46 71 2b b5 72 2c 11 78 17 e9 d4 d9 b2 b4 67 7a 52 f5 04 b6 33 33 a7 02 fe 65 8e 5d 49 43 1a 67 70 ad 9e 7b c2 51 78 27 23 c7 cc d4 1c a7 c2 6e 52 d5 cb 9f 5d 71 9f e8 d4 9a 49 0e 28 69 6e a2 bb ca e6 ef 32 22 43 5f 91 58 b3 50 84 7e 7f 90 4d aa 50 9b 87 72 16 c7 8e ac 11 88 24 cd b3 c0 f0 a5 0c a3 7d af 59 c8 0a de 74 b7 07 12 ee 9a 82 28 97 53 08 72 13 8a 10 11 8e 87 33 67 d6 d1 5c 0b 31 85 ac 2a 03 82 46 b3 60 4e 0c f5 88 a2 c2 8d 85 5a da d5 c4 5c a9 c9 Data Ascii: WMo8WD"NaE]4mQues+H;}YMC{\|ex{{/_Fq+r,xgzR33e]ICgp{Qx'#nR]qI(in2"C_XP~MPr$}Yt(Sr3g\1F`NZ\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49798	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:15 UTC	559	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_tzwwq6wdslxjdiwzdatg6a2.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:17 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:17 GMT Content-Type: application/x-javascript Content-Length: 16112 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2258092 cache-control: public, max-age=31536000 etag: 0x8DCB32DEE62CF26 last-modified: Fri, 02 Aug 2024 20:01:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d8bb7daa-401e-004c-14be-e5c4fe000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:17 UTC	6449	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 6a df b3 42 31 44 77 55 65 55 65 65 65 65 66 65 66 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d e0 65 79 ef d3 cb 1f 93 69 38 81 e3 c1 e0 5f 56 f7 68 94 7e c3 7b 59 01 f8 f0 e7 60 cf 09 e1 cf Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9jB1DwUeUeeeefeffOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<w(eyi8_Vh~{Y`
2024-08-29 19:20:17 UTC	9663	IN	Data Raw: 54 8e 0d 89 ea 05 07 40 51 1f ca 81 79 d7 08 e4 02 a5 72 be 66 14 bf f6 68 c4 6a 7f d3 b2 15 5c c0 29 ea ce 05 d9 6b cc 6c de 2c 84 a8 6b b0 b1 f0 41 5a cf e7 e4 29 f5 5d 65 3f c4 23 61 6b f3 d1 fa 3a 66 08 06 d5 e2 e2 a2 4c ad 22 ab ed 24 ed 76 30 ab 15 4f ad ba 42 b4 18 b7 a0 74 1a 4f 74 60 04 9d d8 ea 7a 35 7d 54 d3 b2 48 8b 87 65 93 63 43 62 de f5 e0 b6 de d8 bb 65 88 61 06 9e 3c 6c 99 53 aa 8b ce 02 86 ce e1 cc 2e 1e 30 dd fe 0d a8 1c 3a f1 fa 07 69 22 b2 ac 31 91 54 a9 98 15 a1 9f b7 90 d5 96 bc 8a 4f 1b 97 e1 2f 69 0f 4f 66 df 94 c7 b1 12 e8 14 37 4f 42 e7 37 9a 98 9f 36 40 c9 27 99 6e 71 94 74 52 b1 70 4c c7 d3 9a 95 45 96 b7 37 b6 d0 83 48 b5 4a 1f ef d9 96 56 94 aa 6a 66 1d bc d9 36 a9 40 4e d5 2a 75 f4 e6 cc 2b 39 81 53 4d 93 90 41 bb 95 ed b8 Data Ascii: T@Qyrfhj\)kl,kAZ)]e?#ak:fL"$v0OBtOt`z5}THecCbea<lS.0:i"1TO/iOf7OB76@'nqtRpLE7HJVjf6@N*u+9SMA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49791	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:16 UTC	752	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:17 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:17 GMT Content-Type: application/x-javascript Content-Length: 116394 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5955137 cache-control: public, max-age=31536000 etag: 0x8DC90CF0C1378C3 last-modified: Thu, 20 Jun 2024 02:16:51 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ee46daa3-a01e-0041-7a1f-c4a235000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:17 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 8d 31 44 46 78 48 42 7a 98 49 02 1b 48 f7 f4 10 0f 9f b0 cb 58 89 91 3c ba 70 69 ec fd db cf 5a ab aa a4 92 2c 83 49 f7 3e e7 e1 4c 7f 1d ac 4b a9 ee b5 ee 97 cd 57 d5 ff aa bc aa 6c ac ff 5f e5 ec fc e0 f4 bc 72 fc be 72 fe d7 a3 d3 77 95 13 b8 fb b5 f2 e9 f8 fc e8 ed e1 fa f5 60 a3 f8 ef 7c e2 45 95 b1 37 e5 15 f8 bd 72 23 3e aa 04 7e 25 08 2b 9e 3f 0c c2 59 10 ba 31 8f 2a 37 f0 37 f4 dc 69 65 1c 06 37 95 78 c2 2b b3 30 f8 ca 87 71 54 99 7a 51 0c 1f 5d f1 69 70 57 31 a1 ba 70 54 39 71 c3 f8 a1 72 74 62 35 a0 7e 0e b5 79 d7 9e 0f 5f 0f 83 d9 03 5c 4f e2 8a 1f c4 de 90 57 5c 7f 44 b5 4d e1 c6 8f 78 25 f1 47 3c ac dc 4d bc e1 a4 f2 d1 1b 86 41 14 8c e3 4a c8 87 dc bb 85 46 Data Ascii: }[[H-1DFxHBzIHX<piZ,I>LKWl_rrw`\|E7r#>~%+?Y1*77ie7x+0qTzQ]ipW1pT9qrtb5~y_\OW\DMx%G<MAJF
2024-08-29 19:20:17 UTC	16384	IN	Data Raw: c3 4f e7 f6 2d 3b fb fc e6 ed 87 83 b3 b3 a3 4f 3f d9 0f 2f 09 c4 57 48 34 ab a2 bb ee 74 49 f9 2a d4 18 cf e4 74 cb 84 c8 c0 03 5d 47 a9 04 39 1f fd d6 a0 97 28 b7 49 24 38 14 0f 50 5f 88 69 5f 63 94 c6 f9 68 9c bd 36 62 c9 32 f9 ec e6 42 00 63 56 26 a1 4c 30 28 68 5c 1a e1 bf d4 a4 19 8b 7c c7 8c b5 8b ea 6a b4 28 a1 b3 d7 a5 a0 80 cf a7 c8 51 cc 21 2a a1 71 3f a1 bc 53 19 95 23 01 1a 6b b1 65 a4 bf ff 10 55 85 28 f5 a5 dc 69 62 75 48 30 ac a1 1c 8c 8a 48 9f e6 a2 e8 89 b2 7f c2 b6 64 c4 a0 0a ca e7 7d e2 69 63 54 a1 55 42 3e e4 70 74 42 e3 d9 05 48 e5 3c ff bf 84 8d fb bf 16 28 26 bf 43 74 39 e5 0a 77 b2 2c ca c4 f7 86 06 f9 8e a0 20 d4 97 92 b8 20 a5 91 ec a8 f0 ef 8f 10 92 1f e9 e2 3f 01 75 fe e0 80 3a a8 cf 02 72 c4 fd a3 02 ea 24 2b 03 ea b8 d8 4e Data Ascii: O-;O?/WH4tIt]G9(I$8P_i_ch6b2BcV&L0(h\\|j(Q!q?S#keU(ibuH0Hd}icTUB>ptBH<(&Ct9w, ?u:r$+N
2024-08-29 19:20:17 UTC	16384	IN	Data Raw: 55 0b 7d 77 18 a6 28 28 e6 f6 c7 63 00 d1 bb 60 bd 6d c3 85 71 37 39 03 2e 39 87 8b f6 cc 32 c1 92 d3 3d b6 8d 49 23 4a af 0a 87 1c e0 c0 b6 77 49 48 41 ef a2 2e dc 4c 3e 92 72 98 bb 38 46 3a 94 08 bb 88 9e f0 22 50 b6 85 04 e7 5c c3 d9 00 67 f4 f0 c0 7b 7a 78 68 f1 74 0c 6d 2e 15 41 8b bf 04 af 60 fc 91 35 da 26 d8 49 6a 25 c4 8f ce 05 62 25 27 bc 70 34 e0 cd 14 43 b6 0f be ac 83 85 b3 45 9e fa d1 41 cb 0a 17 d6 88 48 18 65 7c 89 c9 30 94 0c 3c 73 f7 5b ed cf 46 61 5f 9a fc 0c 62 17 b0 61 6b 0b a5 a8 a9 7c d8 35 c5 a8 f1 13 c5 a8 79 ed 79 9b 97 2f a2 cc 83 67 9e 4a cc f2 8c 47 e6 89 91 d3 ca 51 92 c0 35 8d b9 8c 03 98 4b 6a 3d 26 c6 ad 42 de e6 5f 46 ad ff 4b b5 18 f3 aa b3 3f a4 22 e3 5f 0a e3 10 60 82 86 61 00 e2 5f 05 b6 ca d0 7d 4e ca 9f 8a 18 50 55 Data Ascii: U}w((c`mq79.92=I#JwIHA.L>r8F:"P\g{zxhtm.A`5&Ij%b%'p4CEAHe\|0<s[Fa_bak\|5yy/gJGQ5Kj=&B_FK?"_`a_}NPU
2024-08-29 19:20:17 UTC	16384	IN	Data Raw: ad 3d a9 80 14 74 ed 1e de 87 25 ad cc 0e bf 3c f7 a5 48 7e 7f 4b 64 c5 dd c3 33 33 09 50 28 85 f2 18 e0 94 87 c7 13 b8 e9 01 11 27 4d 63 b4 70 9d 26 cd 17 61 11 fe 18 47 37 70 a5 26 4d 05 3c b8 50 d5 1d 70 1d 8c 0d 98 5d 06 53 e3 e9 0a e0 71 2d b6 01 bb 00 8a eb 9a 39 59 94 c7 bf a0 6c 42 c2 94 dd f0 17 57 e1 ed f3 39 80 03 85 92 ba 97 68 30 fd 2a 29 60 02 e7 f4 98 8b 47 63 11 5d b8 44 06 28 4f ab 13 c0 32 8c 10 59 20 ac 22 8b 6b 49 7d bc 29 60 0a ab 17 70 05 5d 08 bb c9 d2 5e c3 a1 bd 86 71 8e f2 7c 4c d9 30 e4 fe 12 23 b2 36 c0 a4 e2 f7 45 16 26 39 54 f2 7b 45 1f 83 0a a2 c5 2e fa 66 3d 3c 5c 9b 89 3f 51 01 7e 48 6f 56 f9 ab 24 20 09 34 8b 8d b0 82 97 e8 b8 ba 0a 54 e5 4d f7 de 02 8d 8f 62 c8 99 91 b0 34 21 24 34 76 63 76 a9 31 d3 11 15 4e 71 d6 a7 e2 Data Ascii: =t%<H~Kd33P('Mcp&aG7p&M<Pp]Sq-9YlBW9h0*)`Gc]D(O2Y "kI})`p]^q\|L0#6E&9T{E.f=<\?Q~HoV$ 4TMb4!$4vcv1Nq
2024-08-29 19:20:18 UTC	16384	IN	Data Raw: 97 62 0e 8b f8 b3 2b ab d4 64 5d 58 a6 fe 0b 02 6b bb a8 40 12 00 f3 f2 59 6a bb fb 8a 1e 2d 2c 71 0c d5 66 81 fe 54 a5 96 a1 aa 0c f5 c2 fc db e9 9b d7 86 02 05 63 f5 6c 3a 6d 8a bd 37 8f dd 0c c3 90 e7 1e 9c 3a f3 8b 12 cf c6 0f 85 3b 28 07 a8 57 3b 89 28 01 17 32 6e 8a 88 41 0c 4b 9e 6c 61 e5 a6 2f e3 27 53 f3 93 85 5d 99 0e e4 6f dc ac 25 58 30 2f 81 2a 64 16 ab 65 94 09 85 56 29 1e 14 54 b3 9d f8 53 9b 00 2f 51 f7 8f 9e 65 c2 31 fe 95 6f a4 dc ed 9b 3c a0 b6 b7 29 a7 8e 60 5f 74 5c 10 84 8b 10 57 98 ce 17 22 ca 0d 62 f9 f2 8d 69 d7 8d 1d 36 bf 2f e2 1f a8 1c b7 26 67 05 fc 54 46 65 6e f6 5b 70 56 37 ee 8d 69 7b 7d f3 60 46 ab c6 58 31 b4 dd ae 8c ce 4d 7c 11 8f 72 8c 1a 83 7f 88 5b 68 10 3e d7 62 de a0 ef 41 f9 17 a2 98 d5 c3 f3 f0 fe ef 61 ea 7e 5b Data Ascii: b+d]Xk@Yj-,qfTcl:m7:;(W;(2nAKla/'S]o%X0/*deV)TS/Qe1o<)`_t\W"bi6/&gTFen[pV7i{}`FX1M\|r[h>bAa~[
2024-08-29 19:20:18 UTC	2240	IN	Data Raw: 89 66 a1 39 a0 f3 f8 42 a8 23 25 47 7f 38 7b e0 99 33 99 26 cd 17 f1 59 19 07 ac 7c 80 13 12 19 1f 10 fd b6 e0 43 3c ca 55 33 89 05 23 a5 8b ba 31 26 18 df 19 50 ff 84 22 7d c0 72 25 2d 9c 9a b3 30 59 e2 d8 01 54 c7 d5 ba f8 ea ca 5a af c4 ea c0 84 0e c2 35 7b bb 24 a2 40 69 04 bd ac 83 e6 18 df ff a4 03 45 87 d0 1b 91 63 5f 60 4f d2 34 ad 47 3b 23 f3 45 59 1b 90 db e1 b4 f3 be a0 9d 81 90 44 47 19 bb 07 23 d1 90 8c a6 78 e1 8a fd df 0a 6a 8d 52 b7 72 e9 31 ca 52 15 10 62 ba a7 db bc 9c 1c 1a 5c d5 56 c1 00 84 ea d0 63 11 55 1e 6a d9 18 20 83 bf 10 47 95 c7 70 42 ea b2 cc 80 4e d9 98 51 40 56 c7 91 24 7f 20 c9 f9 99 24 b1 2d 22 96 0f 90 51 98 49 19 78 21 f4 04 51 59 f0 ed a1 03 85 73 0d 19 88 99 24 3f a9 02 af 1a 57 68 ad 01 ef 08 86 1a dc 68 19 c2 e8 40 Data Ascii: f9B#%G8{3&Y\|C<U3#1&P"}r%-0YTZ5{$@iEc_`O4G;#EYDG#xjRr1Rb\VcUj GpBNQ@V$ $-"QIx!QYs$?Whh@
2024-08-29 19:20:18 UTC	16384	IN	Data Raw: 41 b4 ba 05 66 2d 09 ce 58 4c 04 05 47 13 6a fb 32 49 9a 51 57 2d ca 71 47 ee ee ce 72 b9 f2 de 8c 38 da 32 2b 94 8c a3 d2 1a b3 64 01 33 40 1d a5 86 34 3e 15 74 9d c1 e9 ad 3d fe c8 de ab 3d 93 73 87 96 8b a5 a6 13 df 3e bf 33 f9 74 3c b6 2b b0 a7 3c e3 7d 93 73 7f db 68 6b 05 c9 5a 43 17 02 8e eb 85 4d 04 cd b2 c5 67 19 dd 42 d7 82 38 40 04 5c 4f 8d be 9e ba 86 ef 69 0c fe c3 59 c5 9b 2c e0 b2 74 89 0b 93 f8 1b 5e 6b 86 db 10 96 0d 00 98 35 3a eb 41 67 61 6c 51 28 ba 8b 01 74 52 b9 db 06 8d 11 7d 37 b1 a6 9b 90 e4 50 9d e6 67 92 3a 29 fe 5e 62 5c 4a 11 c8 6a 2a 90 12 02 69 21 f5 2c 66 4e 8a 00 e4 e5 4e 88 71 d9 a4 c1 ef ac e8 0d 84 5b ac a1 18 4c 4a a4 ed 0d 54 7a 21 4a a8 68 96 d8 ea be e3 c9 ca 75 41 24 70 79 e6 8c cc 85 ec e3 b0 65 04 68 31 ab c8 1f Data Ascii: Af-XLGj2IQW-qGr82+d3@4>t==s>3t<+<}shkZCMgB8@\OiY,t^k5:AgalQ(tR}7Pg:)^b\Jj*i!,fNNq[LJTz!JhuA$pyeh1
2024-08-29 19:20:18 UTC	16384	IN	Data Raw: 87 40 56 7b 1b 8f 80 de fa 2f 0d 20 0e 41 58 4b ab 03 71 6c e4 d6 55 8b 12 24 55 49 5a 16 b9 44 a1 67 1b 31 17 b1 86 70 c6 ed 34 02 ae 20 9c 15 6f ed 79 c0 35 83 33 cc 6e ee 3b f8 68 6a 06 09 0a a6 0f f7 8f 50 30 73 b3 87 19 e0 63 5d f8 9d b9 9b 0c 3c 34 ef 58 22 77 12 c6 15 e5 99 54 76 31 e2 ed 5c 74 05 ae a0 0a 7a cb 45 05 1a bf d0 94 42 0a 2f c6 26 19 e6 4b 03 7d 2a 34 89 cb 56 1f 9d c0 69 14 49 77 a9 48 55 17 55 45 eb 61 cc b9 8a 13 90 59 77 bc 5a 57 f4 8a 4d d8 dd 62 b1 3b 64 0f 5c db 22 8a 97 58 c7 7a f4 e1 c6 38 89 6b db 93 b4 64 f0 38 2d 39 53 7d 26 02 5d c3 8b 6c a0 9d c5 40 bb 15 b2 94 69 8c 1a 95 c3 4d 69 ad c8 a0 65 65 43 3d 42 e6 2a 76 a5 92 14 43 d2 b5 a3 6c 37 00 ab 6e b3 13 76 b7 46 fc 13 6b 2a ec fc 1a 9b 8e 07 5e 7d 0c 31 6c 41 39 3e c2 Data Ascii: @V{/ AXKqlU$UIZDg1p4 oy53n;hjP0sc]<4X"wTv1\tzEB/&K}4ViIwHUUEaYwZWMb;d\"Xz8kd8-9S}&]l@iMieeC=BvCl7nvFk*^}1lA9>
2024-08-29 19:20:18 UTC	2162	IN	Data Raw: 7e bd 8e f2 17 31 22 d9 7c 4f 90 e1 21 0c cd 58 e4 27 8e f0 cc 3f e7 60 15 01 ff 8c f9 67 ca 3f 43 2f f5 9f f4 46 c9 0d e0 29 d4 b6 2e d4 90 3a 8b cb 09 52 b4 c2 aa 12 7f e6 fc 33 e6 9f 29 ff 0c 9d de 3b 7f 20 d0 ac fb 42 90 7d 4f e0 e4 1f c3 2c a7 cd 8e e9 ec 79 c2 2d cf f8 e7 82 7f ce f8 e7 92 7f ce f9 e7 da c3 51 7f ae 72 d4 81 7a 8d d0 e4 67 f7 b3 fb c4 e4 1f 6a 23 f4 98 fe ab ff 4a 5e b3 bf 52 d8 1d 7d 3a be 2c 4d 51 03 ef 5f e7 29 aa cd f9 bf ae ad bd 64 27 d4 f8 93 f0 4f c0 3f 73 fe 19 f3 cf 90 7f a6 78 8b 4d 93 07 4d be 41 ce be d9 e1 7b de 17 5a f4 ed 58 6e 8a 21 5b 68 a1 df df de 1e 72 21 e6 63 7f b0 2d 89 27 d9 21 ec 5b 3f ed 15 7a f8 16 68 67 24 ca 7b ce db 26 2c 10 b4 f2 46 ac c9 1b 9e 73 51 3e 2b 4c 3b 0e 0b 7e 68 f2 25 73 5c ec 13 8d fc c4 Data Ascii: ~1"\|O!X'?`g?C/F).:R3); B}O,y-Qrzgj#J^R}:,MQ_)d'O?sxMMA{ZXn![hr!c-'![?zhg${&,FsQ>+L;~h%s\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49800	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:16 UTC	718	OUT	GET /02f3d9a46eef4029b93e04119111d9c5/ HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://hkwyolawofficelogin.ency.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: xWtZrD5PDiMMhG3WcEB17w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-29 19:20:18 UTC	734	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:20:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: f3f48bd4-c1de-4088-9e7c-294dd82b8700 x-ms-ests-server: 2.1.18794.6 - KRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49801	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:16 UTC	845	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: 8d19784d-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:18 UTC	489	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:20:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ms-correlation-id: 4530b1a1-63d4-4b6f-b033-cc1522137bd9 x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 1D99660DF5454FE09248E91B71CD4A63 Ref B: AMS231032610035 Ref C: 2024-08-29T19:20:18Z access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:18 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-08-29 19:20:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49802	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:16 UTC	540	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_2P9n4TNNrWcgKwW6Mt6tGA2.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:18 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:18 GMT Content-Type: application/x-javascript Content-Length: 122147 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1866315 cache-control: public, max-age=31536000 etag: 0x8DCB563CA8588E7 last-modified: Mon, 05 Aug 2024 15:32:18 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a7cf692a-401e-00ad-454f-e98659000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:18 UTC	15633	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b e1 92 fc 02 8b 56 b3 c6 40 15 d3 80 19 4c 55 f7 2c c5 70 64 29 6d d4 c8 92 57 92 79 8c f1 7e f6 5f 44 64 a6 94 b2 65 aa 6a 76 cf bd e7 9e db 3b 5b 58 99 91 af c8 c8 c8 88 c8 c8 c8 0f 3f 6f fd 5f 95 9f 2b bb df ff 5f 65 78 d3 bb be a9 0c 4e 2b 37 9f ce ae 8f 2b 57 f0 f5 8f ca e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 37 0f 7e 52 19 fb 01 ab c0 df 91 93 30 af 12 85 95 28 ae f8 a1 1b c5 b3 28 76 52 96 54 a6 f0 6f ec 3b 41 65 1c 47 d3 4a fa c0 2a b3 38 fa 93 b9 69 52 09 fc 24 85 42 23 16 44 cf 95 2a 54 17 7b 95 2b 27 4e 5f 2b 67 57 b5 3a d4 cf a0 36 7f e2 87 50 da 8d 66 af f0 fb 21 ad 84 51 ea bb ac e2 84 1e d5 16 c0 47 98 b0 ca 3c f4 58 5c 79 7e f0 dd 87 ca 85 ef c6 51 12 8d d3 4a cc Data Ascii: {WH8F3V@LU,pd)mWy~_Ddejv;[X?o_+_exN+7+W`7~R0((vRTo;AeGJ8iR$B#DT{+'N_+gW:6Pf!QG<X\y~QJ
2024-08-29 19:20:19 UTC	16384	IN	Data Raw: c7 4e fc 98 5f 9e 47 ef cc 82 ff da 11 7a 55 91 47 20 de 09 58 cd fd 1d bd ab 94 dc b5 fa 6c 07 c5 26 f4 38 a5 8b 14 97 78 e9 18 f6 90 ba 07 50 79 4a aa 2b 74 0b 6b 3c de e0 44 c7 ec b8 5e e6 ac 58 ad bd d7 6f e1 19 86 db e8 7b 03 10 ae 62 08 b6 44 a3 92 5f 77 e5 4c 27 b0 e8 30 a4 1b 6c d3 9a 43 61 1e 30 e0 e2 ae 8f 03 e0 5e 98 51 a0 e9 8b 27 9f 3d a3 6d 30 b0 16 7c 25 7d c9 12 ca 56 b7 bf ce 33 51 cf 13 81 29 10 31 49 e9 dd 08 ae 9a 84 90 8f 3e d1 cb fc 0a 04 32 1a 9c e9 94 bc 08 d1 72 08 b4 26 eb b3 d2 6a b3 0d e4 82 8e f3 0f 71 14 e2 eb c7 5b 91 aa 7c f8 17 ce 0b 5d bb 81 8d e1 b7 30 72 1f a3 79 4a 7e f6 19 c5 27 6f 6f 92 b6 ea e5 d7 7a aa 3f 5a 23 ac 3b c5 06 98 14 29 1d d6 66 9d 22 94 24 fc 91 13 92 cd b4 bf fc f7 5f 2e 18 ca 4c 28 4b dd 9f 0f e1 9b Data Ascii: N_GzUG Xl&8xPyJ+tk<D^Xo{bD_wL'0lCa0^Q'=m0\|%}V3Q)1I>2r&jq[\|]0ryJ~'ooz?Z#;)f"$_.L(K
2024-08-29 19:20:19 UTC	10631	IN	Data Raw: 03 fd b1 98 8c 98 fa 44 64 c2 09 39 88 fb 11 12 01 37 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 0f 11 96 d2 99 f3 df 62 31 6c 06 7e ef 63 2f e5 2b eb 5f 41 6a dd 95 f5 6f cd 69 5c a6 09 1f 25 9d b5 6c f7 9b c5 22 68 85 09 05 53 8b 32 af ea 69 3a d1 8b 71 c0 0d 7d 4e f3 2a 16 17 ad 54 81 9a c8 d8 79 63 56 57 db 3c dc 36 86 b9 8b 3e c0 99 06 10 b9 9f 7d 64 fd 73 6a a4 bc 92 f3 86 b2 ad 95 ab a9 46 6d dd 8a bb 50 d7 c6 36 60 fa 4c e7 68 bb cb 74 e5 42 f5 be d9 4e fd fd ad bd 9c c8 21 2b dd 46 64 24 88 35 aa 76 68 20 c6 35 cd 45 54 d3 68 8f ce 95 b1 bc 95 ee 66 f3 90 8a 01 1d f6 5a 64 62 a2 c7 f7 5d 5b 6f 97 e2 fb 66 7f 3b 0e f0 ad 2d be 8c 03 4c 66 25 27 e9 49 53 06 72 11 d4 b7 8f 1c 5b f9 7b 3d 7a ed 26 a5 48 2e fe ca 6b 2c 52 1f b0 c9 3f 5f de 70 97 57 5e 6f 5c Data Ascii: Dd97h?B:C7fb1l~c/+_Ajoi\%l"hS2i:q}N*TycVW<6>}dsjFmP6`LhtBN!+Fd$5vh 5EThfZdb][of;-Lf%'ISr[{=z&H.k,R?_pW^o\
2024-08-29 19:20:19 UTC	16384	IN	Data Raw: 9e 1b cd b0 ff 27 1a 1d f6 b9 cd 6a 68 6b 79 e8 64 5f d0 45 40 be 83 c5 f9 82 a3 1e 17 d8 ac 3a 08 ee f3 fd a9 25 c3 79 c0 2d 68 91 c9 e0 95 f4 cd 57 04 c7 a8 0c 88 61 c2 61 2a c1 28 bc 2d 0a 24 c0 50 14 18 f6 27 cd f7 11 e0 c8 71 9f 98 3b 33 15 24 d4 2e 62 4b f6 90 c9 a3 57 12 ac 04 b3 aa 57 93 f6 31 ed c5 32 40 ba 99 83 01 d0 64 3a 33 ce 90 d0 ad a6 98 2d 14 e9 7a fd fd e4 2e 06 aa 1e 43 69 44 a1 2a ca 21 97 4a a9 fb 7b c7 ec af 51 26 7c d8 3f be 3c e0 07 ba 26 c9 ec 5d cb d0 bb 47 7d 08 d1 28 2a ca b7 ab 7a f2 c2 d4 cd 5e db 5a 71 3a 6a ab 7a 69 f8 68 d0 4f f3 42 ce 85 31 00 7a 47 23 fc b0 a5 55 f2 37 81 40 bd d0 c7 80 37 2a 21 ca 12 9f c5 e7 f5 ef 4b d1 de ff 96 41 ad ae 6d d5 0f 6a 58 0c 6a e6 cc c3 5a 11 15 ef fc 9f 57 ff 5c f8 3f 8d 7f 36 24 d2 d4 Data Ascii: 'jhkyd_E@:%y-hWaa(-$P'q;3$.bKWW12@d:3-z.CiD!J{Q&\|?<&]G}(z^Zq:jzihOB1zG#U7@7!KAmjXjZW\?6$
2024-08-29 19:20:19 UTC	16384	IN	Data Raw: ce 83 4c 60 b3 96 a7 00 da 3c 57 66 50 00 1b 0e ba 8e fa f9 30 09 e6 be a2 67 13 67 de c7 c2 72 8d f9 74 de 97 15 46 e4 ab 19 44 b5 9f 55 eb 72 05 6f ad 18 70 09 05 d6 3b d3 ee 33 29 03 ee 04 51 b0 b6 16 0f d4 be aa a3 8e f1 4e 8a 68 1f 4e f8 17 0d 2f 80 e0 1a 21 cd 72 00 46 36 87 9d 10 87 4d 5f 5b 6d f2 03 4a cd 9b 1a 29 71 29 77 ac d8 74 56 e6 92 28 60 64 2f 3a de 03 25 43 f1 68 c3 89 9c 9d b8 16 1c 42 9b ea 64 01 cd 2f cb 21 a3 6d 9e e6 f4 ad 22 c2 12 83 91 8e 93 3d 45 fa f6 d0 bb 8f 35 e3 66 4c e6 12 0c 35 45 ba f8 60 d6 61 42 a5 c6 dc 77 e4 c2 8b fb 4f aa 95 0c 2c fc ea f2 c4 ae 39 98 c2 87 16 f6 c2 fe 95 ad c3 d4 56 10 22 02 e3 a0 ee f2 94 6a 97 a7 25 af c0 a7 0d 19 24 59 0b 2a c9 31 58 84 36 07 61 4a bf ef 97 3b a8 e0 74 65 bb 06 7c 6c ac fd 48 b7 Data Ascii: L`<WfP0ggrtFDUrop;3)QNhN/!rF6M_[mJ)q)wtV(`d/:%ChBd/!m"=E5fL5E`aBwO,9V"j%$Y*1X6aJ;te\|lH
2024-08-29 19:20:19 UTC	16384	IN	Data Raw: bb f9 fe f1 f1 f1 fb 7a 25 3b c0 a4 3a c8 b5 73 d1 c3 43 1c b7 3f f8 31 cf 68 0d e1 f4 e9 f8 d6 ab 4d ea ea e6 f1 f1 c7 83 a3 fa 10 1e 1e ed 7c d8 3d 78 7f dc fd 54 8f d2 92 89 d9 7e a5 9e 6c 1f ec 1c ef 1f 9c ec fc b2 7b 7c 52 af 7e e7 fc e8 fd de ce eb cd bd 63 f5 ea 6d df 1a 19 30 5b 55 bf 74 01 c4 57 31 a2 c4 cf f1 dd bb a4 20 a2 d8 78 55 bf b0 f3 65 06 4f e7 e6 fb a8 79 33 e2 e4 ba fb 59 c9 91 c2 1d 8f b6 25 1f f1 23 2f d1 5f 89 90 9d 8b 3b f5 91 76 e2 7e e4 1d 6c 4c 60 00 6e b1 06 58 de 50 1e 62 d6 4b ef d3 70 4e 1c 42 9e fc 1e 8f 37 67 89 4a 43 43 75 18 d9 78 59 e9 77 45 f8 06 4a 0e dc 2f ba 5e 50 43 24 fe d9 6c 50 59 f6 80 37 e9 9b 79 32 b6 9c d0 1f 2d fb 0d e5 24 3e b1 f1 d8 f2 a9 fe 33 4b fd 74 12 0f 7b f4 d2 ee db bd e6 72 7f 9b cc 7a 7e ef 91 Data Ascii: z%;:sC?1hM\|=xT~l{\|R~cm0[UtW1 xUeOy3Y%#/_;v~lL`nXPbKpNB7gJCCuxYwEJ/^PC$lPY7y2-$>3Kt{rz~
2024-08-29 19:20:19 UTC	16384	IN	Data Raw: a1 3f f4 b7 fa 4d a1 6c ef a3 01 53 f5 da 65 ea e0 2c 94 82 f9 2e 7b 80 65 f5 97 81 45 01 3e 7f 2f e4 bb 13 51 97 20 9f 00 05 80 ff 50 ce 4e 28 f4 58 8a 26 06 e8 af d0 78 07 f4 34 b0 60 97 f2 37 47 03 4e ff a0 91 6c ca f5 0b 51 ff 1a 58 28 7c 49 7a f0 d1 e0 4d fd 0b b5 ae 16 a8 43 dc f7 71 79 89 b6 38 fe 1e 58 50 89 17 e0 32 97 f4 0f be 9c 33 18 5f f8 a6 fe 1d 58 df 82 ff a2 91 9c fe 19 58 a7 7c 5e 4e a7 47 24 86 4b 0a f1 a9 2d 8c 41 a5 fe a5 49 80 00 38 1a cc e9 9f 81 75 32 bb a4 1e 0b fa 67 60 3d 3a 22 22 78 01 a9 54 a2 04 fd 43 bd 49 fe 26 2b 7f a1 fe f4 af 81 f5 cd d5 62 01 6b 6c 90 a9 7f 07 d6 d3 5f b8 54 16 2d 0d fd 68 d0 79 24 e8 cf a4 b6 df f4 e7 ee 73 ab 76 f5 92 b8 4b 75 95 e7 c5 2f ad 56 aa a6 89 f5 42 4b db 90 4e 28 f4 39 14 8e ef 75 3c 33 e3 Data Ascii: ?MlSe,.{eE>/Q PN(X&x4`7GNlQX(\|IzMCqy8XP23_XX\|^NG$K-AI8u2g`=:""xTCI&+bkl_T-hy$svKu/VBKN(9u<3
2024-08-29 19:20:20 UTC	13963	IN	Data Raw: 69 8f 98 d5 63 8f 65 29 14 4d a5 d9 b1 af 32 93 29 87 fe 3b 64 e1 14 9f 55 6b df 76 1e b7 aa fe 46 1e 53 7f a0 8c ad 3c dd ca 65 66 9e 10 b8 f1 9c eb 3e c7 56 01 1b 29 17 19 5a 84 b3 f5 0f 3e 02 79 f2 87 9b c8 28 6d 47 18 1b 2f 67 b1 1a d8 e3 d5 f2 3f 66 4d ae 96 0f b2 26 79 b3 f7 5f 93 3b ad 17 e3 b6 b0 5c 7f 4f 0e 41 0d 7f 23 70 64 7d aa 63 15 59 ca 31 36 89 ff 49 ab fc 0b 9b c8 af f9 24 04 00 ea 6e 25 77 59 e7 5f 05 54 59 d3 2b 95 03 de 12 da cd da 5a 2b de af 8b 30 6b 2d c1 af 78 ac 0f 0a eb 92 7a c2 2d 96 7b e5 8c f6 8d 2b d2 0c 19 e1 cd c8 52 8b 8b 79 a0 17 23 0c fc 6d e9 a5 ea 74 3f 6a ad ff be f2 fa 77 23 9a aa 89 50 8d f0 5c 0a 82 62 7b 29 2b c7 ac 94 7b 9f 86 69 9a 9f 03 d0 a3 ab fb f9 a3 a9 7a 05 bd ff 72 0f cb 2f 59 a2 d7 c2 ee 45 ed f9 8a 30 Data Ascii: ice)M2);dUkvFS<ef>V)Z>y(mG/g?fM&y_;\OA#pd}cY16I$n%wY_TY+Z+0k-xz-{+Ry#mt?jw#P\b{)+{izr/YE0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49804	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:18 UTC	783	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:20 UTC	675	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:20 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 13702756 cache-control: public, max-age=31536000 etag: 0x8D8731240E548EB last-modified: Sun, 18 Oct 2020 03:02:30 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4be32bbf-f01e-00c8-2aa8-7d8673000000 x-ms-version: 2009-09-19
2024-08-29 19:20:20 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-08-29 19:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:18 UTC	797	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:20 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:20 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 20629049 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4BB4F03C last-modified: Wed, 24 May 2023 10:11:52 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 45619c8f-f01e-0018-76a9-3eb215000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:20 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-08-29 19:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:18 UTC	796	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:20 UTC	631	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:19 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 4136360 cache-control: public, max-age=31536000 etag: 0x8DB5C3F466DE917 last-modified: Wed, 24 May 2023 10:11:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b2eb9096-d01e-00da-24a9-d46055000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:20 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-08-29 19:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49806	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:18 UTC	797	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:20 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:20 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 13701938 cache-control: public, max-age=31536000 etag: 0x8DB5C3F495F4B8C last-modified: Wed, 24 May 2023 10:11:48 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ed809c39-e01e-003d-10aa-7da42c000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:20 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-08-29 19:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49808	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:18 UTC	563	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:20 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:20 GMT Content-Type: application/x-javascript Content-Length: 116392 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5955140 cache-control: public, max-age=31536000 etag: 0x8DC90CF0C1378C3 last-modified: Thu, 20 Jun 2024 02:16:51 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ee46daa3-a01e-0041-7a1f-c4a235000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:20 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 8d 31 44 46 78 48 42 7a 98 49 02 1b 48 f7 f4 10 0f 9f b0 cb 58 89 91 3c ba 70 69 ec fd db cf 5a ab aa a4 92 2c 83 49 f7 3e e7 e1 4c 7f 1d ac 4b a9 ee b5 ee 97 cd 57 d5 ff aa bc aa 6c ac ff 5f e5 ec fc e0 f4 bc 72 fc be 72 fe d7 a3 d3 77 95 13 b8 fb b5 f2 e9 f8 fc e8 ed e1 fa f5 60 a3 f8 ef 7c e2 45 95 b1 37 e5 15 f8 bd 72 23 3e aa 04 7e 25 08 2b 9e 3f 0c c2 59 10 ba 31 8f 2a 37 f0 37 f4 dc 69 65 1c 06 37 95 78 c2 2b b3 30 f8 ca 87 71 54 99 7a 51 0c 1f 5d f1 69 70 57 31 a1 ba 70 54 39 71 c3 f8 a1 72 74 62 35 a0 7e 0e b5 79 d7 9e 0f 5f 0f 83 d9 03 5c 4f e2 8a 1f c4 de 90 57 5c 7f 44 b5 4d e1 c6 8f 78 25 f1 47 3c ac dc 4d bc e1 a4 f2 d1 1b 86 41 14 8c e3 4a c8 87 dc bb 85 46 Data Ascii: }[[H-1DFxHBzIHX<piZ,I>LKWl_rrw`\|E7r#>~%+?Y1*77ie7x+0qTzQ]ipW1pT9qrtb5~y_\OW\DMx%G<MAJF
2024-08-29 19:20:20 UTC	16384	IN	Data Raw: c3 4f e7 f6 2d 3b fb fc e6 ed 87 83 b3 b3 a3 4f 3f d9 0f 2f 09 c4 57 48 34 ab a2 bb ee 74 49 f9 2a d4 18 cf e4 74 cb 84 c8 c0 03 5d 47 a9 04 39 1f fd d6 a0 97 28 b7 49 24 38 14 0f 50 5f 88 69 5f 63 94 c6 f9 68 9c bd 36 62 c9 32 f9 ec e6 42 00 63 56 26 a1 4c 30 28 68 5c 1a e1 bf d4 a4 19 8b 7c c7 8c b5 8b ea 6a b4 28 a1 b3 d7 a5 a0 80 cf a7 c8 51 cc 21 2a a1 71 3f a1 bc 53 19 95 23 01 1a 6b b1 65 a4 bf ff 10 55 85 28 f5 a5 dc 69 62 75 48 30 ac a1 1c 8c 8a 48 9f e6 a2 e8 89 b2 7f c2 b6 64 c4 a0 0a ca e7 7d e2 69 63 54 a1 55 42 3e e4 70 74 42 e3 d9 05 48 e5 3c ff bf 84 8d fb bf 16 28 26 bf 43 74 39 e5 0a 77 b2 2c ca c4 f7 86 06 f9 8e a0 20 d4 97 92 b8 20 a5 91 ec a8 f0 ef 8f 10 92 1f e9 e2 3f 01 75 fe e0 80 3a a8 cf 02 72 c4 fd a3 02 ea 24 2b 03 ea b8 d8 4e Data Ascii: O-;O?/WH4tIt]G9(I$8P_i_ch6b2BcV&L0(h\\|j(Q!q?S#keU(ibuH0Hd}icTUB>ptBH<(&Ct9w, ?u:r$+N
2024-08-29 19:20:21 UTC	16384	IN	Data Raw: 2d f4 dd 61 98 a2 a0 98 db 1f 8f 01 44 ef 82 f5 b6 0d 17 c6 dd e4 0c b8 e4 1c 2e da 33 cb 04 4b 4e f7 d8 36 26 8d 28 bd 2a 1c 72 80 03 db de 25 21 05 bd 8b ba 70 33 f9 48 ca 61 ee e2 18 e9 50 22 ec 22 7a c2 8b 40 d9 16 12 9c 73 0d 67 03 9c d1 c3 03 ef e9 e1 a1 c5 d3 31 b4 b9 54 04 2d fe 12 bc 82 f1 47 d6 68 9b 60 27 a9 95 10 3f 3a 17 88 95 9c f0 c2 d1 80 37 53 0c d9 3e f8 b2 0e 16 ce 16 79 ea 47 07 2d 2b 5c 58 23 22 61 94 f1 25 26 c3 50 32 f0 cc dd 6f b5 3f 1b 85 7d 69 f2 33 88 5d c0 86 ad 2d 94 a2 a6 f2 61 d7 14 a3 c6 4f 14 a3 e6 b5 e7 6d 5e be 88 32 0f 9e 79 2a 31 cb 33 1e 99 27 46 4e 2b 47 49 02 d7 34 e6 32 0e 60 2e a9 f5 98 18 b7 0a 79 9b 7f 19 b5 fe 2f d5 62 cc ab ce fe 90 8a 8c 7f 29 8c 43 80 09 1a 86 01 88 7f 15 d8 2a 43 f7 39 29 7f 2a 62 40 55 69 Data Ascii: -aD.3KN6&(r%!p3HaP""z@sg1T-Gh`'?:7S>yG-+\X#"a%&P2o?}i3]-aOm^2y13'FN+GI42`.y/b)CC9)b@Ui
2024-08-29 19:20:21 UTC	16384	IN	Data Raw: f6 a4 02 52 d0 b5 7b 78 1f 96 b4 32 3b fc f2 dc 97 22 f9 fd 2d 91 15 77 0f cf cc 24 40 a1 14 ca 63 80 53 1e 1e 4f e0 a6 07 44 9c 34 8d d1 c2 75 9a 34 5f 84 45 f8 63 1c dd c0 95 9a 34 15 f0 e0 42 55 77 c0 75 30 36 60 76 19 4c 8d a7 2b 80 c7 b5 d8 06 ec 02 28 ae 6b e6 64 51 1e ff 82 b2 09 09 53 76 c3 5f 5c 85 b7 cf e7 00 0e 14 4a ea 5e a2 c1 f4 ab a4 80 09 9c d3 63 2e 1e 8d 45 74 e1 12 19 a0 3c ad 4e 00 cb 30 42 64 81 b0 8a 2c ae 25 f5 f1 a6 80 29 ac 5e c0 15 74 21 ec 26 4b 7b 0d 87 f6 1a c6 39 ca f3 31 65 c3 90 fb 4b 8c c8 da 00 93 8a df 17 59 98 e4 50 c9 ef 15 7d 0c 2a 88 16 bb e8 9b f5 f0 70 6d 26 fe 44 05 f8 21 bd 59 e5 af 92 80 24 d0 2c 36 c2 0a 5e a2 e3 ea 2a 50 95 37 dd 7b 0b 34 3e 8a 21 67 46 c2 d2 84 90 d0 d8 8d d9 a5 c6 4c 47 54 38 c5 59 9f 8a 9f Data Ascii: R{x2;"-w$@cSOD4u4_Ec4BUwu06`vL+(kdQSv_\J^c.Et<N0Bd,%)^t!&K{91eKYP}pm&D!Y$,6^P7{4>!gFLGT8Y
2024-08-29 19:20:21 UTC	2696	IN	Data Raw: 31 87 45 fc d9 95 55 6a b2 2e 2c 53 ff 05 81 b5 5d 54 20 09 80 79 f9 2c b5 dd 7d 45 8f 16 96 38 86 6a b3 40 7f aa 52 cb 50 55 86 7a 61 fe ed f4 f5 2b 43 81 82 b1 7a 36 9d 36 c5 de 9b c7 6e 86 61 c8 73 0f 4e 9d f9 45 89 67 e3 87 c2 1d 94 03 d4 ab 9d 44 94 80 0b 19 37 45 c4 20 86 25 4f b6 b0 72 d3 97 f1 93 a9 f9 c9 c2 ae 4c 07 f2 37 6e d6 12 2c 98 97 40 15 32 8b d5 32 ca 84 42 ab 14 0f 0a aa d9 4e fc a9 4d 80 97 a8 fb 47 cf 32 e1 18 ff ca 37 52 ee f6 4d 1e 50 db db 94 53 47 b0 2f 3a 2e 08 c2 45 88 2b 4c e7 0b 11 e5 06 b1 7c f9 c6 b4 eb c6 0e 9b df 17 f1 0f 54 8e 5b 93 b3 02 7e 2a a3 32 37 fb 3d 38 ab 1b f7 c6 b4 bd be 79 30 a3 55 63 ac 18 da 6e 57 46 e7 26 be 88 47 39 46 8d c1 3f c4 2d 34 08 9f 6b 31 6f d0 f7 a0 fc 0b 51 cc ea e1 79 78 ff f7 30 75 bf 2f 2d Data Ascii: 1EUj.,S]T y,}E8j@RPUza+Cz66nasNEgD7E %OrL7n,@22BNMG27RMPSG/:.E+L\|T[~*27=8y0UcnWF&G9F?-4k1oQyx0u/-
2024-08-29 19:20:21 UTC	16384	IN	Data Raw: 1f 45 25 93 ea 16 20 43 75 58 1b 7a 79 c0 2a 3a 33 25 00 a4 8f a0 a2 48 34 13 4a d7 4d 06 58 68 6c e6 94 4c 00 12 d9 10 3e 0c 82 75 f0 c7 30 33 c2 fc c0 4f d2 69 12 91 82 9a 01 a7 95 b5 80 33 57 0b 3e b4 80 89 75 3c 33 ce 49 34 b4 f6 1e 59 f5 6a 78 8f 3b 9e a2 e7 a0 df 7c 97 6f 12 a3 5b c2 08 f4 db ab da 72 0a 33 82 01 5e d5 2f 3c 30 a5 5b 3a 1a a6 5e d6 02 c6 a0 55 e9 3c 2d 77 5e 1b 1a dc 20 8e 97 15 3a 31 83 d1 88 dd 64 d0 a0 7e 66 3a 3b 46 cc 95 f8 45 f8 e6 c1 7f 27 83 04 c1 12 59 3b 82 90 d0 69 c5 85 2e 4c d9 0f b3 56 b6 00 c4 78 0d 8f d3 6e e0 71 6a ac 01 f0 38 bb 75 1e c7 0a ab 65 c0 e3 3c af 94 ad e1 21 98 7f a0 f4 4e 3e ea a9 34 fc 4b 00 5d 24 91 ea f5 a3 aa ef 2c 45 c5 45 5c 77 77 17 91 c2 1b ef 7f d2 28 96 b0 95 f3 d4 df 3f 02 a0 3f f6 1f 1f 16 Data Ascii: E% CuXzy*:3%H4JMXhlL>u03Oi3W>u<3I4Yjx;\|o[r3^/<0[:^U<-w^ :1d~f:;FE'Y;i.LVxnqj8ue<!N>4K]$,EE\ww(??
2024-08-29 19:20:21 UTC	15472	IN	Data Raw: 58 19 31 dd 6f 84 bc fe 6a 6c 56 4f c8 44 e9 10 f3 51 3c 14 d8 b8 55 3b 65 56 e9 ae 31 0d c2 56 66 66 c4 76 33 33 d9 8e 6e f0 f1 d3 4d 86 f5 b2 c0 4d 32 08 8c c0 39 ca 35 d2 47 54 65 9b 01 4a 4b be 18 5d 47 42 df c3 52 4a e8 4b 47 7a 42 e8 4b 22 de a4 d0 17 5d 23 fb e6 48 d7 c8 58 47 43 c1 ef 58 b5 95 bd e3 27 01 1b 9a ef ac 70 04 67 dc fd 3a 60 d4 87 29 a2 06 53 e6 c8 42 61 c5 c6 d0 8b 9e c0 15 7d e0 7a 46 68 7c 04 14 13 eb a3 d9 d1 4c 4f 1a c6 f6 9b 36 3c e0 36 7a 23 9c 59 df 1c 25 cd 71 1d 20 c1 a9 dc 34 ef 16 0b 4f f7 93 e6 b8 01 3d 96 e6 b8 be e9 77 e6 dc 1c d7 57 2c c3 98 78 db 37 13 f6 62 91 da 6a c4 26 ec 86 63 2e ca 79 a6 27 2a b6 ef 9a be a1 0f f5 9b c2 04 39 38 4a 00 33 39 ba 69 4d f2 79 36 06 e4 36 41 69 ee 08 a5 b9 34 fa ce a4 bb ca d3 8e b7 Data Ascii: X1ojlVODQ<U;eV1Vffv33nMM295GTeJK]GBRJKGzBK"]#HXGCX'pg:`)SBa}zFh\|LO6<6z#Y%q 4O=wW,x7bj&c.y'*98J39iMy66Ai4
2024-08-29 19:20:21 UTC	16384	IN	Data Raw: da df f5 a5 bf 18 62 e5 97 3e 39 7f d7 ec 7d ff 97 d6 88 77 a6 7e ec 6f 5a 2b fc d4 df 85 5e 0e a4 37 53 55 e6 3c ae 92 d8 c4 2d 5a a8 bd ed 93 8c a4 a5 63 2e 2e be c9 e3 d2 77 76 38 f2 fa c8 a5 a4 83 01 f0 ad 2f 05 e3 be e9 71 01 04 05 21 9c 65 f8 ed cc d0 6f 67 96 f4 db b1 3b b3 8d cc 78 eb 52 fc 43 a1 1e 5c 1d 78 be ca 01 46 01 46 ef b6 e4 50 bc c7 87 d2 f3 a6 73 14 35 3a ab 29 b3 22 ff 67 39 2e ec cf 8a 94 b1 a2 48 19 2b 09 1b b0 2d d6 04 98 f9 a2 7d 67 fb 73 1c d1 06 0b 42 ef 64 c3 8f 27 25 7c 9b 19 b0 6d de f9 fa 81 74 b3 a8 4b a1 67 43 c6 fe 39 90 99 09 70 d5 7a 52 20 37 48 8e 91 b2 48 64 0f 91 b2 4a 44 12 d3 d6 18 59 19 a4 c6 32 80 30 3d c6 96 0c 61 2f 74 74 2f 1d b4 02 32 47 d1 aa 96 d8 be d1 46 48 6d e6 c3 d8 ff ce e3 5a 26 9f d9 4f c8 91 9f 5a Data Ascii: b>9}w~oZ+^7SU<-Zc..wv8/q!eog;xRC\xFFPs5:)"g9.H+-}gsBd'%\|mtKgC9pzR 7HHdJDY20=a/tt/2GFHmZ&OZ
2024-08-29 19:20:21 UTC	2616	IN	Data Raw: 4e 51 35 59 20 ad 2b 60 85 e1 cb a3 c4 17 10 19 b1 f2 e2 e6 bd a8 b7 76 ca 15 e7 4c 90 51 28 6a a0 d5 9c e5 0e 30 06 fb 12 c6 53 b7 21 cb de c1 7c 76 16 66 9b 05 f6 e4 cb da 94 45 6b 8b 2f 68 4f 21 c4 2f 6b 8b 8a d5 d8 f9 82 ae 9d e0 c4 a2 9c d0 a0 df 2a 0e bb 70 19 bf 8a f8 ad ee c2 41 de c4 42 35 c0 bd 93 04 ed e1 c9 b7 82 6c 39 2c f4 03 df 08 62 1a 3d 40 79 df dc 0e 0d 5b 18 74 14 48 69 80 63 56 a8 e3 84 c2 cd 05 e6 87 c6 a4 02 8f 47 f6 3b f9 c2 76 0c 4d de 8b 07 59 ed 58 df 9a 66 f6 28 9a 4a fc 6f ad 6f 4b 69 91 8f 1e 83 4b 89 40 a7 af 97 d3 e6 90 31 2e 27 06 be 55 2b a7 01 a2 fc 38 2e 27 8e 21 31 2f 27 4e 21 31 2d 27 4e 7c 20 b8 4b 69 33 1f 08 ec 52 da c8 07 02 bc 94 76 ed 03 31 5e 4a bb f0 81 da 28 a5 9d f9 40 e2 94 d2 ce 7d 20 8d 4a 69 a7 be f5 a8 Data Ascii: NQ5Y +`vLQ(j0S!\|vfEk/hO!/k*pAB5l9,b=@y[tHicVG;vMYXf(JooKiK@1.'U+8.'!1/'N!1-'N\| Ki3Rv1^J(@} Ji

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49809	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:19 UTC	758	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hkwyolawofficelogin.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:20 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:20 GMT Content-Type: application/x-javascript Content-Length: 35192 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5955137 cache-control: public, max-age=31536000 etag: 0x8DC90CF0D8CB039 last-modified: Thu, 20 Jun 2024 02:16:53 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 065ca581-001e-0033-261f-c40631000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:20 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-08-29 19:20:20 UTC	16384	IN	Data Raw: 7a d6 dc ec 07 9b 9f 2f be db 8e b7 8a 28 2f ea 99 77 94 6f 2d 96 f9 14 7e ed ab 5f b5 3f d7 1a f5 5a b3 d6 28 b6 8a 94 9b aa b7 7a 1e 24 c8 b8 3b 09 f2 a8 ee 79 5b 79 12 87 51 7d b3 ed 79 84 0d e3 10 6d 25 d1 7c 52 4c 09 91 fc 2c da 0a 55 ff c7 05 60 70 31 88 ce 8a 8b 03 3d 8a 07 44 2a 1d 34 fd 78 60 ea a5 87 f1 41 0a 75 61 b8 c1 c0 a9 9e 7a 3e 90 aa b3 0b 24 0b 36 36 d2 46 fb 30 de d8 d0 43 1a 5f 7c 69 3f 98 51 45 0a b9 b4 d1 f2 d3 46 c7 f3 bc a4 31 30 40 02 c1 3f 83 f6 41 94 c0 74 63 57 48 3c 2c b4 3c 0b 2e 2c f4 d9 60 67 07 ac e6 8d 8d e0 70 b0 b3 db e9 76 bc 2f 15 70 af d3 ea 23 3a 2d 44 a7 1e 96 70 6e b4 3c ef 19 16 6a 37 37 36 42 d3 0a a2 33 0f a1 cc c7 77 af 4e d2 19 7f 0f b9 1e 9d a5 17 0d f8 a7 d1 ba 40 fc 1a 07 61 8a 97 d5 96 d1 03 94 af fd f9 Data Ascii: z/(/wo-~_?Z(z$;y[yQ}ym%\|RL,U`p1=D*4x`Auaz>$66F0C_\|i?QEF10@?AtcWH<,<.,`gpv/p#:-Dpn<j776B3wN@a
2024-08-29 19:20:20 UTC	5119	IN	Data Raw: 71 05 05 c5 8d 49 1d 8a 8e 63 56 ef 3a d7 5e 37 9f 77 d4 58 97 3b 30 52 00 d2 c5 c5 36 27 cd 73 35 32 0d 1d 4b cb 2e 64 7c c3 eb e9 7d 0f 39 e3 61 04 ae b9 16 0f d7 98 6b a8 0a df 84 ca 77 fd 1e f2 f3 6d 73 89 e9 af 6a 28 a6 41 02 bd c9 61 57 a8 b5 60 98 f5 ef 0b 70 6e bf 2f 34 ea d0 2b 7d fc 05 4f bb c9 3c ed 66 07 47 01 c0 47 35 fc ab 5c 6e 51 98 ab 25 1b 6f 12 a1 24 41 e1 d0 b2 7a de d8 5f d9 da 79 6e 7f 8d 1a ee af 0d b4 1e 6d f6 8c c7 3c c0 a9 34 3a 66 e1 11 aa 62 52 37 d9 00 68 51 ca ed e0 bb b0 49 83 b2 af 8c 5d f7 d1 18 e6 e6 05 57 0b 42 c5 e1 f9 b2 a6 a3 70 b0 b6 ca cd a1 e3 7b 8b c2 43 32 e7 03 8e 0a 8c d4 e6 3f 18 01 34 28 4e 79 a0 00 f3 7c 5e 83 fe 0b 95 21 de e5 96 d2 50 18 bc 3d 14 d0 74 d9 1d 1a 58 25 ee 06 92 e8 86 01 89 b4 22 d4 e5 12 d0 Data Ascii: qIcV:^7wX;0R6's52K.d\|}9akwmsj(AaW`pn/4+}O<fGG5\nQ%o$Az_ynm<4:fbR7hQI]WBp{C2?4(Ny\|^!P=tX%"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49810	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:20 UTC	534	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:22 UTC	675	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:21 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 13702758 cache-control: public, max-age=31536000 etag: 0x8D8731240E548EB last-modified: Sun, 18 Oct 2020 03:02:30 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4be32bbf-f01e-00c8-2aa8-7d8673000000 x-ms-version: 2009-09-19
2024-08-29 19:20:22 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-08-29 19:20:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49812	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:20 UTC	547	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:22 UTC	631	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:21 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 4136362 cache-control: public, max-age=31536000 etag: 0x8DB5C3F466DE917 last-modified: Wed, 24 May 2023 10:11:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b2eb9096-d01e-00da-24a9-d46055000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:22 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-08-29 19:20:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49813	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:20 UTC	548	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:22 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:21 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 20629051 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4BB4F03C last-modified: Wed, 24 May 2023 10:11:52 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 45619c8f-f01e-0018-76a9-3eb215000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:22 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-08-29 19:20:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49811	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:20 UTC	548	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:22 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:21 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 13701940 cache-control: public, max-age=31536000 etag: 0x8DB5C3F495F4B8C last-modified: Wed, 24 May 2023 10:11:48 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ed809c39-e01e-003d-10aa-7da42c000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:22 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-08-29 19:20:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49814	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:21 UTC	727	OUT	GET /02f3d9a46eef4029b93e04119111d9c5/ HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://hkwyolawofficelogin.ency.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: nv/hOAucqtfvzEm+foBWHg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-29 19:20:23 UTC	734	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:20:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 2c3fb01d-2b4e-46d0-8a93-14459dc14901 x-ms-ests-server: 2.1.18794.6 - JPE ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49815	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:21 UTC	569	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: 86b155fe-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:23 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:22 GMT Content-Type: application/x-javascript Content-Length: 35192 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5955139 cache-control: public, max-age=31536000 etag: 0x8DC90CF0D8CB039 last-modified: Thu, 20 Jun 2024 02:16:53 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 065ca581-001e-0033-261f-c40631000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-08-29 19:20:23 UTC	15634	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-08-29 19:20:23 UTC	16384	IN	Data Raw: 60 28 9c c1 9f 93 1f 4e f1 df 93 53 06 b6 5f 10 f0 18 9b 82 3f 1d 86 76 a8 e8 e9 6e 67 93 fe 1c 13 f4 87 6e 93 ca 36 5b f8 6f 9b 6b ec be b8 d8 a6 51 b7 be 46 54 9a 87 d7 f1 fc f2 75 30 8c 12 a6 23 6e 83 36 e3 34 ca 8b 78 4e 8f 36 70 76 c7 c9 fe 10 17 49 c4 19 5d a6 74 fb f7 1b 06 d6 3f 68 0c 77 dc a3 42 52 c6 f3 9f 82 5b 50 f6 e8 27 89 62 fa 35 40 0b 7d 3e 68 1d 50 ea 30 3c 20 36 ec 77 40 f6 83 82 01 ec 9d 85 52 ae 52 29 dc ca d0 7b b8 b9 39 f7 be e0 f6 ae 24 18 54 8c b9 7d 60 f1 d9 08 64 02 be 87 b0 95 5f c6 8b 0f e9 65 84 cb cd ef e3 6e 97 7a 54 74 c0 85 37 5b de bc d1 30 9e af cc b0 3c e1 b7 f4 37 5b 0f da 8b 01 cb 29 e0 4a e8 cc e0 ec 80 f8 7e af f3 2d ae a1 ac be d3 ed 7b 20 b5 23 bc f0 19 1d 27 c9 57 e8 48 54 1c 14 40 c7 2f e9 e5 fe 7a cb 87 3e f7 Data Ascii: `(NS_?vngn6[okQFTu0#n64xN6pvI]t?hwBR[P'b5@}>hP0< 6w@RR){9$T}`d_enzTt7[0<7[)J~-{ #'WHT@/z>
2024-08-29 19:20:23 UTC	3174	IN	Data Raw: 1e 55 48 c6 19 67 a8 72 50 57 20 fe 12 3c be e1 02 ce ba 32 bb 5b 1b f6 83 c2 23 2f 83 16 19 50 93 fd 1b d9 ec 6e a7 1c d3 75 68 ee 3c 8b 56 de d9 e9 32 e0 1b 67 f1 72 14 ec 0d 59 e0 e6 2d 7b 14 de 3b da ec 70 e8 44 ac c7 d4 aa 27 34 3a b1 1e 4d e8 a0 88 0a 24 85 6f f4 5e e4 95 d5 e6 2a 2a 20 28 55 49 c5 39 5a 55 e3 2f d5 e6 b5 5e 6b 54 aa 15 a6 98 10 c2 eb d5 56 83 85 d7 6b c5 62 03 c3 e9 65 f8 5c 67 bf 17 78 27 80 5f d5 48 08 cb 5c a4 8c 4d f4 97 48 51 af 88 28 55 29 a6 52 0a 92 96 ca 0d 0a 2a d5 5a 2a 5a 1d 32 bb a5 12 1a f9 28 a9 ec 5f 4c 5f 06 99 82 a3 e2 c4 db 35 55 20 1b 79 a9 46 75 76 2e 7b 9d e6 2f e7 66 d0 3b 69 f7 2b d8 ee 87 37 e2 4d a1 77 a3 30 99 64 c6 e7 92 99 90 49 2e 3f 09 2c 85 4c 26 13 61 2c 64 aa c2 b0 9e cb 9a 0d 8c 40 2e 70 af 64 0b Data Ascii: UHgrPW <2[#/Pnuh<V2grY-{;pD'4:M$o^** (UI9ZU/^kTVkbe\gx'_H\MHQ(U)RZZ2(_L_5U yFuv.{/f;i+7Mw0dI.?,L&a,d@.pd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49816	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:26 UTC	1540	OUT	GET /oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2fhkwyolawofficelogin.ency.cloud%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARmLJ0tLfNewn1_SNfZnZZhZrMYOeNzMsvAKlcxKhM2Tv8CI-MLRsZbTIL-RemeKeHFbqkpqUWJJZn5eRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECrT1SeMdnY4aWf_mRROW9eqKMZ1i1XfLsUz1s3DKcXV1y3bXzi_1MTR2DS80yTJzTHWKDM0McHLOyAp3dvYyLXe1NbYynMAmNIGN6RQbwwc2xg52hlnsDAc4GTfwMB7gZfjBd_Trsys_uze983jFrxNRlV2eCjSryMzbP8kgNS3I3cI11yyowsjV08evzCK_MEg_38jH3dU9y9F2gwDDAwEGAA2&estsfed=1&uaid=1b9ba598ef1c4718bf548acdb9395636&signup=1&lw=1&fl=easi2&fci=https%3a%2f%2f8d19784d-02f3d9a4.ency.cloud.orgid.com HTTP/1.1 Host: l1ve.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:27 UTC	964	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Aug 2024 19:20:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://signup.ency.cloud/signup?sru=https://l1ve.ency.cloud/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https://22e7fe0a-02f3d9a4.ency.cloud p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C504_BAY x-ms-request-id: bbbc1e68-773f-4c86-9253-005a83ab4f40 ppserver: PPV: 30 H: PH1PEPF00011CE4 V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49818	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:28 UTC	1190	OUT	GET /signup?sru=https://l1ve.ency.cloud/oauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https://22e7fe0a-02f3d9a4.ency.cloud HTTP/1.1 Host: signup.ency.cloud Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:30 UTC	1488	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Aug 2024 19:20:30 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-cache, no-store pragma: no-cache location: https://l1ve.ency.cloud/login.srf?wa=wsignin1.0&rpsnv=159&checkda=1&ct=1724959229&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.ency.cloud%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.ency.cloud%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253dE269E9D1D98D4545%2526opidt%253d1724959227%2526uaid%253d1b9ba598ef1c4718bf548acdb9395636%2526contextid%253d75F2B73860AC1050%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D1b9ba598ef1c4718bf548acdb9395636%26suc%3Dhttps%253a%252f%252f8d19784d-02f3d9a4.ency.cloud.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=1b9ba598ef1c4718bf548acdb9395636 p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: eusXXXX019O (2.0.3509.0) x-ms-amserver-tm: 0ms x-ms-request-id: eba07d2d-7c24-4a59-b046-f9f204a3230c referrer-policy: strict-origin-when-cross-origin amserver: eusXXXXgn00019O x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: EBA07D2D7C244A59B046F9F204A3230C Ref B: PAR02EDGE0710 Ref C: 2024-08-29T19:20:29Z access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:30 UTC	922	IN	Data Raw: 33 39 33 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 31 76 65 2e 65 6e 63 79 2e 63 6c 6f 75 64 2f 6c 6f 67 69 6e 2e 73 72 66 3f 77 61 3d 77 73 69 67 6e 69 6e 31 2e 30 26 61 6d 70 3b 72 70 73 6e 76 3d 31 35 39 26 61 6d 70 3b 63 68 65 63 6b 64 61 3d 31 26 61 6d 70 3b 63 74 3d 31 37 32 34 39 35 39 32 32 39 26 61 6d 70 3b 72 76 65 72 3d 37 2e 35 2e 32 31 35 36 2e 30 26 61 6d 70 3b 77 70 3d 4d 42 49 5f 53 53 4c 26 61 6d 70 3b 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 69 67 6e 75 70 2e 65 6e 63 79 2e 63 Data Ascii: 393<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://l1ve.ency.cloud/login.srf?wa=wsignin1.0&rpsnv=159&checkda=1&ct=1724959229&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.ency.c
2024-08-29 19:20:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49819	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:29 UTC	727	OUT	GET /02f3d9a46eef4029b93e04119111d9c5/ HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://hkwyolawofficelogin.ency.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: 4335iNfHgU+pmpyN0fZCvA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-29 19:20:31 UTC	737	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:20:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: e685657d-1fba-4406-ba1c-95ad5dedfe01 x-ms-ests-server: 2.1.18794.6 - KRSLR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49817	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:30 UTC	1491	OUT	GET /login.srf?wa=wsignin1.0&rpsnv=159&checkda=1&ct=1724959229&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.ency.cloud%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.ency.cloud%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d51483342-085c-4d86-bf88-cf50c7252078%2526mkt%253dEN-US%2526opid%253dE269E9D1D98D4545%2526opidt%253d1724959227%2526uaid%253d1b9ba598ef1c4718bf548acdb9395636%2526contextid%253d75F2B73860AC1050%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D51483342-085c-4d86-bf88-cf50c7252078%26uaid%3D1b9ba598ef1c4718bf548acdb9395636%26suc%3Dhttps%253a%252f%252f8d19784d-02f3d9a4.ency.cloud.orgid.com%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=1b9ba598ef1c4718bf548acdb9395636 HTTP/1.1 Host: l1ve.ency.cloud Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:32 UTC	984	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Aug 2024 19:20:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1 p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C506_BAY x-ms-request-id: 9f890aad-3c1b-4b3c-8656-dd31c273cf0a ppserver: PPV: 30 H: PH1PEPF00011CF8 V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49820	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:32 UTC	1210	OUT	GET /signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1 HTTP/1.1 Host: signup.ency.cloud Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:35 UTC	794	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 38277 Connection: close cache-control: no-cache, no-store pragma: no-cache vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ua-compatible: IE=edge, chrome=1 x-ms-amserver: wcuXXXX01IJ (2.0.3509.0) x-ms-amserver-tm: 93ms x-ms-request-id: 434a9d0e-47bc-4d6c-9c77-b1aefa89c06e referrer-policy: strict-origin-when-cross-origin amserver: wcuXXXXig0001IJ x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 434A9D0E47BC4D6C9C77B1AEFA89C06E Ref B: PAR02EDGE0711 Ref C: 2024-08-29T19:20:33Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:35 UTC	6426	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc 7d 7b 73 db c6 b2 e7 ff a9 ba df 01 51 dd f2 da 15 4a 21 01 3e ed a3 93 22 a9 a7 45 4a 8c 28 db b1 b3 a9 5b 43 72 44 8e 08 62 94 01 40 85 4a fc dd b7 07 7c e0 37 00 f4 a2 64 f3 ec dd bb 27 96 34 0f 74 f7 cc f4 74 f7 f4 e3 bf 7e f8 af 1f fe f5 e3 de 59 f3 e2 73 67 df 1a 05 13 f7 df ff a5 ff a4 7f b2 5c e6 0d 77 b7 b8 b7 65 fd 35 71 df c6 bf 0d 84 da dd 72 03 b5 45 7d 2d eb 5f 23 ce 06 d1 4f f4 b3 df 57 e2 3a b0 82 d9 35 df dd 0a f8 5f c1 cf 57 6c ca e6 7f dd b2 3c e9 f5 e9 ef 27 9f ec e1 5f 37 ed 5f 7f fd 49 1c 8d 5c b7 e6 36 f6 dd f1 a4 b3 7f 38 39 ef 9e 77 c4 f8 78 60 ff 74 fe b9 73 f6 6b 38 de dd 5a cc 6c 59 03 d9 0f 27 dc 0b 76 d8 60 b0 3f a5 1f 5a c2 0f b8 c7 d5 eb 2d 57 b2 c1 56 ce ba 0c bd 7e 20 a4 67 bd e6 ba fd 8d Data Ascii: }{sQJ!>"EJ([CrDb@J\|7d'4tt~Ysg\we5qrE}-_#OW:5_Wl<'_7_I\689wx`tsk8ZlY'v`?Z-WV~ g
2024-08-29 19:20:35 UTC	16384	IN	Data Raw: bf 08 03 b3 df 37 32 83 16 40 56 9a 23 a3 77 73 84 d4 9e 36 86 d2 04 cc 30 e7 35 4e d7 58 a3 c3 2c 8b 28 ee e4 38 8e ee f1 26 ee 28 ae aa 06 ca 7b 43 cb b1 7c 3a 54 2c f6 17 a9 15 ca 15 c7 ae c2 97 d4 30 7a 64 4b 38 fc e0 93 8a 9e b5 9c 1c 91 ec 00 ce 09 b2 47 4b 34 4a f5 88 c5 15 d2 a3 08 0f 89 40 95 ca f9 98 8d 90 4c 34 b0 74 48 e1 8c dd 0d 19 0d 2a d6 40 ea 3b 19 31 7f ac 67 7d 10 17 27 3d 26 d9 05 02 eb 42 35 b8 1d 31 57 a4 fa 40 f4 e7 2c d4 09 87 07 c2 45 94 8a e8 57 d9 92 53 de 1f 3d 0c 5b 3e 39 02 34 14 bb 5a 04 91 b0 2d 49 aa f3 ee 21 d0 62 4a 38 c5 cb 21 c9 1e 28 5a df 32 8d af 18 a7 3a 99 22 74 46 07 08 b2 72 75 da e3 54 87 12 74 90 d3 81 98 22 b5 ec 0a 84 e8 2d db 1f c4 0d 44 60 76 9b dc e8 a4 dd c4 30 9d 87 3e 7f 78 3e c7 ec 9f 6c 06 99 7a a4 Data Ascii: 72@V#ws605NX,(8&({C\|:T,0zdK8GK4J@L4tH*@;1g}'=&B51W@,EWS=[>94Z-I!bJ8!(Z2:"tFruTt"-D`v0>x>lz
2024-08-29 19:20:35 UTC	15467	IN	Data Raw: 67 1d 97 73 b8 4e ce f1 3a 89 8a 01 ac 73 50 9c 22 78 7d 6a 0f 28 c5 06 10 9c 4b 47 a1 02 36 f0 06 97 0b ab d2 5d 26 c1 8a 0d 6f 58 27 3a 82 fc 8a 4f 21 b2 da 76 8a e0 50 75 0a ce 7e b6 51 e6 e3 54 4e 05 6d 19 38 77 65 8c de ec e8 9c a1 fa 90 dc 09 89 63 e7 e1 43 dd b0 27 03 8c 8c 76 2a 25 b0 be 7c e1 93 d0 7b ba b5 f2 ff 97 92 0e 9f c1 17 f0 f3 87 e4 b6 49 7c f0 e9 99 c6 5e 66 4f 7d fb 2d 74 67 b9 8e fb b7 d8 33 76 d4 7f f8 06 7a c4 fd 0c 72 7e 17 e5 7c 3e eb 8f b8 4e 49 bd 31 21 b6 80 21 7e 23 ae 79 2c c0 14 5b 38 9b 6b 60 0d 86 a0 2e 1a 82 b4 26 c5 a2 62 87 9b 93 da c0 41 e4 40 71 1e c8 1b ad e6 99 90 3d 4f 26 83 84 2d dd 43 c4 de 1b b2 6b 9d 18 ea 7b a5 4e 33 9f 77 5e 4c 36 29 a5 51 d2 14 8c b1 8b 37 4f 2a cb 4b 82 e7 da 85 bb 78 ee 6f fb 60 44 dd 37 Data Ascii: gsN:sP"x}j(KG6]&oX':O!vPu~QTNm8wecC'v%\|{I\|^fO}-tg3vzr~\|>NI1!!~#y,[8k`.&bA@q=O&-Ck{N3w^L6)Q7OKxo`D7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49822	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:36 UTC	615	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.ency.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:39 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:39 GMT Content-Type: application/x-javascript Content-Length: 231269 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 20 Aug 2024 23:08:41 GMT etag: 0x8DCC16D08882164 x-ms-request-id: e22b45ec-001e-005c-04d6-f7e1b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192037Z-16ff8f5bd97dwwmlb68e3n11es00000004u000000000wu1h x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:39 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 19:20:39 UTC	14460	IN	Data Raw: 69 67 ef 05 eb e8 b1 ae 87 b1 9e 60 ab 35 b9 5d b8 a6 12 3a 78 9b 7c 44 f7 4a 3f 18 8d dc 2b fc 2e 02 4a 95 cf b9 6a 47 2e 7b 32 ce 96 32 52 8a 21 dc 06 d4 0f 95 1d b1 02 1f fa 24 f0 32 4c b8 27 cc b7 ca 4c f0 a8 ac 43 a9 e7 85 bb 9e 26 99 6b 79 b4 19 6c 62 b0 6b ba 82 90 7c 78 51 ce de a6 8b 3d a4 64 cc d6 22 95 45 29 ae c9 69 36 8c 5a 8a a4 2c c9 0c a8 6f 48 cc 12 75 f9 d0 68 17 99 75 28 af 91 f0 8d 62 dc b7 b6 36 37 83 ee bd ad b5 05 f0 12 d2 e5 f1 ce b2 c0 1e 92 52 45 23 10 55 0c c8 08 88 0d 87 26 2b c3 a1 0b a0 36 6e 51 cf 29 f0 bc c2 21 80 2c 22 98 f2 e1 b2 ba 75 28 77 cb 1f 38 c4 c1 34 1f b0 5d 02 fa d1 53 68 57 a0 9e 30 b0 15 ac 19 c4 ac 35 35 1e c8 b8 f6 7d 68 62 24 18 c2 d8 51 58 bf 74 75 a6 11 4b b5 bf 12 37 5d 0b c3 aa 6b 41 b7 25 c6 a5 09 3d Data Ascii: ig`5]:x\|DJ?+.JjG.{22R!$2L'LC&kylbk\|xQ=d"E)i6Z,oHuhu(b67RE#U&+6nQ)!,"u(w84]ShW055}hb$QXtuK7]kA%=
2024-08-29 19:20:39 UTC	16384	IN	Data Raw: cc 66 2a fa e1 e6 2a a9 df 02 a5 cb 66 79 1a ad af 27 9b 17 f2 c7 f2 9b ba d7 09 b4 a3 37 77 1c dc 52 21 c3 09 16 a5 9c 14 94 fd 48 48 61 29 09 29 f7 d7 79 52 1f 5c 15 08 49 69 d5 5c 63 ba bd 1b b6 31 27 47 93 4f a3 9e 62 96 7b 14 33 dc ca cd 54 8f 81 c1 86 71 d1 69 a6 ea d1 35 85 8e 1e 99 17 45 fd 29 8c 5a 09 9c 6a ac ec ed be d9 eb 6d b4 5f c6 9b f0 fe b3 f6 38 d5 21 86 77 68 de 93 70 e9 71 87 72 2b 0f 52 a4 ee fb b4 66 e4 72 d8 b9 a6 dc ea 1d fe db b5 a7 7c 7a 66 a4 3e 8d 5c fe a5 c3 50 90 6c c2 26 e4 19 95 8a aa e0 7a 82 d7 f1 29 48 a1 94 8f d6 cd c1 61 d5 bd f4 91 1c 17 0b 93 d3 9a c4 28 07 14 96 5b 25 90 46 ca c7 fe 5c 26 3e a2 c0 a2 79 41 8b f8 82 52 85 ca 3b b0 71 93 2a 9b 91 99 af 24 1f a1 c9 26 c7 c3 ca 5c 49 41 6f 9a 5d f6 28 2d 37 f4 f7 ea e3 Data Ascii: f*fy'7wR!HHa))yR\Ii\c1'GOb{3Tqi5E)Zjm_8!whpqr+Rfr\|zf>\Pl&z)Ha([%F\&>yAR;q$&\IAo](-7
2024-08-29 19:20:39 UTC	16384	IN	Data Raw: d5 c8 ff 10 ac 8c bb b5 8b 73 41 09 bd 71 51 39 63 76 74 6f 28 64 66 6c 33 1e 54 fb 7d 85 c6 5f 28 11 0f ab 88 24 55 1a 19 08 60 9f a2 86 8d 99 75 a7 f9 d2 00 0e 50 47 bb 91 f4 6d e5 17 6f 03 38 f5 1e b7 b1 5f 7b 9e 9e cc cf 38 81 aa 6f 04 ae 53 99 14 ed b6 2e b9 89 dd e3 eb 8b 19 f2 e5 d9 a5 0c 83 6a 21 43 b7 03 bf b9 0a da e7 ce de 24 d7 e5 bc b9 c3 38 ec 86 f6 68 de ae da 1c f5 22 36 b0 5f f8 90 4e e7 93 8e d8 0f f7 2d d9 ca 1d 6c 37 44 9a 57 4e 51 be e4 a6 be 86 cc 6f cc 1a ad 74 55 04 01 99 e4 ee 6e f4 23 7b 0a f4 b5 b3 bb f3 2d af 91 8d 90 5f 7b b8 65 2b 2f 2d 8f 72 2b b4 e3 ff 22 e3 0b 85 7c ae 5b 33 96 c2 cf ce ae b5 0e da 91 cd be d3 b2 a0 a2 63 9c af a6 13 58 bf dd 53 d5 65 aa 15 ab 17 d4 fd c5 c2 df ae f4 a8 f9 a4 62 79 d1 73 7d e5 32 48 f3 43 Data Ascii: sAqQ9cvto(dfl3T}_($U`uPGmo8_{8oS.j!C$8h"6_N-l7DWNQotUn#{-_{e+/-r+"\|[3cXSebys}2HC
2024-08-29 19:20:39 UTC	2731	IN	Data Raw: 3f fd 4b 68 bc fe b1 ac f1 fa 53 85 c6 eb 4f 7f 0b 8d d7 3f fd e7 02 c6 0b 38 0c 0b 7a 67 3c 41 c2 9b f0 af 53 6b 2b b5 8f 5a 95 42 5a 5e 50 db ff 3f 4b 8d d0 2e eb 1e ab 90 89 29 ce 12 f6 3a 97 b6 cb 61 05 92 13 3f 13 c9 89 9f 42 72 62 d6 3a 1c 2b ed 38 c6 e1 3c bd ed 5f ff a3 b7 6d dc 94 b4 5c 92 8b 3e e7 c8 fc cd d5 35 e9 ab aa 13 89 79 72 ff a3 b0 f9 8f 55 d8 8c c2 7f 71 8d cd 48 1d f7 a7 54 36 83 f0 df 58 67 93 0f ae ac b4 c9 33 fe 11 5a 9b c3 50 8b 67 12 fe 8b ea 6d 0e c3 39 04 31 71 23 c3 2a ba 89 7f 33 ca da f2 c9 ab 46 34 38 d7 90 94 51 a6 d3 e6 1a 24 34 d7 f0 f8 01 ad 03 44 12 06 90 9d b9 59 e8 27 f5 49 16 92 7f 03 77 c2 df 0e 6f 6e d0 35 d5 98 bf 7e 08 1e d0 94 9d 25 de f0 c4 b7 e1 f5 64 f0 03 85 e2 50 e6 0e 1a ea 12 22 40 3e 8b 83 71 76 9b 00 Data Ascii: ?KhSO?8zg<ASk+ZBZ^P?K.):a?Brb:+8<_m\>5yrUqHT6Xg3ZPgm91q#*3F48Q$4DY'Iwon5~%dP"@>qv
2024-08-29 19:20:39 UTC	16384	IN	Data Raw: 3a 1a 16 70 20 9c 13 08 5b 0b 23 64 10 17 48 25 f5 28 23 3f ef 62 55 00 0f 46 f5 86 3a 1e 48 f4 08 23 d9 e1 48 a8 f2 c4 4f a1 90 25 84 9c 97 47 c8 32 6a 29 98 ac 3d fd 8e 44 25 16 c1 35 f8 19 67 1a 65 e1 c8 ad 8f fa 9e 6c a6 8f ca 29 cc d6 61 15 20 88 69 67 2d 5b 37 4d 57 05 2b 81 e7 f2 77 97 ba e4 19 1d 74 c7 dc 9f 06 25 91 21 ec 90 c8 5b 99 c6 5e 5d 8e 80 89 54 8e ca e8 5c 09 f5 39 2d 11 b7 26 11 dd 82 a1 e6 49 1f 0c e5 b2 d9 2d 1a 40 4a 1a 59 0d af 98 e1 32 29 83 cc 67 af b3 56 79 b2 ed 40 be f8 17 dc 37 a3 56 c0 8d c8 60 86 f4 81 02 29 c3 d3 bc 22 c6 6e 55 ad 9c 45 79 8a 89 0d f7 31 74 7f 0b dd f7 a1 fb 43 e8 fe 18 ba df 86 ee 8b 10 1d e6 6e 6f 6c 6d 38 ee 77 f8 dc dc da da de 2e 79 b1 81 ab 26 65 a2 c8 61 32 88 88 ed 30 9e a4 e3 24 83 14 fe 80 69 37 Data Ascii: :p [#dH%(#?bUF:H#HO%G2j)=D%5gel)a ig-[7MW+wt%![^]T\9-&I-@JY2)gVy@7V`)"nUEy1tCnolm8w.y&ea20$i7
2024-08-29 19:20:39 UTC	15472	IN	Data Raw: 06 30 d0 b3 0e 90 83 0e 90 89 ce ec 28 22 20 6c 74 c4 cf c0 ec 77 b5 3f f2 f2 95 2a 98 0a 4a 27 ec 01 a3 de 09 f9 c8 43 ad 0e 3b 2e 8e ae af ad 65 0b 91 ac 7a 8c c9 72 5d ad 0b a0 f8 42 7b 36 e2 07 6d 0b f8 f0 03 3b b3 9b c0 a7 84 cc 8f 69 82 c7 6f a3 6e bd 33 06 74 26 6f 48 b7 20 3d 83 f4 3d db c6 0a 09 7e 34 d9 c7 31 7c b4 7d f8 54 51 9b 38 fb ae a9 cd 3c fb 26 d4 06 b0 b6 03 b5 59 66 97 4b 6d e4 5e 5d 26 b5 29 c6 79 99 d4 66 9a 31 6a 53 04 f9 81 79 2e 7f 4a d5 a7 dc 67 3f e6 b8 cd 60 97 49 24 68 3d 53 d0 aa c6 52 af da f2 80 52 11 a8 8d 07 31 96 e2 6a 0f bb 28 52 68 55 08 79 ee d6 c5 83 89 f3 98 8b eb 02 47 49 0e 59 73 6a 12 77 69 ea 55 5d 30 4c de 05 41 36 cb 77 0c df 26 d9 6c f4 f3 6c 31 fe f9 5d 1f 85 11 de 41 1e 5e 59 ed a1 5e 09 42 cc f9 b6 cb a5 Data Ascii: 0(" ltw?*J'C;.ezr]B{6m;ion3t&oH ==~41\|}TQ8<&YfKm^]&)yf1jSy.Jg?`I$h=SRR1j(RhUyGIYsjwiU]0LA6w&ll1]A^Y^B
2024-08-29 19:20:40 UTC	16384	IN	Data Raw: 6c b3 7b 3b 6d b3 07 97 bc cd ee 5d d1 36 7b 70 05 db ec 4f 71 61 92 5b 55 60 9a 7f ac f6 16 97 65 ea 46 7e f6 eb 21 39 07 cd a3 d4 f4 9a 6d e4 3b 18 d7 8b 53 2b e3 26 fe 6d 39 47 e1 47 29 1b ed c3 5a 9b 3d fd 81 b2 e7 0d 8b 33 ed 76 eb fd 46 b3 f8 d7 19 da 37 1b f4 99 1d 55 e0 bd 61 f4 26 fe dd 36 7a 61 c7 a8 77 6f 9b f9 3a aa 43 2a 53 cb e5 70 ac 9b 2f 8e 97 e2 48 e5 70 3a ce d6 b4 a6 86 fb d4 3c ad a1 4a 9e f6 0c 9a ad 9f eb e0 ad 32 91 7d 8b 8e c7 6b f9 9b ce 7d f0 46 76 36 03 e1 8f 29 bd b5 07 01 56 1b 4c c2 68 35 98 65 09 7d b8 98 15 67 ac ec 62 5b b7 bc 07 7d ac 98 f7 4a 21 99 33 07 cc 44 51 b6 2e 1e 3a 75 ee 22 9a 03 95 39 a6 87 eb 86 9a a2 be 84 82 d4 38 9e 3f ce c5 d3 cd 12 58 79 13 5d da 37 ba 77 cb e0 56 ae e9 f9 43 50 99 1a 8f 89 f9 ec d6 b6 Data Ascii: l{;m]6{pOqa[U`eF~!9m;S+&m9GG)Z=3vF7Ua&6zawo:C*Sp/Hp:<J2}k}Fv6)VLh5e}gb[}J!3DQ.:u"98?Xy]7wVCP
2024-08-29 19:20:40 UTC	16384	IN	Data Raw: 49 73 b2 90 e7 c2 08 a9 2f 50 1c 18 99 78 35 8b 91 0d 62 06 c9 88 ef cf a0 f5 5c ae 53 0a 37 d8 38 98 ef 1e 32 f5 5b 4e d0 56 81 0b 01 85 aa 32 05 19 2f 35 7e 2c 8b 39 0f 02 41 59 6c da a9 63 d9 18 93 55 ee b1 9b 9f 80 0b eb 85 da 2e fa 60 26 e2 1f 54 ba f7 4f 67 97 ba 50 ff b4 a9 e5 f3 57 34 b0 99 81 13 db 97 e5 14 76 53 cd a4 48 ab 2a 15 10 61 d5 c2 4b 4c 79 c2 95 9b 00 e6 d3 7c 62 10 f7 ec f2 2d ec d1 54 9e f8 cb ac 34 88 4b 2c a2 38 10 33 1a c8 f1 3a f6 48 2c 06 21 f1 e2 a0 60 1f 0e 77 61 30 4c 2a 4f 90 9c a7 7d 3c 27 f4 53 b4 2d b4 b2 55 59 d2 d0 0a 14 0a 66 40 a8 08 5e 62 24 a1 20 90 8b 15 a7 7d 0b 6d a7 f4 e1 0b 2a 7f 45 41 58 06 21 cb 56 c6 2c 94 5d 47 17 6e 64 49 6d 65 39 1a b7 b4 2b b8 e1 7e 78 b8 17 17 d7 8d eb 9b 89 72 51 4a 6c c7 e6 e7 f5 ea Data Ascii: Is/Px5b\S782[NV2/5~,9AYlcU.`&TOgPW4vSHaKLy\|b-T4K,83:H,!`wa0LO}<'S-UYf@^b$ }m*EAX!V,]GndIme9+~xrQJl
2024-08-29 19:20:40 UTC	16384	IN	Data Raw: 43 84 ef 67 ca 70 58 12 68 fe 82 dd ce eb 09 d0 1c 2f ce e7 8a 7e 13 5e fb 85 b5 cf 03 f7 bf 4e aa e0 a8 3f 10 94 ac 43 69 ac 89 b3 bd 97 bc 08 0a 0a 5a 4e 80 ee 0a 33 15 ca 32 b2 be 73 b6 d1 1b 39 a9 01 a0 65 ae 12 d6 12 83 d7 c3 e7 f3 38 3a 84 ab 88 cf e5 b9 82 34 fe 8c 5d ef 28 1e d0 a8 29 81 2c 9d 48 a1 85 94 d5 44 50 47 fc 11 c3 7f 48 28 41 c9 1e 00 a3 30 bc f0 53 c8 e1 fc 5e 07 01 3d 0c 78 ee 26 de 85 3f 5c e2 24 b2 25 46 c1 12 27 7f 30 20 20 58 1c 09 a1 73 31 16 c2 e9 34 1a ae a6 48 e3 21 2c 9e c5 84 c1 ab 63 02 5c 4e ab de 9b 5b 6c 58 4b 31 6a 51 65 11 bb 90 37 23 3e 9a bd 8e 6f 02 fb d0 33 81 31 dd e3 1a ea 05 e2 e5 de b7 48 50 de 07 28 87 af e5 24 23 8f dc db 60 84 ba 4a 30 d8 43 1f a3 3c c8 e6 6c 34 33 1d 38 14 29 7d 0c a3 0e 5b 53 37 1b 53 c5 Data Ascii: CgpXh/~^N?CiZN32s9e8:4](),HDPGH(A0S^=x&?\$%F'0 Xs14H!,c\N[lXK1jQe7#>o31HP($#`J0C<l438)}[S7S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49823	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:39 UTC	727	OUT	GET /02f3d9a46eef4029b93e04119111d9c5/ HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://hkwyolawofficelogin.ency.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: aAIKyo1IZz/SFcfhO5TZoA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-29 19:20:41 UTC	734	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:20:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3da42625-4137-4793-950c-99f3f81ba200 x-ms-ests-server: 2.1.18794.6 - KRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49825	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:41 UTC	526	OUT	GET /shared/5/js/signup-fabric_en_hjnWUmfm-pOUxYXWMUv1Yw2.js HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:44 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:44 GMT Content-Type: application/x-javascript Content-Length: 231269 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 20 Aug 2024 23:08:41 GMT etag: 0x8DCC16D08882164 x-ms-request-id: e22b45ec-001e-005c-04d6-f7e1b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192042Z-16ff8f5bd97967d4a8ue3frv8c00000000p000000001hzm8 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:44 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 77 db 38 d2 28 fc fd fd 15 b6 6e 8e 87 1c c3 8a 64 67 a5 c2 d6 4d 1c bb 93 ee 6c 1d 27 9d 4e bb 7d 7d 68 09 92 d8 91 48 85 a4 ec 38 b6 fe fb ad 05 2b 45 39 e9 99 67 9e 67 ee 7b 26 e7 c4 02 41 10 4b a1 00 54 15 6a b9 fd f7 cd 8d c3 bc d8 98 a6 03 99 95 72 23 cd 46 79 31 4b aa 34 cf 36 e6 53 99 40 56 29 e1 7f 3a ce 16 f3 9d 51 72 56 a4 83 53 99 b5 ff 2c db 2f 9e ef 1f bc 3a 3a 68 57 5f aa 8d bf df fe ff 36 47 8b 6c 80 df 05 e1 d5 79 52 6c 48 51 89 4c 14 22 17 69 7c f5 f0 6e 77 ef 6e 64 4a d0 bb f0 aa b5 c0 ea 2b a8 b2 6a f5 f0 9b 22 ce 82 bd 5d 28 1c 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 a5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 55 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d 97 Data Ascii: iw8(ndgMl'N}}hH8+E9gg{&AKTjr#Fy1K46S@V):QrVS,/::hW_6GlyRlHQL"i\|nwndJ+j"](<Lp?*zw9e\{C9JM9-U2cY="=
2024-08-29 19:20:44 UTC	14460	IN	Data Raw: 69 67 ef 05 eb e8 b1 ae 87 b1 9e 60 ab 35 b9 5d b8 a6 12 3a 78 9b 7c 44 f7 4a 3f 18 8d dc 2b fc 2e 02 4a 95 cf b9 6a 47 2e 7b 32 ce 96 32 52 8a 21 dc 06 d4 0f 95 1d b1 02 1f fa 24 f0 32 4c b8 27 cc b7 ca 4c f0 a8 ac 43 a9 e7 85 bb 9e 26 99 6b 79 b4 19 6c 62 b0 6b ba 82 90 7c 78 51 ce de a6 8b 3d a4 64 cc d6 22 95 45 29 ae c9 69 36 8c 5a 8a a4 2c c9 0c a8 6f 48 cc 12 75 f9 d0 68 17 99 75 28 af 91 f0 8d 62 dc b7 b6 36 37 83 ee bd ad b5 05 f0 12 d2 e5 f1 ce b2 c0 1e 92 52 45 23 10 55 0c c8 08 88 0d 87 26 2b c3 a1 0b a0 36 6e 51 cf 29 f0 bc c2 21 80 2c 22 98 f2 e1 b2 ba 75 28 77 cb 1f 38 c4 c1 34 1f b0 5d 02 fa d1 53 68 57 a0 9e 30 b0 15 ac 19 c4 ac 35 35 1e c8 b8 f6 7d 68 62 24 18 c2 d8 51 58 bf 74 75 a6 11 4b b5 bf 12 37 5d 0b c3 aa 6b 41 b7 25 c6 a5 09 3d Data Ascii: ig`5]:x\|DJ?+.JjG.{22R!$2L'LC&kylbk\|xQ=d"E)i6Z,oHuhu(b67RE#U&+6nQ)!,"u(w84]ShW055}hb$QXtuK7]kA%=
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: cc 66 2a fa e1 e6 2a a9 df 02 a5 cb 66 79 1a ad af 27 9b 17 f2 c7 f2 9b ba d7 09 b4 a3 37 77 1c dc 52 21 c3 09 16 a5 9c 14 94 fd 48 48 61 29 09 29 f7 d7 79 52 1f 5c 15 08 49 69 d5 5c 63 ba bd 1b b6 31 27 47 93 4f a3 9e 62 96 7b 14 33 dc ca cd 54 8f 81 c1 86 71 d1 69 a6 ea d1 35 85 8e 1e 99 17 45 fd 29 8c 5a 09 9c 6a ac ec ed be d9 eb 6d b4 5f c6 9b f0 fe b3 f6 38 d5 21 86 77 68 de 93 70 e9 71 87 72 2b 0f 52 a4 ee fb b4 66 e4 72 d8 b9 a6 dc ea 1d fe db b5 a7 7c 7a 66 a4 3e 8d 5c fe a5 c3 50 90 6c c2 26 e4 19 95 8a aa e0 7a 82 d7 f1 29 48 a1 94 8f d6 cd c1 61 d5 bd f4 91 1c 17 0b 93 d3 9a c4 28 07 14 96 5b 25 90 46 ca c7 fe 5c 26 3e a2 c0 a2 79 41 8b f8 82 52 85 ca 3b b0 71 93 2a 9b 91 99 af 24 1f a1 c9 26 c7 c3 ca 5c 49 41 6f 9a 5d f6 28 2d 37 f4 f7 ea e3 Data Ascii: f*fy'7wR!HHa))yR\Ii\c1'GOb{3Tqi5E)Zjm_8!whpqr+Rfr\|zf>\Pl&z)Ha([%F\&>yAR;q$&\IAo](-7
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: d5 c8 ff 10 ac 8c bb b5 8b 73 41 09 bd 71 51 39 63 76 74 6f 28 64 66 6c 33 1e 54 fb 7d 85 c6 5f 28 11 0f ab 88 24 55 1a 19 08 60 9f a2 86 8d 99 75 a7 f9 d2 00 0e 50 47 bb 91 f4 6d e5 17 6f 03 38 f5 1e b7 b1 5f 7b 9e 9e cc cf 38 81 aa 6f 04 ae 53 99 14 ed b6 2e b9 89 dd e3 eb 8b 19 f2 e5 d9 a5 0c 83 6a 21 43 b7 03 bf b9 0a da e7 ce de 24 d7 e5 bc b9 c3 38 ec 86 f6 68 de ae da 1c f5 22 36 b0 5f f8 90 4e e7 93 8e d8 0f f7 2d d9 ca 1d 6c 37 44 9a 57 4e 51 be e4 a6 be 86 cc 6f cc 1a ad 74 55 04 01 99 e4 ee 6e f4 23 7b 0a f4 b5 b3 bb f3 2d af 91 8d 90 5f 7b b8 65 2b 2f 2d 8f 72 2b b4 e3 ff 22 e3 0b 85 7c ae 5b 33 96 c2 cf ce ae b5 0e da 91 cd be d3 b2 a0 a2 63 9c af a6 13 58 bf dd 53 d5 65 aa 15 ab 17 d4 fd c5 c2 df ae f4 a8 f9 a4 62 79 d1 73 7d e5 32 48 f3 43 Data Ascii: sAqQ9cvto(dfl3T}_($U`uPGmo8_{8oS.j!C$8h"6_N-l7DWNQotUn#{-_{e+/-r+"\|[3cXSebys}2HC
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: 3f fd 4b 68 bc fe b1 ac f1 fa 53 85 c6 eb 4f 7f 0b 8d d7 3f fd e7 02 c6 0b 38 0c 0b 7a 67 3c 41 c2 9b f0 af 53 6b 2b b5 8f 5a 95 42 5a 5e 50 db ff 3f 4b 8d d0 2e eb 1e ab 90 89 29 ce 12 f6 3a 97 b6 cb 61 05 92 13 3f 13 c9 89 9f 42 72 62 d6 3a 1c 2b ed 38 c6 e1 3c bd ed 5f ff a3 b7 6d dc 94 b4 5c 92 8b 3e e7 c8 fc cd d5 35 e9 ab aa 13 89 79 72 ff a3 b0 f9 8f 55 d8 8c c2 7f 71 8d cd 48 1d f7 a7 54 36 83 f0 df 58 67 93 0f ae ac b4 c9 33 fe 11 5a 9b c3 50 8b 67 12 fe 8b ea 6d 0e c3 39 04 31 71 23 c3 2a ba 89 7f 33 ca da f2 c9 ab 46 34 38 d7 90 94 51 a6 d3 e6 1a 24 34 d7 f0 f8 01 ad 03 44 12 06 90 9d b9 59 e8 27 f5 49 16 92 7f 03 77 c2 df 0e 6f 6e d0 35 d5 98 bf 7e 08 1e d0 94 9d 25 de f0 c4 b7 e1 f5 64 f0 03 85 e2 50 e6 0e 1a ea 12 22 40 3e 8b 83 71 76 9b 00 Data Ascii: ?KhSO?8zg<ASk+ZBZ^P?K.):a?Brb:+8<_m\>5yrUqHT6Xg3ZPgm91q#*3F48Q$4DY'Iwon5~%dP"@>qv
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: 82 60 28 48 5f e4 f8 52 3c ce 49 79 42 dd bb 00 34 e0 93 13 02 09 2c 56 26 1b dc 2c 07 4a fe 3c 9f c2 5a e0 0f 8c 69 5d fe 36 17 7c 60 cf 8f 49 f4 3b cf eb 0f 89 d4 49 88 c2 46 26 ff 30 6f 4c f6 cc a1 8e af 8c 98 d7 f3 bf 4f d8 2b 23 b3 b7 f9 9e f9 4e 22 30 f9 bb eb d5 8e 56 c3 89 96 78 22 37 b2 21 81 79 9c a1 b3 c7 bc 4a 8f 21 3d d6 96 90 6e bd 83 c9 29 d3 97 37 c6 c3 a5 96 8e de 66 da 18 83 de e1 b5 49 58 43 47 ec ae 64 5a d0 86 a3 5f 46 ec 5e 6a fa f6 08 a4 42 2c 87 9f 0a 2f 14 fa cb 2c 87 af bf 2c ae 27 6f 4f de b1 ac 82 ac 27 d2 2d 4e 5c fb 45 ff d7 49 37 d0 d9 0a 23 18 bd 13 7a 30 f9 3b 65 cc 95 bd 1e 55 e1 a1 62 b2 79 2e 22 bb 0b a3 4a f1 08 18 cc 89 78 90 ad 3a ac 97 2f 5b 5e 6e 57 c4 13 72 8d 5d 19 5f 6e 57 c4 a3 77 72 57 98 65 34 1f 5d 88 60 5d Data Ascii: `(H_R<IyB4,V&,J<Zi]6\|`I;IF&0oLO+#N"0Vx"7!yJ!=n)7fIXCGdZ_F^jB,/,,'oO'-N\EI7#z0;eUby."Jx:/[^nWr]_nWwrWe4]`]
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: 5a e7 16 39 01 34 13 e8 f5 e2 b8 cb a6 8f 9f 5d 0e 02 cb 73 66 f4 a4 ab 21 1f 2a 97 d7 c0 e4 89 dc 9a 3a d4 d7 99 12 e3 2e a6 e3 68 9d ea 3f 63 a0 f7 61 c5 4c 67 74 78 81 9e 13 e9 38 3f 1b e2 b5 e3 bc ab ac 98 6c 72 4c 61 a9 e3 a1 20 3f b5 d2 b8 bf 86 d6 99 b3 43 67 ad 83 47 72 c0 f0 48 57 59 79 65 c1 c6 da a4 51 95 49 f2 a0 ca c4 9a 3f 54 31 c8 e2 08 bf cd 67 0b 68 eb a6 c3 b5 e6 0d a8 38 da e8 78 ec da 5c 7d 71 00 7c 21 24 02 d1 41 67 5d 48 e0 e8 14 69 62 32 8a 4d ce 2a d9 43 73 c2 1e 3b a3 2b e1 9e a4 e9 9c 2e 86 7a 6d 78 33 92 64 f9 65 35 de dd 33 d6 11 cc ad 03 cc 25 4e 40 97 62 90 e4 97 d5 28 3b 6d 90 f6 5a e4 ba 66 21 70 77 69 ef 59 e1 41 b5 bb 04 28 49 22 c3 42 22 63 7f 51 1c d3 24 b9 66 28 e4 9a 16 fc 94 53 24 57 88 2e 57 a4 3a 8e 2d 3c 7e bb ec Data Ascii: Z94]sf!:.h?caLgtx8?lrLa ?CgGrHWYyeQI?T1gh8x\}q\|!$Ag]Hib2MCs;+.zmx3de53%N@b(;mZf!pwiYA(I"B"cQ$f(S$W.W:-<~
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: f3 06 db 31 7c 55 c3 ca 6a 5f b8 f7 14 31 32 4b d4 6b 39 f7 b2 8e da 84 bc 8a e6 4c a8 1c 80 7e b5 c1 5e 23 e1 71 a3 0b dc 28 50 36 a3 40 f0 26 d3 5b 63 2a 1a 97 a5 c4 46 e9 dd 38 76 3b 5e 88 42 01 92 0d 8c 4f ab ef 25 49 c9 4b b4 a1 9a d0 25 17 d8 4e 19 3d b7 d0 37 81 08 01 0d 87 dc d8 fa ee 3d 90 20 a9 90 88 35 29 17 dc 53 37 c0 d7 54 f7 c0 bc 1b 56 2b 1a 0c 41 a5 08 d3 dd a0 bd 83 6c c6 72 e8 60 e6 45 0a ac 1d 67 60 98 80 78 8b 2f a8 80 e3 91 ed 7d e3 b7 5e 25 00 0d 8b b4 75 14 75 bb 7e 9b a8 56 04 dc 8f ba 7b 1f 5b fe 50 0c c3 04 14 54 d2 34 3d e2 ce b5 c7 9e 04 d2 e6 48 47 2a bc 1f 8e 8a 84 83 2a b2 22 d3 a4 95 9c 2f db bc 9c 61 61 54 12 e7 de 6a 7b a9 b7 80 42 7a d0 b6 1a e8 3d 64 a1 89 b7 4e 5e 3c b6 a4 d8 e1 6f c6 44 f4 98 dc 40 f5 6c bc 60 1d 31 Data Ascii: 1\|Uj_12Kk9L~^#q(P6@&[cF8v;^BO%IK%N=7= 5)S7TV+Alr`Eg`x/}^%uu~V{[PT4=HG*"/aaTj{Bz=dN^<oD@l`1
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: 63 1c 0e 44 09 f8 72 5c dd a0 41 18 18 5c e7 5e 55 e4 2f 2c 72 3a a4 fd 31 f5 13 aa 11 0d 7c d8 78 80 50 8d 49 9c a0 68 36 83 23 02 a3 f2 fd c6 e6 af 2b 23 9f 36 e5 59 9a b9 a8 a1 fa 85 e8 09 8f 09 ac 2b cc 0b 36 e5 73 8d ea 0d e6 3a 76 28 e8 7a 94 14 dd 75 f5 f6 5c e9 5d 4a be e1 67 a2 49 8f aa 3a f0 0c 2f 28 a9 c9 6b b7 81 74 e3 f7 34 3d db aa 04 8a 45 4e 09 7a 03 01 5a b9 56 2c 76 fe 44 25 f4 df 56 a9 6e 5f 6f a4 84 1e 7c e0 f1 af 30 08 58 3f fa 35 06 01 ee 07 1e fb 72 9d f9 f5 43 df 40 67 5e 9a 17 55 ed 1a 62 56 b6 da 08 58 f9 f5 a5 68 2f a0 10 86 e6 00 a5 2f 19 84 d2 6b 53 c5 24 24 a8 31 ad 88 cb e6 09 ee 62 21 9e 08 cb 53 95 56 55 2b ec 1c aa d7 6b a9 b9 c3 9a 8d f3 57 6d 5c a6 ef 52 56 d8 25 bf 76 97 74 d0 b1 a9 9d 86 8b 09 39 54 58 39 11 ee 2f bc Data Ascii: cDr\A\^U/,r:1\|xPIh6#+#6Y+6s:v(zu\]JgI:/(kt4=ENzZV,vD%Vn_o\|0X?5rC@g^UbVXh//kS$$1b!SVU+kWm\RV%vt9TX9/
2024-08-29 19:20:44 UTC	16384	IN	Data Raw: f8 3e a1 28 3c b1 b0 8c 28 e2 d9 18 b5 89 74 a6 2e 2f 5b 87 96 b1 38 a1 e3 08 1d 3b 01 3a 36 ef d9 a1 05 0c 91 d9 67 43 a0 0b 69 03 6f 9c 51 db 08 a1 4a 3f be 03 c6 14 2f 97 c1 ae 31 31 e6 7a 00 3c 0d 00 cf c4 60 c7 4e b0 cc 7f 51 8d 82 80 a4 a7 f0 7a 89 68 b1 45 fb 82 30 50 af 18 05 d3 35 8d 62 9b d0 75 3f 07 52 29 a8 97 52 8e 81 71 cd f9 0a fb 9a 71 8e 01 3b 85 21 03 00 29 b7 85 a4 34 43 3e 46 14 21 2d a0 0a 0b 9a 21 01 27 52 51 c6 3a 6b 36 7b 4b 94 ad 60 09 ee 4c 75 b6 2e 89 aa 6b 05 1e 32 51 92 ff d5 20 50 85 9d b0 eb 58 0c 9d 35 b2 8b 9c 12 e9 4c 30 39 3d cd df 52 8d 3e 09 12 c5 e3 25 9a 24 15 21 45 45 6d 63 43 21 45 3f b7 aa a2 a3 22 f9 03 4f 71 72 c4 36 f0 e3 94 3e c3 22 cf 64 19 9c 18 cc bc 1b 4f 67 53 20 df 73 21 46 48 bf 8f ef a6 14 2c 1d 98 27 Data Ascii: >(<(t./[8;:6gCioQJ?/11z<`NQzhE0P5bu?R)Rqq;!)4C>F!-!'RQ:k6{K`Lu.k2Q PX5L09=R>%$!EEmcC!E?"Oqr6>"dOgS s!FH,'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49826	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:41 UTC	618	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.ency.cloud sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:42 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:42 GMT Content-Type: application/x-javascript Content-Length: 32820 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 09 Aug 2024 21:16:16 GMT etag: 0x8DCB8B881B52A8D x-ms-request-id: d784de91-a01e-0055-4ed6-f9a462000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192042Z-16ff8f5bd977485ctg98f70aws00000000m0000000027r3h x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:42 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 19:20:42 UTC	16384	IN	Data Raw: ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 f6 68 2c b8 78 77 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOqh,xw
2024-08-29 19:20:42 UTC	858	IN	Data Raw: e5 d9 03 08 05 a0 c1 bd 78 9d 8e 75 31 ad f1 57 f9 9e dd 44 27 69 ba 9b 26 57 b2 c3 37 85 4e e8 11 b4 39 00 22 f6 f2 28 4c 10 de f3 4d 89 f2 8a 0f 58 7b ae 6a 63 40 6c 2b 4d 7a 55 dd 19 14 a8 d1 ae e9 97 ae fa e6 32 c1 c1 24 10 97 45 27 80 b2 0f 60 09 e5 6a 53 df 29 ae fc 16 e7 23 a0 ad 39 a9 d0 6a cb d9 77 2b 7d b0 9a da 6a 71 87 36 b4 c6 04 af 1d c3 1b 6c 40 4b 73 9a 8d cd 6c 6c 58 e2 9c 5f 34 12 92 ab d6 81 81 af 83 66 0a 09 ad d2 fa ec 0c cd 38 6b d6 69 e5 9c 24 af ad 1b e4 80 78 37 38 92 7c ed 6b 78 a5 f0 eb 4e 72 99 1e 24 a7 f4 2b 86 71 68 49 38 b7 ae 39 36 f2 35 ad 85 ed a3 61 d5 d1 32 1c 27 f1 64 02 f7 76 90 c5 13 20 44 c2 21 4e 65 96 01 02 b5 e7 3a 2f 22 42 b7 d2 e2 ab 11 09 47 1b 31 7a 5d f3 e5 f3 1b be d5 7d 8b 7d 96 29 90 b2 df 68 16 b0 07 d6 Data Ascii: xu1WD'i&W7N9"(LMX{jc@l+MzU2$E'`jS)#9jw+}jq6l@KsllX_4f8ki$x78\|kxNr$+qhI8965a2'dv D!Ne:/"BG1z]}})h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49827	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:41 UTC	1634	OUT	POST /API/EvaluateExperimentAssignments HTTP/1.1 Host: signup.ency.cloud Connection: keep-alive Content-Length: 369 correlationId: 1b9ba598ef1c4718bf548acdb9395636 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 1b9ba598ef1c4718bf548acdb9395636 canary: 1z8IbjpczcAfU1HgrSF0u0XouQRr+9egVLOOt5hN6D2AF23QCDOsa/jAFoVEK6s9/UAivd9Ltd5PBfC76tGG7rjFmP76uQw6sCv/lvzhKV+ud3jm/NXqwFimV/fPc5jz+U/qafScoFD5m4G05BsHI8sHg6QMKvSpVUgBlFB+t7Rc8RAjtfvZhGeWZ+QfZhh2iF2kI6eP4apLHJRCV6YJYHB4ZwWVsahJo5wOEOBpTQ5W+GroZJ1QWL2y9ZL70wPe:2:3c Content-type: application/json; charset=utf-8 hpgid: 200225 Accept: application/json hpgact: 0 sec-ch-ua-platform: "Windows" Origin: https://signup.ency.cloud Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:41 UTC	369	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 45 78 70 65 72 69 6d 65 6e 74 73 22 3a 5b 7b 22 70 61 72 61 6c 6c 61 78 22 3a 22 65 6e 61 62 6c 65 70 6c 61 69 6e 74 65 78 74 66 6f 72 73 69 67 6e 75 70 65 78 70 65 72 69 6d 65 6e 74 22 2c 22 63 6f 6e 74 72 6f 6c 22 3a 22 65 6e 61 62 6c 65 70 6c 61 69 6e 74 65 78 74 66 6f 72 73 69 67 6e 75 70 65 78 70 65 72 69 6d 65 6e 74 5f 63 6f 6e 74 72 6f 6c 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 65 6e 61 62 6c 65 70 6c 61 69 6e 74 65 78 74 66 6f 72 73 69 67 6e 75 70 65 78 70 65 72 69 6d 65 6e 74 5f 74 72 65 61 74 6d 65 6e 74 22 5d 7d 2c 7b 22 70 61 72 61 6c 6c 61 78 22 3a 22 65 6e 61 62 6c 65 6a 73 70 75 62 6c 69 63 6b 65 79 64 65 70 72 65 63 61 74 69 6f 6e 65 78 70 65 72 69 6d 65 6e 74 22 2c 22 63 6f 6e 74 72 6f 6c 22 3a 22 65 6e Data Ascii: {"clientExperiments":[{"parallax":"enableplaintextforsignupexperiment","control":"enableplaintextforsignupexperiment_control","treatments":["enableplaintextforsignupexperiment_treatment"]},{"parallax":"enablejspublickeydeprecationexperiment","control":"en
2024-08-29 19:20:42 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:42 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-cache, no-store pragma: no-cache p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: EUSXXXX0003 (2.0.3509.0) x-ms-amserver-tm: 15ms x-ms-request-id: 73855ba4-a42c-4f29-89c8-9c85e74b8f8d referrer-policy: strict-origin-when-cross-origin amserver: EUSXXXXGN000003 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 73855BA4A42C4F2989C89C85E74B8F8D Ref B: PAR02EDGE0807 Ref C: 2024-08-29T19:20:42Z access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:42 UTC	643	IN	Data Raw: 32 37 63 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 46 41 78 5a 48 4b 50 61 5c 2f 50 61 51 75 35 77 37 36 77 33 57 70 62 54 30 56 79 68 37 50 52 65 7a 4f 6c 5a 5c 2f 56 48 33 7a 79 6d 4d 46 58 6d 76 36 66 62 69 64 37 2b 6d 31 4e 48 56 77 78 66 43 67 7a 63 69 6a 6c 42 61 50 4d 55 30 48 67 6f 62 6a 58 56 67 53 53 5a 62 7a 70 4f 52 41 62 39 37 70 32 33 31 66 4d 4e 34 61 39 5a 61 73 4f 54 6a 31 46 48 69 4d 67 5a 6b 43 76 63 59 4e 79 5a 52 38 62 45 32 6b 31 6a 34 4d 35 44 54 75 54 41 66 43 4c 7a 4a 47 6d 7a 45 56 65 46 74 6c 65 4d 46 48 4b 7a 62 75 41 55 43 30 4a 35 72 64 51 6f 31 6c 76 5c 2f 4a 78 46 2b 6c 55 73 4c 48 79 59 50 41 4e 55 72 59 41 34 37 43 66 32 6c 41 4e 77 38 6c 50 44 59 66 58 77 71 79 78 75 61 54 42 32 62 6f 61 53 49 63 6a 64 75 69 30 6b Data Ascii: 27c{"apiCanary":"FAxZHKPa\/PaQu5w76w3WpbT0Vyh7PRezOlZ\/VH3zymMFXmv6fbid7+m1NHVwxfCgzcijlBaPMU0HgobjXVgSSZbzpORAb97p231fMN4a9ZasOTj1FHiMgZkCvcYNyZR8bE2k1j4M5DTuTAfCLzJGmzEVeFtleMFHKzbuAUC0J5rdQo1lv\/JxF+lUsLHyYPANUrYA47Cf2lANw8lPDYfXwqyxuaTB2boaSIcjdui0k
2024-08-29 19:20:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49829	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:41 UTC	762	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:42 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:42 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Jun 2023 15:44:25 GMT etag: 0x8DB772562988611 x-ms-request-id: 689e1605-b01e-007e-0d47-f75311000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192042Z-16ff8f5bd97j2zzc8c8ab5b9f400000004eg0000000235zx x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:42 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-08-29 19:20:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49828	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:41 UTC	749	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:42 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:42 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Jun 2023 15:44:22 GMT etag: 0x8DB7725611C3E0C x-ms-request-id: 03ac4383-d01e-006b-80f7-f77b0f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192042Z-16ff8f5bd97zh6mn5a98ksv1us00000004pg00000000zdma x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:42 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-08-29 19:20:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49830	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:41 UTC	932	OUT	GET /?session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU HTTP/1.1 Host: a5031de5-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:44 UTC	217	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:44 GMT Content-Type: text/html Content-Length: 10156 Connection: close vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip
2024-08-29 19:20:44 UTC	10156	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 7c 79 73 23 c7 95 e7 ff 1b b1 df 01 5d 11 c3 06 1a 05 34 0a 37 58 ac 66 f0 26 bb 79 99 00 bb 25 b1 69 46 a1 90 05 54 b3 50 05 d5 01 12 dd a4 43 bd 3e c6 5a 1f 13 8e b5 bd de 1d 4f ac 15 3b f6 cc ee 8e 6d 59 63 cf 58 6b 79 3f 83 fc 15 64 a9 7b 3c a3 08 ef 47 d8 df cb 3a 50 38 d8 92 67 47 b6 88 aa cc 97 2f 5f be 2b df 7b 99 a5 a5 5b eb 07 6b ad d7 0f 37 52 3d af 6f de fb f7 ff 6e 89 7e 53 97 7d d3 72 15 a1 e7 79 83 c5 bb 77 2f 2e 2e f2 17 a5 bc ed 74 ef 4a 8d 46 e3 ee 25 c1 08 1c 98 a9 1d fc a6 f0 cf 92 67 78 26 bb b7 74 37 f8 0d 1b 5d cd 31 06 de bd a1 ea a4 4c 5b 53 cd 96 ea 74 99 a7 dc 26 cc 2e 50 ab 95 42 49 ea b0 4a ae 50 d4 4b 9d 86 5a ce 33 4b 1b e5 35 d3 f6 3b 77 6f 8b de 14 78 b1 52 d7 cb 55 56 9e 0b be 66 32 d5 c9 Data Ascii: \|ys#]47Xf&y%iFTPC>ZO;mYcXky?d{<G:P8gG/_+{[k7R=on~S}ryw/..tJF%gx&t7]1L[St&.PBIJPKZ3K5;woxRUVf2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49831	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:41 UTC	840	OUT	GET /index.html HTTP/1.1 Host: aa6c90d0-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:43 UTC	726	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:43 GMT Content-Type: text/html Content-Length: 700 Connection: close last-modified: Thu, 06 Jun 2024 12:39:48 GMT etag: "5dc258f6742f6d22a4cd80f50926ed70" x-guploader-uploadid: AHxI1nP74yPFyPkSHakuH3fCFZVj3Wsq6lddV_42oBvJk8EzJ8Y61crHlWi31AMKvesCmFMt45NEGM0kiA x-goog-generation: 1717677588065406 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1233 x-goog-hash: crc32c=5beoRw== x-amz-checksum-crc32c: 5beoRw== x-goog-storage-class: STANDARD accept-ranges: bytes cache-control: max-age=0 vary: Accept-Encoding content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:43 UTC	700	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 73 9b 30 10 bd e7 57 50 0e 31 8a 65 88 e3 26 4d 6c cb 39 c4 e9 b4 87 d6 9e 26 e9 b4 e3 49 3a 42 5a b0 52 90 18 21 7f d5 f6 7f af 30 60 3b d3 43 99 01 b1 d2 e3 ed be fd a0 ff 6e 38 ba 7b fc 39 be 77 a6 26 4d 06 27 fd 62 71 12 2a 63 d2 00 d9 28 36 80 f2 c1 89 63 af 7e 0a 86 3a 6c 4a 75 0e 86 34 9e 1e 3f b6 ae 1b c7 47 92 a6 40 1a 73 01 8b 4c 69 d3 70 98 92 06 a4 85 2e 04 37 53 c2 61 2e 18 b4 76 06 76 84 14 46 d0 a4 95 33 9a 00 69 fb e7 35 95 11 26 81 c1 a7 59 4a a5 f3 00 32 57 da 79 60 5a 64 c6 f9 1c 69 eb a1 1f 94 88 93 7e 50 c6 d6 0f 15 5f d9 25 df a1 4a 96 39 d5 0e 25 13 f7 57 b6 9c 0b ee e2 e2 a5 53 2e 1c dc e7 5e 34 93 cc 08 25 9d d0 a3 68 5d a0 43 22 61 e1 7c 83 f8 7e 99 79 ae f7 b2 71 90 db a4 4d 97 78 93 97 de Data Ascii: TMs0WP1e&Ml9&I:BZR!0`;Cn8{9w&M'bq*c(6c~:lJu4?G@sLip.7Sa.vvF3i5&YJ2Wy`Zdi~P_%J9%WS.^4%h]C"a\|~yqMx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49833	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:43 UTC	493	OUT	GET /API/EvaluateExperimentAssignments HTTP/1.1 Host: signup.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:44 UTC	772	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 29 Aug 2024 19:20:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-cache, no-store pragma: no-cache location: https://signup.ency.cloud/error.aspx?e=404 p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: scuXXXX01A6 (2.0.3509.0) x-ms-amserver-tm: 0ms x-ms-request-id: efe42c12-c2b1-41b4-a096-9c4419468217 referrer-policy: strict-origin-when-cross-origin amserver: scuXXXXig0001A6 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: F777E8EFE4EB4B448D82614F363A2223 Ref B: PAR02EDGE0917 Ref C: 2024-08-29T19:20:44Z access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:44 UTC	165	IN	Data Raw: 39 66 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 75 70 2e 65 6e 63 79 2e 63 6c 6f 75 64 2f 65 72 72 6f 72 2e 61 73 70 78 3f 65 3d 34 30 34 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9f<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://signup.ency.cloud/error.aspx?e=404">here</a>.</h2></body></html>
2024-08-29 19:20:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49834	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:43 UTC	513	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:45 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Jun 2023 15:44:22 GMT etag: 0x8DB7725611C3E0C x-ms-request-id: 03ac4383-d01e-006b-80f7-f77b0f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192044Z-16ff8f5bd97zh6mn5a98ksv1us00000004p00000000151mk x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:45 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-08-29 19:20:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49835	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:43 UTC	526	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:45 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:45 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Jun 2023 15:44:25 GMT etag: 0x8DB772562988611 x-ms-request-id: b467ce4e-d01e-0057-2215-f86d65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192044Z-16ff8f5bd977485ctg98f70aws00000000t000000000gr5g x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:45 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-08-29 19:20:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49836	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:43 UTC	529	OUT	GET /shared/5/chunks/oneds-analytics-js_8c01a5c09df43fd8d323.js HTTP/1.1 Host: dcd98dee-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:45 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:45 GMT Content-Type: application/x-javascript Content-Length: 32820 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 09 Aug 2024 21:16:16 GMT etag: 0x8DCB8B881B52A8D x-ms-request-id: ddc70fb6-201e-0029-6e48-f78a9d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192044Z-16ff8f5bd97ndtwm7t5vpwv3wc00000004sg00000000k17u x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-08-29 19:20:45 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 93 d8 51 bc 12 42 26 e4 06 13 c8 65 86 61 b3 84 dd 06 0d 46 f2 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a6 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 3f f9 c9 a3 51 b7 17 3d 18 75 1f 8f 27 f7 b7 26 e3 47 e3 ad cd ad ce 3f 79 e7 ed ee f6 ce fb 83 9d 4e f1 b5 68 fd 7a ef ff f2 e6 68 a2 c8 e2 51 e1 0d fc 5c 4e 27 9d 6b 79 3a 8b 46 17 db e7 f3 e4 e2 e4 32 8f c7 32 29 e2 e2 e6 24 8f f3 39 a5 a3 f0 a7 6a 2d 16 47 c7 41 67 36 cf cf fd a3 a3 fb bf f5 8e c5 6d 6f 73 f3 b7 47 fd c9 3c 19 a1 ff 7e 22 a4 28 82 db a2 93 f9 32 10 45 67 Data Ascii: kWH?\|[g[$QB&eaFH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G?Q=u'&G?yNhzhQ\N'ky:F22)$9j-GAg6mosG<~"(2Eg
2024-08-29 19:20:45 UTC	16384	IN	Data Raw: ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 af f8 08 27 9e c7 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d1 b9 27 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 37 83 d9 2d 11 cd 83 9b 9c e4 87 dd 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 15 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f 71 f6 68 2c b8 78 77 Data Ascii: _8}\|wr3}3{'c#Bxo=':)`6#k\ml>%7-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJrb/OUCUMv2Ib0{uZMMtL]\OOqh,xw
2024-08-29 19:20:45 UTC	858	IN	Data Raw: e5 d9 03 08 05 a0 c1 bd 78 9d 8e 75 31 ad f1 57 f9 9e dd 44 27 69 ba 9b 26 57 b2 c3 37 85 4e e8 11 b4 39 00 22 f6 f2 28 4c 10 de f3 4d 89 f2 8a 0f 58 7b ae 6a 63 40 6c 2b 4d 7a 55 dd 19 14 a8 d1 ae e9 97 ae fa e6 32 c1 c1 24 10 97 45 27 80 b2 0f 60 09 e5 6a 53 df 29 ae fc 16 e7 23 a0 ad 39 a9 d0 6a cb d9 77 2b 7d b0 9a da 6a 71 87 36 b4 c6 04 af 1d c3 1b 6c 40 4b 73 9a 8d cd 6c 6c 58 e2 9c 5f 34 12 92 ab d6 81 81 af 83 66 0a 09 ad d2 fa ec 0c cd 38 6b d6 69 e5 9c 24 af ad 1b e4 80 78 37 38 92 7c ed 6b 78 a5 f0 eb 4e 72 99 1e 24 a7 f4 2b 86 71 68 49 38 b7 ae 39 36 f2 35 ad 85 ed a3 61 d5 d1 32 1c 27 f1 64 02 f7 76 90 c5 13 20 44 c2 21 4e 65 96 01 02 b5 e7 3a 2f 22 42 b7 d2 e2 ab 11 09 47 1b 31 7a 5d f3 e5 f3 1b be d5 7d 8b 7d 96 29 90 b2 df 68 16 b0 07 d6 Data Ascii: xu1WD'i&W7N9"(LMX{jc@l+MzU2$E'`jS)#9jw+}jq6l@KsllX_4f8ki$x78\|kxNr$+qhI8965a2'dv D!Ne:/"BG1z]}})h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49837	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:43 UTC	680	OUT	GET /PXzC5j78di/main.min.js HTTP/1.1 Host: 539d138f-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aa6c90d0-02f3d9a4.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:45 UTC	476	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 64203 Connection: close last-modified: Thu, 29 Aug 2024 19:12:55 GMT etag: "c8b50da96bc5ab5d6d751ed351884157" accept-ranges: bytes cache-control: max-age=600 vary: Accept-Encoding access-control-allow-origin: * access-control-expose-headers: active-cdn,x-served-by,Akamai-Request-BC active-cdn: Akamai content-encoding: gzip
2024-08-29 19:20:45 UTC	13962	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 69 7b e2 ba b2 28 fc fd fe 8a c4 67 ed 2c 7b a1 10 db cc d0 4e 76 e6 a1 33 cf 09 61 f5 63 8c 01 27 60 d3 c6 ce d0 81 f3 db 6f 95 06 5b 06 d2 6b df 7b de f7 b9 6b ef 26 b2 c6 92 54 2a 95 4a 55 a5 b5 b5 a5 7f 0f 3c c7 f5 c7 ee d2 76 30 fa 08 bd 5e 3f 5a 52 b7 b5 25 53 37 8a ab a6 6e 16 97 ce dd d0 1b ba 91 1b de 93 a5 43 df 59 52 df de de f2 23 11 f9 9e 77 82 a1 96 5f 82 e2 7e e4 fa d1 52 d0 5d 8a fa de 78 a9 eb 0d dc 25 c7 f6 97 fc 20 5a 6a 43 30 18 79 6e 67 c9 f6 3b 6b 41 b8 d4 f1 c6 51 e8 b5 e3 c8 ed e4 ff 57 14 7e 7c be 79 7e 27 78 cb ff 18 bd 6f 8e 46 87 1d 4b 39 bf ff b5 5d 7a ae 54 3b 9e 42 ba b1 ef 44 5e e0 ab da a7 12 03 a8 58 d6 89 94 86 88 5f 8a 54 57 fb 0c dd 28 0e 21 6c 29 22 5e b1 ac e8 63 e4 02 48 57 1f c3 Data Ascii: i{(g,{Nv3ac'`o[k{k&T*JU<v0^?ZR%S7nCYR#w_~R]x% ZjC0yng;kAQW~\|y~'xoFK9]zT;BD^X_TW(!l)"^cHW
2024-08-29 19:20:45 UTC	16384	IN	Data Raw: bc cc a2 46 fc a5 f8 f1 fe e8 f0 76 d7 38 61 2a de f6 dd e3 c7 c3 9d 31 60 5f 9d e1 de b8 73 77 c3 95 c6 9d e1 ed f3 03 9c 9e 1f cc 7e 9f e7 de df 8b 1f f7 df 07 17 59 d5 f3 79 b5 f3 08 ca fe 72 f6 6b 31 33 65 9c ad ed f8 fe f2 d5 36 6f 63 96 72 6c 1e 0d 9d e1 5e f4 78 5d c5 bc ae ab 1a ba 24 0d 71 bd 94 6b 42 4b 02 34 b5 61 9e f3 3c ab 89 fa db 46 ed c5 19 0e 4c e8 58 f7 f1 fe b1 df 3e b8 ed 77 f6 45 b3 90 5a 78 bc 3b fa 7d 8e 5f 8f 77 68 33 31 30 da b7 b5 01 1b 84 3d fd 31 e9 1c e4 18 ba fb 97 1f f6 fd e3 c0 19 7c 91 23 69 a1 73 57 2a 40 77 de 9c 44 8f 7e 16 86 85 39 64 18 8c b6 df f9 40 3b 8f 47 aa 7d bf 00 86 85 39 4e 07 ed fd db d8 be bf 8d ee f5 c1 ee e5 6d ed 0a a6 e4 d5 19 5e 0e 64 5b 82 34 17 8b 79 30 f7 c6 10 f3 72 63 de 8e 1f ef 4a a3 ce 9d ce Data Ascii: Fv8a1`_sw~Yyrk13e6ocrl^x]$qkBK4a<FLX>wEZx;}_wh310=1\|#isW@wD~9d@;G}9Nm^d[4y0rcJ
2024-08-29 19:20:46 UTC	16384	IN	Data Raw: 4f d8 34 27 e9 c0 92 41 34 09 22 8a 69 05 b9 1c fc 72 f9 ae a4 46 a7 7c d2 aa 5f f6 7e 55 96 09 7c fc 7d 59 26 46 91 88 32 97 31 a8 b8 f0 3e 8e d2 81 d0 f7 1c bc 8d 8e 11 2b cf 88 dd eb 87 6b 5a 38 60 41 61 ab 61 a6 1f be be 70 d8 d0 0e b5 83 a2 35 86 fc 9a b3 67 87 1b 5e 97 38 8f bc 89 67 da 59 b7 12 d1 b4 e6 82 b8 12 1e e7 78 3b 30 02 d3 ae 63 a9 ae 60 db 86 e4 fc ae bd b1 e1 84 2c 8d 8b 76 b9 27 3e 2b 48 24 f4 b2 dc 00 15 95 8c 76 9a 2c 14 66 33 13 57 7f a5 0a 3d 18 8e 5e a7 59 be 3c b9 a8 3f 76 e1 ea 0a ca 88 a8 03 95 68 83 45 a9 24 dd 5a f9 32 e6 fb cc 3a 02 89 29 b8 05 69 0a e9 f0 a6 73 81 7b 0b 83 dd 11 90 39 30 f7 53 97 4d 9a 8d 49 38 d5 e9 40 09 39 7d 4c 2a 3a e4 05 87 77 37 89 f3 cd 78 52 1f 28 5a a3 8a ba d8 3f 6d 02 03 df 93 86 7e b7 e0 fe 7e Data Ascii: O4'A4"irF\|_~U\|}Y&F21>+kZ8`Aaap5g^8gYx;0c`,v'>+H$v,f3W=^Y<?vhE$Z2:)is{90SMI8@9}L*:w7xR(Z?m~~
2024-08-29 19:20:46 UTC	16384	IN	Data Raw: 65 97 44 77 2d 6d 20 de 63 6c 07 af 2f e7 f8 6e c1 83 7d 0b 1f 48 f0 e1 c2 5d 5f 4f 60 fc 95 99 49 0d a8 16 93 c1 d3 bc 40 61 11 7c 33 18 18 14 5c e9 b7 fb 67 0b 3d 27 c7 52 70 c5 72 51 bd 47 59 b8 45 f9 37 26 fb 66 88 a7 56 7c cf 8b 23 59 f1 98 a7 6b f9 03 fd 5b 20 a4 85 0e f4 8d 8d 6c d0 d7 51 3a 0e fe 7e 11 12 43 eb eb 5e fc d6 8b 09 9f c8 c4 51 a3 43 b2 c6 4f 12 81 87 80 22 c0 7f df b4 9b 78 3c 40 83 43 91 c2 93 b2 fb f4 f2 33 a0 b7 7d 9d 89 0e 2a 28 3a c8 85 e5 49 72 50 c8 a6 0c e8 c1 69 69 24 d2 2f d6 c8 b1 43 83 fd 3e 2a da 97 c8 5d 68 7e f9 e9 97 bc 67 cb 86 ef 6d 49 df 7a 3b af 32 07 78 81 56 04 64 d2 09 c2 dc 67 39 14 36 28 3c a5 3c a1 56 d8 45 f5 1b fc 3b 24 69 7a 1b f5 1b 11 05 a1 ec 8c 5c 7e 8d 45 1b f1 39 b2 3f a6 87 9b a1 ae 62 10 df 6d 6d Data Ascii: eDw-m cl/n}H]_O`I@a\|3\g='RprQGYE7&fV\|#Yk[ lQ:~C^QCO"x<@C3}(:IrPii$/C>]h~gmIz;2xVdg96(<<VE;$iz\~E9?bmm
2024-08-29 19:20:46 UTC	1089	IN	Data Raw: 34 e6 0a 43 4b c7 7a 94 f9 2c 58 ad 13 5d 8b f0 26 19 50 5b 7a 2a a0 b3 34 0c e1 08 0e 04 44 4b f2 2a ae 03 ba 35 4e 4b 7c 2d c8 c0 4b 06 d3 62 6d a5 bb 88 71 c3 4c dc cf c9 4d e1 04 01 27 0c 2f 5a b6 e7 5b 40 81 f0 64 d8 70 3c f5 7e 14 25 b7 e2 30 5a 07 7c 3c 53 e6 06 99 6e 11 4d 37 f4 1d 68 1c d9 1d 54 bf 28 5f 94 6b 16 19 a0 0d b0 b3 19 89 26 f7 5b 3a 5d 66 7f 41 1c cb a6 58 cf d8 86 6c 73 1f b1 6b ba 5f 2a 6f a9 9d fd ad 7c 41 8d e0 ef 8e 3a 86 bf 45 94 02 05 b4 4b 8d 19 e0 56 ae 49 a3 36 c7 51 5b be 8f c2 1a f3 78 1f 05 25 d3 a6 fc 50 72 90 44 5b 99 61 3f 32 f4 ac d1 4d 1a de 20 c4 9a 22 e5 41 69 c7 cc 6f 17 56 2a 16 2c 8e 25 39 9d a2 bb 2d 6a d4 37 c4 89 67 53 21 be 54 cf e2 61 b7 89 2a 42 c0 40 ac b0 1c b7 96 e4 84 15 bd 93 ff 33 f8 b3 60 95 b2 0b Data Ascii: 4CKz,X]&P[z4DK5NK\|-KbmqLM'/Z[@dp<~%0Z\|<SnM7hT(_k&[:]fAXlsk_o\|A:EKVI6Q[x%PrD[a?2M "AioV,%9-j7gS!Ta*B@3`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49839	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:45 UTC	616	OUT	GET /error.aspx?e=404 HTTP/1.1 Host: signup.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; MicrosoftApplicationsTelemetryDeviceId=cb71f57c-f934-43bd-9e5d-d645607d6f98; ai_session=bdSGTWOXIQJlpbAbGOE073\|1724959241856\|1724959241856
2024-08-29 19:20:48 UTC	794	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 84035 Connection: close cache-control: no-cache, no-store pragma: no-cache vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ua-compatible: IE=edge, chrome=1 x-ms-amserver: wusXXXX01RF (2.0.3509.0) x-ms-amserver-tm: 15ms x-ms-request-id: 81277057-d3fd-4506-a8c5-e0b84d3b125d referrer-policy: strict-origin-when-cross-origin amserver: wusXXXXig0001RF x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 81277057D3FD4506A8C5E0B84D3B125D Ref B: PAR02EDGE1010 Ref C: 2024-08-29T19:20:46Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:48 UTC	15590	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 6b 57 db 48 b6 30 fc f9 65 ad f9 0f 42 93 43 db 83 6c 6c 6e 01 3b 82 43 08 e9 30 93 5b 07 d2 e9 1e 42 f3 c8 76 19 2b 91 25 b7 2e 5c 1a fc df 9f 7d a9 92 aa 24 99 90 9e 3e e7 79 b3 56 b0 54 aa 7b ed da b7 da 7b d7 df 96 9e 2d bf 78 77 78 fa eb fb 23 6b 92 4e 83 bd bf 2d 3d c3 5f 2b f0 c2 4b d7 16 a1 6d dd 4c 83 5e f1 36 0c bc 24 71 ed e9 45 16 58 e3 89 6d 8d fc d8 b5 83 34 b6 ad 24 bd 0d 84 6b db 50 85 65 3d 9b 08 6f 44 4f f0 1c f8 e1 57 2b 16 81 6b cf 62 31 8c c2 50 0c 53 db 9a c4 62 ec da 93 34 9d 25 bd b5 b5 6d e1 6d 88 ad 9d 41 ab b3 3e de 18 ed 7a 9b 6d 11 0e 6f db c3 20 ca 46 d0 6a 1c 25 49 14 fb 97 7e 88 3d fc cb 2b 9c 8a d4 b3 b0 64 4b fc 9e f9 57 ae 7d d3 1a 85 49 0b 6a 1f 8b 74 38 69 41 1b 69 1c 05 50 0e 1e 44 Data Ascii: kWH0eBClln;C0[Bv+%.\}$>yVT{{-xwx#kN-=_+KmL^6$qEXm4$kPe=oDOW+kb1PSb4%mmA>zmo Fj%I~=+dKW}Ijt8iAiPD
2024-08-29 19:20:48 UTC	14460	IN	Data Raw: 83 6f 1d 6a f6 a6 ec a2 2a 6f 1a 1b 98 97 8c 95 fc c2 b4 9b 8c d0 f0 cc 10 62 fa f1 b3 d4 38 70 c9 cf 45 62 2d 26 a5 79 30 82 f6 83 27 40 2f 83 46 57 0b be a2 43 c5 88 33 dd 54 33 95 3c 60 72 83 71 dc 9b 1c be 0f 60 05 df 5c 8c 22 88 01 48 a0 86 f5 fa 1a c8 75 23 81 ae 20 bc a3 a7 67 f3 bb 1c b0 0d 41 f8 5b 2e d8 15 67 0e 9a ff 8a 07 76 cd f5 b8 a9 73 d9 ec 71 6e dd 03 bb 72 e3 2d 70 fa 90 b3 7c 81 08 dd 13 02 e4 79 d2 9e 89 98 a2 95 85 43 76 5a 1e 30 a5 04 d0 a2 d7 53 e6 2d 8f f8 e7 da ed e0 bd 21 ce 09 4e e7 0d cd 29 9e e3 bc c0 fa f4 71 97 df 19 5d 36 26 f5 16 19 c5 87 9a 24 cd be a2 48 bc f2 13 7f e0 07 7e 7a 2b ef c9 a5 8f 75 15 9b 75 96 ab ab ad e9 05 e0 be 23 a6 a6 35 3c ee 35 70 dc 4b 73 ca 04 68 e7 67 3f f5 82 84 54 3e 80 1a 16 97 7a 02 a5 b0 90 Data Ascii: oj*ob8pEb-&y0'@/FWC3T3<`rq`\"Hu# gA[.gvsqnr-p\|yCvZ0S-!N)q]6&$H~z+uu#5<5pKshg?T>z
2024-08-29 19:20:48 UTC	16384	IN	Data Raw: 6d 46 24 e0 21 07 9b 64 f7 39 c0 ea 64 02 3e 60 60 9b 2f 09 f8 90 83 f7 ad fa 76 78 0f d9 1c 4a e1 a2 9f ac 6e a7 70 de 53 03 b3 eb 3b bc 97 6c 86 a5 70 de 55 36 d7 52 38 ef ab a1 dd cb 1d de 51 36 ff 52 38 ef 2f 9b 89 29 9c 77 d8 be 45 99 f7 95 cd ce 94 31 78 7f d9 3c 4d e1 bc bf 0e ec be ee f2 be b2 b9 9b c2 79 8f d9 2c 4e e1 82 b9 74 3e cf e7 c0 e7 c2 30 d0 01 1d 0a 70 0c 01 00 bb 14 e8 e8 7f 00 f6 28 d0 e4 71 80 f4 19 c4 d1 f7 00 1d 50 a8 8b c3 01 3a 64 50 93 e6 3e 4b 77 f4 3a 40 0f 28 d4 c5 de 00 3d 64 d0 7d ab a6 1d d6 2f 2e e6 46 30 ef 1d 47 7f 23 98 f5 cf c0 ec ed 0e eb 1b 17 67 23 98 75 90 8b b1 11 cc 7a c8 e4 6b 04 b1 ee 71 b1 35 82 59 2f b9 b8 1a c1 ac 9b f6 2d b2 ac 87 5c 3c 8d 6c c0 7a c9 c5 d2 08 66 bd 64 72 34 82 58 0f b9 18 1a c1 ac 9f 5c Data Ascii: mF$!d9d>``/vxJnpS;lpU6R8Q6R8/)wE1x<My,Nt>0p(qP:dP>Kw:@(=d}/.F0G#g#uzkq5Y/-\<lzfdr4X\
2024-08-29 19:20:48 UTC	16384	IN	Data Raw: 46 0f 1e dc d3 db 01 59 24 6e 8d 44 99 a9 35 8c b6 4e 29 cd 91 9e 4a 70 6f 37 bf cd 03 9e 23 bc 8e c4 4f 79 9c ad c8 1a 4f 32 5e 8f c9 bd 7b e1 28 a3 e5 4f f0 9b 76 8c c6 da e0 a3 bb 54 29 33 92 eb 37 aa 8c a6 82 96 f8 e1 1f 25 6c 68 a6 79 5e af 11 cc 5a a3 71 73 d3 1e ab 4b 90 b1 e1 06 3a 4a a8 ab 9b 66 13 31 8a 09 6f a2 de 91 f4 2e 90 a9 ab 46 18 e6 0f 21 0d 3f 34 94 32 72 39 67 ab da 53 54 ab fa 77 59 7b 76 03 cb 55 fd 57 04 64 d5 3f 3d 3f 87 11 bb 2b 59 6d 28 fe ea 90 a3 4f 9f 74 8d c3 b8 8b ac dd a4 6f e0 27 70 09 a6 3e ac 2d bf 80 e8 0d c9 75 66 15 05 7f d7 58 3a 43 a2 07 a0 d2 a3 4b 3b 15 7e 86 57 6b 41 23 7a 4e 9a ff 01 fd 97 b9 ad 71 4d ca 1b 15 a4 3c ee 0d 87 4f a7 fc fa 8e 74 c7 cd 8d 4e 2d 9f 66 69 1c 7f 4c 97 8d 66 dd d5 b7 00 81 31 6d f8 b4 Data Ascii: FY$nD5N)Jpo7#OyO2^{(OvT)37%lhy^ZqsK:Jf1o.F!?42r9gSTwY{vUWd?=?+Ym(Oto'p>-ufX:CK;~WkA#zNqM<OtN-fiLf1m
2024-08-29 19:20:48 UTC	16384	IN	Data Raw: 3a 6f b3 d5 16 17 e5 fd 99 73 5e d6 81 b6 83 d9 9f cd d4 5b 11 92 43 20 83 79 c3 7c 30 86 9c 31 22 82 15 59 3a 6d cc 18 ce 1b ad d1 f2 65 61 f6 33 6c f4 e3 a8 9c 7d ad 70 c6 0a e1 d2 65 c9 10 24 86 41 ec 1a 0b 91 23 cc a0 a4 90 37 55 02 64 26 ce 73 45 bf d3 29 14 bf 67 0c 79 50 62 87 6c ef 21 a2 7b 11 58 07 c0 04 c8 27 8a 0b 42 b2 d1 2b c4 a7 8a c5 a5 19 f6 6a 42 d7 9d 24 b7 e6 1a b3 36 a7 d8 d6 27 1b 71 ef aa 38 f4 93 cb 48 6d cb 0a 90 46 a1 1a 0c 44 24 58 7c 28 4d 59 ba d9 44 aa df 79 53 ca b9 59 f4 05 48 18 08 89 f5 11 98 58 fb a8 15 c0 ef 32 ae ab d9 86 de f1 19 26 5b 70 23 e5 53 cd 51 bc d8 52 78 64 ea 3c bc 1e 15 64 24 87 12 80 b4 22 77 b8 8a 20 d2 b6 37 69 52 6d e4 37 24 98 0c 09 94 33 fd b5 30 83 0f 78 8c f8 79 aa 9b ac c9 55 5d 16 03 09 15 f4 d9 Data Ascii: :os^[C y\|01"Y:mea3l}pe$A#7Ud&sE)gyPbl!{X'B+jB$6'q8HmFD$X\|(MYDySYHX2&[p#SQRxd<d$"w 7iRm7$30xyU]
2024-08-29 19:20:48 UTC	4833	IN	Data Raw: c5 95 22 7f 8a 6c 5d 6e 78 84 ec 00 e2 f8 b4 59 c6 78 52 cd 37 2e 2d 2d 79 b3 4c 64 46 91 dc 54 73 42 42 9c a5 09 6e 1c 99 25 17 f9 71 bd ba 34 cb c4 8c 59 84 09 a0 5d 3d 93 61 63 9e 81 b3 0e 23 09 14 f2 88 94 ba 81 38 6e cb c8 6b 9e 9a 40 85 64 99 90 01 03 50 ad ba ba 48 bd de fa ca 5b 0e 65 ca ea 1f ac 30 d4 6a 5e 1a b1 2c fe 83 d1 0d 60 d3 73 2b 4a 80 6d b5 08 6a e9 67 49 50 de a1 47 93 22 3b 42 5a 37 26 98 dd 46 b5 76 fa 2d 0b 78 7e b3 1b 71 ad 1b 56 3c 57 98 38 61 41 38 61 1e 16 4a f6 9b 6b 71 16 09 eb 87 17 15 85 e1 5c 9a a0 b4 09 b6 9b 0a 90 25 01 5d ab 51 f2 ee 4a d9 1a c3 2d 57 3b 33 5e b9 31 20 8e 58 69 c4 b5 f8 1d eb 47 48 b5 8c 22 b6 24 62 f9 66 13 b1 25 b1 45 81 5e 3d 55 54 ca db 3d 16 26 1e 7b 14 0d 5b 77 2b b5 d6 ec e7 f6 ae 45 4a ef 3b 67 Data Ascii: "l]nxYxR7.--yLdFTsBBn%q4Y]=ac#8nk@dPH[e0j^,`s+JmjgIPG";BZ7&Fv-x~qV<W8aA8aJkq\%]QJ-W;3^1 XiGH"$bf%E^=UT=&{[w+EJ;g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49840	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:46 UTC	2799	OUT	GET /Images/Clear.PNG?ctx=jscb1.0&session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=YnVhPU1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiZvcz1XaW4zMiZscHJvYz00Jm9sPXRydWUmcnR0PTE1MCZjaHJtPXRydWUmcHJvc3ViPTIwMDMwMTA3JmV2YWw9MzMmYXBwdj01LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2JmxzPXRydWUmZG09OCZtdHA9MCZuYz03NCZwcj0xJnNyPTEyODB4MTAyNCZzY2Q9MjQmYXNyPTEyODB4OTg0JnR6PS0zMDAmZHN0PTYwJnR6bz0tMjQwJmJsPWVuLVVTJm10aD0yN2Y1MWQzMTQ5ZTZiZjIwOWI2NmJkMzg3YjBhZjNjNCZtdG49MiZwbj01JnBoPWYzYWMyMmFjNTljNmRjYjg3NDEwOWQwOTNjNTI1NWU4JnA9cGx1Z2luX2ZsYXNoJTNEZmFsc2UlMjZwbHVnaW5fd2luZG93c19tZWRpYV9wbGF5ZXIlM0RmYWxzZSUyNnBsdWdpbl9hZG9iZV9hY3JvYmF0JTNEZmFsc2UlMjZwbHVnaW5fc2lsdmVybGlnaHQlM0RmYWxzZSUyNnBsdWdpbl9xdWlja3RpbWUlM0RmYWxzZSUyNnBsdWdpbl9zaG9ja3dhdmUlM0RmYWxzZSUyNnBsdWdpbl9yZWFscGxheWVyJTNEZm [TRUNCATED] Host: a5031de5-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://a5031de5-02f3d9a4.ency.cloud/?session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:48 UTC	214	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:48 GMT Content-Type: text/html Content-Length: 26 Connection: close vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip
2024-08-29 19:20:48 UTC	26	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4b 49 2b b0 f2 f7 06 00 0a 65 f9 e0 06 00 00 00 Data Ascii: KI+e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49841	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:46 UTC	671	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 766c2f61-02f3d9a4.ency.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time Origin: https://signup.ency.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49842	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:46 UTC	1349	OUT	GET /Clear.HTML?ctx=Ls1.0&wl=False&session_id=1b9ba598ef1c4718bf548acdb9395636&id=9fb632e9-913f-046a-7ff1-8ed680354708&w=8DCC85FAD3D2417&tkt=taBcrIH61PuCVH7eNCyH0I1otfYAPn9VOPY9aMX8tO3hCXPNlVDxpRibcTlQbOtY1DlhscQn6tWslMfLbgo029ojdbLb7Gn4zoJwGwlUM7U7%252fAIqdc3aFenBEcEypU5oMCiucj55ZBG%252f6a578Wy8w62NzKJjSKxvJvA2KZ1D1GdikNgowM%252f2%252bLNPhr%252beUxMLdedJtaNkwJxKmyyjgjheFFRnCeiOtV5TI3L3mSkzsNIamzIh%252bQKpKaWTIubEt0uWuz6mrraH1UD4zmCNnh0ao8kvd6BbLxOWoaZ3WR8jX1w0l3M8Gx9NnVRUckOLy1x8&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d HTTP/1.1 Host: 258f46e4-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://a5031de5-02f3d9a4.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49843	35.190.10.96	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:46 UTC	670	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 624 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://aa6c90d0-02f3d9a4.ency.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aa6c90d0-02f3d9a4.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:46 UTC	624	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 46 42 59 65 32 74 38 63 55 5a 51 64 33 4e 2f 44 78 41 65 45 46 59 51 43 45 6b 51 66 33 5a 77 64 58 78 63 61 46 52 6a 52 58 63 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 54 55 77 52 52 43 77 4a 57 41 68 38 43 41 46 51 42 56 67 74 54 42 68 78 58 58 46 46 4c 48 46 46 65 58 55 64 57 48 56 74 63 56 6c 64 4b 48 46 70 47 58 31 34 51 48 68 42 30 52 55 5a 61 64 6d 52 34 56 57 74 32 56 51 38 51 43 41 4d 65 45 46 5a 4c 52 6e 42 51 5a 6e 68 31 59 47 52 52 44 78 41 49 45 47 56 62 58 41 45 41 45 42 34 51 66 32 52 33 65 6d 51 42 55 55 70 77 58 31 45 50 45 41 67 43 48 68 42 30 5a 77 4e 59 59 51 4e 2f 57 6d 68 47 5e 36 57 51 38 51 43 53 41 63 42 42 41 73 65 45 47 70 62 65 46 31 34 63 45 5a 34 55 47 41 47 44 78 41 49 Data Ascii: payload=aUkQRhAIEFBYe2t8cUZQd3N/DxAeEFYQCEkQf3ZwdXxcaFRjRXcPEAgQWkZGQkEIHR1TUwRRCwJWAh8CAFQBVgtTBhxXXFFLHFFeXUdWHVtcVldKHFpGX14QHhB0RUZadmR4VWt2VQ8QCAMeEFZLRnBQZnh1YGRRDxAIEGVbXAEAEB4Qf2R3emQBUUpwX1EPEAgCHhB0ZwNYYQN/WmhG^6WQ8QCSAcBBAseEGpbeF14cEZ4UGAGDxAI
2024-08-29 19:20:46 UTC	410	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:20:46 GMT Content-Type: application/json; charset=utf-8 Content-Length: 820 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://aa6c90d0-02f3d9a4.ency.cloud Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:20:46 UTC	820	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 42 67 59 47 42 67 63 32 78 74 50 7a 30 38 62 44 34 34 49 6a 6b 35 50 47 30 69 50 6a 35 71 61 53 4a 75 4f 32 34 38 49 6a 6c 70 4f 57 6f 33 61 7a 73 2b 62 44 6b 2b 50 6e 46 78 63 58 46 67 59 44 34 2b 59 47 42 7a 62 48 70 78 63 58 46 78 50 6d 42 67 59 47 41 2b 63 7a 34 34 4f 54 6f 2b 4e 7a 73 2b 4f 54 38 37 4f 54 6f 2b 50 44 6f 35 50 6a 6f 34 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 35 67 63 7a 34 34 50 54 73 32 4f 6a 59 39 4f 7a 6b 34 50 54 68 78 63 58 46 78 50 6a 34 2b 59 44 35 67 63 32 78 39 4e 32 78 6b 50 47 68 36 4f 7a 63 34 66 48 35 36 5a 6a 78 2f 66 6d 6f 2f 63 58 46 78 63 57 41 2b 50 6a 35 67 59 47 41 2b 63 7a 67 39 50 44 35 78 63 58 46 78 59 44 34 2b 59 44 34 2b 59 44 35 7a 62 47 30 2f 50 54 Data Ascii: {"do":null,"ob":"YGBgYGBgc2xtPz08bD44Ijk5PG0iPj5qaSJuO248IjlpOWo3azs+bDk+PnFxcXFgYD4+YGBzbHpxcXFxPmBgYGA+cz44OTo+Nzs+OT87OTo+PDo5Pjo4cXFxcWA+Pj5gYD5gcz44PTs2OjY9Ozk4PThxcXFxPj4+YD5gc2x9N2xkPGh6Ozc4fH56Zjx/fmo/cXFxcWA+Pj5gYGA+czg9PD5xcXFxYD4+YD4+YD5zbG0/PT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49844	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:46 UTC	622	OUT	GET /ns?c=ca0d5630-663b-11ef-b954-8b91b831308d HTTP/1.1 Host: 9b36d051-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://aa6c90d0-02f3d9a4.ency.cloud Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aa6c90d0-02f3d9a4.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:48 UTC	198	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-origin: *
2024-08-29 19:20:48 UTC	250	IN	Data Raw: 66 34 0d 0a 37 66 36 64 35 37 32 35 33 65 38 32 33 36 38 62 35 63 37 62 38 38 34 36 39 62 65 35 65 62 61 36 38 39 65 66 30 35 31 30 65 34 34 35 62 63 32 66 31 65 31 61 34 33 38 32 65 62 36 30 64 61 31 62 66 63 30 30 65 36 34 65 37 64 36 34 66 64 65 32 33 62 61 62 64 39 61 32 32 36 63 66 33 61 65 31 62 32 36 65 64 65 36 66 39 30 32 62 65 65 64 31 63 61 63 65 66 39 38 33 37 38 63 35 37 31 64 63 37 62 31 36 62 38 30 62 33 30 37 33 63 34 35 39 30 30 32 30 33 63 30 34 33 37 30 64 36 63 61 34 34 34 63 64 63 36 31 64 66 62 32 34 66 39 38 65 61 36 62 33 65 32 38 64 31 62 65 33 66 36 38 39 64 65 62 61 32 35 65 65 39 32 35 62 39 36 31 36 63 34 65 39 39 64 39 37 62 34 62 61 37 37 37 62 38 30 66 38 35 32 34 66 35 63 65 31 35 31 64 31 39 30 39 37 0d 0a Data Ascii: f47f6d57253e82368b5c7b88469be5eba689ef0510e445bc2f1e1a4382eb60da1bfc00e64e7d64fde23babd9a226cf3ae1b26ede6f902beed1cacef98378c571dc7b16b80b3073c45900203c04370d6ca444cdc61dfb24f98ea6b3e28d1be3f689deba25ee925b9616c4e99d97b4ba777b80f8524f5ce151d19097
2024-08-29 19:20:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49845	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:46 UTC	493	OUT	GET /PXzC5j78di/main.min.js HTTP/1.1 Host: 539d138f-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:48 UTC	476	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:48 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 64203 Connection: close last-modified: Thu, 29 Aug 2024 19:12:55 GMT etag: "c8b50da96bc5ab5d6d751ed351884157" accept-ranges: bytes cache-control: max-age=600 vary: Accept-Encoding access-control-allow-origin: * access-control-expose-headers: active-cdn,x-served-by,Akamai-Request-BC active-cdn: Akamai content-encoding: gzip
2024-08-29 19:20:48 UTC	13962	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 69 7b e2 ba b2 28 fc fd fe 8a c4 67 ed 2c 7b a1 10 db cc d0 4e 76 e6 a1 33 cf 09 61 f5 63 8c 01 27 60 d3 c6 ce d0 81 f3 db 6f 95 06 5b 06 d2 6b df 7b de f7 b9 6b ef 26 b2 c6 92 54 2a 95 4a 55 a5 b5 b5 a5 7f 0f 3c c7 f5 c7 ee d2 76 30 fa 08 bd 5e 3f 5a 52 b7 b5 25 53 37 8a ab a6 6e 16 97 ce dd d0 1b ba 91 1b de 93 a5 43 df 59 52 df de de f2 23 11 f9 9e 77 82 a1 96 5f 82 e2 7e e4 fa d1 52 d0 5d 8a fa de 78 a9 eb 0d dc 25 c7 f6 97 fc 20 5a 6a 43 30 18 79 6e 67 c9 f6 3b 6b 41 b8 d4 f1 c6 51 e8 b5 e3 c8 ed e4 ff 57 14 7e 7c be 79 7e 27 78 cb ff 18 bd 6f 8e 46 87 1d 4b 39 bf ff b5 5d 7a ae 54 3b 9e 42 ba b1 ef 44 5e e0 ab da a7 12 03 a8 58 d6 89 94 86 88 5f 8a 54 57 fb 0c dd 28 0e 21 6c 29 22 5e b1 ac e8 63 e4 02 48 57 1f c3 Data Ascii: i{(g,{Nv3ac'`o[k{k&T*JU<v0^?ZR%S7nCYR#w_~R]x% ZjC0yng;kAQW~\|y~'xoFK9]zT;BD^X_TW(!l)"^cHW
2024-08-29 19:20:48 UTC	10136	IN	Data Raw: bc cc a2 46 fc a5 f8 f1 fe e8 f0 76 d7 38 61 2a de f6 dd e3 c7 c3 9d 31 60 5f 9d e1 de b8 73 77 c3 95 c6 9d e1 ed f3 03 9c 9e 1f cc 7e 9f e7 de df 8b 1f f7 df 07 17 59 d5 f3 79 b5 f3 08 ca fe 72 f6 6b 31 33 65 9c ad ed f8 fe f2 d5 36 6f 63 96 72 6c 1e 0d 9d e1 5e f4 78 5d c5 bc ae ab 1a ba 24 0d 71 bd 94 6b 42 4b 02 34 b5 61 9e f3 3c ab 89 fa db 46 ed c5 19 0e 4c e8 58 f7 f1 fe b1 df 3e b8 ed 77 f6 45 b3 90 5a 78 bc 3b fa 7d 8e 5f 8f 77 68 33 31 30 da b7 b5 01 1b 84 3d fd 31 e9 1c e4 18 ba fb 97 1f f6 fd e3 c0 19 7c 91 23 69 a1 73 57 2a 40 77 de 9c 44 8f 7e 16 86 85 39 64 18 8c b6 df f9 40 3b 8f 47 aa 7d bf 00 86 85 39 4e 07 ed fd db d8 be bf 8d ee f5 c1 ee e5 6d ed 0a a6 e4 d5 19 5e 0e 64 5b 82 34 17 8b 79 30 f7 c6 10 f3 72 63 de 8e 1f ef 4a a3 ce 9d ce Data Ascii: Fv8a1`_sw~Yyrk13e6ocrl^x]$qkBK4a<FLX>wEZx;}_wh310=1\|#isW@wD~9d@;G}9Nm^d[4y0rcJ
2024-08-29 19:20:48 UTC	16384	IN	Data Raw: 3c e8 29 2c e4 e9 6e dc aa 16 f5 93 32 8d b3 b1 36 5c ec f2 2f 63 22 16 cf 1d 53 56 24 31 42 48 4a 04 10 39 e5 8e 31 cb 70 5f 8c 9f 1d 6a 2a 72 84 b0 f3 de 61 1a d5 1b e5 45 c3 ba 29 34 4d 02 01 30 c9 71 00 f6 10 30 1c f7 b4 d7 42 84 21 e9 d5 6e 4f 61 24 20 b2 d6 73 f3 77 9d 4f 3c 06 59 1d 52 0c b3 9d 2b c7 32 c7 58 79 7c 6a 63 3d 8b 09 69 8f e4 32 e9 5c fa d5 7f 7a 1e d6 28 f3 26 9a c9 de 95 e1 76 c9 1d d8 ce 88 21 7c f8 06 51 84 26 a6 07 93 60 7b 64 c3 08 87 43 04 17 b9 74 be 70 d2 a9 d4 2f b0 37 ec 97 51 6d 3c b2 a7 ba 67 e7 73 63 6f d9 ba 7b 5b 7a d8 9e ea d6 b6 d6 ba df dd 32 ed fa d0 5a 6c fe c8 65 88 e4 b3 8d d7 39 1d 9c 69 8d ee 1d 53 c1 0d 0c 75 c0 43 e6 06 cd 1e e4 10 6b 1d 6b 51 60 13 a7 a9 45 b5 d3 7d 5b 19 e7 89 50 fd 37 67 54 49 11 b1 1b 30 Data Ascii: <),n26\/c"SV$1BHJ91p_j*raE)4M0q0B!nOa$ swO<YR+2Xy\|jc=i2\z(&v!\|Q&`{dCtp/7Qm<gsco{[z2Zle9iSuCkkQ`E}[P7gTI0
2024-08-29 19:20:48 UTC	16384	IN	Data Raw: 8b 40 bb aa 42 54 ab 21 60 10 1a e7 2f c8 fa 6f 49 bf 33 5a 03 b6 f4 3b 22 1b d6 3a b9 51 ee 95 d4 62 4e 74 a1 34 04 0c c2 fd 56 0b 1a 85 78 15 68 11 1f cc a6 32 42 e2 75 4a ce 7d 2b a9 66 d0 81 63 8b 8c b7 aa a5 f4 71 f5 ef 0e c4 a2 83 c9 6a 00 bf fc 5a ea dc 57 1f d8 09 d2 2b 3c 34 53 0f 12 28 01 ad a9 5a e8 5a 51 de e3 d3 55 ea e1 73 a9 d4 02 0a e6 7b c2 b9 c1 8b 29 43 69 50 fa e4 6b 0a 2e 26 e4 ca be 95 5c 4b df 64 9b 92 2c 1e 04 88 06 7a 38 6e c0 ed 02 12 61 f4 12 c6 a9 71 68 4e 4a af f0 23 1a 5c 53 49 d6 48 f7 33 79 bf 95 f7 23 79 3f 92 f7 88 5a b2 e1 90 ee 7b f2 be 47 25 6f 4a 9b c3 0d 84 5b 08 b7 a2 0c f1 5d 68 48 03 51 3c e1 1a a1 3b ca 31 31 e2 2a 26 c3 d1 4c 23 3f 19 e8 07 0f 0f 19 42 1f e8 ef bd 08 f7 63 19 eb 2c 74 a0 fa 74 06 e8 fe a1 74 ff Data Ascii: @BT!`/oI3Z;":QbNt4Vxh2BuJ}+fcqjZW+<4S(ZZQUs{)CiPk.&\Kd,z8naqhNJ#\SIH3y#y?Z{G%oJ[]hHQ<;11*&L#?Bc,ttt
2024-08-29 19:20:48 UTC	7337	IN	Data Raw: 8c 43 fd fc e3 7e 94 cd 91 83 70 e9 82 d3 95 ab 80 cc 34 2c 39 c7 3c cc fc ef b8 af 12 38 bb 1f 47 3c ee de 55 92 95 33 c5 e0 e1 8d 29 17 38 0e bb 01 9a b4 32 05 af 6a 98 fd 88 24 40 98 1c c8 c1 d4 ec 5b 8f 87 f4 77 63 63 9f 7e b5 c2 6a 49 62 db 94 2c 85 92 f1 d8 98 1b 65 c3 9e 64 35 ff d9 c8 dc c9 4a 4f 9f 54 01 e5 80 4b 02 0a 39 9e c8 9a 46 26 5e c0 ab c1 27 ed 4b 44 ad 31 0f 5e 2f 3e dc 3d d8 83 93 9e 6d 32 39 66 bc 70 bc eb b9 86 e7 76 1f 6e 5f dd fb 92 2c dc 86 72 8f 6d 80 0e 6e 7b 53 b3 7e ba dd b9 bd fe ac cc 73 23 1c 54 56 96 3b b9 a8 59 bd b6 fd 90 df b6 07 b7 37 9f e5 b8 b9 08 ef ef 2e de ba e3 46 f4 70 4d f5 e0 4d 6b db 1a d5 5f 27 0a 14 b8 cd 37 ec bb db ed d9 c0 73 a3 41 09 c5 2f d5 cc 68 29 97 79 bb 1d 0c c6 e5 d2 80 75 61 45 8e da c8 3f 5b Data Ascii: C~p4,9<8G<U3)82j$@[wcc~jIb,ed5JOTK9F&^'KD1^/>=m29fpvn_,rmn{S~s#TV;Y7.FpMMk_'7sA/h)yuaE?[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49846	35.190.10.96	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:47 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:47 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 19:20:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:20:47 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49847	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:47 UTC	955	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: 6ea3e58b-02f3d9a4.ency.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; pxcts=cb0240e0-663b-11ef-a4a3-6f6e8d41c611; _pxvid=cb0233b9-663b-11ef-a4a3-f0d08f044678; _pxde=fa1dbab57d6955ca3fdd325bd59af92d0fb51c11a4874206c05f6b0cf879f032:eyJ0aW1lc3RhbXAiOjE3MjQ5NTkyNDY3MjcsImZfa2IiOjAsImlwY19pZCI6W119
2024-08-29 19:20:49 UTC	756	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:49 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 last-modified: Mon, 26 Aug 2024 11:01:58 GMT etag: 0x8DCC5BE8165E8BF x-ms-request-id: d03d7228-801e-003a-33f7-f7cef9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192049Z-16ff8f5bd97zh6mn5a98ksv1us00000004p000000001526g x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-08-29 19:20:49 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-08-29 19:20:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49849	35.190.10.96	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:47 UTC	671	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 8587 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://aa6c90d0-02f3d9a4.ency.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aa6c90d0-02f3d9a4.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:47 UTC	8587	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 46 64 33 56 58 31 32 57 41 5a 5a 63 46 68 46 44 78 41 65 45 46 59 51 43 45 6b 51 55 41 4e 38 61 47 52 68 57 52 6c 6c 41 47 73 50 45 41 67 44 42 51 41 47 43 77 63 4c 41 41 59 45 42 51 41 46 48 68 42 39 57 57 68 2f 63 33 70 46 58 47 46 6d 64 77 38 51 43 41 4d 41 43 67 49 65 45 46 5a 33 52 58 46 78 57 48 74 62 63 55 68 5a 44 78 41 49 41 77 49 41 42 68 34 51 59 6e 4e 67 65 57 4e 63 58 6b 46 68 61 6e 63 50 45 41 67 44 41 41 6f 43 48 68 42 52 59 48 52 36 64 45 68 67 42 32 42 78 41 67 38 51 43 41 73 4b 42 68 34 51 64 56 39 72 51 57 74 30 43 6e 39 34 5a 47 63 50 45 41 67 51 41 77 41 4b 41 6d 6f 44 41 67 41 47 45 42 34 51 61 6c 74 34 58 58 68 77 52 6e 35 54 59 47 63 50 45 41 67 41 42 68 34 51 64 57 64 65 52 47 59 Data Ascii: payload=aUkQRhAIEFd3VX12WAZZcFhFDxAeEFYQCEkQUAN8aGRhWRllAGsPEAgDBQAGCwcLAAYEBQAFHhB9WWh/c3pFXGFmdw8QCAMACgIeEFZ3RXFxWHtbcUhZDxAIAwIABh4QYnNgeWNcXkFhancPEAgDAAoCHhBRYHR6dEhgB2BxAg8QCAsKBh4QdV9rQWt0Cn94ZGcPEAgQAwAKAmoDAgAGEB4Qalt4XXhwRn5TYGcPEAgABh4QdWdeRGY
2024-08-29 19:20:48 UTC	410	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:20:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 848 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://aa6c90d0-02f3d9a4.ency.cloud Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:20:48 UTC	848	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 50 6d 41 2b 59 44 35 67 63 31 42 2f 64 7a 78 7a 50 44 77 2f 63 32 35 72 50 47 34 2f 50 32 6b 33 4e 6d 6f 2f 4e 6a 5a 74 4f 54 70 75 61 6a 67 37 4f 6d 6b 37 50 32 77 35 61 57 70 72 50 44 68 74 4f 47 78 70 61 6a 63 35 4f 32 6f 36 61 57 35 73 61 32 70 70 61 54 35 71 4f 44 31 75 4f 44 74 73 62 6a 35 70 4e 6a 74 74 61 6d 73 31 56 7a 6c 72 66 6b 78 4e 62 46 31 6b 59 30 56 66 51 32 42 75 4f 6d 67 38 52 47 46 59 53 58 68 37 53 55 5a 4f 65 79 42 62 56 79 52 64 64 6e 38 34 57 31 5a 36 65 30 70 59 52 6e 35 5a 52 32 74 6e 58 6a 74 48 59 46 74 42 50 6c 39 75 61 46 64 75 53 6b 46 2b 58 6d 78 38 4e 6e 67 2f 52 45 42 59 50 32 5a 6e 54 6d 52 67 57 30 70 32 4f 46 35 75 66 6d 67 79 4d 6a 55 2b 50 7a 38 2f 4e 57 35 63 59 47 Data Ascii: {"do":null,"ob":"PmA+YD5gc1B/dzxzPDw/c25rPG4/P2k3Nmo/NjZtOTpuajg7Omk7P2w5aWprPDhtOGxpajc5O2o6aW5sa2ppaT5qOD1uODtsbj5pNjttams1VzlrfkxNbF1kY0VfQ2BuOmg8RGFYSXh7SUZOeyBbVyRddn84W1Z6e0pYRn5ZR2tnXjtHYFtBPl9uaFduSkF+Xmx8Nng/REBYP2ZnTmRgW0p2OF5ufmgyMjU+Pz8/NW5cYG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49848	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:48 UTC	953	OUT	GET /02f3d9a46eef4029b93e04119111d9c5/ HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://hkwyolawofficelogin.ency.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; pxcts=cb0240e0-663b-11ef-a4a3-6f6e8d41c611; _pxvid=cb0233b9-663b-11ef-a4a3-f0d08f044678; _pxde=fa1dbab57d6955ca3fdd325bd59af92d0fb51c11a4874206c05f6b0cf879f032:eyJ0aW1lc3RhbXAiOjE3MjQ5NTkyNDY3MjcsImZfa2IiOjAsImlwY19pZCI6W119 Sec-WebSocket-Key: 4cJIjT5AWvzZD2FKyZtGQg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-29 19:20:50 UTC	734	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:20:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 2c3fb01d-2b4e-46d0-8a93-14455ec54901 x-ms-ests-server: 2.1.18794.6 - JPE ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:20:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49850	35.190.10.96	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:48 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:48 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 19:20:48 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:20:48 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49851	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:48 UTC	644	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 766c2f61-02f3d9a4.ency.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,upload-time Origin: https://signup.ency.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49852	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:49 UTC	512	OUT	GET /ns?c=ca0d5630-663b-11ef-b954-8b91b831308d HTTP/1.1 Host: 9b36d051-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:50 UTC	198	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-origin: *
2024-08-29 19:20:50 UTC	250	IN	Data Raw: 66 34 0d 0a 30 66 64 63 65 66 66 32 37 30 39 38 64 32 37 66 30 62 32 61 61 37 62 35 39 39 61 34 35 35 32 34 64 31 62 32 61 65 33 32 36 36 31 34 37 61 39 31 30 30 37 30 35 63 31 33 33 66 35 33 37 35 61 36 63 38 66 65 65 36 65 64 34 33 33 37 34 33 32 66 39 39 37 66 35 36 30 34 39 31 38 65 66 61 39 63 38 33 66 61 35 32 31 62 37 36 30 61 37 62 65 30 34 33 66 33 63 30 30 31 65 34 35 35 65 30 32 31 65 34 30 30 63 34 36 30 34 33 31 66 64 33 35 66 32 32 64 36 61 65 62 62 30 34 37 62 34 36 31 64 39 30 35 33 37 33 36 37 64 39 36 32 34 31 38 39 30 31 31 30 61 35 66 35 63 39 36 33 64 32 36 30 33 35 62 62 31 33 61 32 64 63 39 63 34 65 34 32 31 38 34 37 30 64 64 64 64 34 30 38 33 35 39 63 39 65 64 32 61 35 30 30 38 62 37 33 32 39 33 63 65 64 35 64 0d 0a Data Ascii: f40fdceff27098d27f0b2aa7b599a45524d1b2ae3266147a9100705c133f5375a6c8fee6ed4337432f997f5604918efa9c83fa521b760a7be043f3c001e455e021e400c460431fd35f22d6aebb047b461d90537367d96241890110a5f5c963d26035bb13a2dc9c4e4218470dddd408359c9ed2a5008b73293ced5d
2024-08-29 19:20:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49853	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:49 UTC	2512	OUT	GET /Images/Clear.PNG?ctx=jscb1.0&session_id=1b9ba598ef1c4718bf548acdb9395636&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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 [TRUNCATED] Host: a5031de5-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:51 UTC	214	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:51 GMT Content-Type: text/html Content-Length: 26 Connection: close vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip
2024-08-29 19:20:51 UTC	26	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4b 49 2b b0 f2 f7 06 00 0a 65 f9 e0 06 00 00 00 Data Ascii: KI+e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49855	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:50 UTC	493	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: 6ea3e58b-02f3d9a4.ency.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="
2024-08-29 19:20:51 UTC	756	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Aug 2024 19:20:51 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 last-modified: Mon, 26 Aug 2024 11:01:58 GMT etag: 0x8DCC5BE8165E8BF x-ms-request-id: d03d7228-801e-003a-33f7-f7cef9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240829T192051Z-16ff8f5bd972r4dg6vr7xn6mbc00000004ug000000000ef9 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-08-29 19:20:51 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-08-29 19:20:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49856	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:51 UTC	644	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 766c2f61-02f3d9a4.ency.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,upload-time Origin: https://signup.ency.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49857	35.190.10.96	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:52 UTC	671	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 6555 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://aa6c90d0-02f3d9a4.ency.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://aa6c90d0-02f3d9a4.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:52 UTC	6555	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 46 61 61 77 70 6e 64 30 6f 45 66 57 56 6e 44 78 41 65 45 46 59 51 43 45 6b 51 63 30 67 4c 41 31 64 6e 61 47 46 55 5a 31 6b 50 45 41 67 51 42 6c 4d 43 42 56 46 57 43 77 56 58 43 67 46 51 42 77 51 44 56 41 52 57 56 67 70 52 55 77 45 45 41 67 55 4b 56 67 6f 4b 56 6c 63 51 48 68 42 30 5a 77 4e 59 59 51 4e 7a 57 6d 68 71 57 51 38 51 43 42 41 47 55 77 49 46 55 56 59 4c 42 56 63 4b 41 56 41 48 42 41 4e 55 42 46 5a 57 43 6c 46 54 41 51 51 43 42 51 70 57 43 67 70 57 56 78 41 65 45 48 46 71 58 68 31 69 41 67 70 6d 56 30 55 4b 44 78 41 49 45 46 4d 46 42 67 4a 58 56 31 52 57 56 67 4e 52 43 67 49 43 41 51 73 42 43 31 5a 58 55 41 51 46 56 77 49 4c 42 67 63 43 43 77 42 57 45 42 34 51 64 30 55 4c 58 6e 46 6b 61 46 6c Data Ascii: payload=aUkQRhAIEHFaawpnd0oEfWVnDxAeEFYQCEkQc0gLA1dnaGFUZ1kPEAgQBlMCBVFWCwVXCgFQBwQDVARWVgpRUwEEAgUKVgoKVlcQHhB0ZwNYYQNzWmhqWQ8QCBAGUwIFUVYLBVcKAVAHBANUBFZWClFTAQQCBQpWCgpWVxAeEHFqXh1iAgpmV0UKDxAIEFMFBgJXV1RWVgNRCgICAQsBC1ZXUAQFVwILBgcCCwBWEB4Qd0ULXnFkaFl
2024-08-29 19:20:52 UTC	410	IN	HTTP/1.1 200 OK Date: Thu, 29 Aug 2024 19:20:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 248 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://aa6c90d0-02f3d9a4.ency.cloud Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:20:52 UTC	248	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 59 47 41 2b 50 6d 42 67 63 32 78 36 63 58 46 78 63 57 41 2b 50 6a 35 67 59 44 34 2b 63 31 42 2f 64 32 74 71 63 7a 77 38 50 33 4e 73 50 44 64 74 4e 6a 67 32 62 6d 34 37 4e 32 34 33 4e 6a 30 2b 61 54 64 73 62 47 74 74 4f 47 35 72 4e 6d 31 75 50 54 74 75 4f 6a 6b 38 50 32 78 74 50 6d 34 34 61 6a 38 35 50 44 68 73 4e 6d 30 2b 50 6a 73 38 50 57 35 74 61 6d 77 38 4f 54 63 32 4f 47 6b 2b 4e 57 70 32 52 54 39 75 57 44 35 6a 62 44 78 64 5a 32 31 58 54 6d 5a 41 5a 55 6f 38 51 6d 56 65 4f 6b 46 62 5a 48 5a 42 57 30 5a 33 51 6e 56 43 66 45 5a 69 56 57 6c 75 50 55 5a 6d 51 47 56 4f 66 45 5a 69 59 33 68 57 50 6a 5a 2f 56 55 78 47 4f 56 67 2b 50 6a 5a 7a 65 33 31 36 61 6e 4d 38 50 7a 38 3d 22 7d 0a Data Ascii: {"do":null,"ob":"YGA+PmBgc2x6cXFxcWA+Pj5gYD4+c1B/d2tqczw8P3NsPDdtNjg2bm47N243Nj0+aTdsbGttOG5rNm1uPTtuOjk8P2xtPm44aj85PDhsNm0+Pjs8PW5tamw8OTc2OGk+NWp2RT9uWD5jbDxdZ21XTmZAZUo8QmVeOkFbZHZBW0Z3QnVCfEZiVWluPUZmQGVOfEZiY3hWPjZ/VUxGOVg+PjZze316anM8Pz8="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49859	35.190.10.96	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:52 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-29 19:20:52 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 29 Aug 2024 19:20:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: HEAD, POST, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-29 19:20:52 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49858	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:20:52 UTC	644	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 766c2f61-02f3d9a4.ency.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,upload-time Origin: https://signup.ency.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49860	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:21:01 UTC	1355	OUT	GET /02f3d9a46eef4029b93e04119111d9c5/ HTTP/1.1 Host: hkwyolawofficelogin.ency.cloud Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://hkwyolawofficelogin.ency.cloud Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 8KzvMs="MDJmM2Q5YTQtNmVlZi00MDI5LWI5M2UtMDQxMTkxMTFkOWM1OmQwZTg4Nzc3LWVlZTItNDQ5MC1hZTBjLWNkYTNmMGVkMjA1Nw=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; pxcts=cb0240e0-663b-11ef-a4a3-6f6e8d41c611; _pxvid=cb0233b9-663b-11ef-a4a3-f0d08f044678; _px3=ad3a00f89e099b65ae745f40c6fed37b7cfe864e5facdeff1e72a74ca1f94bed:X6dqCBcRklJPLoa5g3KnWFwtFIAt/TX+Ryp7TYutEWIqVHdhQ4HoTN1PagXaENqQcs9w0KOW0ihAkoTEy7Qaqg==:1000:aSodwnXnrhz2bCvlev4qaFv/ebOjiNYl2cWIY7sb46K2iNLA+ERcZh/5Zh2sNGzbc5S+pnhyluyBqMX0ugES7BdBZQ5pInSBsQP5kreKxrVW6XUAesSZ98BRO+Km7bS5Ttb+sucAApMvLOQcPTA6Ywm2X8PA/F1R8/8jsdlgYkUCvo7N17kq6rBY9KDS2WwANuyUyI5R026fvwJ6GigoIXFboCeVLQ1Gkv7Ku8tI4Ak=; _pxde=c38b979aa48a8921f8ccdb7ad9ba24a5630cb1a7e0637c9b11432abec36897f1:eyJ0aW1lc3RhbXAiOjE3MjQ5NTkyNTIxMzMsImZfa2IiOjAsImlwY19pZCI6W119 Sec-WebSocket-Key: qMS+LT68R6qb9H9ODMvqRw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-29 19:21:03 UTC	734	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 29 Aug 2024 19:21:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 78f636f0-872c-4d41-8f7a-2d68891c9600 x-ms-ests-server: 2.1.18794.6 - KRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bfd0284f-02f3d9a4.ency.cloud/api/report?catId=GW+estsfd+sin"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-08-29 19:21:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49861	172.233.123.231	443	5752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-29 19:21:06 UTC	644	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 766c2f61-02f3d9a4.ency.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,upload-time Origin: https://signup.ency.cloud User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://signup.ency.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Target ID:	0
Start time:	15:19:40
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:19:42
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2000,i,17870269698083817735,11241588252409947018,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:19:45
Start date:	29/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hkwyolaw.ency.cloud/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1	LLM: Score: 8 Reasons: The domain does not match the legitimate Microsoft domain, the presence of an unusual top-level domain (.cloud), and the lack of a secure protocol (HTTPS) in the URL. DOM: 17.8.pages.csv
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	LLM: Score: 8 Reasons: The domain name 'hkwyolawofficelogin.ency.cloud' is unusual and does not match the typical Microsoft domain structure, which is a strong indication of a phishing attempt. The presence of a search bar at the bottom of the page and the typical sign-in page design elements are attempts to mimic the legitimate Microsoft website, but the domain name is a clear red flag. DOM: 12.5.pages.csv

Source: Yara match	File source: 10.15.id.script.csv, type: HTML
Source: Yara match	File source: 12.22.id.script.csv, type: HTML
Source: Yara match	File source: 10.3.pages.csv, type: HTML
Source: Yara match	File source: 12.6.pages.csv, type: HTML
Source: Yara match	File source: 12.4.pages.csv, type: HTML

Source: https://ency.cloud	Matcher: Template: microsoft matched with high similarity
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	Matcher: Template: microsoft matched
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	Matcher: Template: microsoft matched

Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: Iframe src: https://8d19784d-02f3d9a4.ency.cloud/Prefetch/Prefetch.aspx
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: Iframe src: https://8d19784d-02f3d9a4.ency.cloud/Prefetch/Prefetch.aspx

Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	HTTP Parser: Number of links: 0
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	HTTP Parser: Title: Redirecting does not match URL
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	HTTP Parser: No favicon
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: No favicon
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: No favicon
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: No favicon
Source: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1	HTTP Parser: No favicon
Source: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1	HTTP Parser: No favicon
Source: https://signup.ency.cloud/signup?sru=https%3a%2f%2fl1ve.ency.cloud%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d51483342-085c-4d86-bf88-cf50c7252078%26mkt%3dEN-US%26opid%3dE269E9D1D98D4545%26opidt%3d1724959227%26uaid%3d1b9ba598ef1c4718bf548acdb9395636%26contextid%3d75F2B73860AC1050%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf88-cf50c7252078&uaid=1b9ba598ef1c4718bf548acdb9395636&suc=https%3a%2f%2f22e7fe0a-02f3d9a4.ency.cloud&lic=1	HTTP Parser: No favicon

Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	HTTP Parser: No <meta name="author".. found
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt	HTTP Parser: No <meta name="copyright".. found
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://hkwyolawofficelogin.ency.cloud/?mF3s=lt&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: hkwyolaw.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: g.fastcdn.co
Source: global traffic	DNS traffic detected: DNS query: v.fastcdn.co
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.instapagemetrics.com
Source: global traffic	DNS traffic detected: DNS query: ec.instapagemetrics.com
Source: global traffic	DNS traffic detected: DNS query: hkwyolawofficelogin.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: 86b155fe-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: bfd0284f-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: a58b77c9-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: l1ve.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: 8d19784d-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: signup.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: dcd98dee-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: 3cb44b12-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: e7de3c1c-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: abd318b4-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: a5031de5-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: aa6c90d0-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: 539d138f-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: 766c2f61-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: 258f46e4-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: 9b36d051-02f3d9a4.ency.cloud
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: 6ea3e58b-02f3d9a4.ency.cloud

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hkwyolaw.ency.cloud/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Windows Analysis Report
https://hkwyolaw.ency.cloud/