Edit tour

Windows Analysis Report
http://svfs.is/dnkdl

Overview

General Information

Sample URL:	http://svfs.is/dnkdl
Analysis ID:	1521685
Tags:	openphish
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Phishing site detected (based on favicon image match)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1988,i,2518404908038573350,6459673482596759250,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://svfs.is/dnkdl" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://svfs.is/dnkdl

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Multi AV Scanner detection for submitted file

Source: http://svfs.is/dnkdl

Virustotal: Detection: 15%

Perma Link

Phishing

AI detected phishing page

Source: https://svfs.is/dnkdl/

LLM: Score: 9 Reasons: DHL is a well-known international logistics and courier company., The legitimate domain for DHL is 'dhl.com'., The provided URL 'svfs.is' does not match the legitimate domain name for DHL., The domain 'svfs.is' is unusual and not associated with DHL., The presence of input fields related to DHL services on an unrelated domain is suspicious. DOM: 4.0.pages.csv

Phishing site detected (based on favicon image match)

Source: https://svfs.is	Matcher: Template: dhl matched with high similarity
Source: https://svfs.is/dnkdl/	Matcher: Template: dhl matched with high similarity

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /dnkdl HTTP/1.1Host: svfs.isConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dnkdl/ HTTP/1.1Host: svfs.isConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/font-awesome/css/font-awesome.min.css HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/core_form.css HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/bundle.css HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/angular/angular.min.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/core_form.js HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/dhl-logo.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/youtube-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/angular/angular.min.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/facebook-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/linkedIn-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/instagram-new.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-274a65bae9742377aaf0.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/assets/core_form.js HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/youtube-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/dhl-logo.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-815fcbb4d2c579017011.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-5a6dd86f272b304a8b83.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/fonts/default-3e828e80f6e985c352eb.woff HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://svfs.issec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://svfs.is/dnkdl/assets/bundle.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/linkedIn-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/facebook-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/instagram-new.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/favicon.ico HTTP/1.1Host: svfs.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://svfs.is/dnkdl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl/img/favicon.ico HTTP/1.1Host: svfs.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
Source: global traffic	HTTP traffic detected: GET /dnkdl HTTP/1.1Host: svfs.isConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: svfs.is
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 00:09:24 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 00:09:24 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 00:09:25 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 00:09:25 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 00:09:25 GMTContent-Type: text/htmlContent-Length: 808Connection: closeLast-Modified: Sun, 12 Mar 2023 17:15:32 GMTETag: "328-5f6b724586ded"Accept-Ranges: bytes

Source: chromecache_73.1.dr, chromecache_77.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_73.1.dr, chromecache_77.1.dr	String found in binary or memory: http://errors.angularjs.org/1.6.6/
Source: chromecache_55.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_55.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_74.1.dr, chromecache_66.1.dr	String found in binary or memory: https://github.com/faisalman/ua-parser-js
Source: chromecache_53.1.dr, chromecache_63.1.dr	String found in binary or memory: https://i.imgur.com/lQNIz8H.png
Source: chromecache_57.1.dr, chromecache_60.1.dr, chromecache_70.1.dr, chromecache_61.1.dr, chromecache_72.1.dr, chromecache_52.1.dr, chromecache_56.1.dr, chromecache_71.1.dr	String found in binary or memory: https://sketchapp.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@17/45@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1988,i,2518404908038573350,6459673482596759250,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://svfs.is/dnkdl"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1988,i,2518404908038573350,6459673482596759250,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://svfs.is/dnkdl	16%	Virustotal		Browse
http://svfs.is/dnkdl	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
svfs.is	185.112.144.235	true	true	unknown
www.google.com	216.58.212.164	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://svfs.is/dnkdl/assets/angular/angular.min.js	true	unknown
https://svfs.is/dnkdl/fonts/default-3e828e80f6e985c352eb.woff	true	unknown
https://svfs.is/dnkdl/fonts/default-5a6dd86f272b304a8b83.woff	true	unknown
https://svfs.is/dnkdl/assets/bundle.css	true	unknown
https://svfs.is/dnkdl/	true	unknown
https://svfs.is/dnkdl/img/youtube-new.svg	true	unknown
https://svfs.is/dnkdl/img/facebook-new.svg	true	unknown
https://svfs.is/dnkdl/img/linkedIn-new.svg	true	unknown
https://svfs.is/dnkdl/img/instagram-new.svg	true	unknown
https://svfs.is/dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff	true	unknown
https://svfs.is/dnkdl/img/favicon.ico	true	unknown
https://svfs.is/dnkdl/assets/core_form.js	true	unknown
https://svfs.is/dnkdl	true	unknown
https://svfs.is/dnkdl/assets/ua-parser-js/dist/ua-parser.min.js	true	unknown
https://svfs.is/dnkdl/assets/jquery/dist/jquery.min.js	true	unknown
https://svfs.is/dnkdl/assets/font-awesome/css/font-awesome.min.css	true	unknown
https://svfs.is/dnkdl/fonts/default-815fcbb4d2c579017011.woff	true	unknown
https://svfs.is/dnkdl/img/dhl-logo.svg	true	unknown
http://svfs.is/dnkdl	true	unknown
https://svfs.is/dnkdl/fonts/default-274a65bae9742377aaf0.woff	true	unknown
https://svfs.is/dnkdl/img/7f0d3a9b32ad319a9dd1.svg	true	unknown
https://svfs.is/dnkdl/assets/core_form.css	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_55.1.dr	false	URL Reputation: safe	unknown
http://errors.angularjs.org/1.6.6/	chromecache_73.1.dr, chromecache_77.1.dr	false		unknown
http://fontawesome.io/license	chromecache_55.1.dr	false	URL Reputation: safe	unknown
https://sketchapp.com	chromecache_57.1.dr, chromecache_60.1.dr, chromecache_70.1.dr, chromecache_61.1.dr, chromecache_72.1.dr, chromecache_52.1.dr, chromecache_56.1.dr, chromecache_71.1.dr	false		unknown
https://i.imgur.com/lQNIz8H.png	chromecache_53.1.dr, chromecache_63.1.dr	false		unknown
http://angularjs.org	chromecache_73.1.dr, chromecache_77.1.dr	false		unknown
https://github.com/faisalman/ua-parser-js	chromecache_74.1.dr, chromecache_66.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.212.164	www.google.com	United States	15169	GOOGLEUS	false
185.112.144.235	svfs.is	Iceland	44925	THE-1984-ASIS	true

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521685
Start date and time:	2024-09-29 02:08:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://svfs.is/dnkdl
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@17/45@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.206, 74.125.71.84, 34.104.35.123, 142.250.185.170, 172.217.23.106, 216.58.212.138, 142.250.184.234, 142.250.185.74, 142.250.185.106, 142.250.186.106, 142.250.181.234, 216.58.206.42, 142.250.185.138, 142.250.185.234, 142.250.186.170, 142.250.186.138, 142.250.186.74, 142.250.184.202, 142.250.185.202, 13.85.23.86, 199.232.210.172, 192.229.221.95, 52.165.164.15, 142.250.186.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://svfs.is/dnkdl/ Model: jbxai	{ "brand":["DHL"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Track", "text_input_field_labels":["Tracking number", "Service Area: DHL OFFICE", "Service Area: DHL OFFICE"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://svfs.is/dnkdl/ Model: jbxai	{ "phishing_score":9, "brands":"DHL", "legit_domain":"dhl.com", "classification":"wellknown", "reasons":["DHL is a well-known international logistics and courier company.", "The legitimate domain for DHL is 'dhl.com'.", "The provided URL 'svfs.is' does not match the legitimate domain name for DHL.", "The domain 'svfs.is' is unusual and not associated with DHL.", "The presence of input fields related to DHL services on an unrelated domain is suspicious."], "brand_matches":[false], "url_match":false, "brand_input":"DHL", "input_fields":"Tracking number, Service Area: DHL OFFICE, Service Area: DHL OFFICE"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4508
Entropy (8bit):	4.279722918407211
Encrypted:	false
SSDEEP:	96:00s7QepJtXJ8o7QZGdUo+AsfPiQ81PY5EEoyY:js7jJSo7RUol4P+1Q6EoyY
MD5:	056511AEB5282ECAAB9FBF10ED2273E5
SHA1:	FC29C2C37C4B4A31AD13E80356371E338AEF5894
SHA-256:	F01C2E1870FCD75CECA3B4C42C3110CB0AA4B933B562CF3D2C7DDD20CE03C7EE
SHA-512:	C758606B6749103990368038C74AEC1822442CB097D159400286992997106F24653FE740ACACA91A9AEF52E671019C7295AF7D14E64502BBF125383E3C140615
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Instagram</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Instagram" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M20.9999603,1 C26.4316739,1 27.1126824,1.02302314 29.245895,1.12035543 C31.3747412,1.21744955 32.8285332,1.5555721 34.10076,2.05001379 C35.4159368,2.56104803 36.5312886,3.24491457 37.6431473,4.35677327 C38.7550854,5.46871136 39.4388726,6.58406323 39.9499862,7.89916065 C40.4444279,9.1713874 40.7825504,10.6251794 40.8796446,12.7540256 C40.9769769,14.8872382 41,15.5683261 41,20.9999603 C41,26.4316739 40.9769769,27.1127618 40.8796446,29.2459744 C40.7825504,31.3747412 40.4444279,32.8286126 39.9499862,34.10076 C39.4388726,35.4159368 38.7550854,36.5312886

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2307
Entropy (8bit):	4.843424729428811
Encrypted:	false
SSDEEP:	48:NvdgIG00CvbGfsg3hT2QhNHFcQhNpFhR16iuxuWiPnqWiuxuWiYn5:7E0JbGfn3MQCQNRoqnqen5
MD5:	1C5FDEE848E9FEE64DF2F5D844AEAC4E
SHA1:	FB216EDAFE7D6C9D2AC5D97F886CA4C6A6E51FA1
SHA-256:	2F14AF263BF34F9CCA167FAE70AE4FBE805546F60223E2A3155CD3C48FE61F9B
SHA-512:	A5810B4C18E168C6D2B869B7D06CF64A4B41C6930933630BD5FE43EA5B9EF2A28D884BF887D1793BCA1F0B87D4480BBD766314F4A811F939DB4E3380764AA92B
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/core_form.js
Preview:	$(document).ready(function() {..// $('<div class="loader__ waiter__" style="display:none">\.// <div class="loader-box">\.// <h2 class="waiter_h2">Please wait...</h2>\.// <div class="loader-images-box">\.// <img class="newloader" src="form/newloader.gif">\.// <div class="ab-logo">\.// <img class="loader-logo" src="https://i.imgur.com/lQNIz8H.png">\.// </div>\.// </div>\.// <p class="waiter_p">Don\'t reload this page</p>\.// </div>\.// </div>').appendTo('body');.... $('<div class="loader2__">\. <h4 class="loader2__h4">Wait please...</h4>\. <span class="cool_spinner__">\. <svg version="1.1" id="L2" height="50" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 100 100" enable-background="new 0 0 100 100" xml:space="preserve">\. <circle fill="none" stroke-width="

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/jquery/dist/jquery.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/font-awesome/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	4.918047810586647
Encrypted:	false
SSDEEP:	24:2dqNi3LSP3E/QqeaxMImtCvx8sjx4YS4DJxVDygUbcIhRhv:cqYbSnAxxLjQcIVv
MD5:	259D8928A7FD5329B3D7FD80ECA2EA2F
SHA1:	A6337DE5FF5761B39A319CD7EC3F8B10F201D066
SHA-256:	43027752F5A04142E6518A4FD8EF54E7E73CFBA7820DA9C03C1AD38835F04FE2
SHA-512:	0F2CCD1DE7D98434E1A4C76D4D6F4FF64107F6A40E9FF849401ED226ACF93344E4AF7D0544B10B763BBDC42D31014685B036B55C1C90971E4234B51F139575A7
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/facebook-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Facebook</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Facebook" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M15.8423971,40.8910891 L15.8423971,23.8415842 L11.1128375,23.8415842 C10.5007769,23.8415842 10,23.3425743 10,22.7326733 L10,16.9108911 C10,16.3009901 10.5007769,15.8019802 11.1128375,15.8019802 L15.8423971,15.8019802 L15.8423971,10.1188119 C15.8423971,3.6039604 19.8764332,0 25.7188303,0 L30.5874946,0 C31.1995553,0 31.7003322,0.499009901 31.7003322,1.10891089 L31.7003322,6.0990099 C31.7003322,6.70891089 31.1995553,7.20792079 30.5874946,7.20792079 L27.6662961,7.20792079 C24.4668881,7.20792079 23.7713646,8.73267327 23.7713646,10.950495 L23.7713646,15.80

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	4.918047810586647
Encrypted:	false
SSDEEP:	24:2dqNi3LSP3E/QqeaxMImtCvx8sjx4YS4DJxVDygUbcIhRhv:cqYbSnAxxLjQcIVv
MD5:	259D8928A7FD5329B3D7FD80ECA2EA2F
SHA1:	A6337DE5FF5761B39A319CD7EC3F8B10F201D066
SHA-256:	43027752F5A04142E6518A4FD8EF54E7E73CFBA7820DA9C03C1AD38835F04FE2
SHA-512:	0F2CCD1DE7D98434E1A4C76D4D6F4FF64107F6A40E9FF849401ED226ACF93344E4AF7D0544B10B763BBDC42D31014685B036B55C1C90971E4234B51F139575A7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Facebook</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Facebook" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M15.8423971,40.8910891 L15.8423971,23.8415842 L11.1128375,23.8415842 C10.5007769,23.8415842 10,23.3425743 10,22.7326733 L10,16.9108911 C10,16.3009901 10.5007769,15.8019802 11.1128375,15.8019802 L15.8423971,15.8019802 L15.8423971,10.1188119 C15.8423971,3.6039604 19.8764332,0 25.7188303,0 L30.5874946,0 C31.1995553,0 31.7003322,0.499009901 31.7003322,1.10891089 L31.7003322,6.0990099 C31.7003322,6.70891089 31.1995553,7.20792079 30.5874946,7.20792079 L27.6662961,7.20792079 C24.4668881,7.20792079 23.7713646,8.73267327 23.7713646,10.950495 L23.7713646,15.80

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1693
Entropy (8bit):	4.20200258376937
Encrypted:	false
SSDEEP:	48:CIwvn66lWuMEUjpbW/OH/k05dfZHtQbB4w+:7gn66c/EGpbh5tzQbOj
MD5:	0C99E91E1784480BEDCFD85B6EC52EC5
SHA1:	CCA8C71B330686FD1CD600D553D03EF85131DECD
SHA-256:	8E3ACF992F11D4EA95BED00DA7673DCBD592D92CA8A1610792298B7FA9EF1EE0
SHA-512:	059F3A35D8B7FAE39D2D066CF2A99170992CC69F887F3EC822BF8674C5B7A75831FDB1DCDAC2BD91F16EB25CBD4F32A48E342A31B007A7B27D64DCD4EDFE70E7
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/7f0d3a9b32ad319a9dd1.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0 .1.1.1h11.3c.1 0 .1 0 .1-.1v-.6c0-.6-.2-1.2-.4-1.8-.3-.9-.9-1.5-1.7-2-.5-.3-1.1-.5-1.7-.5-.1 0-.1 0-.1.1-.3 1.2-.7 2.3-1 3.5v.1-.1c-.2-.5-.3-1-.5-1.5V9c.1-.1.2-.3.4-.4l.1-.1v-.4c0-.1-.1-.2-.2-.2H5.2c-.1 0-.2.1-.2.3v.3c0 .1 0 .1.1.2s.2.3.3.4v.1c-.1.5-.3.9-.4 1.4zm.7-3.4c.6 0 1-.2 1.4-.6.2-.2.5-.6.6-1.1 0-.1.1-.1.1-.2.4-.4.6-.8.6-1.3v-.5c0-.1-.1-.2-.1-.2-.1 0-.1 0-.1-.1v-1c0-.3 0-.5-.1-.7C7.8.8 7.4.4 6.7.2 6.2 0 5.6 0 5 .1c-.8.2-1.3.7-1.5 1.5-.1.2-.1.4-.1.6v1.1c-.1 0-.2.1-.2.2v.6c0 .5.2.9.5 1.2 0 0 .1.1.1.2.2.4.4.8.7 1.2.4.3.8.5 1.2.5z" style="fill:#fff"/><path d="M5 10.6c.2-.5.3-1 .5-1.5V9c-.2-.1-.3-.2-.4-.3-.1-.1-.1-.2-.1-.2v-.3c0-.2.1-.3.2-.3h1.1c.1 0 .2.1.2.2v.4c0 .1 0 .1-.1.1 0 .2-.1.3-.3.5v.1c.2.5.3 1 .5 1.5v.1-.1l1-3.5c0-.2 0-.2.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.993889350613158
Encrypted:	false
SSDEEP:	12:XUMasjadrFHCyE9hVvRDDDU8iGp+a91BTJujOKa81aMr/:Xv5jIZHCh9TZDSGUo1BTJuJJ1Z
MD5:	D8106BF3A1D00AB43B01E6E3C92500EB
SHA1:	202B5E8654AB1B28351378293BCA3B9D844CC29B
SHA-256:	9ADA5709E264C31B04A05BD85448A9BD5E91925E8D83DF5CEF0762EC97CC283E
SHA-512:	3A77CBE48E27AF035ABCD70F0AE679195BB1B210EB02BBD86D3DB270349FCC6F9B5AD8DA10FF97F786865B18657531197D8A4E0D2FF1F08A2F117B2C1422AE89
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/favicon.ico
Preview:	............ .h.......(....... ..... ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S..'....\...a...P...N...Y...V..$-...t...........................y.."8.."3...X...U..!8...?...V..#.............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1412
Entropy (8bit):	4.912444059587619
Encrypted:	false
SSDEEP:	24:2dqNi3LSJiE6FeaxMYpu0uWRKyb5xH1wCD+uBRPuYzp6adhAN7hv:cqYbLZBp9Xnrzcv
MD5:	376247A0B06E705C758FE04978EA9DF5
SHA1:	90D50C682C2EA23A9D26926C6EB3D849B7B94661
SHA-256:	ACD3EAF2B608FB48F9915964C36772B322AD91106508C4490E2A72122DB4D347
SHA-512:	EC36520287FB862E212EE66B895BED8B39B41136DF8155CCF8A591EC3EC9C8851CB931127F83B411A4205485849454411FE33C292895546F4ECE88BD346682FB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / YouTube</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-YouTube" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M40.1641591,11.3722452 C41.0000682,14.4915355 41.0000682,20.9999548 41.0000682,20.9999548 C41.0000682,20.9999548 41.0000682,27.5081484 40.1641591,30.6276645 C39.7041591,32.3487613 38.3487045,33.7040516 36.6275682,34.1642452 C33.5084773,34.9999548 21.0000682,34.9999548 21.0000682,34.9999548 C21.0000682,34.9999548 8.49165909,34.9999548 5.37234091,34.1642452 C3.65120455,33.7040516 2.29575,32.3487613 1.83575,30.6276645 C1.00006818,27.5081484 1.00006818,20.9999548 1.00006818,20.9999548 C1.00006818,20.9999548 1.00006818,14.4915355 1.83575,11.3722452 C2.29575

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4508
Entropy (8bit):	4.279722918407211
Encrypted:	false
SSDEEP:	96:00s7QepJtXJ8o7QZGdUo+AsfPiQ81PY5EEoyY:js7jJSo7RUol4P+1Q6EoyY
MD5:	056511AEB5282ECAAB9FBF10ED2273E5
SHA1:	FC29C2C37C4B4A31AD13E80356371E338AEF5894
SHA-256:	F01C2E1870FCD75CECA3B4C42C3110CB0AA4B933B562CF3D2C7DDD20CE03C7EE
SHA-512:	C758606B6749103990368038C74AEC1822442CB097D159400286992997106F24653FE740ACACA91A9AEF52E671019C7295AF7D14E64502BBF125383E3C140615
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/instagram-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / Instagram</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-Instagram" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M20.9999603,1 C26.4316739,1 27.1126824,1.02302314 29.245895,1.12035543 C31.3747412,1.21744955 32.8285332,1.5555721 34.10076,2.05001379 C35.4159368,2.56104803 36.5312886,3.24491457 37.6431473,4.35677327 C38.7550854,5.46871136 39.4388726,6.58406323 39.9499862,7.89916065 C40.4444279,9.1713874 40.7825504,10.6251794 40.8796446,12.7540256 C40.9769769,14.8872382 41,15.5683261 41,20.9999603 C41,26.4316739 40.9769769,27.1127618 40.8796446,29.2459744 C40.7825504,31.3747412 40.4444279,32.8286126 39.9499862,34.10076 C39.4388726,35.4159368 38.7550854,36.5312886

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	dropped
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2307
Entropy (8bit):	4.843424729428811
Encrypted:	false
SSDEEP:	48:NvdgIG00CvbGfsg3hT2QhNHFcQhNpFhR16iuxuWiPnqWiuxuWiYn5:7E0JbGfn3MQCQNRoqnqen5
MD5:	1C5FDEE848E9FEE64DF2F5D844AEAC4E
SHA1:	FB216EDAFE7D6C9D2AC5D97F886CA4C6A6E51FA1
SHA-256:	2F14AF263BF34F9CCA167FAE70AE4FBE805546F60223E2A3155CD3C48FE61F9B
SHA-512:	A5810B4C18E168C6D2B869B7D06CF64A4B41C6930933630BD5FE43EA5B9EF2A28D884BF887D1793BCA1F0B87D4480BBD766314F4A811F939DB4E3380764AA92B
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {..// $('<div class="loader__ waiter__" style="display:none">\.// <div class="loader-box">\.// <h2 class="waiter_h2">Please wait...</h2>\.// <div class="loader-images-box">\.// <img class="newloader" src="form/newloader.gif">\.// <div class="ab-logo">\.// <img class="loader-logo" src="https://i.imgur.com/lQNIz8H.png">\.// </div>\.// </div>\.// <p class="waiter_p">Don\'t reload this page</p>\.// </div>\.// </div>').appendTo('body');.... $('<div class="loader2__">\. <h4 class="loader2__h4">Wait please...</h4>\. <span class="cool_spinner__">\. <svg version="1.1" id="L2" height="50" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 100 100" enable-background="new 0 0 100 100" xml:space="preserve">\. <circle fill="none" stroke-width="

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.993889350613158
Encrypted:	false
SSDEEP:	12:XUMasjadrFHCyE9hVvRDDDU8iGp+a91BTJujOKa81aMr/:Xv5jIZHCh9TZDSGUo1BTJuJJ1Z
MD5:	D8106BF3A1D00AB43B01E6E3C92500EB
SHA1:	202B5E8654AB1B28351378293BCA3B9D844CC29B
SHA-256:	9ADA5709E264C31B04A05BD85448A9BD5E91925E8D83DF5CEF0762EC97CC283E
SHA-512:	3A77CBE48E27AF035ABCD70F0AE679195BB1B210EB02BBD86D3DB270349FCC6F9B5AD8DA10FF97F786865B18657531197D8A4E0D2FF1F08A2F117B2C1422AE89
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S..'....\...a...P...N...Y...V..$-...t...........................y.."8.."3...X...U..!8...?...V..#.............................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	879286
Entropy (8bit):	4.879838601824415
Encrypted:	false
SSDEEP:	6144:QiW820UiSC4pj76hNDXWDaPXZSGb5op8dCEZ/lRxQ+7REQm+sCU6Cw1R8M1gGHQO:7Nn2Kjnt+oQWp+En
MD5:	BF5DF87F2F40BF9EE7BC34BC8F1EDD3F
SHA1:	DA15EE2407D8223C5859BFAE9E992627472EEB8B
SHA-256:	4009F827B65F5E038592FB90FE9E77F0B50A7E808BF9C8CD1A03782D62DB9A00
SHA-512:	6715C6E89AFD262119508446BFCD3B0FAF12451041D890ED0373948C8DE012B372B0ECDF9BF53F73A63F29F0834B946840EAE629DF63F53454B333E652820121
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/bundle.css
Preview:	..* {.. -webkit-margin-before: 0;.. -webkit-margin-after: 0;.. -webkit-margin-start: 0;.. -webkit-margin-end: 0;.. -webkit-padding-start: 0;.. -webkit-tap-highlight-color: transparent;.. box-sizing: border-box;.. margin: 0;.. outline: none;.. padding: 0;..}...display-none {.. display: none !important;..}..button {.. background: none;.. border: none;..}..html {.. -webkit-text-size-adjust: 100%;.. line-height: 1.15;..}..body {.. margin: 0;..}..main {.. display: block;..}..h1 {.. font-size: 2em;.. margin: 0.67em 0;..}..hr {.. box-sizing: content-box;.. height: 0;.. overflow: visible;..}..pre {.. font-family: monospace, monospace;.. font-size: 1em;..}..a {.. background-color: transparent;..}..abbr[title] {.. border-bottom: none;.. text-decoration: underline;.. text-decoration: underline dotted;..}..b,..strong {.. font-weight: bolder;..}..code,..kbd,..samp {.. font-family: monospace, monospace;.. fo

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16817)
Category:	downloaded
Size (bytes):	17048
Entropy (8bit):	5.721121271818232
Encrypted:	false
SSDEEP:	384:zN+fKMCY42wpgfsJJAsUJQaUOoX2UMc02dO3FIowsWN:zNhFp5JAsU2CoX2UM4dOVIoc
MD5:	E0AE48C8EBBE57EDEACB5B02F16D0DF9
SHA1:	0C5A29A88ADD39486162E0C16F23E2E06FC7842E
SHA-256:	0FDA30CF243E7650BF3E1666EDDEB4FBBA6B788EDE36753EDA5E2964CC14C896
SHA-512:	E88FAFF5DB0121BDD74E16D59C675AEAEE258BF189D0C366D43B230B194FE2DA27AE3ADAF41F958E1AA7393DC4E9BEE3863AEAE0878F99CA9907A27DC46E057D
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/ua-parser-js/dist/ua-parser.min.js
Preview:	/*. UAParser.js v0.7.17. * Lightweight JavaScript-based User-Agent string parser. * https://github.com/faisalman/ua-parser-js. . Copyright . 2012-2016 Faisal Salman <fyzlman@gmail.com>. * Dual licensed under GPLv2 & MIT. */.(function(window,undefined){"use strict";var LIBVERSION="0.7.17",EMPTY="",UNKNOWN="?",FUNC_TYPE="function",UNDEF_TYPE="undefined",OBJ_TYPE="object",STR_TYPE="string",MAJOR="major",MODEL="model",NAME="name",TYPE="type",VENDOR="vendor",VERSION="version",ARCHITECTURE="architecture",CONSOLE="console",MOBILE="mobile",TABLET="tablet",SMARTTV="smarttv",WEARABLE="wearable",EMBEDDED="embedded";var util={extend:function(regexes,extensions){var margedRegexes={};for(var i in regexes){if(extensions[i]&&extensions[i].length%2===0){margedRegexes[i]=extensions[i].concat(regexes[i])}else{margedRegexes[i]=regexes[i]}}return margedRegexes},has:function(str1,str2){if(typeof str1==="string"){return str2.toLowerCase().indexOf(str1.toLowerCase())!==-1}else{return false}},lowerize:f

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	4.9078093738349065
Encrypted:	false
SSDEEP:	24:hYj0XJU5DgGeRpbufLUwDdVJUSdEj7RtiKAo1Mc:PS5gGe/uTUwhVJJEjCKN1h
MD5:	A943672A32297727BAB01C3E76977550
SHA1:	3A667C4B7A457EF6C586CC581D533C128737BF53
SHA-256:	B9347F234DC3C8D56E015E86D88A1400415DB8F7A5AD91F02B6A2323C10A4187
SHA-512:	0965D415F3A0CEF31953702FDAE345D46FEFD72CE3C4C7A0255AEDE74A76E10B856892700529A444453A622793E0257248C5C99FAE17D5B0B9FD4118E208068C
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>404 Not Found</title>. <link rel="stylesheet" href="/error_docs/styles.css">.</head>.<body>.<div class="page">. <div class="main">. <h1>Server Error</h1>. <div class="error-code">404</div>. <h2>Page Not Found</h2>. <p class="lead">This page either doesn't exist, or it moved somewhere else.</p>. <hr/>. <p>That's what you can do</p>. <div class="help-actions">. <a href="javascript:location.reload();">Reload Page</a>. <a href="javascript:history.back();">Back to Previous Page</a>. <a href="/">Home Page</a>. </div>. </div>.</div>.</body>.</html>

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4601
Entropy (8bit):	4.62271075287747
Encrypted:	false
SSDEEP:	48:JF6GjBHTY3WOWIT0s6S+XyySRZscTpviy/iMLWVgE:JF6GjBHs3WHS+qscwyqMLa
MD5:	47BE5D869C349963511A2697FA1F76EE
SHA1:	9CC8A62AD20F65337E3D36DE63B02489AC8CA62D
SHA-256:	9C9F388143B6571FE61C4311205675C7C90AC8DC352E044BB6BAD5611AFD4F01
SHA-512:	4E43EB4816B98E5AE5A8BFD90451A70A0860E3EB75DC3E6D565F2DC880984256F655EE567E0F5580B7709E33397ADAF4C662F3973A9C995CCEA1C907B93A0989
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/core_form.css
Preview:	.form-group.has_err .form-control {}...form-control.has_err {}...form-group.has_err label {}...form-group.has_err .err_span {}......scum_container {. position: relative;. /* overflow: hidden; /.}.............@-webkit-keyframes scums_hide {. 0% {. opacity: 1;. }.. 100% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. / height: 0px;/.. }.}.............@keyframes scums_hide {. 0% {. opacity: 1;. }.. 100% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. / height: 0px;*/.. }.}...@-webkit-keyframes scums_show {. 0% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. }.. 100% {. opacity: 1;... }.}...@keyframes scums_show {. 0% {. opacity: 0;. -webkit-transform: translateX(1000px);. transform: translateX(1000px);. }

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1693
Entropy (8bit):	4.20200258376937
Encrypted:	false
SSDEEP:	48:CIwvn66lWuMEUjpbW/OH/k05dfZHtQbB4w+:7gn66c/EGpbh5tzQbOj
MD5:	0C99E91E1784480BEDCFD85B6EC52EC5
SHA1:	CCA8C71B330686FD1CD600D553D03EF85131DECD
SHA-256:	8E3ACF992F11D4EA95BED00DA7673DCBD592D92CA8A1610792298B7FA9EF1EE0
SHA-512:	059F3A35D8B7FAE39D2D066CF2A99170992CC69F887F3EC822BF8674C5B7A75831FDB1DCDAC2BD91F16EB25CBD4F32A48E342A31B007A7B27D64DCD4EDFE70E7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0 .1.1.1h11.3c.1 0 .1 0 .1-.1v-.6c0-.6-.2-1.2-.4-1.8-.3-.9-.9-1.5-1.7-2-.5-.3-1.1-.5-1.7-.5-.1 0-.1 0-.1.1-.3 1.2-.7 2.3-1 3.5v.1-.1c-.2-.5-.3-1-.5-1.5V9c.1-.1.2-.3.4-.4l.1-.1v-.4c0-.1-.1-.2-.2-.2H5.2c-.1 0-.2.1-.2.3v.3c0 .1 0 .1.1.2s.2.3.3.4v.1c-.1.5-.3.9-.4 1.4zm.7-3.4c.6 0 1-.2 1.4-.6.2-.2.5-.6.6-1.1 0-.1.1-.1.1-.2.4-.4.6-.8.6-1.3v-.5c0-.1-.1-.2-.1-.2-.1 0-.1 0-.1-.1v-1c0-.3 0-.5-.1-.7C7.8.8 7.4.4 6.7.2 6.2 0 5.6 0 5 .1c-.8.2-1.3.7-1.5 1.5-.1.2-.1.4-.1.6v1.1c-.1 0-.2.1-.2.2v.6c0 .5.2.9.5 1.2 0 0 .1.1.1.2.2.4.4.8.7 1.2.4.3.8.5 1.2.5z" style="fill:#fff"/><path d="M5 10.6c.2-.5.3-1 .5-1.5V9c-.2-.1-.3-.2-.4-.3-.1-.1-.1-.2-.1-.2v-.3c0-.2.1-.3.2-.3h1.1c.1 0 .2.1.2.2v.4c0 .1 0 .1-.1.1 0 .2-.1.3-.3.5v.1c.2.5.3 1 .5 1.5v.1-.1l1-3.5c0-.2 0-.2.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1412
Entropy (8bit):	4.912444059587619
Encrypted:	false
SSDEEP:	24:2dqNi3LSJiE6FeaxMYpu0uWRKyb5xH1wCD+uBRPuYzp6adhAN7hv:cqYbLZBp9Xnrzcv
MD5:	376247A0B06E705C758FE04978EA9DF5
SHA1:	90D50C682C2EA23A9D26926C6EB3D849B7B94661
SHA-256:	ACD3EAF2B608FB48F9915964C36772B322AD91106508C4490E2A72122DB4D347
SHA-512:	EC36520287FB862E212EE66B895BED8B39B41136DF8155CCF8A591EC3EC9C8851CB931127F83B411A4205485849454411FE33C292895546F4ECE88BD346682FB
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/youtube-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / YouTube</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-YouTube" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M40.1641591,11.3722452 C41.0000682,14.4915355 41.0000682,20.9999548 41.0000682,20.9999548 C41.0000682,20.9999548 41.0000682,27.5081484 40.1641591,30.6276645 C39.7041591,32.3487613 38.3487045,33.7040516 36.6275682,34.1642452 C33.5084773,34.9999548 21.0000682,34.9999548 21.0000682,34.9999548 C21.0000682,34.9999548 8.49165909,34.9999548 5.37234091,34.1642452 C3.65120455,33.7040516 2.29575,32.3487613 1.83575,30.6276645 C1.00006818,27.5081484 1.00006818,20.9999548 1.00006818,20.9999548 C1.00006818,20.9999548 1.00006818,14.4915355 1.83575,11.3722452 C2.29575

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1647
Entropy (8bit):	4.827665843265663
Encrypted:	false
SSDEEP:	48:cqYbgoA0p63nihImdMuFzLY1n1W196wYCBf50CzLwv:0g0rGumREKrCrLO
MD5:	43EFFF953A2A3BAF6A2EF0528F55DC07
SHA1:	B510BC0512DA7D96CDF29A0F1E343319095776DE
SHA-256:	C32F1A0F5B093B6B2C8F5DF0BF93856359769EE6BBAB40975043CD133711D528
SHA-512:	888D52ED5AE93F30C13E13BB6D561D51E4437754158C71F0A2FDF58FDE4D1C0786F00887E0849832E9D709A9A34731ED3961B2A8754B3DB3573CA0C0FE9F971A
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/linkedIn-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / LinkedIn</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-LinkedIn" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M35.0846088,35.0852778 L29.1558846,35.0852778 L29.1558846,25.8019444 C29.1558846,23.5883333 29.1153301,20.7408333 26.0731924,20.7408333 C22.9860559,20.7408333 22.5121802,23.1522222 22.5121802,25.6419444 L22.5121802,35.0852778 L16.5848449,35.0852778 L16.5848449,15.9958333 L22.2749646,15.9958333 L22.2749646,18.6041667 L22.3544068,18.6041667 C23.146607,17.1036111 25.0815533,15.5213889 27.967862,15.5213889 C33.9754729,15.5213889 35.0846088,19.4752778 35.0846088,24.6147222 L35.0846088,35.0852778 Z M9.89836393,13.3863889 C7.99702786,13.3863889 6.45790395,1

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1647
Entropy (8bit):	4.827665843265663
Encrypted:	false
SSDEEP:	48:cqYbgoA0p63nihImdMuFzLY1n1W196wYCBf50CzLwv:0g0rGumREKrCrLO
MD5:	43EFFF953A2A3BAF6A2EF0528F55DC07
SHA1:	B510BC0512DA7D96CDF29A0F1E343319095776DE
SHA-256:	C32F1A0F5B093B6B2C8F5DF0BF93856359769EE6BBAB40975043CD133711D528
SHA-512:	888D52ED5AE93F30C13E13BB6D561D51E4437754158C71F0A2FDF58FDE4D1C0786F00887E0849832E9D709A9A34731ED3961B2A8754B3DB3573CA0C0FE9F971A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>Icon SoMe / LinkedIn</title>. <desc>Created with Sketch.</desc>. <g id="Icon-SoMe-/-LinkedIn" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M35.0846088,35.0852778 L29.1558846,35.0852778 L29.1558846,25.8019444 C29.1558846,23.5883333 29.1153301,20.7408333 26.0731924,20.7408333 C22.9860559,20.7408333 22.5121802,23.1522222 22.5121802,25.6419444 L22.5121802,35.0852778 L16.5848449,35.0852778 L16.5848449,15.9958333 L22.2749646,15.9958333 L22.2749646,18.6041667 L22.3544068,18.6041667 C23.146607,17.1036111 25.0815533,15.5213889 27.967862,15.5213889 C33.9754729,15.5213889 35.0846088,19.4752778 35.0846088,24.6147222 L35.0846088,35.0852778 Z M9.89836393,13.3863889 C7.99702786,13.3863889 6.45790395,1

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	dropped
Size (bytes):	168828
Entropy (8bit):	5.401307737299551
Encrypted:	false
SSDEEP:	3072:Brd6VRvC137xG0Dh/ULec0wBi2hdoIIJELkZ:+2rx/ZUFvYJEoZ
MD5:	4C619EF91E3FA3F1D4813DB2B2EB738D
SHA1:	C5F77156C6F5397BE71914EB80D8F998EA1279E7
SHA-256:	35F73A70CCA067828BE9E0A712B8B48908E1BC4490637C62BD70158F95CD6E27
SHA-512:	1C6363E7382F968F17D16B3B0230838FF0B5C5A67F9829BDC9117A6BE86DB2D38C4F780B194BFE86CA19A66C7DF4E1466E2E532FBEFC7F993D86D8533E220513
Malicious:	false
Reputation:	low
Preview:	/. AngularJS v1.6.6. (c) 2010-2017 Google, Inc. http://angularjs.org. License: MIT./.(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return Y(a)&&0<a}function M(a,b){b=b\|\|Error;return function(){var d=arguments[0],c;c="["+(a?a+":":"")+d+"] http://errors.angularjs.org/1.6.6/"+(a?a+"/":"")+d;for(d=1;d<arguments.length;d++){c=c+(1==d?"?":"&")+"p"+(d-1)+"=";var e=encodeURIComponent,f;f=arguments[d];f="function"==typeof f?f.toString().replace(/ \{[\s\S]*$/,""):"undefined"==.typeof f?"undefined":"string"!=typeof f?JSON.stringify(f):f;c+=e(f)}return new b(c)}}function xa(a){if(null==a\|\|$a(a))return!1;if(I(a)\|\|D(a)\|\|B&&a instanceof B)return!0;var b="length"in Object(a)&&a.length;return Y(b)&&(0<=b&&(b-1 in a\|\|a instanceof Array)\|\|"function"===typeof a.item)}function p(a,b,d){var c,e;if(a)if(A(a))for(c in a)"prototype"!==c&&"length"!==c&&"name"!==c&&a.hasOwnProperty(c)&&b.call(d,a

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16817)
Category:	dropped
Size (bytes):	17048
Entropy (8bit):	5.721121271818232
Encrypted:	false
SSDEEP:	384:zN+fKMCY42wpgfsJJAsUJQaUOoX2UMc02dO3FIowsWN:zNhFp5JAsU2CoX2UM4dOVIoc
MD5:	E0AE48C8EBBE57EDEACB5B02F16D0DF9
SHA1:	0C5A29A88ADD39486162E0C16F23E2E06FC7842E
SHA-256:	0FDA30CF243E7650BF3E1666EDDEB4FBBA6B788EDE36753EDA5E2964CC14C896
SHA-512:	E88FAFF5DB0121BDD74E16D59C675AEAEE258BF189D0C366D43B230B194FE2DA27AE3ADAF41F958E1AA7393DC4E9BEE3863AEAE0878F99CA9907A27DC46E057D
Malicious:	false
Reputation:	low
Preview:	/*. UAParser.js v0.7.17. * Lightweight JavaScript-based User-Agent string parser. * https://github.com/faisalman/ua-parser-js. . Copyright . 2012-2016 Faisal Salman <fyzlman@gmail.com>. * Dual licensed under GPLv2 & MIT. */.(function(window,undefined){"use strict";var LIBVERSION="0.7.17",EMPTY="",UNKNOWN="?",FUNC_TYPE="function",UNDEF_TYPE="undefined",OBJ_TYPE="object",STR_TYPE="string",MAJOR="major",MODEL="model",NAME="name",TYPE="type",VENDOR="vendor",VERSION="version",ARCHITECTURE="architecture",CONSOLE="console",MOBILE="mobile",TABLET="tablet",SMARTTV="smarttv",WEARABLE="wearable",EMBEDDED="embedded";var util={extend:function(regexes,extensions){var margedRegexes={};for(var i in regexes){if(extensions[i]&&extensions[i].length%2===0){margedRegexes[i]=extensions[i].concat(regexes[i])}else{margedRegexes[i]=regexes[i]}}return margedRegexes},has:function(str1,str2){if(typeof str1==="string"){return str2.toLowerCase().indexOf(str1.toLowerCase())!==-1}else{return false}},lowerize:f

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1603
Entropy (8bit):	5.183926440483353
Encrypted:	false
SSDEEP:	24:2dzAxLfam1lgE2m/X0TbKErfnfSjOunOQzUtD1OsT5:czA5fv4EB/EiErHCOQois1
MD5:	3FECC9DB35D5D2A9E6E71AB4B02D22E5
SHA1:	628BA2F505B480097445AAF08649A08242BD6847
SHA-256:	362BCAA42090E36611031BEC6BDAA0600375EF847092CCA195C58D3BAE9B4419
SHA-512:	C0D70D0F914D3D9F29366C9886F174580675334EC79BA77158C4CF184075540DD7D25B3F35F7129C1FAE764527574DAEC29F5FB8434817CCBEF6951B332CDD5E
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/img/dhl-logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="143.5px" height="20px" viewBox="0 0 143.5 20" style="enable-background:new 0 0 143.5 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#D40511;}.</style>.<g>..<path class="st0" d="M0,18.5h17.4l-1,1.4H0V18.5z"/>..<path class="st0" d="M143.5,19.9h-21.3l1.1-1.4h20.3V19.9z"/>..<path class="st0" d="M0,15.9h19.4l-1.1,1.4H0V15.9z"/>..<path class="st0" d="M0,13.3h21.4l-1.1,1.4H0L0,13.3z"/>..<path class="st0" d="M143.5,17.3h-19.3l1.1-1.4h18.3V17.3z"/>..<path class="st0" d="M127.2,13.3h16.3v1.4h-17.4L127.2,13.3z"/>..<path class="st0" d="M18.8,19.9L28,7.6c0,0,10.2,0,11.4,0c1.3,0,1.3,0.5,0.6,1.3c-0.6,0.8-1.7,2.3-2.3,3.1c-0.3,0.5-0.9,1.2,1,1.2...c2.1,0,15.3,0,15.3,0C52.8,15,48.6,20,41.2,20C35.2,19.9,18.8,19.9,18.8,19.9z"/>

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	4.9078093738349065
Encrypted:	false
SSDEEP:	24:hYj0XJU5DgGeRpbufLUwDdVJUSdEj7RtiKAo1Mc:PS5gGe/uTUwhVJJEjCKN1h
MD5:	A943672A32297727BAB01C3E76977550
SHA1:	3A667C4B7A457EF6C586CC581D533C128737BF53
SHA-256:	B9347F234DC3C8D56E015E86D88A1400415DB8F7A5AD91F02B6A2323C10A4187
SHA-512:	0965D415F3A0CEF31953702FDAE345D46FEFD72CE3C4C7A0255AEDE74A76E10B856892700529A444453A622793E0257248C5C99FAE17D5B0B9FD4118E208068C
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/fonts/default-274a65bae9742377aaf0.woff
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="x-ua-compatible" content="ie=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <title>404 Not Found</title>. <link rel="stylesheet" href="/error_docs/styles.css">.</head>.<body>.<div class="page">. <div class="main">. <h1>Server Error</h1>. <div class="error-code">404</div>. <h2>Page Not Found</h2>. <p class="lead">This page either doesn't exist, or it moved somewhere else.</p>. <hr/>. <p>That's what you can do</p>. <div class="help-actions">. <a href="javascript:location.reload();">Reload Page</a>. <a href="javascript:history.back();">Back to Previous Page</a>. <a href="/">Home Page</a>. </div>. </div>.</div>.</body>.</html>

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	168828
Entropy (8bit):	5.401307737299551
Encrypted:	false
SSDEEP:	3072:Brd6VRvC137xG0Dh/ULec0wBi2hdoIIJELkZ:+2rx/ZUFvYJEoZ
MD5:	4C619EF91E3FA3F1D4813DB2B2EB738D
SHA1:	C5F77156C6F5397BE71914EB80D8F998EA1279E7
SHA-256:	35F73A70CCA067828BE9E0A712B8B48908E1BC4490637C62BD70158F95CD6E27
SHA-512:	1C6363E7382F968F17D16B3B0230838FF0B5C5A67F9829BDC9117A6BE86DB2D38C4F780B194BFE86CA19A66C7DF4E1466E2E532FBEFC7F993D86D8533E220513
Malicious:	false
Reputation:	low
URL:	https://svfs.is/dnkdl/assets/angular/angular.min.js
Preview:	/. AngularJS v1.6.6. (c) 2010-2017 Google, Inc. http://angularjs.org. License: MIT./.(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return Y(a)&&0<a}function M(a,b){b=b\|\|Error;return function(){var d=arguments[0],c;c="["+(a?a+":":"")+d+"] http://errors.angularjs.org/1.6.6/"+(a?a+"/":"")+d;for(d=1;d<arguments.length;d++){c=c+(1==d?"?":"&")+"p"+(d-1)+"=";var e=encodeURIComponent,f;f=arguments[d];f="function"==typeof f?f.toString().replace(/ \{[\s\S]*$/,""):"undefined"==.typeof f?"undefined":"string"!=typeof f?JSON.stringify(f):f;c+=e(f)}return new b(c)}}function xa(a){if(null==a\|\|$a(a))return!1;if(I(a)\|\|D(a)\|\|B&&a instanceof B)return!0;var b="length"in Object(a)&&a.length;return Y(b)&&(0<=b&&(b-1 in a\|\|a instanceof Array)\|\|"function"===typeof a.item)}function p(a,b,d){var c,e;if(a)if(A(a))for(c in a)"prototype"!==c&&"length"!==c&&"name"!==c&&a.hasOwnProperty(c)&&b.call(d,a

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HeL:u
MD5:	841C268288739CF9828DEF74E761DEB6
SHA1:	E44AB09A6DBB26453957362439CABAC6FDD135E8
SHA-256:	80F4CAD30556965E423C10AD6EB77A5F6E901CA7BD2C00FA8D381B3D633E7583
SHA-512:	877B172FCFF80083C146A107A3CBFD7593D318A077580001B78117AB6BB32275FDBA52FE5E19C62756A84A0270E1E210E558395727338F5DAFF2FF82DAA802CD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAklm2vkfvm1QxIFDRR4aLM=?alt=proto
Preview:	CgkKBw0UeGizGgA=

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.183926440483353
Encrypted:	false
SSDEEP:	24:2dzAxLfam1lgE2m/X0TbKErfnfSjOunOQzUtD1OsT5:czA5fv4EB/EiErHCOQois1
MD5:	3FECC9DB35D5D2A9E6E71AB4B02D22E5
SHA1:	628BA2F505B480097445AAF08649A08242BD6847
SHA-256:	362BCAA42090E36611031BEC6BDAA0600375EF847092CCA195C58D3BAE9B4419
SHA-512:	C0D70D0F914D3D9F29366C9886F174580675334EC79BA77158C4CF184075540DD7D25B3F35F7129C1FAE764527574DAEC29F5FB8434817CCBEF6951B332CDD5E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="143.5px" height="20px" viewBox="0 0 143.5 20" style="enable-background:new 0 0 143.5 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#D40511;}.</style>.<g>..<path class="st0" d="M0,18.5h17.4l-1,1.4H0V18.5z"/>..<path class="st0" d="M143.5,19.9h-21.3l1.1-1.4h20.3V19.9z"/>..<path class="st0" d="M0,15.9h19.4l-1.1,1.4H0V15.9z"/>..<path class="st0" d="M0,13.3h21.4l-1.1,1.4H0L0,13.3z"/>..<path class="st0" d="M143.5,17.3h-19.3l1.1-1.4h18.3V17.3z"/>..<path class="st0" d="M127.2,13.3h16.3v1.4h-17.4L127.2,13.3z"/>..<path class="st0" d="M18.8,19.9L28,7.6c0,0,10.2,0,11.4,0c1.3,0,1.3,0.5,0.6,1.3c-0.6,0.8-1.7,2.3-2.3,3.1c-0.3,0.5-0.9,1.2,1,1.2...c2.1,0,15.3,0,15.3,0C52.8,15,48.6,20,41.2,20C35.2,19.9,18.8,19.9,18.8,19.9z"/>

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:09:06.158493996 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 02:09:15.893781900 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 02:09:17.487802029 CEST	49735	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:17.490855932 CEST	49736	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:17.492721081 CEST	80	49735	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:17.492810011 CEST	49735	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:17.492975950 CEST	49735	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:17.495675087 CEST	80	49736	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:17.495758057 CEST	49736	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:17.497905970 CEST	80	49735	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:17.777018070 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:17.777066946 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:17.777121067 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:17.777424097 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:17.777440071 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:18.171273947 CEST	80	49735	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:18.193738937 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.193799019 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:18.193882942 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.194077015 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.194094896 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:18.224077940 CEST	49735	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.443533897 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:18.443941116 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:18.443969011 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:18.445584059 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:18.445655107 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:18.448494911 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:18.448580027 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:18.501281023 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:18.501297951 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:18.553224087 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:18.881398916 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:18.924396992 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.979173899 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.979203939 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:18.983076096 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:18.983149052 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.985265970 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.985501051 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:18.986263990 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:18.986279011 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.031703949 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.198307991 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.198518038 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.198584080 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.199219942 CEST	49739	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.199261904 CEST	443	49739	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.204452038 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.204523087 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.204590082 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.207741022 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.207777977 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.901101112 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.913552999 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.913604975 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.914102077 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.930453062 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.930562019 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:19.931197882 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:19.971446037 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.265320063 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.265357971 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.265376091 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.265422106 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.265465021 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.265484095 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.265511990 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.343514919 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.343605995 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.343614101 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.343749046 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.347254992 CEST	49741	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.347282887 CEST	443	49741	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.726907969 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.726994038 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.727098942 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.727691889 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.727710962 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.729139090 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.729185104 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.729248047 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.729650974 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.729662895 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.730540037 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.730568886 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.730813980 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.731086016 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.731096983 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.731648922 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.731687069 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.731831074 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.732239008 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.732254982 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.732857943 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.732877016 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.732984066 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.733565092 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.733578920 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.735080004 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.735104084 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.735263109 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.735806942 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:20.735816002 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:20.951744080 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:20.951807022 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:20.951982975 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:20.993093967 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:20.993132114 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.405958891 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.412522078 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.422858953 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.426858902 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.427726030 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.429546118 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.452907085 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.452907085 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.463841915 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.466949940 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.476408005 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.476447105 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.477250099 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.477262020 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.477550030 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.477561951 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.478106022 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.478131056 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.478156090 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.478209019 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.478477001 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.478488922 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.478744984 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.478822947 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.478857040 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.479229927 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.479970932 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.480742931 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.480799913 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.481033087 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.481116056 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.481667995 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.481738091 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.482117891 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.482131004 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.482172966 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.482238054 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.482347012 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.482414007 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.482414007 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.482429981 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.482431889 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.482539892 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.486289978 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.486417055 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.486541986 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.486721039 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.487724066 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.487811089 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.488183022 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.488195896 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.488456964 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.488464117 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.488502026 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.488518953 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.527405024 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.527424097 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.533103943 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.533124924 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.533174992 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.533183098 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.533193111 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.579344988 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.635792017 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.635879993 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:21.642774105 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:21.642791033 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.643145084 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.689183950 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:21.741158962 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:21.754801989 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.754837036 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.754895926 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.754923105 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.754942894 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.754992008 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.757827044 CEST	49742	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.757843971 CEST	443	49742	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.758708000 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.758749962 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.758815050 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.761369944 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.761394978 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.761404991 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.761421919 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.761430979 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.761440992 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.761442900 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.761461973 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.761487007 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.761511087 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.761897087 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.761910915 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778620958 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778646946 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778656960 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778672934 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778681993 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778690100 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778717995 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.778745890 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778759956 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.778791904 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.778815031 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778837919 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778846979 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778856039 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778871059 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778879881 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778882027 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.778904915 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.778949976 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.778949976 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.787405968 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.796295881 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796323061 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796330929 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796339989 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796355009 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796363115 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796372890 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.796381950 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796463966 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796489954 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.796497107 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796536922 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.796555042 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.796643019 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.798455000 CEST	49744	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.798475027 CEST	443	49744	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.841082096 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.841099024 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.841119051 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.841167927 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.841177940 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.841193914 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.841207981 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.841231108 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.841255903 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.841989994 CEST	49746	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.842006922 CEST	443	49746	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.851145983 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.851167917 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.851226091 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.851248980 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.851279020 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.851294041 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.859761000 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.859792948 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.859834909 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.859848976 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.859900951 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.859900951 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.872755051 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.872780085 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.872786999 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.872800112 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.872827053 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.872865915 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.872883081 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.872910976 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.872932911 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.873637915 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.873653889 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.873728037 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.873738050 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.873785019 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.926268101 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.926342010 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.926410913 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:21.926559925 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:21.926582098 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:21.960617065 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.960653067 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.960699081 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.960716963 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.960747004 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.960762978 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.962002993 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.962025881 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.962064028 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.962073088 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.962102890 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.962121964 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.963829994 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.963855982 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.963895082 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.963902950 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.963944912 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.963965893 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.965991020 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.966027975 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.966089964 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.966715097 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.966727018 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.969638109 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.969669104 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.969721079 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.969737053 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.969784975 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.969784975 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.970801115 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.970824003 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.970906019 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.970906019 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.970912933 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.971283913 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.972421885 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.972450972 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.972537041 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.972537041 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.972548962 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.972697020 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.973226070 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.973283052 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.973294973 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.973313093 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.973370075 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.973370075 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.979325056 CEST	49747	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.979336023 CEST	443	49747	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.983896017 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.983911991 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.983977079 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.983992100 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.984047890 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.984978914 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.984994888 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.985048056 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.985055923 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.985096931 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.986699104 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.986717939 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.986799955 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.986808062 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.986843109 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.987813950 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.987828970 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.987879992 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.987886906 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:21.987919092 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:21.987940073 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.000951052 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.000983953 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.001034975 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.001059055 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.001101017 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.001122952 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.053580999 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:22.053638935 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.053728104 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:22.054209948 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:22.054224968 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.071881056 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.071913958 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.071975946 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.071996927 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.072036982 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.072058916 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.072192907 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.072220087 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.072252989 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.072257996 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.072285891 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.072304964 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.074044943 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.074070930 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.074119091 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.074130058 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.074166059 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.074182034 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.074490070 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.074510098 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.074542046 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.074548960 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.074575901 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.074593067 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.075304985 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.075371027 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.075378895 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.075417995 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.075421095 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.075468063 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.076165915 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.076183081 CEST	443	49745	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.076190948 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.076235056 CEST	49745	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.079315901 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.079361916 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.079432964 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.079718113 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.079749107 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.079823017 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.079946995 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.079962015 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.080080986 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.080091000 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.095396042 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.095421076 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.095483065 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.095496893 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.095539093 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.096425056 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.096446037 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.096473932 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.096501112 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.096509933 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.096533060 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.097378969 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.097398996 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.097434998 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.097444057 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.097481966 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.100095987 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.100110054 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.100147963 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.100157976 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.100187063 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.100342989 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.100363970 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.100392103 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.100399017 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.100426912 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.101460934 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.101475000 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.101519108 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.101527929 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.101561069 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.145052910 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.186326027 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.186352015 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.186419964 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.186434031 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.186487913 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.205529928 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.205555916 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.205621004 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.205636978 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.205676079 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.206449032 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.206464052 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.206520081 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.206542015 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.206582069 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.206882000 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.206897974 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.206948042 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.206957102 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.206991911 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.207222939 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.207237005 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.207288980 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.207295895 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.207334042 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.207705021 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.207719088 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.207775116 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.207782984 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.207823992 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.207998037 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.208010912 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.208058119 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.208064079 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.208105087 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.208395958 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.208408117 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.208455086 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.208462000 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.208498955 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.277298927 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.277323008 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.277390957 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.277405024 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.277446032 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.296489954 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.296511889 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.296574116 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.296588898 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.296642065 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.297375917 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.297398090 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.297446966 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.297452927 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.297483921 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.297502041 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.297727108 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.297741890 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.297786951 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.297792912 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.297831059 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.298120022 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298137903 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298181057 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.298187017 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298214912 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.298233986 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.298551083 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298566103 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298623085 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.298629045 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298682928 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.298819065 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298835993 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298878908 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.298885107 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.298965931 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.316495895 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.316521883 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.316600084 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.316612959 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.316662073 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.368127108 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.368155956 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.368227005 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.368242025 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.368284941 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.368365049 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.368380070 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.368422031 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.368428946 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.368459940 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.388204098 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388227940 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388297081 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.388310909 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388358116 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.388602018 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388617039 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388662100 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.388669014 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388691902 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.388706923 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.388942003 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388957024 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.388994932 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.389000893 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.389024973 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.389048100 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.389355898 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.389369965 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.389414072 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.389420033 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.389462948 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.389791965 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.389806032 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.389847040 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.389858007 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.389894962 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.389914989 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.390125990 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.390141964 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.390186071 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.390199900 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.390235901 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.457144022 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.457542896 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.457583904 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.458060980 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.458435059 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.458513021 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.458610058 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.459171057 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.459192991 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.459274054 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.459290028 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.459341049 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.478338957 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.478360891 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.478430986 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.478445053 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.478485107 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.479068041 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479083061 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479134083 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.479140997 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479196072 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.479471922 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479485989 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479536057 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.479542971 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479578018 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.479922056 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479937077 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.479988098 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.479993105 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.480026007 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.480370045 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.480386019 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.480432987 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.480438948 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.480473995 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.480684042 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.480695963 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.480747938 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.480753899 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.480787039 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.498552084 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.498578072 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.498646975 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.498663902 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.498707056 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.503402948 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.503602028 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.550312996 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.550338030 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.550452948 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.550468922 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.550513029 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.569370985 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.569395065 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.569457054 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.569473982 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.569519997 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.570080042 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570090055 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570164919 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.570173979 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570209026 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.570477009 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570492029 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570538998 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.570545912 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570580959 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.570861101 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570875883 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570916891 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.570931911 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.570955038 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.570985079 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.571274042 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.571289062 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.571356058 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.571362972 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.571657896 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.571676970 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.571687937 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.571693897 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.571706057 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.571754932 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.572675943 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.583175898 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.583223104 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.583379030 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.583758116 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.583770037 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.589364052 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.589385986 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.589499950 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.589513063 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.589551926 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.591447115 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.591523886 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.591608047 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.592243910 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.592272997 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641212940 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641236067 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641302109 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.641315937 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641350985 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.641422987 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641458035 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641477108 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.641484022 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641494036 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.641509056 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.641531944 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.642934084 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.671912909 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.671967983 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.675930977 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.676080942 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.679193020 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.679379940 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.679563046 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.679584026 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.681268930 CEST	49743	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.681298971 CEST	443	49743	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.718688965 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.718801022 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:22.721396923 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.751790047 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.761284113 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.780822992 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.780852079 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.780910969 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.780926943 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.780972004 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.785957098 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:22.785983086 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.786417007 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.792670012 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:22.793667078 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.793687105 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.794195890 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.794229031 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.795371056 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.795450926 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.795924902 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.802519083 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.802690029 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.803817034 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.803961992 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.804636955 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.804661036 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.804862022 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.815572977 CEST	49749	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.815617085 CEST	443	49749	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.839397907 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.847419024 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.849049091 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.996735096 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996772051 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996783018 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996798992 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996812105 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996822119 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996829987 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.996871948 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996896982 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.996901989 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996922016 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.996931076 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.996973038 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:22.997018099 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:22.999572039 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.999660015 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:22.999829054 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:23.074168921 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.074265957 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.074438095 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.085184097 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.085225105 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.085302114 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.085314035 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.085355043 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.170016050 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.170067072 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.170164108 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.170986891 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.171035051 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.171108961 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.171634912 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.171648026 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.172000885 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.172033072 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.172034979 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.172080994 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.182492018 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.182522058 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.182800055 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.182813883 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.183059931 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.183069944 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.183279991 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.183300972 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.202805996 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:23.202820063 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:23.203105927 CEST	49751	443	192.168.2.4	184.28.90.27
Sep 29, 2024 02:09:23.203113079 CEST	443	49751	184.28.90.27	192.168.2.4
Sep 29, 2024 02:09:23.271521091 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.273206949 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.273235083 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.273446083 CEST	49750	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.273483992 CEST	443	49750	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.274420023 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.274496078 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.274648905 CEST	49752	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.274663925 CEST	443	49752	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.275341988 CEST	49753	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.275357008 CEST	443	49753	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.276891947 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.277009964 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.277713060 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.278875113 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.278883934 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.279231071 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.279247046 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.280406952 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.280472994 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.290801048 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.290997028 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.291738987 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.291758060 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.320875883 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.333344936 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.375334978 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.375375032 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.375441074 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.377830029 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.377842903 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.385576963 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.385590076 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.385680914 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.386096001 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.386105061 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.453955889 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.454011917 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.454123020 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.460628986 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.460669041 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.464005947 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.464060068 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.464194059 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.464783907 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.464807034 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.480694056 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.480720997 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.480887890 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.481323957 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.481337070 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.638179064 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.638212919 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.638221025 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.638269901 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.638322115 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.638359070 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.638375044 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.638389111 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.638427019 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.640547037 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.640578985 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.640588999 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.640608072 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.640644073 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.640680075 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.640693903 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.640719891 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.640743017 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.707756996 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.707782984 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.708003998 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.708036900 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.708091974 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.716516972 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.716547966 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.716613054 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.716625929 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.716651917 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.716665030 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.817177057 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.817204952 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.817276955 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.817308903 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.817332983 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.818223953 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.818253994 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.818300009 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.818314075 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.818330050 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.818357944 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.819942951 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.819974899 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.820025921 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.820030928 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.820041895 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.820049047 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.820101023 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.820111990 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.820126057 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.820178032 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.825701952 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.825732946 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.825808048 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.825819969 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.825853109 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.825869083 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.826844931 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.826868057 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.826968908 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.826977015 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.828402042 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.828427076 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.828485966 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.828494072 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.828516960 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.828545094 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.862036943 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.862072945 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.862164021 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.862174034 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.862212896 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.862231970 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.864301920 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.864592075 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.879472017 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.882572889 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.905381918 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.905381918 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.936789036 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.936824083 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.936909914 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.936920881 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.936980009 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.937645912 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.937666893 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.937705040 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.937711000 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.937732935 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.937747955 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.938306093 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.938325882 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.938363075 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.938369036 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.938399076 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.938405037 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.939292908 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.939316034 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.939368010 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.939376116 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.939399004 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.939410925 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.940035105 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.940095901 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:23.940102100 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.940141916 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:23.940187931 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.009275913 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.009422064 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.017618895 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.017631054 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.017923117 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.017929077 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.017992973 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.018013954 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.018100023 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.018131971 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.018137932 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.018556118 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.019620895 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.019639015 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.019695044 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.019769907 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.019829035 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.020174980 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.020284891 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.020613909 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.020659924 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.020667076 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.020720959 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.021204948 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.021302938 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.021308899 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.021576881 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.021639109 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.021653891 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.058206081 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.058530092 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.058542013 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.059135914 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.059398890 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.059406996 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.059609890 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.059664965 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.060184002 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.060250044 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.060395956 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.060404062 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.060875893 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.060925007 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.061455965 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.061542988 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.061697960 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.061705112 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.063395977 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.063410997 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.063414097 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.064335108 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.064363003 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.067405939 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.107781887 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.133938074 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.141477108 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.158860922 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.176435947 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.203661919 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.203661919 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.203666925 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.203675985 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.203706980 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.203716993 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.216464043 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.216492891 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.217027903 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.217046022 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.217082024 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.217206001 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.217215061 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.217854023 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.217978954 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.218668938 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.218892097 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.218934059 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.218940020 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.219002008 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.219024897 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.219177008 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.240299940 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.240323067 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.240360975 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.240370989 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.240406036 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.240407944 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.240487099 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.241333008 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.241472960 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242249012 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242259979 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.242270947 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242289066 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242310047 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242322922 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242353916 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.242360115 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242371082 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.242404938 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.242408991 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.244616032 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.244635105 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.244690895 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.244704962 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.244715929 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.244764090 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.248265982 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.262893915 CEST	49757	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.262911081 CEST	443	49757	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.305232048 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.305846930 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.305870056 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.321135998 CEST	49756	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.321182013 CEST	443	49756	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.331502914 CEST	49758	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.331522942 CEST	443	49758	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.338749886 CEST	49755	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.338821888 CEST	443	49755	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.340398073 CEST	49759	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.340451002 CEST	443	49759	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.357460022 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.357497931 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.357667923 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.357963085 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.357970953 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.358300924 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.358359098 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.358423948 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.358608961 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.358627081 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.358793020 CEST	49754	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.358803034 CEST	443	49754	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.363322020 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.363353014 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.363486052 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.363737106 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.363745928 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.382401943 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.382472992 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.382584095 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.383095980 CEST	49762	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.383105993 CEST	443	49762	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.390901089 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.390986919 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.391042948 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.391861916 CEST	49761	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.391869068 CEST	443	49761	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.457293034 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.457324982 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.457369089 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.457387924 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.457429886 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.458035946 CEST	49763	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.458059072 CEST	443	49763	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.464140892 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.464206934 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.464270115 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.464860916 CEST	49764	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.464899063 CEST	443	49764	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.482556105 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.482584953 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.482625008 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.482636929 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.482649088 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.482697010 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.483406067 CEST	49765	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.483414888 CEST	443	49765	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.873831987 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.873873949 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.873969078 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.874746084 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.874759912 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.877372026 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.877401114 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.877459049 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.878057003 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.878068924 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.879909039 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.879962921 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.880012035 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.880557060 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.880572081 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.883848906 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.883877993 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:24.883948088 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.884131908 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:24.884144068 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.040942907 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.041316986 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.045042038 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.045061111 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.045233011 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.045295000 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.045763016 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.046303034 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.046403885 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.046530008 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.047136068 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.047655106 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.047655106 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.047765970 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.051286936 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.051295996 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.064308882 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.087419033 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.123627901 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.123642921 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.124150038 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.128781080 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.128844023 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.129307985 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.162542105 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.171396017 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.364911079 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.365103006 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.365294933 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.368509054 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.368597984 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.368659019 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.399976015 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.400067091 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.400129080 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.497406006 CEST	49766	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.497437954 CEST	443	49766	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.535087109 CEST	49767	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.535168886 CEST	443	49767	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.536866903 CEST	49768	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.536905050 CEST	443	49768	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.542807102 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.542848110 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.542905092 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.543282986 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.543293953 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.551632881 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.565053940 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.574415922 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.580909014 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.611382008 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.707372904 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.707766056 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.707766056 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.733259916 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.733279943 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.733308077 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.733313084 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.733774900 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.733786106 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.733891010 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.733900070 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.734384060 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.734514952 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.734528065 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.734570026 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.734577894 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.734591961 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.734627962 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.734987974 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.809731007 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.809731007 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.811624050 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.875473022 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.875654936 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.878645897 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.878726006 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.879911900 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.880048037 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.880450964 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.880593061 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.880848885 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.880908012 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.880928993 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.881062031 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.881068945 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.881165981 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.923407078 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.927397013 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:25.958024025 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:25.958024025 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.111576080 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.111609936 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.111670017 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.111675024 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.111718893 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.111886024 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.111927032 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.111972094 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.113286972 CEST	49772	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.113306046 CEST	443	49772	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.114995003 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.115019083 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.115025997 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.115073919 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.115086079 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.115122080 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.118473053 CEST	49773	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.118498087 CEST	443	49773	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.119105101 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.119127989 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.119187117 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.119190931 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.119234085 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.121722937 CEST	49771	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.121737957 CEST	443	49771	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.122733116 CEST	49774	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.122750998 CEST	443	49774	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.234177113 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.306560993 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.308187962 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.308198929 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.308629990 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.309127092 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.309182882 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.309371948 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.351398945 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.562288046 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.562359095 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.562424898 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.583978891 CEST	49775	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.584005117 CEST	443	49775	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.605674028 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.605715990 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:26.605788946 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.609162092 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:26.609170914 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.284632921 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.284907103 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:27.284934998 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.285680056 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.286056995 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:27.286120892 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.286261082 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:27.327408075 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.606878042 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.606962919 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:27.607088089 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:27.607764959 CEST	49779	443	192.168.2.4	185.112.144.235
Sep 29, 2024 02:09:27.607784033 CEST	443	49779	185.112.144.235	192.168.2.4
Sep 29, 2024 02:09:28.341717958 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:28.341785908 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:09:28.341952085 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:29.751806021 CEST	49738	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:09:29.751863956 CEST	443	49738	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:02.510792017 CEST	49736	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:10:02.515743017 CEST	80	49736	185.112.144.235	192.168.2.4
Sep 29, 2024 02:10:03.174197912 CEST	49735	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:10:03.180044889 CEST	80	49735	185.112.144.235	192.168.2.4
Sep 29, 2024 02:10:17.755793095 CEST	49736	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:10:17.761068106 CEST	80	49736	185.112.144.235	192.168.2.4
Sep 29, 2024 02:10:17.761131048 CEST	49736	80	192.168.2.4	185.112.144.235
Sep 29, 2024 02:10:17.817317009 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:17.817374945 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:17.817452908 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:17.817713976 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:17.817730904 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:18.463785887 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:18.464061975 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:18.464099884 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:18.464430094 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:18.464792967 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:18.464859009 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:18.518560886 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:22.315061092 CEST	49723	80	192.168.2.4	93.184.221.240
Sep 29, 2024 02:10:22.315399885 CEST	49724	80	192.168.2.4	93.184.221.240
Sep 29, 2024 02:10:22.320230961 CEST	80	49723	93.184.221.240	192.168.2.4
Sep 29, 2024 02:10:22.320306063 CEST	49723	80	192.168.2.4	93.184.221.240
Sep 29, 2024 02:10:22.320574045 CEST	80	49724	93.184.221.240	192.168.2.4
Sep 29, 2024 02:10:22.320625067 CEST	49724	80	192.168.2.4	93.184.221.240
Sep 29, 2024 02:10:28.363125086 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:28.363224030 CEST	443	49788	216.58.212.164	192.168.2.4
Sep 29, 2024 02:10:28.363430023 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:29.755389929 CEST	49788	443	192.168.2.4	216.58.212.164
Sep 29, 2024 02:10:29.755423069 CEST	443	49788	216.58.212.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:09:15.549737930 CEST	53	58551	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:15.552052021 CEST	53	55105	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:16.592225075 CEST	53	59507	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:17.473279953 CEST	49289	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:17.473428965 CEST	49776	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:17.484723091 CEST	53	49776	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:17.485447884 CEST	53	49289	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:17.766695023 CEST	49946	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:17.766866922 CEST	56605	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:17.773545980 CEST	53	49946	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:17.773902893 CEST	53	56605	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:18.174248934 CEST	54545	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:18.174297094 CEST	50462	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:18.186536074 CEST	53	54545	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:18.232141018 CEST	53	50462	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:21.899663925 CEST	58134	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:21.900120974 CEST	60635	53	192.168.2.4	1.1.1.1
Sep 29, 2024 02:09:21.951595068 CEST	53	58134	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:21.967324018 CEST	53	60635	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:23.214776039 CEST	53	49974	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:33.889679909 CEST	138	138	192.168.2.4	192.168.2.255
Sep 29, 2024 02:09:34.226135969 CEST	53	63597	1.1.1.1	192.168.2.4
Sep 29, 2024 02:09:53.151015997 CEST	53	51942	1.1.1.1	192.168.2.4
Sep 29, 2024 02:10:14.721128941 CEST	53	64784	1.1.1.1	192.168.2.4
Sep 29, 2024 02:10:15.905226946 CEST	53	57330	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 02:09:18.232239008 CEST	192.168.2.4	1.1.1.1	c21c	(Port unreachable)	Destination Unreachable
Sep 29, 2024 02:09:21.967407942 CEST	192.168.2.4	1.1.1.1	c21c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:09:17.473279953 CEST	192.168.2.4	1.1.1.1	0xae88	Standard query (0)	svfs.is	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:17.473428965 CEST	192.168.2.4	1.1.1.1	0xbd11	Standard query (0)	svfs.is	65	IN (0x0001)	false
Sep 29, 2024 02:09:17.766695023 CEST	192.168.2.4	1.1.1.1	0xb023	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:17.766866922 CEST	192.168.2.4	1.1.1.1	0x6587	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:09:18.174248934 CEST	192.168.2.4	1.1.1.1	0x5824	Standard query (0)	svfs.is	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:18.174297094 CEST	192.168.2.4	1.1.1.1	0x6267	Standard query (0)	svfs.is	65	IN (0x0001)	false
Sep 29, 2024 02:09:21.899663925 CEST	192.168.2.4	1.1.1.1	0x6fd6	Standard query (0)	svfs.is	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:21.900120974 CEST	192.168.2.4	1.1.1.1	0x455a	Standard query (0)	svfs.is	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:09:17.485447884 CEST	1.1.1.1	192.168.2.4	0xae88	No error (0)	svfs.is		185.112.144.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:17.773545980 CEST	1.1.1.1	192.168.2.4	0xb023	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:17.773902893 CEST	1.1.1.1	192.168.2.4	0x6587	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:09:18.186536074 CEST	1.1.1.1	192.168.2.4	0x5824	No error (0)	svfs.is		185.112.144.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:21.951595068 CEST	1.1.1.1	192.168.2.4	0x6fd6	No error (0)	svfs.is		185.112.144.235	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:29.707593918 CEST	1.1.1.1	192.168.2.4	0xdea7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:29.707593918 CEST	1.1.1.1	192.168.2.4	0xdea7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:31.299171925 CEST	1.1.1.1	192.168.2.4	0x1f1d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:09:31.299171925 CEST	1.1.1.1	192.168.2.4	0x1f1d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:09:43.479439020 CEST	1.1.1.1	192.168.2.4	0x1d37	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:09:43.479439020 CEST	1.1.1.1	192.168.2.4	0x1d37	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:08.213548899 CEST	1.1.1.1	192.168.2.4	0xab17	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:10:08.213548899 CEST	1.1.1.1	192.168.2.4	0xab17	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:10:27.917845011 CEST	1.1.1.1	192.168.2.4	0xe18b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:10:27.917845011 CEST	1.1.1.1	192.168.2.4	0xe18b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

svfs.is

https:

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	185.112.144.235	80	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 02:09:17.492975950 CEST	427	OUT	GET /dnkdl HTTP/1.1 Host: svfs.is Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 02:09:18.171273947 CEST	327	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 29 Sep 2024 00:09:18 GMT Content-Type: text/html Content-Length: 162 Location: https://svfs.is/dnkdl Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 29, 2024 02:10:03.174197912 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	185.112.144.235	80	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 02:10:02.510792017 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:18 UTC	655	OUT	GET /dnkdl HTTP/1.1 Host: svfs.is Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:09:19 UTC	229	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 29 Sep 2024 00:09:19 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 288 Connection: close Location: https://svfs.is/dnkdl/ X-Powered-By: PleskLin
2024-09-29 00:09:19 UTC	288	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 76 66 73 2e 69 73 2f 64 6e 6b 64 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 73 76 66 73 2e 69 73 20 50 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://svfs.is/dnkdl/">here</a>.</p><hr><address>Apache Server at svfs.is P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:19 UTC	656	OUT	GET /dnkdl/ HTTP/1.1 Host: svfs.is Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:09:20 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 20390 Connection: close X-Powered-By: PHP/8.2.23 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a; path=/ Vary: Accept-Encoding X-Powered-By: PleskLin
2024-09-29 00:09:20 UTC	14966	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 62 61 73 65 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 69 73 2d 64 65 73 6b 74 6f 70 20 6a 73 2d 67 6c 6f 62 61 6c 2d 6e 65 77 73 66 6c 61 73 68 2d 76 69 73 69 62 6c 65 22 20 73 74 79 6c 65 3d 22 2d 2d 76 68 3a 20 30 2e 37 30 33 30 30 30 30 30 30 30 30 30 30 30 30 31 72 65 6d 3b 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 61 73 73 65 74 73 2f 6a 71 75 65 72 79 2f 64 69 73 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: <!DOCTYPE html><html dir="ltr" base="en" class="is-desktop js-global-newsflash-visible" style="--vh: 0.7030000000000001rem;" lang="en"> <head> <script type="text/javascript" src="assets/jquery/dist/jquery.min.js"></script> <script type="te
2024-09-29 00:09:20 UTC	5424	IN	Data Raw: 74 65 72 2d 2d 73 69 74 65 6d 61 70 2d 73 65 63 74 69 6f 6e 20 6c 2d 67 72 69 64 2d 2d 77 2d 31 30 30 70 63 2d 73 20 6c 2d 67 72 69 64 2d 2d 77 2d 35 30 70 63 2d 73 2d 6d 20 6c 2d 67 72 69 64 2d 2d 77 2d 35 30 70 63 2d 73 2d 6c 20 6c 2d 67 72 69 64 2d 2d 77 2d 35 30 70 63 2d 6d 2d 73 20 6c 2d 67 72 69 64 2d 2d 77 2d 32 35 70 63 2d 6d 2d 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 67 72 6f 75 70 2d 68 65 61 64 69 6e 67 22 3e 4c 69 6e 65 20 6f 66 20 49 6e 64 75 73 74 72 69 65 73 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 3b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 Data Ascii: ter--sitemap-section l-grid--w-100pc-s l-grid--w-50pc-s-m l-grid--w-50pc-s-l l-grid--w-50pc-m-s l-grid--w-25pc-m-m"> <li class="group-heading">Line of Industries</li> <li><a href="javascript:void(0);" class="link

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:21 UTC	615	OUT	GET /dnkdl/assets/font-awesome/css/font-awesome.min.css HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:21 UTC	252	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:21 GMT Content-Type: text/css Content-Length: 31000 Connection: close Last-Modified: Sun, 09 Apr 2017 12:29:24 GMT ETag: "58ea2924-7918" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:21 UTC	15108	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-09-29 00:09:21 UTC	15892	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 30 22 7d 2e 66 61 2d 74 6f 67 67 6c 65 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 31 22 7d 2e 66 61 2d 74 6f 67 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 32 22 7d 2e 66 61 2d 65 75 72 6f 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 75 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 33 22 7d 2e 66 61 2d 67 62 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 34 22 7d 2e 66 61 2d 64 6f 6c 6c 61 72 3a 62 65 66 6f 72 Data Ascii: before{content:"\f150"}.fa-toggle-up:before,.fa-caret-square-o-up:before{content:"\f151"}.fa-toggle-right:before,.fa-caret-square-o-right:before{content:"\f152"}.fa-euro:before,.fa-eur:before{content:"\f153"}.fa-gbp:before{content:"\f154"}.fa-dollar:befor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:21 UTC	591	OUT	GET /dnkdl/assets/core_form.css HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:21 UTC	251	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:21 GMT Content-Type: text/css Content-Length: 4601 Connection: close Last-Modified: Sat, 23 May 2020 03:38:50 GMT ETag: "5ec89aca-11f9" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:21 UTC	4601	IN	Data Raw: 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 5f 65 72 72 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 7b 7d 0a 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 68 61 73 5f 65 72 72 20 7b 7d 0a 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 5f 65 72 72 20 6c 61 62 65 6c 20 7b 7d 0a 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 5f 65 72 72 20 2e 65 72 72 5f 73 70 61 6e 20 7b 7d 0a 0a 0a 0a 0a 2e 73 63 75 6d 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 2f 2a 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 2a 2f 0a 7d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 63 75 6d 73 5f 68 69 64 65 20 7b 0a 20 20 20 20 30 25 20 7b Data Ascii: .form-group.has_err .form-control {}.form-control.has_err {}.form-group.has_err label {}.form-group.has_err .err_span {}.scum_container { position: relative; /* overflow: hidden; */}@-webkit-keyframes scums_hide { 0% {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:21 UTC	588	OUT	GET /dnkdl/assets/bundle.css HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:21 UTC	254	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:21 GMT Content-Type: text/css Content-Length: 879286 Connection: close Last-Modified: Sat, 08 Jul 2023 03:09:30 GMT ETag: "64a8d36a-d6ab6" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:21 UTC	15106	IN	Data Raw: 0d 0a 2a 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 62 65 66 6f 72 65 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 61 66 74 65 72 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 70 61 64 64 69 6e 67 2d 73 74 61 72 74 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 6f 75 Data Ascii: * { -webkit-margin-before: 0; -webkit-margin-after: 0; -webkit-margin-start: 0; -webkit-margin-end: 0; -webkit-padding-start: 0; -webkit-tap-highlight-color: transparent; box-sizing: border-box; margin: 0; ou
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 6c 2d 67 72 69 64 2d 2d 77 2d 61 75 74 6f 2d 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 6c 2d 67 72 69 64 2d 2d 77 2d 31 30 70 63 2d 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 31 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 Data Ascii: max-width: none; width: auto; } .l-grid--w-auto-m { flex-basis: 0; flex-grow: 1; max-width: 100%; } .l-grid--w-10pc-m { flex-basis: 10%; max-width: 10%; width: 10
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 20 20 7d 0d 0a 20 20 20 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 2d 2d 63 61 6d 70 61 69 67 6e 2c 0d 0a 20 20 20 20 2e 6c 65 66 74 2d 61 6c 69 67 6e 65 64 2d 67 72 69 64 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 72 65 6d 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 6c 65 66 74 2d 61 6c 69 67 6e 65 64 2d 67 72 69 64 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 74 6f 70 2d 6d 61 72 67 69 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 37 72 65 6d 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 2d 2d 63 61 6d 70 61 69 67 6e 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 6d 61 72 67 69 6e 20 7b 0d 0a 20 Data Ascii: } .component-margin--campaign, .left-aligned-grid .component-margin { margin-bottom: 7rem; } .left-aligned-grid .component-top-margin { margin-top: 7rem; } .component-margin--campaign.component-margin {
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 20 7b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 32 2e 35 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 38 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 20 7b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 38 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 Data Ascii: dColumn--default--1 { clear: none; float: left; width: 12.5%;}.aem-Grid.aem-Grid--8 > .aem-GridColumn.aem-GridColumn--default--2 { clear: none; float: left; width: 25%;}.aem-Grid.aem-Grid--8 > .aem-GridColumn.aem-Grid
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 39 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 31 2e 38 31 38 31 38 31 38 32 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 30 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 30 2e 39 30 39 30 39 30 39 31 25 3b 0d 0a 7d 0d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 Data Ascii: Grid.aem-Grid--11 > .aem-GridColumn.aem-GridColumn--offset--default--9 { margin-left: 81.81818182%;}.aem-Grid.aem-Grid--11 > .aem-GridColumn.aem-GridColumn--offset--default--10 { margin-left: 90.90909091%;}.aem-Grid.aem-Grid--11 > .aem-G
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 34 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 Data Ascii: .aem-GridColumn--offset--tablet--4 { margin-left: 100%; } .aem-Grid.aem-Grid--5 > .aem-GridColumn.aem-GridColumn--tablet--1 { clear: none; float: left; width: 20%; } .aem-Grid.aem-Grid--5 > .aem-Grid
2024-09-29 00:09:22 UTC	16384	IN	Data Raw: 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 37 2e 37 37 37 37 37 37 37 38 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 39 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 38 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 38 2e 38 38 38 38 38 38 38 39 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 39 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f Data Ascii: t: left; width: 77.77777778%; } .aem-Grid.aem-Grid--9 > .aem-GridColumn.aem-GridColumn--tablet--8 { clear: none; float: left; width: 88.88888889%; } .aem-Grid.aem-Grid--9 > .aem-GridColumn.aem-GridCo
2024-09-29 00:09:22 UTC	16384	IN	Data Raw: 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 31 31 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 31 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 32 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a Data Ascii: .aem-Grid.aem-Grid--tablet--11 > .aem-GridColumn.aem-GridColumn--offset--tablet--11 { margin-left: 100%; } .aem-Grid.aem-Grid--12 > .aem-GridColumn.aem-GridColumn--tablet--1 { clear: none; float: left; width:
2024-09-29 00:09:22 UTC	1024	IN	Data Raw: 74 3a 20 34 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 36 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 35 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 34 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 30 25 3b 0d 0a 20 20 20 20 Data Ascii: t: 40%; } .aem-Grid.aem-Grid--phone--5 > .aem-GridColumn.aem-GridColumn--offset--phone--3 { margin-left: 60%; } .aem-Grid.aem-Grid--phone--5 > .aem-GridColumn.aem-GridColumn--offset--phone--4 { margin-left: 80%;
2024-09-29 00:09:22 UTC	16384	IN	Data Raw: 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 70 68 6f 6e 65 2d 2d 35 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 36 20 3e 20 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 70 68 6f 6e 65 2d 2d 36 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d Data Ascii: mn.aem-GridColumn--phone--5 { clear: none; float: left; width: 83.33333333%; } .aem-Grid.aem-Grid--6 > .aem-GridColumn.aem-GridColumn--phone--6 { clear: none; float: left; width: 100%; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:21 UTC	589	OUT	GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:21 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:21 GMT Content-Type: application/javascript Content-Length: 86659 Connection: close Last-Modified: Mon, 05 Jun 2017 11:55:06 GMT ETag: "5935469a-15283" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:21 UTC	15093	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 67 61 2e 61 74 74 72 28 64 2c 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 21 3d 22 3d 3d 3d 62 3a 21 62 7c 7c 28 65 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 62 3f 65 3d 3d 3d 63 3a 22 21 3d 22 3d 3d 3d 62 3f 65 21 3d 3d 63 3a 22 5e 3d 22 3d 3d 3d 62 3f 63 26 26 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 63 29 3a 22 2a 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 69 6e 64 65 78 4f 66 28 63 29 3e 2d 31 3a 22 24 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 73 6c 69 63 65 28 2d 63 2e 6c 65 6e 67 74 68 29 Data Ascii: etAttribute&&a.getAttribute("class")\|\|"")})},ATTR:function(a,b,c){return function(d){var e=ga.attr(d,a);return null==e?"!="===b:!b\|\|(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 6a 65 63 74 29 3b 72 65 74 75 72 6e 20 67 2e 70 72 6f 6d 69 73 65 28 29 7d 7d 29 3b 76 61 72 20 51 3d 2f 5e 28 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 29 45 72 72 6f 72 24 2f 3b 72 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 63 6f 6e 73 6f 6c 65 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 62 26 26 51 2e 74 65 73 74 28 62 2e 6e 61 6d 65 29 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 62 2e 6d 65 73 73 61 67 65 2c 62 2e 73 74 61 63 6b 2c 63 29 7d 2c 72 2e 72 65 61 64 79 45 78 63 65 70 Data Ascii: ject);return g.promise()}});var Q=/^(Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI)Error$/;r.Deferred.exceptionHook=function(b,c){a.console&&a.console.warn&&b&&Q.test(b.name)&&a.console.warn("jQuery.Deferred exception: "+b.message,b.stack,c)},r.readyExcep
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 22 22 29 26 26 21 57 2e 61 63 63 65 73 73 28 6a 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 6b 2c 6a 29 26 26 28 6a 2e 73 72 63 3f 72 2e 5f 65 76 61 6c 55 72 6c 26 26 72 2e 5f 65 76 61 6c 55 72 6c 28 6a 2e 73 72 63 29 3a 70 28 6a 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 44 61 2c 22 22 29 2c 6b 29 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 62 3f 72 2e 66 69 6c 74 65 72 28 62 2c 61 29 3a 61 2c 66 3d 30 3b 6e 75 6c 6c 21 3d 28 64 3d 65 5b 66 5d 29 3b 66 2b 2b 29 63 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 72 2e 63 6c 65 61 6e 44 61 74 61 28 6e 61 28 64 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 Data Ascii: "")&&!W.access(j,"globalEval")&&r.contains(k,j)&&(j.src?r._evalUrl&&r._evalUrl(j.src):p(j.textContent.replace(Da,""),k))}return a}function Ka(a,b,c){for(var d,e=b?r.filter(b,a):a,f=0;null!=(d=e[f]);f++)c\|\|1!==d.nodeType\|\|r.cleanData(na(d)),d.parentNode&&(
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 61 6c 75 65 26 26 22 72 61 64 69 6f 22 3d 3d 3d 62 26 26 42 28 61 2c 22 69 6e 70 75 74 22 29 29 7b 76 61 72 20 63 3d 61 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 62 29 2c 63 26 26 28 61 2e 76 61 6c 75 65 3d 63 29 2c 62 7d 7d 7d 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 62 26 26 62 2e 6d 61 74 63 68 28 4c 29 3b 69 66 28 65 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 63 3d 65 5b 64 2b 2b 5d 29 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 63 29 7d 7d 29 2c 6c 62 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 21 31 3f 72 2e 72 65 6d 6f Data Ascii: alue&&"radio"===b&&B(a,"input")){var c=a.value;return a.setAttribute("type",b),c&&(a.value=c),b}}}},removeAttr:function(a,b){var c,d=0,e=b&&b.match(L);if(e&&1===a.nodeType)while(c=e[d++])a.removeAttribute(c)}}),lb={set:function(a,b,c){return b===!1?r.remo
2024-09-29 00:09:21 UTC	6030	IN	Data Raw: 74 3a 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 2c 68 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 29 7d 7d 2c 68 2e 6f 6e 6c 6f 61 64 3d 63 28 29 2c 64 3d 68 2e 6f 6e 65 72 72 6f 72 3d 63 28 22 65 72 72 6f 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 68 2e 6f 6e 61 62 6f 72 74 3f 68 2e 6f 6e 61 62 6f 72 74 3d 64 3a 68 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 68 2e 72 65 61 64 79 53 74 61 74 65 26 26 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 26 26 64 28 29 7d 29 7d 2c 63 3d 63 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 68 2e 73 65 6e 64 28 62 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 62 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 Data Ascii: t:h.responseText},h.getAllResponseHeaders()))}},h.onload=c(),d=h.onerror=c("error"),void 0!==h.onabort?h.onabort=d:h.onreadystatechange=function(){4===h.readyState&&a.setTimeout(function(){c&&d()})},c=c("abort");try{h.send(b.hasContent&&b.data\|\|null)}catc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:21 UTC	598	OUT	GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:21 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:21 GMT Content-Type: application/javascript Content-Length: 17048 Connection: close Last-Modified: Thu, 12 Oct 2017 16:16:24 GMT ETag: "59df9558-4298" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:21 UTC	15094	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 55 41 50 61 72 73 65 72 2e 6a 73 20 76 30 2e 37 2e 31 37 0a 20 2a 20 4c 69 67 68 74 77 65 69 67 68 74 20 4a 61 76 61 53 63 72 69 70 74 2d 62 61 73 65 64 20 55 73 65 72 2d 41 67 65 6e 74 20 73 74 72 69 6e 67 20 70 61 72 73 65 72 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 69 73 61 6c 6d 61 6e 2f 75 61 2d 70 61 72 73 65 72 2d 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 32 2d 32 30 31 36 20 46 61 69 73 61 6c 20 53 61 6c 6d 61 6e 20 3c 66 79 7a 6c 6d 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 3e 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 20 26 20 4d 49 54 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 75 6e 64 65 66 69 6e Data Ascii: /** * UAParser.js v0.7.17 * Lightweight JavaScript-based User-Agent string parser * https://github.com/faisalman/ua-parser-js * * Copyright 2012-2016 Faisal Salman <fyzlman@gmail.com> * Dual licensed under GPLv2 & MIT */(function(window,undefin
2024-09-29 00:09:21 UTC	1954	IN	Data Raw: 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 45 4d 50 54 59 29 3b 76 61 72 20 72 67 78 6d 61 70 3d 65 78 74 65 6e 73 69 6f 6e 73 3f 75 74 69 6c 2e 65 78 74 65 6e 64 28 72 65 67 65 78 65 73 2c 65 78 74 65 6e 73 69 6f 6e 73 29 3a 72 65 67 65 78 65 73 3b 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 72 6f 77 73 65 72 3d 7b 6e 61 6d 65 3a 75 6e 64 65 66 69 6e 65 64 2c 76 65 72 73 69 6f 6e 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 6d 61 70 70 65 72 2e 72 67 78 2e 63 61 6c 6c 28 62 72 6f 77 73 65 72 2c 75 61 2c 72 67 78 6d 61 70 2e 62 72 6f 77 73 65 72 29 3b 62 72 6f 77 73 65 72 2e 6d 61 6a 6f 72 3d 75 74 69 6c 2e 6d 61 6a 6f 72 28 62 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 29 3b 72 65 74 75 72 6e 20 62 72 6f 77 73 65 72 Data Ascii: or.userAgent:EMPTY);var rgxmap=extensions?util.extend(regexes,extensions):regexes;this.getBrowser=function(){var browser={name:undefined,version:undefined};mapper.rgx.call(browser,ua,rgxmap.browser);browser.major=util.major(browser.version);return browser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:21 UTC	586	OUT	GET /dnkdl/assets/angular/angular.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:21 UTC	268	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:21 GMT Content-Type: application/javascript Content-Length: 168828 Connection: close Last-Modified: Fri, 18 Aug 2017 22:37:28 GMT ETag: "59976c28-2937c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:21 UTC	15092	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 36 2e 36 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 37 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6f 65 28 61 29 7b 69 66 28 45 28 61 29 29 74 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 4c 63 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 55 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4c 63 7d 66 75 6e 63 74 69 6f 6e 20 55 62 28 61 29 7b 72 65 74 75 72 6e Data Ascii: /* AngularJS v1.6.6 (c) 2010-2017 Google, Inc. http://angularjs.org License: MIT*/(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 2c 62 29 7b 76 61 72 20 64 3d 61 2e 6e 67 33 33 39 2c 64 3d 64 26 26 6b 62 5b 64 5d 3b 62 26 26 21 64 26 26 28 61 2e 6e 67 33 33 39 3d 64 3d 2b 2b 67 67 2c 64 3d 6b 62 5b 64 5d 3d 7b 65 76 65 6e 74 73 3a 7b 7d 2c 64 61 74 61 3a 7b 7d 2c 68 61 6e 64 6c 65 3a 76 6f 69 64 20 30 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 6c 63 28 61 2c 62 2c 64 29 7b 69 66 28 66 63 28 61 29 29 7b 76 61 72 20 63 2c 65 3d 74 28 64 29 2c 66 3d 21 65 26 26 62 26 26 21 45 28 62 29 2c 67 3d 21 62 3b 61 3d 28 61 3d 41 62 28 61 2c 21 66 29 29 26 26 61 2e 64 61 74 61 3b 69 66 28 65 29 61 5b 79 62 28 62 29 5d 3d 64 3b 65 6c 73 65 7b 69 66 28 67 29 72 65 74 75 72 6e 20 61 3b 69 66 28 66 29 72 65 74 75 72 6e 20 61 26 26 61 5b 79 62 28 62 29 5d 3b 66 6f 72 28 63 20 69 Data Ascii: ,b){var d=a.ng339,d=d&&kb[d];b&&!d&&(a.ng339=d=++gg,d=kb[d]={events:{},data:{},handle:void 0});return d}function lc(a,b,d){if(fc(a)){var c,e=t(d),f=!e&&b&&!E(b),g=!b;a=(a=Ab(a,!f))&&a.data;if(e)a[yb(b)]=d;else{if(g)return a;if(f)return a&&a[yb(b)];for(c i
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 75 69 72 65 3b 61 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 61 3d 75 61 28 61 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 68 2e 70 75 73 68 28 61 29 7d 69 66 28 62 29 7b 63 26 26 28 62 3d 55 28 62 2c 63 2c 64 29 29 3b 62 2e 72 65 71 75 69 72 65 3d 78 2e 72 65 71 75 69 72 65 3b 62 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 62 3d 75 61 28 62 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 6b 2e 70 75 73 68 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 65 2c 67 2c 66 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 Data Ascii: uire;a.directiveName=W;if(K===x\|\|x.$$isolateScope)a=ua(a,{isolateScope:!0});h.push(a)}if(b){c&&(b=U(b,c,d));b.require=x.require;b.directiveName=W;if(K===x\|\|x.$$isolateScope)b=ua(b,{isolateScope:!0});k.push(b)}}function q(a,e,g,f,l){function m(a,b,c,d){var
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 6f 72 22 2c 22 24 73 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 66 2c 67 2c 6b 2c 68 2c 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 65 3b 29 7b 76 61 72 20 67 3d 62 5b 63 2b 2b 5d 2c 66 3d 62 5b 63 2b 2b 5d 3b 61 3d 61 2e 74 68 65 6e 28 67 2c 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 7b 7d 3b 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 41 28 61 29 3f 28 63 3d 61 28 62 29 2c 6e 75 6c 6c 21 3d 63 26 26 28 64 5b 65 5d 3d 63 29 29 3a 64 5b 65 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f Data Ascii: or","$sce",function(c,e,f,g,k,h,l,m){function n(b){function d(a,b){for(var c=0,e=b.length;c<e;){var g=b[c++],f=b[c++];a=a.then(g,f)}b.length=0;return a}function e(a,b){var c,d={};p(a,function(a,e){A(a)?(c=a(b),null!=c&&(d[e]=c)):d[e]=a});return d}functio
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 6b 2c 6c 5b 63 5d 3d 6b 26 26 79 63 28 6b 29 7d 62 26 26 28 68 3d 64 28 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6d 29 29 3b 72 65 74 75 72 6e 20 68 7d 2c 62 2c 63 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 0a 63 2c 64 29 7b 6c 3d 61 3b 41 28 62 29 26 26 62 28 61 2c 63 2c 64 29 3b 74 28 61 29 26 26 64 2e 24 24 70 6f 73 74 44 69 67 65 73 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6c 29 26 26 6b 28 29 7d 29 7d 76 61 72 20 6b 2c 6c 3b 72 65 74 75 72 6e 20 6b 3d 64 2e 69 6e 70 75 74 73 3f 67 28 61 2c 68 2c 63 2c 64 2c 65 29 3a 61 2e 24 77 61 74 63 68 28 66 2c 68 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: k,l[c]=k&&yc(k)}b&&(h=d(a,void 0,void 0,m));return h},b,c,e)}function k(a,b,c,d,e){function f(a){return d(a)}function h(a,c,d){l=a;A(b)&&b(a,c,d);t(a)&&d.$$postDigest(function(){t(l)&&k()})}var k,l;return k=d.inputs?g(a,h,c,d,e):a.$watch(f,h,c)}function
2024-09-29 00:09:21 UTC	16384	IN	Data Raw: 73 6f 6c 76 65 28 66 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6d 29 29 7d 63 61 74 63 68 28 62 29 7b 71 2e 72 65 6a 65 63 74 28 62 29 2c 65 28 62 29 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 67 5b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 7d 6e 7c 7c 0a 61 2e 24 61 70 70 6c 79 28 29 7d 2c 68 29 3b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 3d 72 3b 67 5b 72 5d 3d 71 3b 72 65 74 75 72 6e 20 70 7d 76 61 72 20 67 3d 7b 7d 3b 66 2e 63 61 6e 63 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 20 69 6e 20 67 3f 28 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 70 72 6f 6d 69 73 65 2e 24 24 73 74 61 74 65 2e 70 75 72 3d 21 30 2c 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 72 65 6a 65 63 74 Data Ascii: solve(f.apply(null,m))}catch(b){q.reject(b),e(b)}finally{delete g[p.$$timeoutId]}n\|\|a.$apply()},h);p.$$timeoutId=r;g[r]=q;return p}var g={};f.cancel=function(a){return a&&a.$$timeoutId in g?(g[a.$$timeoutId].promise.$$state.pur=!0,g[a.$$timeoutId].reject
2024-09-29 00:09:22 UTC	16384	IN	Data Raw: 65 7d 2c 75 65 3d 2f 3a 2f 67 2c 0a 48 61 3d 5b 22 6e 67 2d 22 2c 22 64 61 74 61 2d 6e 67 2d 22 2c 22 6e 67 3a 22 2c 22 78 2d 6e 67 2d 22 5d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 21 62 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 7c 7c 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 53 56 47 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 21 31 3b 62 3d 62 2e 61 74 74 72 69 62 75 74 65 73 3b 72 65 74 75 72 6e 5b 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 73 72 63 22 29 2c 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 68 72 65 66 22 29 2c 62 2e 67 65 74 4e 61 Data Ascii: e},ue=/:/g,Ha=["ng-","data-ng-","ng:","x-ng-"],xe=function(a){var b=a.currentScript;if(!b)return!0;if(!(b instanceof u.HTMLScriptElement\|\|b instanceof u.SVGScriptElement))return!1;b=b.attributes;return[b.getNamedItem("src"),b.getNamedItem("href"),b.getNa
2024-09-29 00:09:22 UTC	16384	IN	Data Raw: 68 2d 31 29 29 61 2b 3d 64 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 69 73 45 78 70 4f 70 65 72 61 74 6f 72 28 64 29 7c 7c 0a 63 26 26 74 68 69 73 2e 69 73 4e 75 6d 62 65 72 28 63 29 7c 7c 22 65 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 29 62 72 65 61 6b 3b 65 6c 73 65 20 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 6f 6e 65 6e 74 22 29 7d 74 68 69 73 2e 69 6e 64 65 78 2b 2b 7d 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 7b 69 6e 64 65 78 3a 62 2c 74 65 78 74 3a 61 2c 63 6f 6e 73 74 61 6e 74 3a 21 30 2c 76 61 6c 75 65 3a 4e 75 6d 62 65 72 28 61 29 7d 29 7d 2c 72 65 61 64 49 64 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 69 6e 64 65 78 3b 66 6f Data Ascii: h-1))a+=d;else if(!this.isExpOperator(d)\|\|c&&this.isNumber(c)\|\|"e"!==a.charAt(a.length-1))break;else this.throwError("Invalid exponent")}this.index++}this.tokens.push({index:b,text:a,constant:!0,value:Number(a)})},readIdent:function(){var a=this.index;fo
2024-09-29 00:09:22 UTC	16384	IN	Data Raw: 66 7d 3a 66 7d 3b 63 61 73 65 20 72 2e 4f 62 6a 65 63 74 45 78 70 72 65 73 73 69 6f 6e 3a 72 65 74 75 72 6e 20 67 3d 5b 5d 2c 70 28 61 2e 70 72 6f 70 65 72 74 69 65 73 2c 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 6f 6d 70 75 74 65 64 3f 67 2e 70 75 73 68 28 7b 6b 65 79 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 6b 65 79 29 2c 63 6f 6d 70 75 74 65 64 3a 21 30 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 3a 67 2e 70 75 73 68 28 7b 6b 65 79 3a 61 2e 6b 65 79 2e 74 79 70 65 3d 3d 3d 72 2e 49 64 65 6e 74 69 66 69 65 72 3f 61 2e 6b 65 79 2e 6e 61 6d 65 3a 22 22 2b 61 2e 6b 65 79 2e 76 61 6c 75 65 2c 63 6f 6d 70 75 74 65 64 3a 21 31 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 7d 29 2c 66 Data Ascii: f}:f};case r.ObjectExpression:return g=[],p(a.properties,function(a){a.computed?g.push({key:f.recurse(a.key),computed:!0,value:f.recurse(a.value)}):g.push({key:a.key.type===r.Identifier?a.key.name:""+a.key.value,computed:!1,value:f.recurse(a.value)})}),f
2024-09-29 00:09:22 UTC	16384	IN	Data Raw: 6a 65 63 74 3d 22 24 73 63 6f 70 65 20 24 65 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 20 24 61 74 74 72 73 20 24 65 6c 65 6d 65 6e 74 20 24 70 61 72 73 65 20 24 61 6e 69 6d 61 74 65 20 24 74 69 6d 65 6f 75 74 20 24 71 20 24 69 6e 74 65 72 70 6f 6c 61 74 65 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 0a 51 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 24 24 69 6e 69 74 47 65 74 74 65 72 53 65 74 74 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 24 6f 70 74 69 6f 6e 73 2e 67 65 74 4f 70 74 69 6f 6e 28 22 67 65 74 74 65 72 53 65 74 74 65 72 22 29 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e 24 24 61 74 74 72 2e 6e 67 4d 6f 64 65 6c 2b 22 28 29 22 29 2c 62 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e Data Ascii: ject="$scope $exceptionHandler $attrs $element $parse $animate $timeout $q $interpolate".split(" ");Qb.prototype={$$initGetterSetters:function(){if(this.$options.getOption("getterSetter")){var a=this.$$parse(this.$$attr.ngModel+"()"),b=this.$$parse(this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:09:21 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=146141 Date: Sun, 29 Sep 2024 00:09:21 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:22 UTC	576	OUT	GET /dnkdl/assets/core_form.js HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:22 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:22 GMT Content-Type: application/javascript Content-Length: 2307 Connection: close Last-Modified: Thu, 06 Jul 2023 21:10:36 GMT ETag: "64a72dcc-903" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:22 UTC	2307	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 2f 2f 20 20 20 20 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 5f 5f 20 77 61 69 74 65 72 5f 5f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 77 61 69 74 65 72 5f 68 32 22 3e 50 6c 65 61 73 65 20 77 61 69 74 2e 2e 2e 3c 2f 68 32 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 69 6d 61 67 65 73 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() {// $('<div class="loader__ waiter__" style="display:none">\// <div class="loader-box">\// <h2 class="waiter_h2">Please wait...</h2>\// <div class="loader-images-box">\//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:22 UTC	424	OUT	GET /dnkdl/assets/ua-parser-js/dist/ua-parser.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:22 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:22 GMT Content-Type: application/javascript Content-Length: 17048 Connection: close Last-Modified: Thu, 12 Oct 2017 16:16:24 GMT ETag: "59df9558-4298" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:22 UTC	15094	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 55 41 50 61 72 73 65 72 2e 6a 73 20 76 30 2e 37 2e 31 37 0a 20 2a 20 4c 69 67 68 74 77 65 69 67 68 74 20 4a 61 76 61 53 63 72 69 70 74 2d 62 61 73 65 64 20 55 73 65 72 2d 41 67 65 6e 74 20 73 74 72 69 6e 67 20 70 61 72 73 65 72 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 69 73 61 6c 6d 61 6e 2f 75 61 2d 70 61 72 73 65 72 2d 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 32 2d 32 30 31 36 20 46 61 69 73 61 6c 20 53 61 6c 6d 61 6e 20 3c 66 79 7a 6c 6d 61 6e 40 67 6d 61 69 6c 2e 63 6f 6d 3e 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 20 26 20 4d 49 54 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 2c 75 6e 64 65 66 69 6e Data Ascii: /** * UAParser.js v0.7.17 * Lightweight JavaScript-based User-Agent string parser * https://github.com/faisalman/ua-parser-js * * Copyright 2012-2016 Faisal Salman <fyzlman@gmail.com> * Dual licensed under GPLv2 & MIT */(function(window,undefin
2024-09-29 00:09:22 UTC	1954	IN	Data Raw: 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 45 4d 50 54 59 29 3b 76 61 72 20 72 67 78 6d 61 70 3d 65 78 74 65 6e 73 69 6f 6e 73 3f 75 74 69 6c 2e 65 78 74 65 6e 64 28 72 65 67 65 78 65 73 2c 65 78 74 65 6e 73 69 6f 6e 73 29 3a 72 65 67 65 78 65 73 3b 74 68 69 73 2e 67 65 74 42 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 72 6f 77 73 65 72 3d 7b 6e 61 6d 65 3a 75 6e 64 65 66 69 6e 65 64 2c 76 65 72 73 69 6f 6e 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 6d 61 70 70 65 72 2e 72 67 78 2e 63 61 6c 6c 28 62 72 6f 77 73 65 72 2c 75 61 2c 72 67 78 6d 61 70 2e 62 72 6f 77 73 65 72 29 3b 62 72 6f 77 73 65 72 2e 6d 61 6a 6f 72 3d 75 74 69 6c 2e 6d 61 6a 6f 72 28 62 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 29 3b 72 65 74 75 72 6e 20 62 72 6f 77 73 65 72 Data Ascii: or.userAgent:EMPTY);var rgxmap=extensions?util.extend(regexes,extensions):regexes;this.getBrowser=function(){var browser={name:undefined,version:undefined};mapper.rgx.call(browser,ua,rgxmap.browser);browser.major=util.major(browser.version);return browser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:09:22 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=146170 Date: Sun, 29 Sep 2024 00:09:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:09:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:22 UTC	633	OUT	GET /dnkdl/img/dhl-logo.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:23 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:22 GMT Content-Type: image/svg+xml Content-Length: 1603 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-643" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:23 UTC	1603	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 45 62 65 6e 65 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:22 UTC	636	OUT	GET /dnkdl/img/youtube-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:23 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:22 GMT Content-Type: image/svg+xml Content-Length: 1412 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-584" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:23 UTC	1412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:23 UTC	415	OUT	GET /dnkdl/assets/jquery/dist/jquery.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:23 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:23 GMT Content-Type: application/javascript Content-Length: 86659 Connection: close Last-Modified: Mon, 05 Jun 2017 11:55:06 GMT ETag: "5935469a-15283" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:23 UTC	15093	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 67 61 2e 61 74 74 72 28 64 2c 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 21 3d 22 3d 3d 3d 62 3a 21 62 7c 7c 28 65 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 62 3f 65 3d 3d 3d 63 3a 22 21 3d 22 3d 3d 3d 62 3f 65 21 3d 3d 63 3a 22 5e 3d 22 3d 3d 3d 62 3f 63 26 26 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 63 29 3a 22 2a 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 69 6e 64 65 78 4f 66 28 63 29 3e 2d 31 3a 22 24 3d 22 3d 3d 3d 62 3f 63 26 26 65 2e 73 6c 69 63 65 28 2d 63 2e 6c 65 6e 67 74 68 29 Data Ascii: etAttribute&&a.getAttribute("class")\|\|"")})},ATTR:function(a,b,c){return function(d){var e=ga.attr(d,a);return null==e?"!="===b:!b\|\|(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 6a 65 63 74 29 3b 72 65 74 75 72 6e 20 67 2e 70 72 6f 6d 69 73 65 28 29 7d 7d 29 3b 76 61 72 20 51 3d 2f 5e 28 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 29 45 72 72 6f 72 24 2f 3b 72 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 63 6f 6e 73 6f 6c 65 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 62 26 26 51 2e 74 65 73 74 28 62 2e 6e 61 6d 65 29 26 26 61 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 62 2e 6d 65 73 73 61 67 65 2c 62 2e 73 74 61 63 6b 2c 63 29 7d 2c 72 2e 72 65 61 64 79 45 78 63 65 70 Data Ascii: ject);return g.promise()}});var Q=/^(Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI)Error$/;r.Deferred.exceptionHook=function(b,c){a.console&&a.console.warn&&b&&Q.test(b.name)&&a.console.warn("jQuery.Deferred exception: "+b.message,b.stack,c)},r.readyExcep
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 22 22 29 26 26 21 57 2e 61 63 63 65 73 73 28 6a 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 6b 2c 6a 29 26 26 28 6a 2e 73 72 63 3f 72 2e 5f 65 76 61 6c 55 72 6c 26 26 72 2e 5f 65 76 61 6c 55 72 6c 28 6a 2e 73 72 63 29 3a 70 28 6a 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 44 61 2c 22 22 29 2c 6b 29 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 62 3f 72 2e 66 69 6c 74 65 72 28 62 2c 61 29 3a 61 2c 66 3d 30 3b 6e 75 6c 6c 21 3d 28 64 3d 65 5b 66 5d 29 3b 66 2b 2b 29 63 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 72 2e 63 6c 65 61 6e 44 61 74 61 28 6e 61 28 64 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 Data Ascii: "")&&!W.access(j,"globalEval")&&r.contains(k,j)&&(j.src?r._evalUrl&&r._evalUrl(j.src):p(j.textContent.replace(Da,""),k))}return a}function Ka(a,b,c){for(var d,e=b?r.filter(b,a):a,f=0;null!=(d=e[f]);f++)c\|\|1!==d.nodeType\|\|r.cleanData(na(d)),d.parentNode&&(
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 61 6c 75 65 26 26 22 72 61 64 69 6f 22 3d 3d 3d 62 26 26 42 28 61 2c 22 69 6e 70 75 74 22 29 29 7b 76 61 72 20 63 3d 61 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 62 29 2c 63 26 26 28 61 2e 76 61 6c 75 65 3d 63 29 2c 62 7d 7d 7d 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 62 26 26 62 2e 6d 61 74 63 68 28 4c 29 3b 69 66 28 65 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 77 68 69 6c 65 28 63 3d 65 5b 64 2b 2b 5d 29 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 63 29 7d 7d 29 2c 6c 62 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 21 31 3f 72 2e 72 65 6d 6f Data Ascii: alue&&"radio"===b&&B(a,"input")){var c=a.value;return a.setAttribute("type",b),c&&(a.value=c),b}}}},removeAttr:function(a,b){var c,d=0,e=b&&b.match(L);if(e&&1===a.nodeType)while(c=e[d++])a.removeAttribute(c)}}),lb={set:function(a,b,c){return b===!1?r.remo
2024-09-29 00:09:23 UTC	6030	IN	Data Raw: 74 3a 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 2c 68 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 29 7d 7d 2c 68 2e 6f 6e 6c 6f 61 64 3d 63 28 29 2c 64 3d 68 2e 6f 6e 65 72 72 6f 72 3d 63 28 22 65 72 72 6f 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 68 2e 6f 6e 61 62 6f 72 74 3f 68 2e 6f 6e 61 62 6f 72 74 3d 64 3a 68 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 68 2e 72 65 61 64 79 53 74 61 74 65 26 26 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 26 26 64 28 29 7d 29 7d 2c 63 3d 63 28 22 61 62 6f 72 74 22 29 3b 74 72 79 7b 68 2e 73 65 6e 64 28 62 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 62 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 Data Ascii: t:h.responseText},h.getAllResponseHeaders()))}},h.onload=c(),d=h.onerror=c("error"),void 0!==h.onabort?h.onabort=d:h.onreadystatechange=function(){4===h.readyState&&a.setTimeout(function(){c&&d()})},c=c("abort");try{h.send(b.hasContent&&b.data\|\|null)}catc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:23 UTC	412	OUT	GET /dnkdl/assets/angular/angular.min.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:23 UTC	268	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:23 GMT Content-Type: application/javascript Content-Length: 168828 Connection: close Last-Modified: Fri, 18 Aug 2017 22:37:28 GMT ETag: "59976c28-2937c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:23 UTC	15092	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 36 2e 36 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 37 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6f 65 28 61 29 7b 69 66 28 45 28 61 29 29 74 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 26 26 28 4c 63 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3d 55 62 28 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 29 3f 61 2e 6f 62 6a 65 63 74 4d 61 78 44 65 70 74 68 3a 4e 61 4e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4c 63 7d 66 75 6e 63 74 69 6f 6e 20 55 62 28 61 29 7b 72 65 74 75 72 6e Data Ascii: /* AngularJS v1.6.6 (c) 2010-2017 Google, Inc. http://angularjs.org License: MIT*/(function(u){'use strict';function oe(a){if(E(a))t(a.objectMaxDepth)&&(Lc.objectMaxDepth=Ub(a.objectMaxDepth)?a.objectMaxDepth:NaN);else return Lc}function Ub(a){return
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 2c 62 29 7b 76 61 72 20 64 3d 61 2e 6e 67 33 33 39 2c 64 3d 64 26 26 6b 62 5b 64 5d 3b 62 26 26 21 64 26 26 28 61 2e 6e 67 33 33 39 3d 64 3d 2b 2b 67 67 2c 64 3d 6b 62 5b 64 5d 3d 7b 65 76 65 6e 74 73 3a 7b 7d 2c 64 61 74 61 3a 7b 7d 2c 68 61 6e 64 6c 65 3a 76 6f 69 64 20 30 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 6c 63 28 61 2c 62 2c 64 29 7b 69 66 28 66 63 28 61 29 29 7b 76 61 72 20 63 2c 65 3d 74 28 64 29 2c 66 3d 21 65 26 26 62 26 26 21 45 28 62 29 2c 67 3d 21 62 3b 61 3d 28 61 3d 41 62 28 61 2c 21 66 29 29 26 26 61 2e 64 61 74 61 3b 69 66 28 65 29 61 5b 79 62 28 62 29 5d 3d 64 3b 65 6c 73 65 7b 69 66 28 67 29 72 65 74 75 72 6e 20 61 3b 69 66 28 66 29 72 65 74 75 72 6e 20 61 26 26 61 5b 79 62 28 62 29 5d 3b 66 6f 72 28 63 20 69 Data Ascii: ,b){var d=a.ng339,d=d&&kb[d];b&&!d&&(a.ng339=d=++gg,d=kb[d]={events:{},data:{},handle:void 0});return d}function lc(a,b,d){if(fc(a)){var c,e=t(d),f=!e&&b&&!E(b),g=!b;a=(a=Ab(a,!f))&&a.data;if(e)a[yb(b)]=d;else{if(g)return a;if(f)return a&&a[yb(b)];for(c i
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 75 69 72 65 3b 61 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 61 3d 75 61 28 61 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 68 2e 70 75 73 68 28 61 29 7d 69 66 28 62 29 7b 63 26 26 28 62 3d 55 28 62 2c 63 2c 64 29 29 3b 62 2e 72 65 71 75 69 72 65 3d 78 2e 72 65 71 75 69 72 65 3b 62 2e 64 69 72 65 63 74 69 76 65 4e 61 6d 65 3d 57 3b 69 66 28 4b 3d 3d 3d 78 7c 7c 78 2e 24 24 69 73 6f 6c 61 74 65 53 63 6f 70 65 29 62 3d 75 61 28 62 2c 7b 69 73 6f 6c 61 74 65 53 63 6f 70 65 3a 21 30 7d 29 3b 6b 2e 70 75 73 68 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 65 2c 67 2c 66 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 Data Ascii: uire;a.directiveName=W;if(K===x\|\|x.$$isolateScope)a=ua(a,{isolateScope:!0});h.push(a)}if(b){c&&(b=U(b,c,d));b.require=x.require;b.directiveName=W;if(K===x\|\|x.$$isolateScope)b=ua(b,{isolateScope:!0});k.push(b)}}function q(a,e,g,f,l){function m(a,b,c,d){var
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 6f 72 22 2c 22 24 73 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 66 2c 67 2c 6b 2c 68 2c 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 65 3b 29 7b 76 61 72 20 67 3d 62 5b 63 2b 2b 5d 2c 66 3d 62 5b 63 2b 2b 5d 3b 61 3d 61 2e 74 68 65 6e 28 67 2c 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 7b 7d 3b 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 41 28 61 29 3f 28 63 3d 61 28 62 29 2c 6e 75 6c 6c 21 3d 63 26 26 28 64 5b 65 5d 3d 63 29 29 3a 64 5b 65 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f Data Ascii: or","$sce",function(c,e,f,g,k,h,l,m){function n(b){function d(a,b){for(var c=0,e=b.length;c<e;){var g=b[c++],f=b[c++];a=a.then(g,f)}b.length=0;return a}function e(a,b){var c,d={};p(a,function(a,e){A(a)?(c=a(b),null!=c&&(d[e]=c)):d[e]=a});return d}functio
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 6b 2c 6c 5b 63 5d 3d 6b 26 26 79 63 28 6b 29 7d 62 26 26 28 68 3d 64 28 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6d 29 29 3b 72 65 74 75 72 6e 20 68 7d 2c 62 2c 63 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 20 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 0a 63 2c 64 29 7b 6c 3d 61 3b 41 28 62 29 26 26 62 28 61 2c 63 2c 64 29 3b 74 28 61 29 26 26 64 2e 24 24 70 6f 73 74 44 69 67 65 73 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6c 29 26 26 6b 28 29 7d 29 7d 76 61 72 20 6b 2c 6c 3b 72 65 74 75 72 6e 20 6b 3d 64 2e 69 6e 70 75 74 73 3f 67 28 61 2c 68 2c 63 2c 64 2c 65 29 3a 61 2e 24 77 61 74 63 68 28 66 2c 68 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: k,l[c]=k&&yc(k)}b&&(h=d(a,void 0,void 0,m));return h},b,c,e)}function k(a,b,c,d,e){function f(a){return d(a)}function h(a,c,d){l=a;A(b)&&b(a,c,d);t(a)&&d.$$postDigest(function(){t(l)&&k()})}var k,l;return k=d.inputs?g(a,h,c,d,e):a.$watch(f,h,c)}function
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 73 6f 6c 76 65 28 66 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6d 29 29 7d 63 61 74 63 68 28 62 29 7b 71 2e 72 65 6a 65 63 74 28 62 29 2c 65 28 62 29 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 67 5b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 7d 6e 7c 7c 0a 61 2e 24 61 70 70 6c 79 28 29 7d 2c 68 29 3b 70 2e 24 24 74 69 6d 65 6f 75 74 49 64 3d 72 3b 67 5b 72 5d 3d 71 3b 72 65 74 75 72 6e 20 70 7d 76 61 72 20 67 3d 7b 7d 3b 66 2e 63 61 6e 63 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 20 69 6e 20 67 3f 28 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 70 72 6f 6d 69 73 65 2e 24 24 73 74 61 74 65 2e 70 75 72 3d 21 30 2c 67 5b 61 2e 24 24 74 69 6d 65 6f 75 74 49 64 5d 2e 72 65 6a 65 63 74 Data Ascii: solve(f.apply(null,m))}catch(b){q.reject(b),e(b)}finally{delete g[p.$$timeoutId]}n\|\|a.$apply()},h);p.$$timeoutId=r;g[r]=q;return p}var g={};f.cancel=function(a){return a&&a.$$timeoutId in g?(g[a.$$timeoutId].promise.$$state.pur=!0,g[a.$$timeoutId].reject
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 65 7d 2c 75 65 3d 2f 3a 2f 67 2c 0a 48 61 3d 5b 22 6e 67 2d 22 2c 22 64 61 74 61 2d 6e 67 2d 22 2c 22 6e 67 3a 22 2c 22 78 2d 6e 67 2d 22 5d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 21 62 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 7c 7c 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 53 56 47 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 21 31 3b 62 3d 62 2e 61 74 74 72 69 62 75 74 65 73 3b 72 65 74 75 72 6e 5b 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 73 72 63 22 29 2c 62 2e 67 65 74 4e 61 6d 65 64 49 74 65 6d 28 22 68 72 65 66 22 29 2c 62 2e 67 65 74 4e 61 Data Ascii: e},ue=/:/g,Ha=["ng-","data-ng-","ng:","x-ng-"],xe=function(a){var b=a.currentScript;if(!b)return!0;if(!(b instanceof u.HTMLScriptElement\|\|b instanceof u.SVGScriptElement))return!1;b=b.attributes;return[b.getNamedItem("src"),b.getNamedItem("href"),b.getNa
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 68 2d 31 29 29 61 2b 3d 64 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 69 73 45 78 70 4f 70 65 72 61 74 6f 72 28 64 29 7c 7c 0a 63 26 26 74 68 69 73 2e 69 73 4e 75 6d 62 65 72 28 63 29 7c 7c 22 65 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 29 62 72 65 61 6b 3b 65 6c 73 65 20 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 65 78 70 6f 6e 65 6e 74 22 29 7d 74 68 69 73 2e 69 6e 64 65 78 2b 2b 7d 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 70 75 73 68 28 7b 69 6e 64 65 78 3a 62 2c 74 65 78 74 3a 61 2c 63 6f 6e 73 74 61 6e 74 3a 21 30 2c 76 61 6c 75 65 3a 4e 75 6d 62 65 72 28 61 29 7d 29 7d 2c 72 65 61 64 49 64 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 69 6e 64 65 78 3b 66 6f Data Ascii: h-1))a+=d;else if(!this.isExpOperator(d)\|\|c&&this.isNumber(c)\|\|"e"!==a.charAt(a.length-1))break;else this.throwError("Invalid exponent")}this.index++}this.tokens.push({index:b,text:a,constant:!0,value:Number(a)})},readIdent:function(){var a=this.index;fo
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 66 7d 3a 66 7d 3b 63 61 73 65 20 72 2e 4f 62 6a 65 63 74 45 78 70 72 65 73 73 69 6f 6e 3a 72 65 74 75 72 6e 20 67 3d 5b 5d 2c 70 28 61 2e 70 72 6f 70 65 72 74 69 65 73 2c 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 6f 6d 70 75 74 65 64 3f 67 2e 70 75 73 68 28 7b 6b 65 79 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 6b 65 79 29 2c 63 6f 6d 70 75 74 65 64 3a 21 30 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 3a 67 2e 70 75 73 68 28 7b 6b 65 79 3a 61 2e 6b 65 79 2e 74 79 70 65 3d 3d 3d 72 2e 49 64 65 6e 74 69 66 69 65 72 3f 61 2e 6b 65 79 2e 6e 61 6d 65 3a 22 22 2b 61 2e 6b 65 79 2e 76 61 6c 75 65 2c 63 6f 6d 70 75 74 65 64 3a 21 31 2c 76 61 6c 75 65 3a 66 2e 72 65 63 75 72 73 65 28 61 2e 76 61 6c 75 65 29 7d 29 7d 29 2c 66 Data Ascii: f}:f};case r.ObjectExpression:return g=[],p(a.properties,function(a){a.computed?g.push({key:f.recurse(a.key),computed:!0,value:f.recurse(a.value)}):g.push({key:a.key.type===r.Identifier?a.key.name:""+a.key.value,computed:!1,value:f.recurse(a.value)})}),f
2024-09-29 00:09:23 UTC	16384	IN	Data Raw: 6a 65 63 74 3d 22 24 73 63 6f 70 65 20 24 65 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 20 24 61 74 74 72 73 20 24 65 6c 65 6d 65 6e 74 20 24 70 61 72 73 65 20 24 61 6e 69 6d 61 74 65 20 24 74 69 6d 65 6f 75 74 20 24 71 20 24 69 6e 74 65 72 70 6f 6c 61 74 65 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 0a 51 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 24 24 69 6e 69 74 47 65 74 74 65 72 53 65 74 74 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 24 6f 70 74 69 6f 6e 73 2e 67 65 74 4f 70 74 69 6f 6e 28 22 67 65 74 74 65 72 53 65 74 74 65 72 22 29 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e 24 24 61 74 74 72 2e 6e 67 4d 6f 64 65 6c 2b 22 28 29 22 29 2c 62 3d 74 68 69 73 2e 24 24 70 61 72 73 65 28 74 68 69 73 2e Data Ascii: ject="$scope $exceptionHandler $attrs $element $parse $animate $timeout $q $interpolate".split(" ");Qb.prototype={$$initGetterSetters:function(){if(this.$options.getOption("getterSetter")){var a=this.$$parse(this.$$attr.ngModel+"()"),b=this.$$parse(this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	637	OUT	GET /dnkdl/img/facebook-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: image/svg+xml Content-Length: 1406 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-57e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	1406	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	637	OUT	GET /dnkdl/img/linkedIn-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: image/svg+xml Content-Length: 1647 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-66f" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	1647	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	638	OUT	GET /dnkdl/img/instagram-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: image/svg+xml Content-Length: 4508 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-119c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	4508	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	662	OUT	GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: image/svg+xml Content-Length: 1693 Connection: close Last-Modified: Tue, 24 May 2022 03:54:08 GMT ETag: "628c56e0-69d" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	1693	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 32 20 31 32 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 30 2e 36 63 2d 2e 31 20 30 2d 2e 31 20 30 20 30 20 30 2d 2e 34 2d 31 2e 32 2d 2e 37 2d 32 2e 34 2d 31 2d 33 2e 35 4c 33 2e 39 20 37 63 2d 2e 33 20 30 2d 2e 36 2e 31 2d 2e 38 2e 31 2d 2e 36 2e 32 2d 31 2e 32 2e 35 2d 31 2e 37 2e 39 2d 2e 36 2e 35 2d 2e 39 20 31 2e 32 2d 31 2e 32 20 32 2d 2e 31 2e 36 2d 2e 32 20 31 2e 33 2d 2e 32 20 31 2e 39 20 30 20 2e 31 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49762	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	634	OUT	GET /dnkdl/fonts/iconfont-36e40d8b4a0a369beacf.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49761	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	633	OUT	GET /dnkdl/fonts/default-274a65bae9742377aaf0.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	402	OUT	GET /dnkdl/assets/core_form.js HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: application/javascript Content-Length: 2307 Connection: close Last-Modified: Thu, 06 Jul 2023 21:10:36 GMT ETag: "64a72dcc-903" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	2307	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 2f 2f 20 20 20 20 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 5f 5f 20 77 61 69 74 65 72 5f 5f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 77 61 69 74 65 72 5f 68 32 22 3e 50 6c 65 61 73 65 20 77 61 69 74 2e 2e 2e 3c 2f 68 32 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 65 72 2d 69 6d 61 67 65 73 2d 62 6f 78 22 3e 5c 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() {// $('<div class="loader__ waiter__" style="display:none">\// <div class="loader-box">\// <h2 class="waiter_h2">Please wait...</h2>\// <div class="loader-images-box">\//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	402	OUT	GET /dnkdl/img/youtube-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: image/svg+xml Content-Length: 1412 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-584" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	1412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:24 UTC	399	OUT	GET /dnkdl/img/dhl-logo.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:24 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:24 GMT Content-Type: image/svg+xml Content-Length: 1603 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-643" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:24 UTC	1603	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 45 62 65 6e 65 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49767	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:25 UTC	633	OUT	GET /dnkdl/fonts/default-815fcbb4d2c579017011.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:25 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 00:09:25 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-29 00:09:25 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49768	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:25 UTC	633	OUT	GET /dnkdl/fonts/default-5a6dd86f272b304a8b83.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:25 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 00:09:25 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-29 00:09:25 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49766	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:25 UTC	633	OUT	GET /dnkdl/fonts/default-3e828e80f6e985c352eb.woff HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://svfs.is sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://svfs.is/dnkdl/assets/bundle.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:25 UTC	238	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 00:09:25 GMT Content-Type: text/html Content-Length: 808 Connection: close Last-Modified: Sun, 12 Mar 2023 17:15:32 GMT ETag: "328-5f6b724586ded" Accept-Ranges: bytes
2024-09-29 00:09:25 UTC	808	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>404 Not Found</title> <link rel="s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49772	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:25 UTC	403	OUT	GET /dnkdl/img/linkedIn-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:26 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:26 GMT Content-Type: image/svg+xml Content-Length: 1647 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-66f" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:26 UTC	1647	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49773	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:25 UTC	403	OUT	GET /dnkdl/img/facebook-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:26 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:26 GMT Content-Type: image/svg+xml Content-Length: 1406 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-57e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:26 UTC	1406	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49774	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:25 UTC	404	OUT	GET /dnkdl/img/instagram-new.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:26 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:26 GMT Content-Type: image/svg+xml Content-Length: 4508 Connection: close Last-Modified: Tue, 24 May 2022 02:35:28 GMT ETag: "628c4470-119c" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:26 UTC	4508	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 70 78 22 20 68 65 69 67 68 74 3d 22 34 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="42px" height="42px" viewBox="0 0 42 42" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49771	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:25 UTC	411	OUT	GET /dnkdl/img/7f0d3a9b32ad319a9dd1.svg HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:26 UTC	255	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:26 GMT Content-Type: image/svg+xml Content-Length: 1693 Connection: close Last-Modified: Tue, 24 May 2022 03:54:08 GMT ETag: "628c56e0-69d" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:26 UTC	1693	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 31 32 20 31 32 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 30 2e 36 63 2d 2e 31 20 30 2d 2e 31 20 30 20 30 20 30 2d 2e 34 2d 31 2e 32 2d 2e 37 2d 32 2e 34 2d 31 2d 33 2e 35 4c 33 2e 39 20 37 63 2d 2e 33 20 30 2d 2e 36 2e 31 2d 2e 38 2e 31 2d 2e 36 2e 32 2d 31 2e 32 2e 35 2d 31 2e 37 2e 39 2d 2e 36 2e 35 2d 2e 39 20 31 2e 32 2d 31 2e 32 20 32 2d 2e 31 2e 36 2d 2e 32 20 31 2e 33 2d 2e 32 20 31 2e 39 20 30 20 2e 31 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 12" style="enable-background:new 0 0 12 12" xml:space="preserve"><path d="M5 10.6c-.1 0-.1 0 0 0-.4-1.2-.7-2.4-1-3.5L3.9 7c-.3 0-.6.1-.8.1-.6.2-1.2.5-1.7.9-.6.5-.9 1.2-1.2 2-.1.6-.2 1.3-.2 1.9 0 .1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49775	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:26 UTC	632	OUT	GET /dnkdl/img/favicon.ico HTTP/1.1 Host: svfs.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://svfs.is/dnkdl/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:26 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:26 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1150 Connection: close Last-Modified: Tue, 24 May 2022 02:40:14 GMT ETag: "628c458e-47e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:26 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49779	185.112.144.235	443	5888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:09:27 UTC	398	OUT	GET /dnkdl/img/favicon.ico HTTP/1.1 Host: svfs.is Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=i46kbsgafuuke77r0bm93pns2a
2024-09-29 00:09:27 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:09:27 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 1150 Connection: close Last-Modified: Tue, 24 May 2022 02:40:14 GMT ETag: "628c458e-47e" X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-29 00:09:27 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 cc ff ff 00 Data Ascii: h(

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2300, Parent PID: 1544

General

Target ID:	0
Start time:	20:09:10
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5888, Parent PID: 2300

General

Target ID:	1
Start time:	20:09:13
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1988,i,2518404908038573350,6459673482596759250,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6412, Parent PID: 1544

General

Target ID:	3
Start time:	20:09:16
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://svfs.is/dnkdl"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://svfs.is/dnkdl

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Windows Analysis Report
http://svfs.is/dnkdl