Edit tour

Windows Analysis Report
https://ipv6.52-229-18-172.cprapid.com/

Overview

General Information

Sample URL:	https://ipv6.52-229-18-172.cprapid.com/
Analysis ID:	1521727
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish10

Phishing site detected (based on logo match)

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2260,i,7471430464917882819,9045591115373755048,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ipv6.52-229-18-172.cprapid.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_78	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Suricata Signatures

ET PHISHING Generic Multibrand NewInjection Phishing Landing Template

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-29T02:48:38.147921+0200	2032517	2	Possible Social Engineering Attempted	52.229.18.172	443	192.168.2.6	49717	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://ipv6.52-229-18-172.cprapid.com/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Multi AV Scanner detection for domain / URL

Source: ipv6.52-229-18-172.cprapid.com

Virustotal: Detection: 11%

Perma Link

Multi AV Scanner detection for submitted file

Source: https://ipv6.52-229-18-172.cprapid.com/

Virustotal: Detection: 15%

Perma Link

Phishing

AI detected phishing page

Source: https://ipv6.52-229-18-172.cprapid.com/

LLM: Score: 9 Reasons: The brand 'Arvest' is a known regional bank in the United States., The URL 'ipv6.52-229-18-172.cprapid.com' does not match the legitimate domain 'arvest.com'., The URL contains suspicious elements such as an IP address and a subdomain under 'cprapid.com', which is not associated with Arvest., Legitimate banking websites typically use their own domain names and secure connections (HTTPS)., The presence of login fields (Login ID, Password) on a suspicious URL increases the risk of phishing. DOM: 0.0.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_78, type: DROPPED

Phishing site detected (based on logo match)

Source: https://ipv6.52-229-18-172.cprapid.com/

Matcher: Template: gmail matched

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: Form action: https://locations.arvest.com/ cprapid arvest

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: Number of links: 0

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: Title: Arvest: Personal: Arvest Online Banking: Online Banking does not match URL

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: Invalid link: Forgot my Password

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: Invalid link: Privacy & Security

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: Form action: ./next.php

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: <input type="password" .../> found

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: No favicon

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: No <meta name="author".. found

Source: https://ipv6.52-229-18-172.cprapid.com/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49799 version: TLS 1.2

Source: Network traffic

Suricata IDS: 2032517 - Severity 2 - ET PHISHING Generic Multibrand NewInjection Phishing Landing Template : 52.229.18.172:443 -> 192.168.2.6:49717

Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/MyFontsWebfontsKit.css HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipv6.52-229-18-172.cprapid.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/bootstrap_custom.css HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/layout2.css HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipv6.52-229-18-172.cprapid.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipv6.52-229-18-172.cprapid.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/arvest-logo.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/merchant-services-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/debit-card-beach-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cc-acquisition-offer-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mortgage-home4me-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/awm-trust-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/webfonts/26DA37_0_0.woff HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipv6.52-229-18-172.cprapid.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/webfonts/26DA37_1_0.woff HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipv6.52-229-18-172.cprapid.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/template/top-nav-bg.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/template/footer-bg960.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/template/nav-search-bar-bg.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/lg/custserv.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/webfonts/26DA37_0_0.ttf HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipv6.52-229-18-172.cprapid.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/webfonts/26DA37_1_0.ttf HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ipv6.52-229-18-172.cprapid.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/housing-logo2.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /arvest.com/images/small/button-arrow.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/css/bootstrap_custom.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fdic-logo.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/arvest-logo.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/merchant-services-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cc-acquisition-offer-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/debit-card-beach-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mortgage-home4me-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/awm-trust-mainnav-ad.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-fb.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-youtube.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-share-circle.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-instagram.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-twitter.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/housing-logo2.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ios.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fdic.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nhl.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fdic-logo.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-fb.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-instagram.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-share-circle.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-twitter.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/soc-youtube.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ipv6.52-229-18-172.cprapid.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ios.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fdic.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nhl.png HTTP/1.1Host: ipv6.52-229-18-172.cprapid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yycSm31+bCc1AWb&MD=K6MRBUd8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yycSm31+bCc1AWb&MD=K6MRBUd8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: ipv6.52-229-18-172.cprapid.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:40 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:40 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:40 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:40 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:41 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:41 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:41 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:41 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:41 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 00:48:45 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_66.2.dr	String found in binary or memory: http://www.myfonts.com/fonts/bitstream/futura/bold/
Source: chromecache_66.2.dr	String found in binary or memory: http://www.myfonts.com/fonts/bitstream/futura/book/
Source: chromecache_66.2.dr	String found in binary or memory: http://www.myfonts.com/fonts/bitstream/futura/medium/
Source: chromecache_66.2.dr	String found in binary or memory: http://www.myfonts.com/viewlicense?type=web&buildid=2546231
Source: chromecache_78.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: chromecache_63.2.dr, chromecache_110.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_86.2.dr, chromecache_76.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_63.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_63.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_78.2.dr	String found in binary or memory: https://locations.arvest.com/
Source: chromecache_78.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49799 version: TLS 1.2

Source: classification engine

Classification label: mal84.phis.win@16/89@22/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2260,i,7471430464917882819,9045591115373755048,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ipv6.52-229-18-172.cprapid.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2260,i,7471430464917882819,9045591115373755048,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ipv6.52-229-18-172.cprapid.com/	16%	Virustotal		Browse
https://ipv6.52-229-18-172.cprapid.com/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Link
ipv6.52-229-18-172.cprapid.com	11%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
stackpath.bootstrapcdn.com	0%	Virustotal	Browse
maxcdn.bootstrapcdn.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.2.1.slim.min.js	1%	Virustotal		Browse
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	0%	Virustotal		Browse
http://www.myfonts.com/fonts/bitstream/futura/medium/	0%	Virustotal		Browse
http://www.myfonts.com/fonts/bitstream/futura/book/	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
ipv6.52-229-18-172.cprapid.com	52.229.18.172	true	true	11%, Virustotal, Browse	unknown
code.jquery.com	151.101.194.137	true	false	1%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	0%, Virustotal, Browse	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.185.132	true	false	0%, Virustotal, Browse	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ipv6.52-229-18-172.cprapid.com/images/ios.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/cc-acquisition-offer-mainnav-ad.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.css	true		unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	1%, Virustotal, Browse	unknown
https://ipv6.52-229-18-172.cprapid.com/images/fdic.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/icons/lg/custserv.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/debit-card-beach-mainnav-ad.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/css/webfonts/26DA37_0_0.ttf	true		unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	0%, Virustotal, Browse	unknown
https://ipv6.52-229-18-172.cprapid.com/images/arvest-logo.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/template/nav-search-bar-bg.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/housing-logo2.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/css/layout2.css	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/soc-twitter.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/template/footer-bg960.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/fdic-logo.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/awm-trust-mainnav-ad.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/soc-instagram.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/mortgage-home4me-mainnav-ad.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/favicon.ico	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://ipv6.52-229-18-172.cprapid.com/images/soc-share-circle.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/css/webfonts/26DA37_0_0.woff	true		unknown
https://ipv6.52-229-18-172.cprapid.com/css/webfonts/26DA37_1_0.woff	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/merchant-services-mainnav-ad.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/template/top-nav-bg.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/soc-fb.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/css/webfonts/26DA37_1_0.ttf	true		unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	URL Reputation: safe	unknown
https://ipv6.52-229-18-172.cprapid.com/images/nhl.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/	true		unknown
https://ipv6.52-229-18-172.cprapid.com/arvest.com/images/small/button-arrow.png	true		unknown
https://ipv6.52-229-18-172.cprapid.com/css/bootstrap_custom.css	true		unknown
https://ipv6.52-229-18-172.cprapid.com/images/soc-youtube.png	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.myfonts.com/fonts/bitstream/futura/medium/	chromecache_66.2.dr	false	0%, Virustotal, Browse	unknown
http://www.myfonts.com/fonts/bitstream/futura/book/	chromecache_66.2.dr	false	0%, Virustotal, Browse	unknown
https://getbootstrap.com/)	chromecache_86.2.dr, chromecache_76.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_63.2.dr, chromecache_110.2.dr	false	0%, Virustotal, Browse	unknown
https://getbootstrap.com)	chromecache_63.2.dr, chromecache_110.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_63.2.dr, chromecache_110.2.dr	false	0%, Virustotal, Browse	unknown
http://www.myfonts.com/fonts/bitstream/futura/bold/	chromecache_66.2.dr	false		unknown
http://opensource.org/licenses/MIT).	chromecache_107.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
http://www.myfonts.com/viewlicense?type=web&buildid=2546231	chromecache_66.2.dr	false		unknown
https://locations.arvest.com/	chromecache_78.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.229.18.172	ipv6.52-229-18-172.cprapid.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521727
Start date and time:	2024-09-29 02:47:41 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ipv6.52-229-18-172.cprapid.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@16/89@22/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.251.168.84, 142.250.185.238, 34.104.35.123, 142.250.184.234, 216.58.206.74, 142.250.185.170, 142.250.185.74, 142.250.185.138, 142.250.186.74, 142.250.186.106, 142.250.181.234, 142.250.184.202, 142.250.185.106, 142.250.186.42, 142.250.185.234, 172.217.18.10, 142.250.185.202, 172.217.16.202, 142.250.186.138, 192.229.221.95, 13.85.23.206, 199.232.214.172, 20.242.39.171, 93.184.221.240, 142.250.186.67, 2.19.126.137, 2.19.126.163
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://ipv6.52-229-18-172.cprapid.com/ Model: jbxai	{ "brand":["Arvest"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Submit", "text_input_field_labels":["Login ID", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ipv6.52-229-18-172.cprapid.com/ Model: jbxai	{ "phishing_score":9, "brands":"Arvest", "legit_domain":"arvest.com", "classification":"known", "reasons":["The brand 'Arvest' is a known regional bank in the United States.", "The URL 'ipv6.52-229-18-172.cprapid.com' does not match the legitimate domain 'arvest.com'.", "The URL contains suspicious elements such as an IP address and a subdomain under 'cprapid.com', which is not associated with Arvest.", "Legitimate banking websites typically use their own domain names and secure connections (HTTPS).", "The presence of login fields (Login ID, Password) on a suspicious URL increases the risk of phishing."], "brand_matches":[false], "url_match":false, "brand_input":"Arvest", "input_fields":"Login ID, Password"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	dropped
Size (bytes):	29336
Entropy (8bit):	7.988632151443081
Encrypted:	false
SSDEEP:	768:3f+C+MrI/yi3NgOZ/zk67BE7XLXARnoQl86:3f+ucqzw/zk67BE3ARnox6
MD5:	A8F4BD728E6EABD68138BE06777EB0E5
SHA1:	179DFDE17A8CC71C8AE5CEBB053F43E1193359B2
SHA-256:	E7CF593C0726DB50AEAEB0F6973332AE8C226F467B28463E5CB225C07A9AD5DA
SHA-512:	B89E5ADED388FDE79CD82786B91828585B0985DE844B22B596CBF881016B322FC0AAFDD8B7E438B3D4217E013E4023ECC5A718039CCCFACC0469DE2B13AC63B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o. .....PLTE......................E\|...............................................................6n....OJ(......4;#<9%...[SbP--0#QQ(..hbY-kS2YK,.~a..mk..LAC@&FH'.....6j[.r.....VX(...7+(q_2..WA-ji+%.%.xZ....\|2.qWcc)aH0.aFDO#....f..;..^<F#C.+..t.............u.....H7-...Z_'......qq-.._......JT$.nM.xe...zw0../%'.gN963..@......uQ7...E?;..j..v..qmP?.zT.sO...wi1...S5...FuX>z`7.......hE......~v{XI......kYQ[$...Z<..{.N;`......\..scjF5P...dW.u9.~U...`}..l8YA9.'f......NHB.7;.~o.t...efZc90.w....~\|...jM.....Cz..gG`K?.td.2O.P....%<utttoawD4.W?pZM......L..'.....b,[y...........>e..}@...m..Ot.aTI.Cg............rdW._N.zU\|....q....ZB[o.28ENcs.@[VYO6Ma.....qY........l....}l.~...$Nk.CC..;n..w.Rt.r^......V.......gf&w.LSa......rx.ii.S.l......//....U\........pHYs...........~... .IDATx....\S.?~...ftp.m.37c..@. $...J.R)!...$.@... .J.x...A).6..{/.....vg.s.{...'`..;.{....a..Yk....k}........&6.#.S.8..MfnY.*F j..)..3'..U........v...?.+RB

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/icons/lg/custserv.png
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 39 x 41, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1277
Entropy (8bit):	7.78767812064393
Encrypted:	false
SSDEEP:	24:LBd6E2FDn27eUACLcpVVRu0YKCmxpHp0rhKWaCITY8+IFKrDCL5xq1:1d+B+epNfRujmxv0o/TY8OCLf8
MD5:	830F5671B5F424DBDEC5ECEEF461F89C
SHA1:	FDA690C867FDB5A93C0011D5C164491FDECA60B9
SHA-256:	F4D067FAB799E99B87904F659C692A443EFDEFB8D5EEFCC98FC7DB2CD5BD39CB
SHA-512:	5DBDC037ED2069476CB5EE34E95495D2C7F463E2A19D87765AAABA51856877A3C00866B4772E741388267F612B1B4927BE26F31BFED1F23FBC85DE30B36F589E
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/nhl.png
Preview:	.PNG........IHDR...'...).....9......tEXtSoftware.Adobe ImageReadyq.e<....IDATx..XYS.W..Y.E..&.A...!m&j..X.."6.I..7.i..o;.I.?....$.6..5.Ec....A.VA6.O.. m...%m..7...w.w......-..Ga..1.K..?......t9{{.....H.-.........H2.$v..e.N.b.......i...{.`.7?Q.......R(.\|.Z.V......)//gWTlnl.w...]ooc.<...@....7.w.dr[..Z.kEEE....AC..R.L..w..'G.D"A....K{.z.....b..C...T.P,.....F.....\|..`4.J.6......G...r..\|......{t..T.v..p.{8..B...8...Mo.kk......cQ..Btnn6sS.T...610........Si.......vuw...@.....%.^r.........p\|{..w.QZZ......Y.2.,.37H..P(..d...\...lx.a..W.../.r.:L....z.........,7...~ .<...o......c.Q...]9.....\...Q(..w..m...\......ugg'..Q.ND}I..DR.f.[Y.......^..)[s.._.."g.#K...c..Kc.c.:.l8..G$...#....Vgf../....H....A..f.....C.a).Uy<..5....p-.....F.aI.P.Ng.J..'VWW.<.......A.;..L.D"..qp.......4.H$..UW..H.....)...'M[.%...\.G.. ...4.`...,...~._.BQy93........O.;.[.H.....1...J$....4..L1.H..\|....}.E.....j....[..@Z/.p8....b...@b2.........p.L.PY)d2YK.3......p...hhh...a........e.)....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	916
Entropy (8bit):	7.716140714522427
Encrypted:	false
SSDEEP:	24:+OabzTqgOJnII7eUTSgtjuSlFuO45l8mBn0/XFq:+JzTBOFxta6N44mByq
MD5:	800553FF197A72440416EFC73AF23684
SHA1:	DEDE91DF387CB2AF03B09AB56050EBD5648087C4
SHA-256:	4BF5CA21167BD44E7B547A5C908F0CB82A9420F0B4927FF1DED1232446F6F17E
SHA-512:	CD035DD766440261C46B345836E77719FDE002D4102D96C2A52B7395F011826B2DE89F094DD114B8EE32927500CB6F8F179726905370F19BC55131729C9E5BBE
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/fdic-logo.png
Preview:	.PNG........IHDR...$.........c......tEXtSoftware.Adobe ImageReadyq.e<...6IDATx...KlLQ...;S.#m.z..FDC......R.,D.W,......664..DjAD...h..!....j.j.E=...=...993.2....{..{....F"....x..xx..J.WYG.C.6v.....<....w..^..si...<E.z.%...!d........F..;&b.J...hD..:th(..!.p.'4B.H.kl..L@..H...%V.i.4..f.c.n.n).....A.O.A>...W>.........c......L........E....:..........YS.[...nh.....0_...sG@R...8....z..'......M..-..)..lT.{6..\|............qF.&......5R..X.]..e.....a..\|..0.a......\..k.b..zm...n"..P.Q......y.S..s.=..9........U.....X..c.j.1C#i.W%.y..bs..m8.......Tnfd..3.I..R.Mk...m..o..!.F.u..j1Z..?.G17.L>Zn..j.#.S.]S..~_6Z.w...R..y.)3Y..;.......5B...?...I.{.......u'[.i....}3..\k(.......I.x...8.8..&cQ...C.:i.qM........N.u..]...u...C...0.{f./.>g......]f,p$......7H.\E...>../.2...M..+..2.NG..;...yG;.+Z15.O..hy.F.I...R... o...D......Q.^....?.\|.....\|D...X.iz....../....B.HgO.Y....IEND.B`.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	717
Entropy (8bit):	7.620171921435265
Encrypted:	false
SSDEEP:	12:6v/7Q0lF+Tmkx9mojEWWe6bl6R93V2BATi4nzs4Q2MrflupOJBraocd:Blxl3WL893AB6ecpsEd
MD5:	61E6E6016584E2D1EE3A7FF2FBA0E7FD
SHA1:	3CFCF1223DED85B667AED1A925038CF719A0B7C5
SHA-256:	16EBA136A35400F1100A450D2F48D656B67296E74C62521AEDCD8FAB29C7D4CE
SHA-512:	713FA8CE08B2D3160A94DD1116865D7A6703C5AC62608072153256AA1B7B46BD262040BF6F0ABC90A4D39C3898421930948E2F63F179250AB917F6BAC68685D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................IDATH...OHTA..?..[..!. u..".T..d..$.!(...C..KA]..K..KFDPK.QH"$..na.d..jT.......f..y...f....~~3...%..?v...Z....X.&.1 .<[V..!.SJ9,...)..F(.^..B.....!Y.......k.7.m-.z4..R.......$...=4....x_..$pHu4....jY~whv.....J..b.!...@...d....Y...G...x..N....3.x5.7.."....Ard....5R..m....e..O.......I.y.;....g...:x.^m..l...H.n.6...(.Z.........G.4...G.Ki.,.o^#..eW"E(<.f.2.../...u]..w3.f .G).VkR...M~.c.4l.D.m.$...#R.v....>b.......\|.....0#."...........p.....Gj.\..y:'k...H\9g..W._._.!..#..?......A..03....p.z.x...y....T.R..X.I&..P..^P?z'..=.)=z.D3.M[...u.TF.-....._bs..o.\|.>....-.$.T.}.7......s..}...-.S.r......]a..^...A@%..P....0....B..?E.&!.hS....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 201 x 69, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4092
Entropy (8bit):	7.936349351238386
Encrypted:	false
SSDEEP:	96:T+Q2VWLOznXwIWWnWjHWlD3OEyEir2HvD322v4wvz3sA9g/d:iQ2Pjw6nWKtAaPfv4y8Mg/d
MD5:	F6AC29E98162F51A7782EB78160DD31C
SHA1:	32EFFA4F9335E1D4308256FB20FD61C381A6F83B
SHA-256:	8D8F81B3DEB15A8D8A4D940347FB3322CA6D49640E7CE14514CCBE07862A1ABA
SHA-512:	A78B8CF525456C8D532E45D6717E950C5ED051108E1DE7BD8767FFC4573F612030B1DABC637D8166398CB6AE106C163A3978624EB97BC73E19A1BC46DA7760DF
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/arvest-logo.png
Preview:	.PNG........IHDR.......E...........tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]........(G90"M......D..OA. 6...... .E......A..D@..bA..+.P...@.EH...."......e\|o.l9o............f.)..rbt...>..CU`K..atl..S...u.;C.........1....c..CTF..h.F..........H ..O.v..;....8...p...h`C.<.._..}.z(vIW...c...g...2...ek8.Sc...=`.p.p!p..ZL.o..B...\|..45.....V...L.4..i.=.8J..D..]9..B.......;..........>.x.......n.>.v(o].o._..o.p.p..>..&..\..w"......2._......v.Z.7.......\>............_i.sb.BR%....g....s........R..,u.hx.f.....a.mHU*......p\|-p.M.Z..P.?p..p....A.F..@`...4...u...c.o.g._ry..t.!..B._...S...p1...7.g'.....$%8....]..ji.y;N.....?.\|.XN...;...6......7.m...J.g!.!....0..>`..yof.].3...t.jG..+....P......ELz.G.Kl,.P...~.-.p.&p.p....B`.....-..).....g8<.k....u.s...P.B.8`^....a...M.W1i..,$.......Pb.L}5!.A...$.^.D..6....$.IWt..$.....(J!Y.P@.v...!Av.Y.t....tW.i..I@...a......r.o.1y=`o5.F.v!).xm..Br.Q(....r8_...i....p........IsKL.V8.(9I.B..H.8.Is../y...].mq?`.Br..4...>IL..-.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/css/webfonts/26DA37_1_0.woff
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/template/footer-bg960.png
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	54009
Entropy (8bit):	7.991994154425329
Encrypted:	true
SSDEEP:	1536:UTeE7K0poPAzxaUtUXYkQ7q/EK1kpVg9KkLbvw:UTB7Dpo4z+okqKCLGKkfY
MD5:	908BB95330D7CBA223BACB9F76D92C91
SHA1:	8ACE44F4E715599A5AC2402C8F424F3E186657C1
SHA-256:	FBD9E72FC8811406DE10190F29478F63524A88C6C33AC96017C2F38374787C55
SHA-512:	58764D2748E9621930864C42A519B9953E2008D2704D41008910B59762E9C0D2DF6A5E9C61BA80E178334BDAB5F593E833D223A59B723F5BC95D181180AFFEA8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2w"....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C4FFFDE0152068118083DC1F273A352D" xmpMM:DocumentID="xmp.did:DD079CCE95F111EBAB7FDEB9A7F35DE4" xmpMM:InstanceID="xmp.iid:DD079CCD95F111EBAB7FDEB9A7F35DE4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7f0961c4-30c9-444c-a67d-69595162467e" stRef:documentID="adobe:docid:photoshop:4f0bf388-20b1-6847-8c81-ffc21f934f87"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>p.k.....IDATx.t.i.e.u...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	downloaded
Size (bytes):	22341
Entropy (8bit):	7.985622808601863
Encrypted:	false
SSDEEP:	384:m/yKUoecFAqxBwxVLTfDuTV2beBhTiYMwHNmU82sVyP1LS/gaf6:m/TSq3wxVDu4bgEY1HsUJs21L4Xf6
MD5:	877277FC1F039DDD2B3FB681FA69D442
SHA1:	108B83C05ECD920D2161217FB99CD3DB337E497F
SHA-256:	13CDCD37ED238E27C50FAC06BA440885E95BBAE7A85C8C7447111738F7BDBAAF
SHA-512:	EDB2D13348696F4C27916952724DFDBD8247A5DA4EC410607BFA513B86DA46EBAABB90726F9F69EBD4518BD226299C9D8F0631CA148F1F3234A7A706720304EF
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/merchant-services-mainnav-ad.png
Preview:	.PNG........IHDR.............o. .....PLTE......................E\|..........................................................................................................................$$.................. .......................... .....................................3n..................>w.%11$'......EHH$^u)e} #...9DH......5(....%...T........EV.9F.Ob.$+....+/.....831-J~....+=G><8.WmF1$....6:.....O..NON....C&...SWY....87..........N-.X:'....<S[..qO;.T/.........k\P_ac.4.....o[q....mOE;...}WC.5>...^RG...w<q.........yh[.................m<{\|.diy.{I...suyijkpF)%^8......}.aM...^..._4....n{.......bC7.y{....::.ff......O7il.Obj..\|.v^5mBl..Wwz...e.........f.vl...................}.kH.....,M4T\|V,f.....mf.....E...{.vg.g.....w.....q@@.k...TV1.{`...nA.....[.vv..D+.VS.5Z....pHYs...........~... .IDATx...XSg.>\|J-.X;..M..%uR+M..8d.DB.......B.D6..\|?..e.E. ....(.`.T.-......e:3.f.?3....$.........ie..........<..<.u. .".J.:P\]..Jz;].m.{...;...z..%P......_

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15201
Entropy (8bit):	1.9248055879609702
Encrypted:	false
SSDEEP:	48:ju+k29W8sEv4KvNxN+Y9c6BCvG+I7cdpck7Fm46RhTJbYHBQB3p/kzQf:3kEWRIxNX2CcXFp6RlqH+r/Zf
MD5:	C8BDADA8E3406CB7F96CA9A3F28977B1
SHA1:	DC7ED96E2C5C32999CDD6ADA4BFE0B4B93269667
SHA-256:	3FFBB276D8124704F5A7E0035B5BB87E4ADC7A7E4B322AE2ED476EE37FFA7FFC
SHA-512:	0B3D6C539E49DD02F67C402BA5FBBA9333204FEC1C85344037ABDD5B6905BA5FF6DF5C80CDC5255B6293296BF0EF038175B92C4AAE2D57C0FD986F5DB6BD7621
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/soc-youtube.png
Preview:	.PNG........IHDR..............*.....pHYs..........+....8"iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool>. <xmp:CreateDate>2015-12-01T11:15-06:00</xmp:CreateDate>. <xmp:ModifyDate>2015-12-01T12:13:15-06:00</xmp:ModifyDate>. <xmp:Me

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/template/nav-search-bar-bg.png
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/template/top-nav-bg.png
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	542
Entropy (8bit):	7.4842112725293335
Encrypted:	false
SSDEEP:	12:6v/7Q0yoJmyMowTYxOZPNEfY4/4KalbD2XcKd7WTVf:MmyxwuEPyfY4/4t2Xz8
MD5:	ED724D47F6D81A1A1904AAFDD523C1AD
SHA1:	3BF38BACA232251233A2F59B5BF4A3946931940D
SHA-256:	39F485EF565C7CED26632FEA1C6FB2F67B5C90C49C38FE856EAD961258B65682
SHA-512:	A564CCF31195EE6E2349677C9C816C5F92B821DD430E9364440D075E4C4D648FC23A811BFBB0A1DBBFBF86AE79108FFAD5740A758185169C1BE08348C355BA62
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................tEXtSoftware.Adobe ImageReadyq.e<....IDATx...+DQ...g.I. ..?...,-..7,l.d3ea...R(....ec.B.MQ.)..FMI.....o.33..y....n.{....=...s;......8.E..I.....bE!3W......c...v.. <.......\|`........W................5a.M`.E..`.#...f..<...k.Md\|:S....$.o.....J...#u......@w...Bs.V.\.......t....\|.....[...gR.=../...E.."%....u2.../4l...#Y.wp...'.p.0..?.B0.7v....QX.&.3...e........R..I...<...Ab,...V*.6!a#BD.....H.....&e.EQ.....R.L..9....._...Rr.p....9+.Z.E..?.\.V......5x:{~.\|z.x.`.4..1..{.....IEND.B`.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	589
Entropy (8bit):	7.546633690220489
Encrypted:	false
SSDEEP:	12:6v/7Q0ylwPSLJEeK+9kHaoG4X6PqjVqAk1T7tgJW6w:2PcJbrSaonVjVqfFtgJWR
MD5:	751B8EC0162EFB0FAF7D37FF3A1C9467
SHA1:	3A524903AB49B0273F484B62E5740E306AAD2F6F
SHA-256:	610C99D9F333E8E356584239F9CBF91592F1C38877FCE7D1D1DA4BF3AAC94E44
SHA-512:	8EC40B171713A6E3DCAB4222639E94C7486442279B019890801E7AC507426E7376840402D03BA0ABAF28B8B987BA10D2B03E5424A332D6A63B5543158543129F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................tEXtSoftware.Adobe ImageReadyq.e<....IDATx...K.A.....&v.$~.....{.E.....E...z.B.........`O..... R. ...M.Z.I.f....B.L..=....}...%O...v..g.fU..2.z.C..q......F..'...OFL=BP..Q.ZPX.O..@e.n....u.A,.0;1....@<ll.Q8.!...p...p\,...7sC....,r.%.....x.k..~.ws.Ho..(_...ijg.....p...o....>...I....{....!._.&.w....#.}..O...zhx..7.ar\|...l}6....#>&.yV..qC....OK[.)...X?..i.-....k..7..:E....../>.l....E$..Q...@\...>ih~a...:()8..G..V..}.E.m^H....Q..W.....W+&...j#.+.9.-W*r.r....k......)...bw.....~-2~...2.<N....v..B.V......6..oQ....IEND.B`.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 90, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	4885
Entropy (8bit):	7.944765217361098
Encrypted:	false
SSDEEP:	96:KOWpH2LjL5eX0V7gC3zuN50vIAJ2tz9sNZWZ4hfpzGmxn6F:hoUQ87gCCH13gZWqfpnVe
MD5:	BEF3793B9B9A330F75B84614E2748868
SHA1:	F53F8B1CD3EDF18FC1C361BD725637C8A4D95E75
SHA-256:	45B33290A887374B0351AD46D4F1FDDC8038B3B805AE11FC1520C732108691A8
SHA-512:	44BD46783A3E0C30623C6274AC145D25A20100D3786106485B528430D7D4CEF78BF29F15B426DB182600DF67CE8D42031A5B2A9C8AFB4146FA51DAE8C2A781E6
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/ios.png
Preview:	.PNG........IHDR.......Z.......G....IDATx..].tU..Nc....P....T.EPA.b...Q..A.(b.7.[...T\jm..Z\p...J+(..VO.....".1@d.a......s....w_.K.r..N.f....f.....e...?m.]..a.v.".E.....i. BX.]..a.v.".E.`...^`...=.......aK.B..{..e.IP....Y...W.\|7..!M.....g.{.....u`.9.7...Q...f..%./..l)+JH!k.._.3(..Q..OXn.^......l.o.$.../....]........o.^.Pc.@..w....c..eiog...C....0.m..v!#.c..eq)d.....b..,'...ii.1.?@.g5Jac.B3...=z.....UC...T.C.x0.7z.b)....5B..].'0..n'[}.^..']....x.w.K...d.hO..Q.k....i..........j.X@Kh=5...(s.O...J.....~u.M..kC^#....epv....^/p..d.5.(....S.;...O.6._.3]....Zw......=....y....za.}c./'.w!U..DtZ5....U..(u.O.6...{......W.c&...i..~!.X#..........x....h...B........+w.f..h....A...S.l[...~Eb.mO--.N.O.N.sc+.h...)_s:C..1dQ......3).........m..Y.4p...D/.....@....N...TH[.>......J5.DXC._C11.\K...I..[...j.4(....j".mM...6.[E,.C..^...NGS0.......k@.=...Z..).)g`.....r...SK..E....\..[0.F.....;Q......U...r..@.../.{.r.=.........[4.m}..V.......=...(.L..."...z..B...K

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1700
Entropy (8bit):	5.295225288325088
Encrypted:	false
SSDEEP:	24:s/kuhxh3XmOicbuq3VjPOHPaveFVTANNi+3e+NVTkauNcdevVTsF:w15XXicK072FV0jiheVC6MvVgF
MD5:	011E05F5171077FABC75F79942935947
SHA1:	70D1B3B8130395A69D722CE5FB4FE1DED8500FEA
SHA-256:	A19476A808FFC54BCA0BA7BB261271871A49CEDE1732D10997E4C8E8A46EB41D
SHA-512:	DD9785335346A90A8EB89033F51E6C7D796EFB07A6F8C02F0726C0C0925A4AE4195C9FD90E1B33C1D08E19ED88424F758C18FA459743E237222B5F974B7058EE
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.css
Preview:	/* @license. * MyFonts Webfont Build ID 2546231, 2013-05-02T12:57:30-0400. . The fonts listed in this notice are subject to the End User License. * Agreement(s) entered into by the website owner. All other parties are. * explicitly restricted from using the Licensed Webfonts(s).. . You may obtain a valid license at the URLs below.. . Webfont: Futura Book by Bitstream. * URL: http://www.myfonts.com/fonts/bitstream/futura/book/. . Webfont: Futura Medium by Bitstream. * URL: http://www.myfonts.com/fonts/bitstream/futura/medium/. . Webfont: Futura Bold by Bitstream. * URL: http://www.myfonts.com/fonts/bitstream/futura/bold/. . . * License: http://www.myfonts.com/viewlicense?type=web&buildid=2546231. * Webfonts copyright: Copyright 1990-2003 Bitstream Inc. All rights reserved.. . . 2013 MyFonts Inc./.../ @import must be at top of file, otherwise CSS will not work /./.@import url("//hello.myfonts.net/count/26da37");.*/..@font-face {font-family: 'FuturaBT-Book';src: u

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 201 x 69, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4092
Entropy (8bit):	7.936349351238386
Encrypted:	false
SSDEEP:	96:T+Q2VWLOznXwIWWnWjHWlD3OEyEir2HvD322v4wvz3sA9g/d:iQ2Pjw6nWKtAaPfv4y8Mg/d
MD5:	F6AC29E98162F51A7782EB78160DD31C
SHA1:	32EFFA4F9335E1D4308256FB20FD61C381A6F83B
SHA-256:	8D8F81B3DEB15A8D8A4D940347FB3322CA6D49640E7CE14514CCBE07862A1ABA
SHA-512:	A78B8CF525456C8D532E45D6717E950C5ED051108E1DE7BD8767FFC4573F612030B1DABC637D8166398CB6AE106C163A3978624EB97BC73E19A1BC46DA7760DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......E...........tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]........(G90"M......D..OA. 6...... .E......A..D@..bA..+.P...@.EH...."......e\|o.l9o............f.)..rbt...>..CU`K..atl..S...u.;C.........1....c..CTF..h.F..........H ..O.v..;....8...p...h`C.<.._..}.z(vIW...c...g...2...ek8.Sc...=`.p.p!p..ZL.o..B...\|..45.....V...L.4..i.=.8J..D..]9..B.......;..........>.x.......n.>.v(o].o._..o.p.p..>..&..\..w"......2._......v.Z.7.......\>............_i.sb.BR%....g....s........R..,u.hx.f.....a.mHU*......p\|-p.M.Z..P.?p..p....A.F..@`...4...u...c.o.g._ry..t.!..B._...S...p1...7.g'.....$%8....]..ji.y;N.....?.\|.XN...;...6......7.m...J.g!.!....0..>`..yof.].3...t.jG..+....P......ELz.G.Kl,.P...~.-.p.&p.p....B`.....-..).....g8<.k....u.s...P.B.8`^....a...M.W1i..,$.......Pb.L}5!.A...$.^.D..6....$.IWt..$.....(J!Y.P@.v...!Av.Y.t....tW.i..I@...a......r.o.1y=`o5.F.v!).xm..Br.Q(....r8_...i....p........IsKL.V8.(9I.B..H.8.Is../y...].mq?`.Br..4...>IL..-.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/css/webfonts/26DA37_0_0.woff
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	downloaded
Size (bytes):	18130
Entropy (8bit):	7.9830989433184705
Encrypted:	false
SSDEEP:	384:0kW+djIF1LLxQPS7dwLsPy1dnPa/oJ41rqnsJclbUyNtBmSEO:0edjvP2dCukBPooJ4Ng0EgyRm3O
MD5:	39C347CCF88C9B52F3F62335CE237B58
SHA1:	A3DBD4ED8D4626D7C38DEDA0CB65E956BB61C04F
SHA-256:	B2F2258E7A7977FE5E14DC2B93FC36A55053408FE14222957EAA8B53373BF958
SHA-512:	DA7A191D57549126C8A3807D32A94DE2402BF4CBFD80C7E009D0654C2D62E1C66EDE5CC9EFE7703067F55107AEBB2792DCAD841E7958C6A7C4EEE8B4C1E786D1
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/cc-acquisition-offer-mainnav-ad.png
Preview:	.PNG........IHDR.............o. .....PLTE....+T................E\|...............&X....................?o....Hy.Cs.Aq....Eu......"T..=m.N.....Fw.J{....P........a..K}... Q....(Z..9h%W.3g.4h..<l,_.1e."S.!R..:j.............7f...)[....].$V.-`..M~...0c..........6j..5d......+()+\.7k._.(%%...1/0.9o.,-....4bq...7i534GFG9o.JIK5l.$Q.LLN867.;v;9:"MzTSV><>ONQ$U..A.CBD... Iu...A?@.C..>}$!"........RQS....Ep}...3^..........6_..........2Y......VVX(U...._...M..1XV......Y.......Al....:d......s.......k...O......N.......(C.1%.......!9.>g...vvw.7;Dw.llm........../O.........@?R\|...(.........]............i...8;cbc...Pt....]....).....Hk..!.....Z9(8L_[\+Da;b..ty....`&-9.M..XX......c.P....4Syf...#(.PL....;Z.Dm...Q.gg.GG.zy.98.44.Wd-;..f..{..sO:Y...."!...xhPF..... X..MI..k.ca.xA.E.l.......Te\|....ij.._.....n..o.\.....pHYs...........~... .IDATx..}.\TW.....`.dY...R. .(E.e)..:..00..RC34Q..)"E@.0v`.U.....FC.X.....{o..lv....w.w....f...q. ..w...;.S~.2..\mL-l.............l-L.1...ZLur..4t.....w1Lw.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	dropped
Size (bytes):	18130
Entropy (8bit):	7.9830989433184705
Encrypted:	false
SSDEEP:	384:0kW+djIF1LLxQPS7dwLsPy1dnPa/oJ41rqnsJclbUyNtBmSEO:0edjvP2dCukBPooJ4Ng0EgyRm3O
MD5:	39C347CCF88C9B52F3F62335CE237B58
SHA1:	A3DBD4ED8D4626D7C38DEDA0CB65E956BB61C04F
SHA-256:	B2F2258E7A7977FE5E14DC2B93FC36A55053408FE14222957EAA8B53373BF958
SHA-512:	DA7A191D57549126C8A3807D32A94DE2402BF4CBFD80C7E009D0654C2D62E1C66EDE5CC9EFE7703067F55107AEBB2792DCAD841E7958C6A7C4EEE8B4C1E786D1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o. .....PLTE....+T................E\|...............&X....................?o....Hy.Cs.Aq....Eu......"T..=m.N.....Fw.J{....P........a..K}... Q....(Z..9h%W.3g.4h..<l,_.1e."S.!R..:j.............7f...)[....].$V.-`..M~...0c..........6j..5d......+()+\.7k._.(%%...1/0.9o.,-....4bq...7i534GFG9o.JIK5l.$Q.LLN867.;v;9:"MzTSV><>ONQ$U..A.CBD... Iu...A?@.C..>}$!"........RQS....Ep}...3^..........6_..........2Y......VVX(U...._...M..1XV......Y.......Al....:d......s.......k...O......N.......(C.1%.......!9.>g...vvw.7;Dw.llm........../O.........@?R\|...(.........]............i...8;cbc...Pt....]....).....Hk..!.....Z9(8L_[\+Da;b..ty....`&-9.M..XX......c.P....4Syf...#(.PL....;Z.Dm...Q.gg.GG.zy.98.44.Wd-;..f..{..sO:Y...."!...xhPF..... X..MI..k.ca.xA.E.l.......Te\|....ij.._.....n..o.\.....pHYs...........~... .IDATx..}.\TW.....`.dY...R. .(E.e)..:..00..RC34Q..)"E@.0v`.U.....FC.X.....{o..lv....w.w....f...q. ..w...;.S~.2..\mL-l.............l-L.1...ZLur..4t.....w1Lw.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 39 x 41, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1277
Entropy (8bit):	7.78767812064393
Encrypted:	false
SSDEEP:	24:LBd6E2FDn27eUACLcpVVRu0YKCmxpHp0rhKWaCITY8+IFKrDCL5xq1:1d+B+epNfRujmxv0o/TY8OCLf8
MD5:	830F5671B5F424DBDEC5ECEEF461F89C
SHA1:	FDA690C867FDB5A93C0011D5C164491FDECA60B9
SHA-256:	F4D067FAB799E99B87904F659C692A443EFDEFB8D5EEFCC98FC7DB2CD5BD39CB
SHA-512:	5DBDC037ED2069476CB5EE34E95495D2C7F463E2A19D87765AAABA51856877A3C00866B4772E741388267F612B1B4927BE26F31BFED1F23FBC85DE30B36F589E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...'...).....9......tEXtSoftware.Adobe ImageReadyq.e<....IDATx..XYS.W..Y.E..&.A...!m&j..X.."6.I..7.i..o;.I.?....$.6..5.Ec....A.VA6.O.. m...%m..7...w.w......-..Ga..1.K..?......t9{{.....H.-.........H2.$v..e.N.b.......i...{.`.7?Q.......R(.\|.Z.V......)//gWTlnl.w...]ooc.<...@....7.w.dr[..Z.kEEE....AC..R.L..w..'G.D"A....K{.z.....b..C...T.P,.....F.....\|..`4.J.6......G...r..\|......{t..T.v..p.{8..B...8...Mo.kk......cQ..Btnn6sS.T...610........Si.......vuw...@.....%.^r.........p\|{..w.QZZ......Y.2.,.37H..P(..d...\...lx.a..W.../.r.:L....z.........,7...~ .<...o......c.Q...]9.....\...Q(..w..m...\......ugg'..Q.ND}I..DR.f.[Y.......^..)[s.._.."g.#K...c..Kc.c.:.l8..G$...#....Vgf../....H....A..f.....C.a).Uy<..5....p-.....F.aI.P.Ng.J..'VWW.<.......A.;..L.D"..qp.......4.H$..UW..H.....)...'M[.%...\.G.. ...4.`...,...~._.BQy93........O.;.[.H.....1...J$....4..L1.H..\|....}.E.....j....[..@Z/.p8....b...@b2.........p.L.PY)d2YK.3......p...hhh...a........e.)....

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7998)
Category:	downloaded
Size (bytes):	32880
Entropy (8bit):	5.089433656717327
Encrypted:	false
SSDEEP:	768:NjEdKZt/VQoTkTBVTR8chcdJa43TaTC4b1RskYKxRgvxZd49HScJ:NDqvJ
MD5:	E4801BE6552AE2790CB410CD72B1D66B
SHA1:	5940147FCFF7F319D1790D65A81F09AE1B160698
SHA-256:	61D516C5C9DEB2D2BB62350909E1D3AFEC7021FB150D4D711D83445FA244F436
SHA-512:	C9ADFAF0C3481C8A1300E4ABDCF4A5E6D28FE4EA6706C0FE19565E279B93AF3A5B496223D50767642F1AA01DC0431611EFEC104AFE00D1F9281DA3F35B26A30C
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/css/layout2.css
Preview:	*{-webkit-tap-highlight-color: rgba(0,0,0,0)}.iosPhone,.iosPhone a{color: #cc0000}a:hover{text-decoration: underline}h1,h2,h3{font-family: FuturaBT-Book}h2{font-size: 1.7rem;margin: 8px 0}h3{font-size: 1.7rem;margin: 6px 0}h2.sub-header{margin: 0;padding: 11px 0;font-size: 1.7rem;line-height: 1.2;color: #00457c;font-family: FuturaBT-Medium}h2.sub-header.two-line{line-height: 22px;padding: 15px 0}img{vertical-align: baseline}table td{vertical-align: top}caption{text-align: left;font-weight: bold}a[type="application/pdf"]{background: url(/images/tiny/file_pdf.png) no-repeat right 0 rgba(0,0,0,0);background-clip: border-box;padding-right: 18px;padding-top: 2px}.tel{white-space: nowrap;color: inherit}.linkreg{color: #1A6AC0;font-size: 75%;left: 1px;position: relative;vertical-align: super}.FuturaBT-Book{font-family: FuturaBT-Book !important}.FuturaBT-Bold{font-family: FuturaBT-Bold}.FuturaBT-Medium,.icon-button-row,.pag-menu,.bank-landing-content p{font-family: FuturaBT-Medium}.container-m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.382520755336066
Encrypted:	false
SSDEEP:	3:Heeib3N8vA2YY:+ld+3YY
MD5:	0C52BB6AB180A7AA504A7F5E3192E6B2
SHA1:	AF80852998BF6AE008FE50F6A718E0429B6D72F8
SHA-256:	7A3C4E919D8F9580E209E721EFA6CFD4E4B7CC50AEC3C23631C44028042E84E2
SHA-512:	37464759AD82E8841CD8391B5967533C92127F2C43754D5B0000E3E7C890214D4C82F9434D904498C14C289DF9BE82716BD390CA9A1FDA012C04D51A219D39FC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlfC0q9g8CAnhIFDauKIgMSFwklb_VN_xUELxIFDRncHPcSBQ2tCa6x?alt=proto
Preview:	CgkKBw2riiIDGgAKEgoHDRncHPcaAAoHDa0JrrEaAA==

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	916
Entropy (8bit):	7.716140714522427
Encrypted:	false
SSDEEP:	24:+OabzTqgOJnII7eUTSgtjuSlFuO45l8mBn0/XFq:+JzTBOFxta6N44mByq
MD5:	800553FF197A72440416EFC73AF23684
SHA1:	DEDE91DF387CB2AF03B09AB56050EBD5648087C4
SHA-256:	4BF5CA21167BD44E7B547A5C908F0CB82A9420F0B4927FF1DED1232446F6F17E
SHA-512:	CD035DD766440261C46B345836E77719FDE002D4102D96C2A52B7395F011826B2DE89F094DD114B8EE32927500CB6F8F179726905370F19BC55131729C9E5BBE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$.........c......tEXtSoftware.Adobe ImageReadyq.e<...6IDATx...KlLQ...;S.#m.z..FDC......R.,D.W,......664..DjAD...h..!....j.j.E=...=...993.2....{..{....F"....x..xx..J.WYG.C.6v.....<....w..^..si...<E.z.%...!d........F..;&b.J...hD..:th(..!.p.'4B.H.kl..L@..H...%V.i.4..f.c.n.n).....A.O.A>...W>.........c......L........E....:..........YS.[...nh.....0_...sG@R...8....z..'......M..-..)..lT.{6..\|............qF.&......5R..X.]..e.....a..\|..0.a......\..k.b..zm...n"..P.Q......y.S..s.=..9........U.....X..c.j.1C#i.W%.y..bs..m8.......Tnfd..3.I..R.Mk...m..o..!.F.u..j1Z..?.G17.L>Zn..j.#.S.]S..~_6Z.w...R..y.)3Y..;.......5B...?...I.{.......u'[.i....}3..\k(.......I.x...8.8..&cQ...C.:i.qM........N.u..]...u...C...0.{f./.>g......]f,p$......7H.\E...>../.2...M..+..2.NG..;...yG;.+Z15.O..hy.F.I...R... o...D......Q.^....?.\|.....\|D...X.iz....../....B.HgO.Y....IEND.B`.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 41, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1411
Entropy (8bit):	7.797354585949875
Encrypted:	false
SSDEEP:	24:zHX52eQ1ojmnIOLV0q1Tu53DIpknnT3hnXHHOFbB3WsvtfL2+qMV9:r5DQyjmJ0q1yZR7hnXHHY4svtfL7q8
MD5:	4D7D634E423739BCC12CF93F7F9D526C
SHA1:	A28A5AB097BD295AC094206062902A6271995FD8
SHA-256:	971CBFD037BDFA175BBCC512EB44EF5430B917A88DF8B0B0344D85DFF95F795E
SHA-512:	EBCE907617F99FDC49707BC48C77F82D415AB8927B4E880488CDA00BBEE60C3B03E9DADFC6C102E2519DA4EF3C1090E3BCEF9B37441D73DBB4C5DBC8623164E8
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/fdic.png
Preview:	.PNG........IHDR...+...).....#.G.....tEXtSoftware.Adobe ImageReadyq.e<...%IDATx..WiS[U.&.I K.`R...M.k..Z..R.mq..T....T.....TFg.g.wkk...6`)..C.BB...5aI.)..w .....!g..y.{..wy......;.A.;..B.B.B.B.. `.RM.u....r?..s:.......GLL......].......N.,...}......f/.......277..;..........y.h0x<3...6......~.<%..~euuP....%..........\|^..f....N'....O...[....+.+..3J8==]PP.`0...&J(...>!..:.......j.......].J6.......;>n.~w.....Sk........:e..........eA.O.....A.F.V(......\|.v...h.....<..SZV._P.d2+N'&&........g................~.S.........,x.`..........B....-KJ..y......:..........x.h4..RYjNN.X$Fb=....H.'x.~..W.M..,,...?..v........j..a.k..d.\.....~.h...DFr.j...-9&...6..........P*.x.KF.1Y.....t9.QB.XLE@#o(X.o......33.z.H..NNN.....X.....p...1....P.=...x.)..9..J....J$................y...i...>..R5,.K$.Ie.........K.o.y.N"d.....c..#.....X.mQ.+A. ...n..<.l...edfV.:..p8...JL!....omm..q.lA....b.".?+c.~.......9n.q.......Q...$.G.:..(AS.....b!.\|.....l[........JeX.`.s..#....p6k.S..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1061), with CRLF line terminators
Category:	downloaded
Size (bytes):	31639
Entropy (8bit):	4.06716304267537
Encrypted:	false
SSDEEP:	384:T+1sJFLJXOyRo7e9Ihc9U+m8Pg3SMa9vf:S101+Wo88cS+7Ma9n
MD5:	A87069C8E30937F91B06DA1212538194
SHA1:	8CAE82D6E7F6683FA66A6C38EEA980D37E195B35
SHA-256:	11CBEC0C0BA23FFC8883FDB638499B53014FC3253E376005E0DD3FF913B9914E
SHA-512:	3E5D41340544A3E325F46D0F13E577A198F69F0A39CDB6DD84231EC9D86CA3CF24EF56556EABEFC364799E57319EA46C537407FAFBCDDA9D5BF111CFCED040BF
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/
Preview:	<!DOCTYPE html>..<html lang="en" class="js">....<head>.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <title>Arvest: Personal: Arvest Online Banking: Online Banking</title>.. CSS.. ================================================== -->.. <link rel="stylesheet" href="./css/MyFontsWebfontsKit.css">.. <link rel="stylesheet" href="./css/bootstrap_custom.css">.. <link rel="stylesheet" href="./css/layout2.css">..</head>....<body class="personalSignonLogonIndex">.. <header class="header-container">.. <div class="nav-search-bar hidden-xs">.. <div class="container">.. <div class="row">.. <div class="col-sm-12">.. <nav class="nav-links">.. <a href="#">Rates</a>..   \|  ..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	54009
Entropy (8bit):	7.991994154425329
Encrypted:	true
SSDEEP:	1536:UTeE7K0poPAzxaUtUXYkQ7q/EK1kpVg9KkLbvw:UTB7Dpo4z+okqKCLGKkfY
MD5:	908BB95330D7CBA223BACB9F76D92C91
SHA1:	8ACE44F4E715599A5AC2402C8F424F3E186657C1
SHA-256:	FBD9E72FC8811406DE10190F29478F63524A88C6C33AC96017C2F38374787C55
SHA-512:	58764D2748E9621930864C42A519B9953E2008D2704D41008910B59762E9C0D2DF6A5E9C61BA80E178334BDAB5F593E833D223A59B723F5BC95D181180AFFEA8
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/mortgage-home4me-mainnav-ad.png
Preview:	.PNG........IHDR..............2w"....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C4FFFDE0152068118083DC1F273A352D" xmpMM:DocumentID="xmp.did:DD079CCE95F111EBAB7FDEB9A7F35DE4" xmpMM:InstanceID="xmp.iid:DD079CCD95F111EBAB7FDEB9A7F35DE4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7f0961c4-30c9-444c-a67d-69595162467e" stRef:documentID="adobe:docid:photoshop:4f0bf388-20b1-6847-8c81-ffc21f934f87"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>p.k.....IDATx.t.i.e.u...

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7997)
Category:	downloaded
Size (bytes):	84224
Entropy (8bit):	5.0684184342176675
Encrypted:	false
SSDEEP:	768:Juo+/WXjKlaTRQCYP8ctm7QHRSznz0+ycRZVxdb/rAqegh2+dptX2yedA422PovW:RgRyedA4bPoMwn2p3F8U5XSB0
MD5:	9F1C1C514952F5BC7102914375E30C2D
SHA1:	031768717F7518E928FD9302C2F2DD6D3849A16D
SHA-256:	A5F1602216B655BE0FCE8A78560A14357CB7F13FBD96D1A71E6BC9D4DA6B8589
SHA-512:	22786176305BB3024D222011AC39D0F370DFC288F12B9634666B5DD8EFB9074CD708E144FC5A0C940CF255B7C3EB82DBBEFF6410237FF8763279BEB219C0D695
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/css/bootstrap_custom.css
Preview:	/!. Custom bootstrap build. * Contains:. * normalize/scaffolding. * core css (sans tables/buttons). * utility classes. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family: sans-serif;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%}body{margin: 0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display: block}audio,canvas,progress,video{display: inline-block;vertical-align: baseline}audio:not([controls]){display: none;height: 0}[hidden],template{display: none}a{background: transparent}a:active,a:hover{outline: 0}abbr[title]{border-bottom: 1px dotted}b,strong{font-weight: bold}dfn{font-style: italic}h1{font-size: 2em;margin: .67em 0}mark{background: #ff0;color: #000}small{font-size: 80%}sub,sup{font-size: 75%;line-height: 0;position: relative;vertical-align: baseline}sup{top: -0.5em}sub{bottom: -0.25em}img{border: 0}svg:not(:root){overflow: hidden}figure{margin: 1em 40px}hr{-moz-box-sizing: content-box;

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 33, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	653
Entropy (8bit):	7.529075267891249
Encrypted:	false
SSDEEP:	12:6v/7IiL/6Tog8rjYgVLtxY0+Ke3K0oE+Sz170gehVa41wyNhO4NyW3k7:9iL/6BwjYcLtmbaW+SvehFVhn13e
MD5:	8C339BC63E8F842EA73FBD6F6C05738B
SHA1:	001B1BBA7B4A22D4216D7A2F9A5D87A21E2ED7DA
SHA-256:	3132B69DBEB859635EEA70DBDAE8557C143D111EEB9A473FB84FE5FAC904CC18
SHA-512:	B4DFBCC4FF0DC538FA41CDA02092916AEBEDE7AB5518189C6AB83E10666790E6408136518EE35841716850E718CF7142D7D7AB735CFD8399B0FACCB1E7C5E7DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...!......&.Q....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..W.N.0.v..l-o.....ac#o@..}...@F..J..}..1...G0.k......j].q#...>.q.....sU.Z.....y........E..r.P..do..&......"%l...E\8..v....:......t1.=.="~..C..qb.}+l$I..&..4G9VJ%J..0^:..4.B.fj@.8..S....-._.....Y......j`.Y.>Rp0..d....=...+08...I.x.j..[......7_..X...w.~.....o....gE-O.9....AFS..!."z....$x...f../@ .3v.P .OD...9......+t..`e^`C...@?.e..{..hD......T.,.......T.,%...\.%T(K._@.N....5f)..\|...7(.F,.S.Y0..>...>e.....5k#p..<..RH.bGX...$H..\|Umo..=..+....K.p...?...I\|U5.*.mD....+.......{.]"rG:...1.4.W G.\...>j... 6.^..`..J...\|.....IEND.B`.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	7.620171921435265
Encrypted:	false
SSDEEP:	12:6v/7Q0lF+Tmkx9mojEWWe6bl6R93V2BATi4nzs4Q2MrflupOJBraocd:Blxl3WL893AB6ecpsEd
MD5:	61E6E6016584E2D1EE3A7FF2FBA0E7FD
SHA1:	3CFCF1223DED85B667AED1A925038CF719A0B7C5
SHA-256:	16EBA136A35400F1100A450D2F48D656B67296E74C62521AEDCD8FAB29C7D4CE
SHA-512:	713FA8CE08B2D3160A94DD1116865D7A6703C5AC62608072153256AA1B7B46BD262040BF6F0ABC90A4D39C3898421930948E2F63F179250AB917F6BAC68685D9
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/soc-share-circle.png
Preview:	.PNG........IHDR...................IDATH...OHTA..?..[..!. u..".T..d..$.!(...C..KA]..K..KFDPK.QH"$..na.d..jT.......f..y...f....~~3...%..?v...Z....X.&.1 .<[V..!.SJ9,...)..F(.^..B.....!Y.......k.7.m-.z4..R.......$...=4....x_..$pHu4....jY~whv.....J..b.!...@...d....Y...G...x..N....3.x5.7.."....Ard....5R..m....e..O.......I.y.;....g...:x.^m..l...H.n.6...(.Z.........G.4...G.Ki.,.o^#..eW"E(<.f.2.../...u]..w3.f .G).VkR...M~.c.4l.D.m.$...#R.v....>b.......\|.....0#."...........p.....Gj.\..y:'k...H\9g..W._._.!..#..?......A..03....p.z.x...y....T.R..X.I&..P..^P?z'..=.)=z.D3.M[...u.TF.-....._bs..o.\|.>....-.$.T.}.7......s..}...-.S.r......]a..^...A@%..P....0....B..?E.&!.hS....IEND.B`.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	dropped
Size (bytes):	22341
Entropy (8bit):	7.985622808601863
Encrypted:	false
SSDEEP:	384:m/yKUoecFAqxBwxVLTfDuTV2beBhTiYMwHNmU82sVyP1LS/gaf6:m/TSq3wxVDu4bgEY1HsUJs21L4Xf6
MD5:	877277FC1F039DDD2B3FB681FA69D442
SHA1:	108B83C05ECD920D2161217FB99CD3DB337E497F
SHA-256:	13CDCD37ED238E27C50FAC06BA440885E95BBAE7A85C8C7447111738F7BDBAAF
SHA-512:	EDB2D13348696F4C27916952724DFDBD8247A5DA4EC410607BFA513B86DA46EBAABB90726F9F69EBD4518BD226299C9D8F0631CA148F1F3234A7A706720304EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o. .....PLTE......................E\|..........................................................................................................................$$.................. .......................... .....................................3n..................>w.%11$'......EHH$^u)e} #...9DH......5(....%...T........EV.9F.Ob.$+....+/.....831-J~....+=G><8.WmF1$....6:.....O..NON....C&...SWY....87..........N-.X:'....<S[..qO;.T/.........k\P_ac.4.....o[q....mOE;...}WC.5>...^RG...w<q.........yh[.................m<{\|.diy.{I...suyijkpF)%^8......}.aM...^..._4....n{.......bC7.y{....::.ff......O7il.Obj..\|.v^5mBl..Wwz...e.........f.vl...................}.kH.....,M4T\|V,f.....mf.....E...{.vg.g.....w.....q@@.k...TV1.{`...nA.....[.vv..D+.VS.5Z....pHYs...........~... .IDATx...XSg.>\|J-.X;..M..%uR+M..8d.DB.......B.D6..\|?..e.E. ....(.`.T.-......e:3.f.?3....$.........ie..........<..<.u. .".J.:P\]..Jz;].m.{...;...z..%P......_

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 33, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	653
Entropy (8bit):	7.529075267891249
Encrypted:	false
SSDEEP:	12:6v/7IiL/6Tog8rjYgVLtxY0+Ke3K0oE+Sz170gehVa41wyNhO4NyW3k7:9iL/6BwjYcLtmbaW+SvehFVhn13e
MD5:	8C339BC63E8F842EA73FBD6F6C05738B
SHA1:	001B1BBA7B4A22D4216D7A2F9A5D87A21E2ED7DA
SHA-256:	3132B69DBEB859635EEA70DBDAE8557C143D111EEB9A473FB84FE5FAC904CC18
SHA-512:	B4DFBCC4FF0DC538FA41CDA02092916AEBEDE7AB5518189C6AB83E10666790E6408136518EE35841716850E718CF7142D7D7AB735CFD8399B0FACCB1E7C5E7DA
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/housing-logo2.png
Preview:	.PNG........IHDR... ...!......&.Q....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..W.N.0.v..l-o.....ac#o@..}...@F..J..}..1...G0.k......j].q#...>.q.....sU.Z.....y........E..r.P..do..&......"%l...E\8..v....:......t1.=.="~..C..qb.}+l$I..&..4G9VJ%J..0^:..4.B.fj@.8..S....-._.....Y......j`.Y.>Rp0..d....=...+08...I.x.j..[......7_..X...w.~.....o....gE-O.9....AFS..!."z....$x...f../@ .3v.P .OD...9......+t..`e^`C...@?.e..{..hD......T.,.......T.,%...\.%T(K._@.N....5f)..\|...7(.F,.S.Y0..>...>e.....5k#p..<..RH.bGX...$H..\|Umo..=..+....K.p...?...I\|U5.*.mD....+.......{.]"rG:...1.4.W G.\...>j... 6.^..`..J...\|.....IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/arvest.com/images/small/button-arrow.png
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	542
Entropy (8bit):	7.4842112725293335
Encrypted:	false
SSDEEP:	12:6v/7Q0yoJmyMowTYxOZPNEfY4/4KalbD2XcKd7WTVf:MmyxwuEPyfY4/4t2Xz8
MD5:	ED724D47F6D81A1A1904AAFDD523C1AD
SHA1:	3BF38BACA232251233A2F59B5BF4A3946931940D
SHA-256:	39F485EF565C7CED26632FEA1C6FB2F67B5C90C49C38FE856EAD961258B65682
SHA-512:	A564CCF31195EE6E2349677C9C816C5F92B821DD430E9364440D075E4C4D648FC23A811BFBB0A1DBBFBF86AE79108FFAD5740A758185169C1BE08348C355BA62
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/soc-twitter.png
Preview:	.PNG........IHDR...................tEXtSoftware.Adobe ImageReadyq.e<....IDATx...+DQ...g.I. ..?...,-..7,l.d3ea...R(....ec.B.MQ.)..FMI.....o.33..y....n.{....=...s;......8.E..I.....bE!3W......c...v.. <.......\|`........W................5a.M`.E..`.#...f..<...k.Md\|:S....$.o.....J...#u......@w...Bs.V.\.......t....\|.....[...gR.=../...E.."%....u2.../4l...#Y.wp...'.p.0..?.B0.7v....QX.&.3...e........R..I...<...Ab,...V*.6!a#BD.....H.....&e.EQ.....R.L..9....._...Rr.p....9+.Z.E..?.\.V......5x:{~.\|z.x.`.4..1..{.....IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	downloaded
Size (bytes):	29336
Entropy (8bit):	7.988632151443081
Encrypted:	false
SSDEEP:	768:3f+C+MrI/yi3NgOZ/zk67BE7XLXARnoQl86:3f+ucqzw/zk67BE3ARnox6
MD5:	A8F4BD728E6EABD68138BE06777EB0E5
SHA1:	179DFDE17A8CC71C8AE5CEBB053F43E1193359B2
SHA-256:	E7CF593C0726DB50AEAEB0F6973332AE8C226F467B28463E5CB225C07A9AD5DA
SHA-512:	B89E5ADED388FDE79CD82786B91828585B0985DE844B22B596CBF881016B322FC0AAFDD8B7E438B3D4217E013E4023ECC5A718039CCCFACC0469DE2B13AC63B5
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/awm-trust-mainnav-ad.png
Preview:	.PNG........IHDR.............o. .....PLTE......................E\|...............................................................6n....OJ(......4;#<9%...[SbP--0#QQ(..hbY-kS2YK,.~a..mk..LAC@&FH'.....6j[.r.....VX(...7+(q_2..WA-ji+%.%.xZ....\|2.qWcc)aH0.aFDO#....f..;..^<F#C.+..t.............u.....H7-...Z_'......qq-.._......JT$.nM.xe...zw0../%'.gN963..@......uQ7...E?;..j..v..qmP?.zT.sO...wi1...S5...FuX>z`7.......hE......~v{XI......kYQ[$...Z<..{.N;`......\..scjF5P...dW.u9.~U...`}..l8YA9.'f......NHB.7;.~o.t...efZc90.w....~\|...jM.....Cz..gG`K?.td.2O.P....%<utttoawD4.W?pZM......L..'.....b,[y...........>e..}@...m..Ot.aTI.Cg............rdW._N.zU\|....q....ZB[o.28ENcs.@[VYO6Ma.....qY........l....}l.~...$Nk.CC..;n..w.Rt.r^......V.......gf&w.LSa......rx.ii.S.l......//....U\........pHYs...........~... .IDATx....\S.?~...ftp.m.37c..@. $...J.R)!...$.@... .J.x...A).6..{/.....vg.s.{...'`..;.{....a..Yk....k}........&6.#.S.8..MfnY.*F j..)..3'..U........v...?.+RB

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 90, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	4885
Entropy (8bit):	7.944765217361098
Encrypted:	false
SSDEEP:	96:KOWpH2LjL5eX0V7gC3zuN50vIAJ2tz9sNZWZ4hfpzGmxn6F:hoUQ87gCCH13gZWqfpnVe
MD5:	BEF3793B9B9A330F75B84614E2748868
SHA1:	F53F8B1CD3EDF18FC1C361BD725637C8A4D95E75
SHA-256:	45B33290A887374B0351AD46D4F1FDDC8038B3B805AE11FC1520C732108691A8
SHA-512:	44BD46783A3E0C30623C6274AC145D25A20100D3786106485B528430D7D4CEF78BF29F15B426DB182600DF67CE8D42031A5B2A9C8AFB4146FA51DAE8C2A781E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Z.......G....IDATx..].tU..Nc....P....T.EPA.b...Q..A.(b.7.[...T\jm..Z\p...J+(..VO.....".1@d.a......s....w_.K.r..N.f....f.....e...?m.]..a.v.".E.....i. BX.]..a.v.".E.`...^`...=.......aK.B..{..e.IP....Y...W.\|7..!M.....g.{.....u`.9.7...Q...f..%./..l)+JH!k.._.3(..Q..OXn.^......l.o.$.../....]........o.^.Pc.@..w....c..eiog...C....0.m..v!#.c..eq)d.....b..,'...ii.1.?@.g5Jac.B3...=z.....UC...T.C.x0.7z.b)....5B..].'0..n'[}.^..']....x.w.K...d.hO..Q.k....i..........j.X@Kh=5...(s.O...J.....~u.M..kC^#....epv....^/p..d.5.(....S.;...O.6._.3]....Zw......=....y....za.}c./'.w!U..DtZ5....U..(u.O.6...{......W.c&...i..~!.X#..........x....h...B........+w.f..h....A...S.l[...~Eb.mO--.N.O.N.sc+.h...)_s:C..1dQ......3).........m..Y.4p...D/.....@....N...TH[.>......J5.DXC._C11.\K...I..[...j.4(....j".mM...6.[E,.C..^...NGS0.......k@.=...Z..).)g`.....r...SK..E....\..[0.F.....;Q......U...r..@.../.{.r.=.........[4.m}..V.......=...(.L..."...z..B...K

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	686
Entropy (8bit):	6.646617916554124
Encrypted:	false
SSDEEP:	12:6v/7QrUxOteVIloDihLDjZuqpWJp5bUqRa3p5o:GMeCrh0ptUea7o
MD5:	91B6EC862551B25A5A254BC219D2D0D6
SHA1:	49A743EC6E545E31B8074F0B09BA12A6EEBA5080
SHA-256:	2EE5B697A7B857FFE13445F6B2EE5CA3F0AB76BE6C03B51BC53879648C7BD9A8
SHA-512:	18C9F4D4188F453D96A1C8743B84E987E83F65C07C03B4F7A9D4A6ECEC8878178B0A19502CD88B5FFB856434A707EF9B9D9F64FEF7B8261B777F5DF9155ABE8E
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/soc-instagram.png
Preview:	.PNG........IHDR...............$.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.....w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w...........................z..x.............................R5...2tRNS.J.....LN..R....EM..DK........F..IP...S..WQ...T"..'....bKGD....H....pHYs..........o.d....IDAT(.m.i..0....(;..Nw.....rx....G2.Q:y^.......X......-.uW.D....bZZ.+(..U...?p.4L..4..>..b..l.%9....g.....:.a..Y..uhpj.x....[...-..A.0..`.../.D.EO....C.y....C.B?.t2y......&.......O..R.o.....;....'..]......y..F...e..3...&?.[..;_..#Y.S.........IEND.B`.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	589
Entropy (8bit):	7.546633690220489
Encrypted:	false
SSDEEP:	12:6v/7Q0ylwPSLJEeK+9kHaoG4X6PqjVqAk1T7tgJW6w:2PcJbrSaonVjVqfFtgJWR
MD5:	751B8EC0162EFB0FAF7D37FF3A1C9467
SHA1:	3A524903AB49B0273F484B62E5740E306AAD2F6F
SHA-256:	610C99D9F333E8E356584239F9CBF91592F1C38877FCE7D1D1DA4BF3AAC94E44
SHA-512:	8EC40B171713A6E3DCAB4222639E94C7486442279B019890801E7AC507426E7376840402D03BA0ABAF28B8B987BA10D2B03E5424A332D6A63B5543158543129F
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/soc-fb.png
Preview:	.PNG........IHDR...................tEXtSoftware.Adobe ImageReadyq.e<....IDATx...K.A.....&v.$~.....{.E.....E...z.B.........`O..... R. ...M.Z.I.f....B.L..=....}...%O...v..g.fU..2.z.C..q......F..'...OFL=BP..Q.ZPX.O..@e.n....u.A,.0;1....@<ll.Q8.!...p...p\,...7sC....,r.%.....x.k..~.ws.Ho..(_...ijg.....p...o....>...I....{....!._.&.w....#.}..O...zhx..7.ar\|...l}6....#>&.yV..qC....OK[.)...X?..i.-....k..7..:E....../>.l....E$..Q...@\...>ih~a...:()8..G..V..}.E.m^H....Q..W.....W+&...j#.+.9.-W*r.r....k......)...bw.....~-2~...2.<N....v..B.V......6..oQ....IEND.B`.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	686
Entropy (8bit):	6.646617916554124
Encrypted:	false
SSDEEP:	12:6v/7QrUxOteVIloDihLDjZuqpWJp5bUqRa3p5o:GMeCrh0ptUea7o
MD5:	91B6EC862551B25A5A254BC219D2D0D6
SHA1:	49A743EC6E545E31B8074F0B09BA12A6EEBA5080
SHA-256:	2EE5B697A7B857FFE13445F6B2EE5CA3F0AB76BE6C03B51BC53879648C7BD9A8
SHA-512:	18C9F4D4188F453D96A1C8743B84E987E83F65C07C03B4F7A9D4A6ECEC8878178B0A19502CD88B5FFB856434A707EF9B9D9F64FEF7B8261B777F5DF9155ABE8E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............$.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.....w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w...........................z..x.............................R5...2tRNS.J.....LN..R....EM..DK........F..IP...S..WQ...T"..'....bKGD....H....pHYs..........o.d....IDAT(.m.i..0....(;..Nw.....rx....G2.Q:y^.......X......-.uW.D....bZZ.+(..U...?p.4L..4..>..b..l.%9....g.....:.a..Y..uhpj.x....[...-..A.0..`.../.D.EO....C.y....C.B?.t2y......&.......O..R.o.....;....'..]......y..F...e..3...&?.[..;_..#Y.S.........IEND.B`.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	dropped
Size (bytes):	23282
Entropy (8bit):	7.987772715378765
Encrypted:	false
SSDEEP:	384:CYdh+x77gHVS9kNcFQD18/DP/jZABuo0dv2lZFNs2C6HCcT/po182KhikN:CYog1oPQD18/XjoqvYZrU6HCcTho/Khd
MD5:	0A01C98ED517204FCD4635E15C8AC4D1
SHA1:	9ADEAF3D815C03A9DA07C99FFEF364BE618FDCEC
SHA-256:	5566D8578CF4B69B5523A1D983AA31DE64C5E40BC55DB1C5551AC01F647CA529
SHA-512:	C406BF22D59FD660550E9A639608ECCECE75B9BA48FD5027ED7D839E71303B285175C228BC83D98C80F53EB283E6E62F3E2D529B0AE26A46713E145F8863032C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o. .....PLTE......................E\|..................................................;&+.......S5(.....!.....+u.!..3..6m...+\|.j...[7aS[-....>...N0,k.pWY)..V?:%..4$.8.....Z:K..-..'..+a.+W.cKJ&....sPH{I2...tB).....1..; .gb~..+G..WI.^[.`RQ6+...i<&..hF:8..Z.............xjC.s....l..........gh.R+.jC...O(.......=.+...Y....Ex....V`.D.............LWw(c..........m..pd...q\.&b1......gMQf'!..7;...}j....>..r.p@d\n....Awbh.n......t..K.go......gU......\........c.\|n..q.....O.........n.....B...bD..U...v?...a4K.....8Qq....s.....x/....qt.\|..f7........}Sh.A]..?.....^.r\|.X....QGQ.....X.bt.!2r.'.<8@..Eg..O..rQ...0...c.......=...HH................\|.;..\|S..........^...8\....A.....U......c.......l)z......'I.rv<C.....~.^..........S...//.7..\|..X......pHYs...........~... .IDATx...\.Y.6^.R.......&D0a.1.."Q...E...Y..EDe.5!.... ."....l"...(..v.m...........;..U.A..y.... ..TN..T..y....hIMI...........q......'...S^.e.^...z...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 41, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1411
Entropy (8bit):	7.797354585949875
Encrypted:	false
SSDEEP:	24:zHX52eQ1ojmnIOLV0q1Tu53DIpknnT3hnXHHOFbB3WsvtfL2+qMV9:r5DQyjmJ0q1yZR7hnXHHY4svtfL7q8
MD5:	4D7D634E423739BCC12CF93F7F9D526C
SHA1:	A28A5AB097BD295AC094206062902A6271995FD8
SHA-256:	971CBFD037BDFA175BBCC512EB44EF5430B917A88DF8B0B0344D85DFF95F795E
SHA-512:	EBCE907617F99FDC49707BC48C77F82D415AB8927B4E880488CDA00BBEE60C3B03E9DADFC6C102E2519DA4EF3C1090E3BCEF9B37441D73DBB4C5DBC8623164E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...+...).....#.G.....tEXtSoftware.Adobe ImageReadyq.e<...%IDATx..WiS[U.&.I K.`R...M.k..Z..R.mq..T....T.....TFg.g.wkk...6`)..C.BB...5aI.)..w .....!g..y.{..wy......;.A.;..B.B.B.B.. `.RM.u....r?..s:.......GLL......].......N.,...}......f/.......277..;..........y.h0x<3...6......~.<%..~euuP....%..........\|^..f....N'....O...[....+.+..3J8==]PP.`0...&J(...>!..:.......j.......].J6.......;>n.~w.....Sk........:e..........eA.O.....A.F.V(......\|.v...h.....<..SZV._P.d2+N'&&........g................~.S.........,x.`..........B....-KJ..y......:..........x.h4..RYjNN.X$Fb=....H.'x.~..W.M..,,...?..v........j..a.k..d.\.....~.h...DFr.j...-9&...6..........P*.x.KF.1Y.....t9.QB.XLE@#o(X.o......33.z.H..NNN.....X.....p...1....P.=...x.)..9..J....J$................y...i...>..R5,.K$.Ie.........K.o.y.N"d.....c..#.....X.mQ.+A. ...n..<.l...edfV.:..p8...JL!....omm..q.lA....b.".?+c.~.......9n.q.......Q...$.G.:..(AS.....b!.\|.....l[........JeX.`.s..#....p6k.S..

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15201
Entropy (8bit):	1.9248055879609702
Encrypted:	false
SSDEEP:	48:ju+k29W8sEv4KvNxN+Y9c6BCvG+I7cdpck7Fm46RhTJbYHBQB3p/kzQf:3kEWRIxNX2CcXFp6RlqH+r/Zf
MD5:	C8BDADA8E3406CB7F96CA9A3F28977B1
SHA1:	DC7ED96E2C5C32999CDD6ADA4BFE0B4B93269667
SHA-256:	3FFBB276D8124704F5A7E0035B5BB87E4ADC7A7E4B322AE2ED476EE37FFA7FFC
SHA-512:	0B3D6C539E49DD02F67C402BA5FBBA9333204FEC1C85344037ABDD5B6905BA5FF6DF5C80CDC5255B6293296BF0EF038175B92C4AAE2D57C0FD986F5DB6BD7621
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............*.....pHYs..........+....8"iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool>. <xmp:CreateDate>2015-12-01T11:15-06:00</xmp:CreateDate>. <xmp:ModifyDate>2015-12-01T12:13:15-06:00</xmp:ModifyDate>. <xmp:Me

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 234, 8-bit colormap, interlaced
Category:	downloaded
Size (bytes):	23282
Entropy (8bit):	7.987772715378765
Encrypted:	false
SSDEEP:	384:CYdh+x77gHVS9kNcFQD18/DP/jZABuo0dv2lZFNs2C6HCcT/po182KhikN:CYog1oPQD18/XjoqvYZrU6HCcTho/Khd
MD5:	0A01C98ED517204FCD4635E15C8AC4D1
SHA1:	9ADEAF3D815C03A9DA07C99FFEF364BE618FDCEC
SHA-256:	5566D8578CF4B69B5523A1D983AA31DE64C5E40BC55DB1C5551AC01F647CA529
SHA-512:	C406BF22D59FD660550E9A639608ECCECE75B9BA48FD5027ED7D839E71303B285175C228BC83D98C80F53EB283E6E62F3E2D529B0AE26A46713E145F8863032C
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/images/debit-card-beach-mainnav-ad.png
Preview:	.PNG........IHDR.............o. .....PLTE......................E\|..................................................;&+.......S5(.....!.....+u.!..3..6m...+\|.j...[7aS[-....>...N0,k.pWY)..V?:%..4$.8.....Z:K..-..'..+a.+W.cKJ&....sPH{I2...tB).....1..; .gb~..+G..WI.^[.`RQ6+...i<&..hF:8..Z.............xjC.s....l..........gh.R+.jC...O(.......=.+...Y....Ex....V`.D.............LWw(c..........m..pd...q\.&b1......gMQf'!..7;...}j....>..r.p@d\n....Awbh.n......t..K.go......gU......\........c.\|n..q.....O.........n.....B...bD..U...v?...a4K.....8Qq....s.....x/....qt.\|..f7........}Sh.A]..?.....^.r\|.X....QGQ.....X.bt.!2r.'.<8@..Eg..O..rQ...0...c.......=...HH................\|.;..\|S..........^...8\....A.....U......c.......l)z......'I.rv<C.....~.^..........S...//.7..\|..X......pHYs...........~... .IDATx...\.Y.6^.R.......&D0a.1.."Q...E...Y..EDe.5!.... ."....l"...(..v.m...........;..U.A..y.... ..TN..T..y....hIMI...........q......'...S^.e.^...z...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://ipv6.52-229-18-172.cprapid.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-29T02:48:38.147921+0200	2032517	ET PHISHING Generic Multibrand NewInjection Phishing Landing Template	2	52.229.18.172	443	192.168.2.6	49717	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:48:25.635402918 CEST	443	49709	40.113.103.199	192.168.2.6
Sep 29, 2024 02:48:25.762288094 CEST	443	49709	40.113.103.199	192.168.2.6
Sep 29, 2024 02:48:25.762375116 CEST	443	49709	40.113.103.199	192.168.2.6
Sep 29, 2024 02:48:25.762468100 CEST	49709	443	192.168.2.6	40.113.103.199
Sep 29, 2024 02:48:25.762763023 CEST	49709	443	192.168.2.6	40.113.103.199
Sep 29, 2024 02:48:25.762787104 CEST	443	49709	40.113.103.199	192.168.2.6
Sep 29, 2024 02:48:28.105742931 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 02:48:28.105742931 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 02:48:28.418184042 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 02:48:32.008856058 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:32.008904934 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:32.008966923 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:32.009510040 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:32.009527922 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:32.795016050 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:32.795191050 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:33.860025883 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:33.860057116 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:33.860418081 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:33.862802029 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:33.862868071 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:33.862874985 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:33.863172054 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:33.907412052 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:34.032839060 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:34.032919884 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:34.032984018 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:34.033226967 CEST	49710	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:34.033251047 CEST	443	49710	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:36.286978006 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:36.287009954 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:36.287149906 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:36.287635088 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:36.287646055 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.113765955 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.113868952 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:37.115407944 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:37.115420103 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.116297007 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.117703915 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:37.117769003 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:37.117774963 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.117881060 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:37.163403034 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.185720921 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.185753107 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.185797930 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.186089993 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.186096907 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.186134100 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.187005997 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.187021017 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.187184095 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.187192917 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.297123909 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.297310114 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.297375917 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:37.297502995 CEST	49716	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:37.297528028 CEST	443	49716	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:37.713087082 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 02:48:37.713087082 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 02:48:37.817867041 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.818200111 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.818224907 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.819267988 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.819334030 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.821084023 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.844628096 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.844777107 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.844852924 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.844866991 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.845906973 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.845966101 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.847887993 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.847908020 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.898531914 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.898634911 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.900815964 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.948888063 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:37.948914051 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:37.995294094 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.033061981 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 02:48:38.056559086 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.056591988 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.056598902 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.056646109 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.056654930 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.056691885 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.056709051 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.105405092 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.146680117 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.146687984 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.146733999 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.146804094 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.146821976 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.146841049 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.146848917 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.146893024 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.147711039 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.147718906 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.147761106 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.147773981 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.147819042 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.147855043 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.420515060 CEST	49717	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.420535088 CEST	443	49717	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.473371029 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.474632978 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.474697113 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.474770069 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.475791931 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.475801945 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.475858927 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.477072954 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.477092028 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.477344036 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.477356911 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.489532948 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:38.489582062 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:38.489634037 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:38.490478039 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:38.490493059 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:38.519396067 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.647434950 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.647466898 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.647510052 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.647525072 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.647639990 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.647680998 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.674787045 CEST	49718	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:38.674815893 CEST	443	49718	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:38.954226971 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:38.954885960 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:38.954920053 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:38.956012964 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:38.956087112 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:38.958404064 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:38.958466053 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:38.958906889 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:38.958915949 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.011795044 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.055231094 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.055728912 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.055792093 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.055811882 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.055901051 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.055955887 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.055963039 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.056241989 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.056289911 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.056298971 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.056391954 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.056438923 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.056446075 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.057073116 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.057126999 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.057132959 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.060553074 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.060621023 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.060627937 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.075107098 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.075141907 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.075218916 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.076201916 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.076255083 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.076402903 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.077034950 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.077044010 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.077128887 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.077714920 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.077733040 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.079056978 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.079073906 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.079140902 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.079651117 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.079695940 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.079751015 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.080245018 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.080408096 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.080421925 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.080718040 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.080735922 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.081372023 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.081409931 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.081470013 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.081856012 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.081872940 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.083379984 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.083396912 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.083589077 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.083600998 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.083959103 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.083981037 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.084033012 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.084121943 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.084454060 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.084475040 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.085939884 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.086061001 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.086324930 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.086337090 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.086378098 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.086899042 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.086906910 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.087033033 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.087254047 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.088432074 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.088490963 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.088550091 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.104228973 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.127446890 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.131418943 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.142554045 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.142608881 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.142633915 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.142658949 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.142664909 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.142674923 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.142700911 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.142705917 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.142748117 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.142755032 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.143584967 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.143635035 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.143644094 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.143734932 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.143826962 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.143834114 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.144174099 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.144264936 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.144292116 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.144299984 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.144408941 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.144462109 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.144469023 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.144515991 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.144994974 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.145143032 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.145200968 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.145207882 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.145288944 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.145375967 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.145379066 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.145404100 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.145600080 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.145852089 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.146015882 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.146070957 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.146076918 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.197864056 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.229846001 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230030060 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230087042 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.230094910 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230171919 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230216026 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230226994 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.230232954 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230279922 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.230285883 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230326891 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230366945 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.230372906 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230731010 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230768919 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230792999 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.230799913 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230812073 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.230825901 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.230859995 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.231482029 CEST	49723	443	192.168.2.6	151.101.194.137
Sep 29, 2024 02:48:39.231492043 CEST	443	49723	151.101.194.137	192.168.2.6
Sep 29, 2024 02:48:39.324472904 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.324502945 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.324568033 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.324598074 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.331155062 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.331176996 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.331237078 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.331257105 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.371439934 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.371439934 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.410983086 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.410996914 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.411056042 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.411092043 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.411098003 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.411112070 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.411173105 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.411173105 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.412494898 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.412586927 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.423154116 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.423163891 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.423201084 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.423230886 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.423253059 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.423280001 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.423300028 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.423326015 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.423399925 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.423412085 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.423435926 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.423486948 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.423804045 CEST	49721	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.423830032 CEST	443	49721	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.425801039 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.425838947 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.425900936 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.426124096 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.426140070 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.445207119 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.445281029 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.497658014 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.497734070 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.498388052 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.498466015 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.499749899 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.499829054 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.500633955 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.500719070 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.501493931 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.501580000 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.502254009 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.502334118 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.502336979 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.502383947 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.502827883 CEST	49722	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.502850056 CEST	443	49722	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.508888006 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.508919954 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.509011030 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.509207010 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.509222984 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.552740097 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.552968979 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.552989006 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.554160118 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.554223061 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.561283112 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.561454058 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.561475992 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.562506914 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.562572002 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.569293976 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.569473028 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.569480896 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.570915937 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.570972919 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.618046045 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.618383884 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.618695021 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.618771076 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.618796110 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.618897915 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.618901014 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.618928909 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.619024992 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.619035959 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.619070053 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.619081974 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.628231049 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:39.628252983 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:39.628312111 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:39.628576040 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:39.628586054 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:39.667771101 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.667996883 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.668009996 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.682528019 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.682779074 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.721442938 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.721484900 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 02:48:39.721581936 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 02:48:39.723990917 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724136114 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724204063 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.724224091 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724349022 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724400997 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.724411011 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724538088 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724586010 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.724594116 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724623919 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.724781990 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.724817038 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.724833012 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.724848986 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.724884987 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.724889994 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.724896908 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.724903107 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.724936962 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.724962950 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.724970102 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.725312948 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.725519896 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.725583076 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.725589991 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.726083994 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.726139069 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.726144075 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.728315115 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728414059 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728486061 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.728494883 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728605032 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728640079 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728662968 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.728667974 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728669882 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728684902 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.728692055 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728718996 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.728765965 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.728787899 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.729320049 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.729331970 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.729384899 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.729389906 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.729603052 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.729643106 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.729652882 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.731767893 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.731769085 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.733400106 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.733428955 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.733447075 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.733453035 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.733680964 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.740880013 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.753768921 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.753787994 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.754941940 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.754954100 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.755434990 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.755445957 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.755640984 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.755646944 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.756459951 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.756529093 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.756752968 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.756791115 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.756834984 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.756834984 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.756949902 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.757026911 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.757385969 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.757448912 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.757734060 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.757742882 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.758269072 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.758476019 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.762840033 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.762944937 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.764430046 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.764498949 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.768616915 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.768631935 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.768733025 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.768743038 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.768858910 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.768867016 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.780942917 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.780952930 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.797069073 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.810211897 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810295105 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810412884 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810448885 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810465097 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.810480118 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810494900 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.810518980 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810559988 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810656071 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.810666084 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.810744047 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.811352968 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.811578989 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.811635971 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.811642885 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.811774969 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.811878920 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812267065 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812304020 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.812316895 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812329054 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.812469959 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812521935 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.812530041 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812649012 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812741995 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.812750101 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812872887 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.812891960 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.812891960 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.812918901 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.812980890 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.812988997 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.813119888 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.813170910 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.813179016 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.815098047 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.815162897 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.815205097 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.815213919 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.815260887 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.815306902 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.815318108 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.815352917 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.815361023 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.815598011 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.815730095 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.819154978 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819309950 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819334030 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819359064 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819361925 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.819377899 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819401026 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.819406986 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819431067 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819453001 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.819454908 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819463968 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819499016 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819503069 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.819506884 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.819552898 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.820255995 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.820307016 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.820312977 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.820588112 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.820610046 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.820632935 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.820660114 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.820664883 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.820676088 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.821152925 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.821177006 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.821202040 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.821202993 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.821211100 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.821249962 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.821258068 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.821263075 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.821291924 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.821979046 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.822073936 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.822078943 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.868618011 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.877305031 CEST	49728	443	192.168.2.6	104.17.24.14
Sep 29, 2024 02:48:39.877321959 CEST	443	49728	104.17.24.14	192.168.2.6
Sep 29, 2024 02:48:39.879136086 CEST	49729	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.879167080 CEST	443	49729	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.909749985 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.909785032 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.909841061 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.909851074 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.909862995 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:39.909928083 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:39.937259912 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937279940 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937287092 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937319994 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937342882 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.937350988 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937402010 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.937777042 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937815905 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937824011 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937850952 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.937901020 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.937901020 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.937901020 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.937911987 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.968218088 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.968235016 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.968311071 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.968324900 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.968338013 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.968379021 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.987131119 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.987164021 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.987173080 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.987207890 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.987237930 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.987256050 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:39.987272978 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.989810944 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:39.989810944 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.023730040 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.023740053 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.023773909 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.023781061 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.023849010 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.023880005 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.023880005 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.023945093 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.024322033 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.024334908 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.024367094 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.024380922 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.024386883 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.024431944 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.024431944 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.024447918 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.024463892 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.024523020 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.040096998 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.040404081 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.040420055 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.040772915 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.041541100 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.041608095 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.041781902 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.043247938 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.077534914 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.077558041 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.077598095 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.077624083 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.077666044 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.077831030 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.077866077 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.077893972 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.077914953 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.077923059 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.078013897 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.078058004 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.087408066 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.093020916 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.125379086 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.125924110 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.125936985 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.126451015 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.127299070 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.127377987 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.127644062 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.143115997 CEST	49731	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:40.143151999 CEST	443	49731	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:40.160353899 CEST	49724	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.160375118 CEST	443	49724	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.161003113 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.161027908 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.161179066 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.162590981 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.162606001 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.163774014 CEST	49725	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.163793087 CEST	443	49725	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.164344072 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.164385080 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.164467096 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.165997982 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.166014910 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.166395903 CEST	49726	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.166403055 CEST	443	49726	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.166625977 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.166647911 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.166698933 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.169346094 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.169357061 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.173706055 CEST	49727	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.173721075 CEST	443	49727	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.174029112 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.174041033 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.174103022 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.175120115 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.175131083 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.175398111 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.284719944 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.284756899 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.284765005 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.284785986 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.284849882 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.284867048 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.284879923 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.309412003 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:40.312448025 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:40.312470913 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:40.314007998 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:40.314073086 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:40.319633007 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:40.319729090 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:40.338696003 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.371488094 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.371529102 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.371648073 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.371659040 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:40.371661901 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.371671915 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:40.371826887 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.371840000 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.371882915 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.371913910 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.371938944 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.372488022 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.372495890 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.372549057 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.373441935 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.373450041 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.373512030 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.419105053 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.419940948 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:40.438256979 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.438271046 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.438381910 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.438431025 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.458455086 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.458468914 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.458517075 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.458575010 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.458607912 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.458623886 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.458623886 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.458663940 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.459157944 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.459175110 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.459249973 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.459677935 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.459687948 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.459789038 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.460527897 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.460604906 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.460629940 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.461911917 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.779932022 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.787101030 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.792159081 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.792222023 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.792246103 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.792736053 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.792772055 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.793071032 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.793083906 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.793097973 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.793157101 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.793214083 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.793373108 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.794207096 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.794262886 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.794858932 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.794923067 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.795780897 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.795834064 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.796241999 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.796251059 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.796545982 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.796644926 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.798420906 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.803102970 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.803117037 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.803606987 CEST	49732	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.803630114 CEST	443	49732	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.804461956 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.804485083 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.804774046 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.806322098 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.806335926 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.807081938 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.807163954 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.820014954 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.820241928 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.831037998 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.831056118 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.831582069 CEST	49733	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.831604004 CEST	443	49733	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.831789970 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.831824064 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.832014084 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.833020926 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.833034992 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.837874889 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:40.839405060 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.839406967 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:40.885560989 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.027282000 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.027373075 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.027558088 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.035501957 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.035573959 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.035630941 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.038821936 CEST	49737	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.038845062 CEST	443	49737	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.039256096 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.039290905 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.039494991 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.040112972 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.040127039 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.042026043 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.042083979 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.042254925 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.042990923 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.043093920 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.043140888 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.049571037 CEST	49736	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.049595118 CEST	443	49736	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.049911022 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.049948931 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.050020933 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.051017046 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.051033020 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.051287889 CEST	49735	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.051306009 CEST	443	49735	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.051671028 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.051706076 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.052017927 CEST	49738	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.052026033 CEST	443	49738	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.052062988 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.052443981 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.052469969 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.052613020 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.053046942 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.053062916 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.053579092 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.053595066 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.068017960 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:41.068033934 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:41.068237066 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:41.070151091 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:41.070164919 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:41.411287069 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.411540985 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.411551952 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.411892891 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.413021088 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.413080931 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.414067030 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.455447912 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.462388039 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.464760065 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.464776039 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.465137005 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.465738058 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.465801954 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.466232061 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.511399984 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.638319016 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:41.638427973 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:41.638503075 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:41.639508963 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:41.639554024 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:41.640563965 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:41.640589952 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:41.640655041 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:41.641022921 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:41.641033888 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:41.643992901 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:41.644027948 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:41.644088984 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:41.644659042 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:41.644670010 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:41.653613091 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.654345036 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:41.654376030 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:41.654433012 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:41.654879093 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.654892921 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.655330896 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:41.655358076 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:41.655802965 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.655864954 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.656414986 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.656474113 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.656568050 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.656575918 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.657123089 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.657191992 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.657236099 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.660327911 CEST	49740	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.660340071 CEST	443	49740	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.661232948 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.661251068 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.661308050 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.663233995 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.663244963 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.667531013 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.668911934 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.668920040 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.669259071 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.670038939 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.670103073 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.670584917 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.671515942 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.671956062 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.671966076 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.672936916 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.672997952 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.673588991 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.673648119 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.674127102 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.674134016 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.676251888 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.677767992 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.677784920 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.681360960 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.681423903 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.682646036 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.682728052 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.682848930 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.682857990 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.698337078 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.708764076 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:41.708833933 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:41.712433100 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.712496996 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.712546110 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.714581013 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.714607954 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.714662075 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.714833975 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.715399027 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.728570938 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.738208055 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.738231897 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.738296032 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.738929033 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.738965034 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.739018917 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.739502907 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.739528894 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.739588976 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.740406990 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.740418911 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.740469933 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.740859985 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.740874052 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.740932941 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.741606951 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.741620064 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.742356062 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.742373943 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.742985010 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.743000031 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.743316889 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.743335009 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.743603945 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.743627071 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.744071007 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.744081974 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.748389959 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:41.748403072 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:41.749345064 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:41.752635956 CEST	49741	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.752648115 CEST	443	49741	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.753262043 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.753271103 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.753324032 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.755398035 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.755405903 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.791774035 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:41.897860050 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.897922993 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.898005009 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.917443037 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.917503119 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.917537928 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.919189930 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.919224024 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.919262886 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:41.922532082 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.922702074 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:41.922744989 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.032345057 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.040194035 CEST	49744	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.040213108 CEST	443	49744	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.040657043 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.040695906 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.040749073 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.044320107 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.044337034 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.058844090 CEST	49745	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.058866978 CEST	443	49745	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.059497118 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.059528112 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.059586048 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.061280012 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.061291933 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.062019110 CEST	49742	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.062036991 CEST	443	49742	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.062221050 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.062253952 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.062308073 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.079395056 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.090483904 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.090502024 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.090610027 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.090985060 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.091006994 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.092159033 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.092215061 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.105680943 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.105865002 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.106117964 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.106132030 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.109302998 CEST	49743	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.109328985 CEST	443	49743	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.110152006 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.110194921 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.110306025 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.112111092 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.112713099 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.112721920 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.113292933 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.113308907 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.114274025 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.114326954 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.114821911 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.114881039 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.114984989 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.114993095 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.116233110 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.116727114 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.116734028 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.117682934 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.117686033 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.117758036 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.117851973 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.117870092 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.118396044 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.118453979 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.118694067 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.118704081 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.118841887 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.118894100 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.121093988 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.121156931 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.121257067 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.121263027 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.150114059 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.166225910 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.166234016 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.166486025 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.202759981 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.202898026 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.202944994 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.202985048 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.203021049 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.203450918 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.203527927 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.203562975 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.203567028 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.203577995 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.203649044 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.203675985 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.203694105 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.204386950 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.204741001 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.204755068 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.204926014 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.208185911 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.218031883 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.218224049 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.218391895 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.218391895 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.218441963 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.218461037 CEST	49746	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.218467951 CEST	443	49746	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.252933025 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.252974987 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253087044 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.253107071 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253614902 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253698111 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253741026 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253771067 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253789902 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.253799915 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253810883 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.253819942 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.253977060 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.254419088 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.254534006 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.254549026 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.256957054 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257039070 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257071018 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257095098 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.257102966 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257313967 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257344961 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.257350922 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257488012 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257550001 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257577896 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257579088 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.257589102 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.257637978 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.257637978 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.257808924 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.258018970 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.258038044 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.260338068 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.260385036 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.260473013 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.260508060 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.260539055 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.260561943 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.260570049 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.260587931 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.260587931 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.260729074 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.261004925 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.261018038 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.261147976 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.261172056 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.261177063 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.261359930 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.261364937 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.261780024 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.261828899 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.261924982 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.261930943 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.264640093 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.264775991 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.264780998 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.267333984 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.267957926 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.267975092 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.268342972 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.271807909 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.271840096 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.272058964 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.272700071 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.272700071 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.272712946 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.272792101 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.276371956 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.276385069 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.291223049 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.291234016 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.291254997 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.291280985 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.291290045 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.291320086 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.291340113 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.291380882 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.291408062 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.291858912 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.307533026 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.307544947 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.307550907 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.323632002 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.364044905 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.364104033 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.364132881 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.364172935 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.364190102 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.364207983 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.364347935 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.364670038 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.364803076 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.364819050 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.365021944 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.365061045 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.365088940 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.365117073 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.365129948 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.365151882 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.365180016 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.365201950 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.365251064 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.365775108 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.365824938 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.365842104 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.365932941 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366003036 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366027117 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366049051 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366085052 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.366092920 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.366113901 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366116047 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.366133928 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366837025 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366847038 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.366905928 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366914988 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.366918087 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.366934061 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.366967916 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.367018938 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.367032051 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.367189884 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.367543936 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.367583036 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.367645979 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.367654085 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.367706060 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.367731094 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.367856026 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.367866993 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.367943048 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.367952108 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.368176937 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.368191004 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.368808031 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.368808985 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.368833065 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.368999958 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.369101048 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.369191885 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.369223118 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.369240046 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.369252920 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.369302988 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.369338989 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.369703054 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.369782925 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.369842052 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.369971037 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370062113 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370088100 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.370102882 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370239973 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370271921 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.370279074 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370395899 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370470047 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370497942 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.370507002 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370635986 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370662928 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.370676994 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370794058 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370820999 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.370827913 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.370997906 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.371005058 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371083021 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.371088028 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371198893 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.371202946 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371268034 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.371269941 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.371274948 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371356010 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371488094 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371570110 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371598959 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.371606112 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.371629953 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.374285936 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.374285936 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.374294996 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.374445915 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.375401974 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.375403881 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.375411987 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.375492096 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.375756979 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.375770092 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.376041889 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.376192093 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.376943111 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.376943111 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.377041101 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.377305984 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.377336025 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.377381086 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.377427101 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.377458096 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.377648115 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.377677917 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.377727032 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.377743959 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.377779961 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.377850056 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.377883911 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.378135920 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.378206015 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.378257036 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.378257036 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.378263950 CEST	49749	443	192.168.2.6	104.17.25.14
Sep 29, 2024 02:48:42.378278017 CEST	443	49749	104.17.25.14	192.168.2.6
Sep 29, 2024 02:48:42.379666090 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.379672050 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.383297920 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.383414984 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.383830070 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.383994102 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.384143114 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.384147882 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.388789892 CEST	49748	443	192.168.2.6	151.101.2.137
Sep 29, 2024 02:48:42.388823032 CEST	443	49748	151.101.2.137	192.168.2.6
Sep 29, 2024 02:48:42.399413109 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.399549007 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.399580956 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.399590969 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.399812937 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.399842978 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.400619984 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.401879072 CEST	49750	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.401897907 CEST	443	49750	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.405644894 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.405937910 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.405957937 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.407079935 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.407664061 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.407835960 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.411956072 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.415482998 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.415493965 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.415499926 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.415523052 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.415530920 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.424935102 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.424947977 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.424988985 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.449383020 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:42.449424028 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:42.451396942 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.451458931 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.451488972 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:42.451549053 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.451564074 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.451710939 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.452914953 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:42.452929020 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:42.453803062 CEST	49751	443	192.168.2.6	104.18.10.207
Sep 29, 2024 02:48:42.453826904 CEST	443	49751	104.18.10.207	192.168.2.6
Sep 29, 2024 02:48:42.459404945 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.464730978 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.478499889 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.520315886 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.520384073 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.524265051 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.524463892 CEST	49752	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.524482012 CEST	443	49752	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609010935 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609039068 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609095097 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609123945 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.609200954 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.609616041 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609653950 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609661102 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609684944 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.609766006 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.609766960 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.609778881 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.610281944 CEST	49754	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.610321045 CEST	443	49754	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.611547947 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.611551046 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.611589909 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.611593008 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.611601114 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.611707926 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.611709118 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.611709118 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.611735106 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.611972094 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.611984968 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.611985922 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.612015009 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.612023115 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.612066984 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.612090111 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.612117052 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.614331007 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.614362001 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.614372015 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.614382982 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.614464045 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.614481926 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.623966932 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.623991013 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.623999119 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.624125957 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.624144077 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.656833887 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.656840086 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.656840086 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.656946898 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.665971994 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.666050911 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.666769981 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.666907072 CEST	49760	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.666923046 CEST	443	49760	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.672980070 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.695966959 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.695983887 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.696017027 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.696034908 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.696048021 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.696049929 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.696089983 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.696099043 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.696108103 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.696108103 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.696126938 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.696228981 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.696381092 CEST	49755	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.696391106 CEST	443	49755	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.697715044 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.697976112 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.697990894 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.698007107 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.698024988 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.698044062 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.698055029 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.698056936 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.698121071 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.698143959 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.698380947 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.698409081 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.698421001 CEST	443	49759	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.698451042 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.698518991 CEST	49759	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699002028 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699042082 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699114084 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699316025 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699323893 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699400902 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699418068 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699438095 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699457884 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699481010 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699495077 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699506998 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699506998 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699517012 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699520111 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699533939 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699551105 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699551105 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699583054 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.699615002 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.699734926 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.700685024 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.700732946 CEST	49757	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.700746059 CEST	443	49757	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.700773954 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.701339006 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.701399088 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.701644897 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.703021049 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.703032017 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.703062057 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.703093052 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.703135967 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.703216076 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.703223944 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.703246117 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.703279018 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.703387976 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.704854965 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.704862118 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.705085039 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.708296061 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.708534956 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.708548069 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.709604979 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.709804058 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.710097075 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.710097075 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.710113049 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.710161924 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.714425087 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.714438915 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.714596033 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.714613914 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.714622021 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.714728117 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.715456009 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.715462923 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.715522051 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.715545893 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.715605974 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.716001034 CEST	49758	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.716008902 CEST	443	49758	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.716891050 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.717367887 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.717380047 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.720778942 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.720900059 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.721431971 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.721518040 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.721579075 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.743407965 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.743438959 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.753175974 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.753179073 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.753187895 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.753202915 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.756584883 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.756593943 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.756700039 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.767400980 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.769311905 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.769320965 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.791623116 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.791630030 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.791676998 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.791711092 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.791726112 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.791740894 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.791760921 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.791814089 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.792047024 CEST	49756	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.792062044 CEST	443	49756	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.800873041 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.800908089 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.801018953 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.801323891 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.801326036 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.801331043 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.801362038 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.801692963 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.802052021 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.802061081 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.802541018 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.802551985 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.819817066 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.943854094 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.943931103 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.946265936 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.946291924 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.946377039 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.946382999 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.946405888 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.950018883 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:42.951103926 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:42.956674099 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.956734896 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.956945896 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.959079027 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.959240913 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:42.959394932 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:42.999708891 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.001034021 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.001045942 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.001115084 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.001158953 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.003701925 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.055666924 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:43.055699110 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:43.056662083 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:43.100193977 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:43.125624895 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:43.167403936 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:43.223669052 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.239197969 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.239267111 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.239815950 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.272026062 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.272219896 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.310275078 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.317800999 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:43.317873955 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:43.317923069 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:43.331082106 CEST	49762	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.331121922 CEST	443	49762	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.333358049 CEST	49763	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.333398104 CEST	443	49763	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.334377050 CEST	49764	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.334397078 CEST	443	49764	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.349284887 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.349366903 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:43.354226112 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:43.354253054 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.354660988 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.355406046 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.356959105 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:43.357007027 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:43.357023954 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.357215881 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:43.361869097 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.361937046 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.362015963 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.362235069 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.362267017 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.362586975 CEST	49761	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.362601042 CEST	443	49761	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.363962889 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:43.363984108 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:43.363996029 CEST	49765	443	192.168.2.6	184.28.90.27
Sep 29, 2024 02:48:43.364001989 CEST	443	49765	184.28.90.27	192.168.2.6
Sep 29, 2024 02:48:43.399420023 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.424235106 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.427212000 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.427237034 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.427604914 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.428195000 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.428258896 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.428571939 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.450894117 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.451220989 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.451246977 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.451736927 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.452083111 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.452157974 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.452421904 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.475399017 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.486398935 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.486485004 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.486537933 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.487957001 CEST	49768	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.487983942 CEST	443	49768	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.495409966 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.510097027 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.510149956 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.510215998 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.511240959 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.511255026 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.516943932 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.516982079 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.517034054 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.517446995 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.517463923 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.519678116 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.519694090 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.519738913 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.519995928 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.520006895 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.522056103 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.522066116 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.522109985 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.522759914 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.522772074 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.524678946 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.524718046 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.524770021 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.524979115 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.524997950 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.527354002 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.527393103 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.527458906 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.527733088 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.527746916 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.533343077 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.533576012 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.533622980 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:43.533725023 CEST	49766	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:43.533745050 CEST	443	49766	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:43.691061974 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.691091061 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.691160917 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.691174030 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.691203117 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.694014072 CEST	49770	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.694035053 CEST	443	49770	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.706545115 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.707580090 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.707647085 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.708591938 CEST	49769	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.708620071 CEST	443	49769	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.978456020 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.981637955 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.981710911 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.982764006 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.982836962 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.985373020 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.985444069 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:43.985532045 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:43.985552073 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.028471947 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.122842073 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.123178005 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.123199940 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.123650074 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.123809099 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.127584934 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.128220081 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.129527092 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.129657984 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.129870892 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.129898071 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.130009890 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.130026102 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.130115986 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.130135059 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.130244970 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.130912066 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.130995035 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.131052971 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.131103039 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.131108999 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.131462097 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.131465912 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.131525993 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.131545067 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.131602049 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.131915092 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.131978989 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.132194042 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.132276058 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.132306099 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.132312059 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.132380009 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.132507086 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.132514954 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.133722067 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.133784056 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.134288073 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.134407997 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.134507895 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.144151926 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.144349098 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.144378901 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.147936106 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.148008108 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.148355961 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.148520947 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.148699999 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.148706913 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.171422958 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.175437927 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.178061008 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.178111076 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:44.178195953 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.178802013 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.178817987 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:44.185616016 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.185626030 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.185626984 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.185637951 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.198523998 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.223426104 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.224036932 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.224103928 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.224905968 CEST	49771	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.224930048 CEST	443	49771	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.228719950 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.233292103 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.233334064 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.233397007 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.233642101 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.233654022 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.366982937 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.367060900 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.367134094 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.367671013 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.367755890 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.367913961 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.368164062 CEST	49774	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.368195057 CEST	443	49774	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.368599892 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.368652105 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.368707895 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.369083881 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.369102955 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.369213104 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.369275093 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.369321108 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.369903088 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.369963884 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.370023012 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.370497942 CEST	49772	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.370517015 CEST	443	49772	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.370839119 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.370886087 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.370964050 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.371500969 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.371527910 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.373917103 CEST	49776	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.373928070 CEST	443	49776	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.374264002 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.374285936 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.374448061 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.374619961 CEST	49777	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.374633074 CEST	443	49777	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.375155926 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.375169039 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.375610113 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.375674009 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.375823021 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.379338026 CEST	49773	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.379365921 CEST	443	49773	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.390234947 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.390322924 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.390345097 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.390387058 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.390397072 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.390428066 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.432171106 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.432243109 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.432252884 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.432303905 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.432327986 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.432442904 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.433084011 CEST	49775	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.433094025 CEST	443	49775	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.844136953 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.844371080 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.844389915 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.844695091 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.845344067 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.845397949 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.845685959 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.891407013 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.957216978 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:44.957323074 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.959250927 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.959263086 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:44.959598064 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:44.961319923 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.961368084 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.961373091 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:44.961544037 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:44.971609116 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.971827984 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.971854925 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.972170115 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.972445965 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.972512007 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.972537994 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.980355024 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.980537891 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.980557919 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.981640100 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.981700897 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.982028961 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:44.982084990 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:44.982145071 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.003437042 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:45.005250931 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.005484104 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.005516052 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.006633043 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.006978989 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.007141113 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.007149935 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.019413948 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.023430109 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.026097059 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.026106119 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.026145935 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.051405907 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.057358027 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.072969913 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.087805986 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.087871075 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.087918997 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.088499069 CEST	49782	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.088516951 CEST	443	49782	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.135624886 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:45.135916948 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:45.136090040 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:45.140294075 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:45.140317917 CEST	443	49781	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:45.140357971 CEST	49781	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:45.216766119 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.216800928 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.216808081 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.216871977 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.216912985 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.217103958 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.220451117 CEST	49784	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.220473051 CEST	443	49784	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.224123955 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.224411011 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.224541903 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.227226973 CEST	49785	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.227252007 CEST	443	49785	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.253535986 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.253647089 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:45.253889084 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.254240990 CEST	49783	443	192.168.2.6	52.229.18.172
Sep 29, 2024 02:48:45.254257917 CEST	443	49783	52.229.18.172	192.168.2.6
Sep 29, 2024 02:48:48.494426966 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:48.494472980 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:48.494534969 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:48.496221066 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:48.496234894 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.258626938 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.259048939 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.260358095 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.260390997 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.260814905 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.311959982 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.316169024 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.359426022 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582758904 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582781076 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582787991 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582799911 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582807064 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582813025 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582895041 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.582895041 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.582926989 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.582940102 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.583132982 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.583250999 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.583298922 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.583404064 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.592675924 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.592689991 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:49.592717886 CEST	49786	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:48:49.592722893 CEST	443	49786	4.245.163.56	192.168.2.6
Sep 29, 2024 02:48:50.225143909 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:50.225229025 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:50.225461006 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:51.846369028 CEST	49734	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:48:51.846398115 CEST	443	49734	142.250.185.132	192.168.2.6
Sep 29, 2024 02:48:54.515698910 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:54.515767097 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:54.517540932 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:54.517842054 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:54.517853022 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.290195942 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.290287018 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:55.298182964 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:55.298194885 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.298475027 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.300014973 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:55.300070047 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:55.300074100 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.300327063 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:55.347426891 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.473720074 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.473985910 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:55.474035025 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:55.474328995 CEST	49790	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:55.474340916 CEST	443	49790	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:56.179533005 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:56.179590940 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:56.179666996 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:56.180490971 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:56.180505991 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:56.962711096 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:56.962778091 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:56.964438915 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:56.964448929 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:56.964668989 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:56.966536999 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:56.966597080 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:56.966600895 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:56.966722012 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:57.011394024 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:57.145343065 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:57.145479918 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:48:57.145533085 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:57.145723104 CEST	49791	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:48:57.145740986 CEST	443	49791	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:10.951267958 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:10.951330900 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:10.951482058 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:10.951982021 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:10.951996088 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.775876999 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.775949001 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:11.780078888 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:11.780087948 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.780333996 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.782898903 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:11.783293962 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:11.783298969 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.783587933 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:11.831419945 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.961581945 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.961667061 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:11.961724043 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:11.962079048 CEST	49792	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:11.962097883 CEST	443	49792	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:14.363095045 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:14.363130093 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:14.363224983 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:14.363756895 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:14.363770008 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.181668043 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.181754112 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:15.183597088 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:15.183605909 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.184420109 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.186708927 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:15.186767101 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:15.186783075 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.187005997 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:15.231408119 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.361418009 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.361643076 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.361794949 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:15.361969948 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:15.361990929 CEST	443	49793	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:15.362020016 CEST	49793	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:26.096929073 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:26.096963882 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:26.097033024 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:26.097332001 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:26.097345114 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:26.883538961 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:26.883696079 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:26.889729977 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:26.889745951 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:26.890086889 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:26.909713030 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:26.955411911 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.207422018 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.207448959 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.207468033 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.207524061 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.207540035 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.207576036 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.207600117 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.209108114 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.209152937 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.209189892 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.209197044 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.209209919 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.209229946 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.209306002 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.211913109 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.211927891 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:27.211962938 CEST	49794	443	192.168.2.6	4.245.163.56
Sep 29, 2024 02:49:27.211968899 CEST	443	49794	4.245.163.56	192.168.2.6
Sep 29, 2024 02:49:28.452775002 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:28.452831030 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:28.453030109 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:28.457746983 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:28.457765102 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.258902073 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.258964062 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:29.284310102 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:29.284323931 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.284549952 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.285835981 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:29.285896063 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:29.285901070 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.285988092 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:29.331401110 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.459510088 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.459743977 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.459791899 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:29.460098028 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:29.460117102 CEST	443	49795	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:29.460129976 CEST	49795	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:36.991580963 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:36.991621971 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:36.991847038 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:36.992679119 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:36.992702961 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:37.866467953 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:37.866559029 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:37.868341923 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:37.868349075 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:37.868695974 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:37.870528936 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:37.870578051 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:37.870584011 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:37.870683908 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:37.915407896 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:38.045536041 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:38.045700073 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:38.045756102 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:38.046247959 CEST	49797	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:38.046267986 CEST	443	49797	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:39.693311930 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:39.693351030 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:39.693422079 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:39.693655968 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:39.693669081 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:40.375374079 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:40.375613928 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:40.375629902 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:40.376104116 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:40.376602888 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:40.376693964 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:40.416512966 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:50.271806955 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:50.271953106 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:50.272089958 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:51.763156891 CEST	49798	443	192.168.2.6	142.250.185.132
Sep 29, 2024 02:49:51.763176918 CEST	443	49798	142.250.185.132	192.168.2.6
Sep 29, 2024 02:49:54.466773033 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:54.466803074 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:54.466907024 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:54.468266964 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:54.468283892 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.290199041 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.290292978 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:55.293420076 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:55.293431997 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.294336081 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.297509909 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:55.297647953 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:55.297652960 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.297941923 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:55.339406013 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.472264051 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.472501040 CEST	443	49799	40.113.110.67	192.168.2.6
Sep 29, 2024 02:49:55.472560883 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:55.472793102 CEST	49799	443	192.168.2.6	40.113.110.67
Sep 29, 2024 02:49:55.472812891 CEST	443	49799	40.113.110.67	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 02:48:35.010708094 CEST	53	63999	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:35.155579090 CEST	53	57533	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:36.207287073 CEST	53	56129	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:37.166287899 CEST	53239	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:37.166599989 CEST	49176	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:37.173485041 CEST	53	53239	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:37.230154991 CEST	53	49176	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:38.480123997 CEST	57294	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:38.480622053 CEST	54009	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:38.486790895 CEST	53	57294	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:38.487119913 CEST	53	54009	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.068439007 CEST	59720	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.068742990 CEST	61118	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.069674969 CEST	64467	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.070060015 CEST	56534	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.073564053 CEST	56685	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.073733091 CEST	64804	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.075073004 CEST	53	59720	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.075325966 CEST	53	61118	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.076226950 CEST	53	64467	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.076615095 CEST	53	56534	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.079061031 CEST	53	54540	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.080570936 CEST	53	56685	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.080604076 CEST	53	64804	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.618392944 CEST	52451	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.618587971 CEST	57833	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:39.624957085 CEST	53	57833	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:39.624974012 CEST	53	52451	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:40.320527077 CEST	53	51767	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.629972935 CEST	52501	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.630523920 CEST	63808	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.631623030 CEST	51121	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.632036924 CEST	59380	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.635240078 CEST	58740	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.635688066 CEST	50341	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.636857033 CEST	53	52501	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.636987925 CEST	53	63808	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.638266087 CEST	53	51121	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.638880014 CEST	53	59380	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.642133951 CEST	53	58740	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.642652988 CEST	53	50341	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.645322084 CEST	51319	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.645793915 CEST	51853	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.649024963 CEST	53822	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.649638891 CEST	51801	53	192.168.2.6	1.1.1.1
Sep 29, 2024 02:48:41.652389050 CEST	53	51319	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.652791023 CEST	53	51853	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.696679115 CEST	53	55469	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.712132931 CEST	53	53822	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:41.713176012 CEST	53	51801	1.1.1.1	192.168.2.6
Sep 29, 2024 02:48:53.226808071 CEST	53	61808	1.1.1.1	192.168.2.6
Sep 29, 2024 02:49:12.554115057 CEST	53	63394	1.1.1.1	192.168.2.6
Sep 29, 2024 02:49:34.880220890 CEST	53	54431	1.1.1.1	192.168.2.6
Sep 29, 2024 02:49:35.330317974 CEST	53	62239	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 02:48:37.230230093 CEST	192.168.2.6	1.1.1.1	c238	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:48:37.166287899 CEST	192.168.2.6	1.1.1.1	0xdee7	Standard query (0)	ipv6.52-229-18-172.cprapid.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:37.166599989 CEST	192.168.2.6	1.1.1.1	0x173b	Standard query (0)	ipv6.52-229-18-172.cprapid.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:38.480123997 CEST	192.168.2.6	1.1.1.1	0x4b86	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:38.480622053 CEST	192.168.2.6	1.1.1.1	0xce69	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:39.068439007 CEST	192.168.2.6	1.1.1.1	0x213c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.068742990 CEST	192.168.2.6	1.1.1.1	0xf83f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:39.069674969 CEST	192.168.2.6	1.1.1.1	0x5dfc	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.070060015 CEST	192.168.2.6	1.1.1.1	0x28b4	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:39.073564053 CEST	192.168.2.6	1.1.1.1	0xe335	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.073733091 CEST	192.168.2.6	1.1.1.1	0xc8b7	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:39.618392944 CEST	192.168.2.6	1.1.1.1	0x7a4a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.618587971 CEST	192.168.2.6	1.1.1.1	0xe6b9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:41.629972935 CEST	192.168.2.6	1.1.1.1	0xe0b3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.630523920 CEST	192.168.2.6	1.1.1.1	0x124d	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:41.631623030 CEST	192.168.2.6	1.1.1.1	0x5aa2	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.632036924 CEST	192.168.2.6	1.1.1.1	0xfcde	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:41.635240078 CEST	192.168.2.6	1.1.1.1	0xd654	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.635688066 CEST	192.168.2.6	1.1.1.1	0x8c55	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:41.645322084 CEST	192.168.2.6	1.1.1.1	0xa7bb	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.645793915 CEST	192.168.2.6	1.1.1.1	0x2a33	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 29, 2024 02:48:41.649024963 CEST	192.168.2.6	1.1.1.1	0xa20c	Standard query (0)	ipv6.52-229-18-172.cprapid.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.649638891 CEST	192.168.2.6	1.1.1.1	0xee09	Standard query (0)	ipv6.52-229-18-172.cprapid.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 02:48:37.173485041 CEST	1.1.1.1	192.168.2.6	0xdee7	No error (0)	ipv6.52-229-18-172.cprapid.com		52.229.18.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:38.486790895 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:38.486790895 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:38.486790895 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:38.486790895 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.075073004 CEST	1.1.1.1	192.168.2.6	0x213c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.075073004 CEST	1.1.1.1	192.168.2.6	0x213c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.075325966 CEST	1.1.1.1	192.168.2.6	0xf83f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:48:39.076226950 CEST	1.1.1.1	192.168.2.6	0x5dfc	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.076226950 CEST	1.1.1.1	192.168.2.6	0x5dfc	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.076615095 CEST	1.1.1.1	192.168.2.6	0x28b4	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Sep 29, 2024 02:48:39.080570936 CEST	1.1.1.1	192.168.2.6	0xe335	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.080570936 CEST	1.1.1.1	192.168.2.6	0xe335	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:39.080604076 CEST	1.1.1.1	192.168.2.6	0xc8b7	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 29, 2024 02:48:39.624957085 CEST	1.1.1.1	192.168.2.6	0xe6b9	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 02:48:39.624974012 CEST	1.1.1.1	192.168.2.6	0x7a4a	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.636857033 CEST	1.1.1.1	192.168.2.6	0xe0b3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.636857033 CEST	1.1.1.1	192.168.2.6	0xe0b3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.636857033 CEST	1.1.1.1	192.168.2.6	0xe0b3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.636857033 CEST	1.1.1.1	192.168.2.6	0xe0b3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.638266087 CEST	1.1.1.1	192.168.2.6	0x5aa2	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.638266087 CEST	1.1.1.1	192.168.2.6	0x5aa2	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.638880014 CEST	1.1.1.1	192.168.2.6	0xfcde	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 02:48:41.642133951 CEST	1.1.1.1	192.168.2.6	0xd654	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.642133951 CEST	1.1.1.1	192.168.2.6	0xd654	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.642652988 CEST	1.1.1.1	192.168.2.6	0x8c55	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Sep 29, 2024 02:48:41.652389050 CEST	1.1.1.1	192.168.2.6	0xa7bb	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.652389050 CEST	1.1.1.1	192.168.2.6	0xa7bb	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:41.652791023 CEST	1.1.1.1	192.168.2.6	0x2a33	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 29, 2024 02:48:41.712132931 CEST	1.1.1.1	192.168.2.6	0xa20c	No error (0)	ipv6.52-229-18-172.cprapid.com		52.229.18.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:50.361525059 CEST	1.1.1.1	192.168.2.6	0x68be	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:48:50.361525059 CEST	1.1.1.1	192.168.2.6	0x68be	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:49:27.660394907 CEST	1.1.1.1	192.168.2.6	0xdbc5	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 02:49:27.660394907 CEST	1.1.1.1	192.168.2.6	0xdbc5	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:49:27.660394907 CEST	1.1.1.1	192.168.2.6	0xdbc5	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ipv6.52-229-18-172.cprapid.com

https:

code.jquery.com

cdnjs.cloudflare.com

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:25 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6e 75 78 4c 6e 6b 4b 65 30 55 47 76 6e 77 75 77 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 39 38 31 38 65 31 30 33 35 35 62 38 30 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: nuxLnkKe0UGvnwuw.1Context: 319818e10355b808
2024-09-29 00:48:25 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:48:25 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6e 75 78 4c 6e 6b 4b 65 30 55 47 76 6e 77 75 77 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 39 38 31 38 65 31 30 33 35 35 62 38 30 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: nuxLnkKe0UGvnwuw.2Context: 319818e10355b808<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:48:25 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6e 75 78 4c 6e 6b 4b 65 30 55 47 76 6e 77 75 77 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 39 38 31 38 65 31 30 33 35 35 62 38 30 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: nuxLnkKe0UGvnwuw.3Context: 319818e10355b808
2024-09-29 00:48:25 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:48:25 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 49 64 79 2b 74 6b 69 41 51 6b 6d 32 2b 69 6b 79 76 71 30 50 70 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Idy+tkiAQkm2+ikyvq0PpQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49710	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:33 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 61 30 79 63 70 55 39 51 2f 45 47 70 6c 53 62 2f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 34 35 37 66 38 37 39 64 66 33 32 39 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: a0ycpU9Q/EGplSb/.1Context: 8a457f879df3298
2024-09-29 00:48:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:48:33 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 61 30 79 63 70 55 39 51 2f 45 47 70 6c 53 62 2f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 34 35 37 66 38 37 39 64 66 33 32 39 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 30 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: a0ycpU9Q/EGplSb/.2Context: 8a457f879df3298<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi0
2024-09-29 00:48:33 UTC	73	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 35 0d 0a 4d 53 2d 43 56 3a 20 61 30 79 63 70 55 39 51 2f 45 47 70 6c 53 62 2f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 34 35 37 66 38 37 39 64 66 33 32 39 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 55MS-CV: a0ycpU9Q/EGplSb/.3Context: 8a457f879df3298
2024-09-29 00:48:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:48:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2f 62 79 7a 39 48 38 49 4c 55 79 38 5a 44 4e 74 43 72 41 48 46 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: /byz9H8ILUy8ZDNtCrAHFQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49716	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:37 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 41 6f 35 6b 2b 31 32 71 57 6b 4f 62 63 44 4d 58 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 33 30 65 35 34 38 62 33 38 66 64 61 36 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ao5k+12qWkObcDMX.1Context: 6330e548b38fda6d
2024-09-29 00:48:37 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:48:37 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 41 6f 35 6b 2b 31 32 71 57 6b 4f 62 63 44 4d 58 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 33 30 65 35 34 38 62 33 38 66 64 61 36 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Ao5k+12qWkObcDMX.2Context: 6330e548b38fda6d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:48:37 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 41 6f 35 6b 2b 31 32 71 57 6b 4f 62 63 44 4d 58 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 33 33 30 65 35 34 38 62 33 38 66 64 61 36 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Ao5k+12qWkObcDMX.3Context: 6330e548b38fda6d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:48:37 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:48:37 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 65 6d 79 47 4f 5a 71 61 45 4b 5a 6f 39 4b 73 72 35 48 70 72 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: AemyGOZqaEKZo9Ksr5HprA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49717	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:37 UTC	673	OUT	GET / HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:38 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:37 GMT Server: Apache Last-Modified: Thu, 08 Dec 2022 13:16:02 GMT Accept-Ranges: bytes Content-Length: 31639 Connection: close Content-Type: text/html
2024-09-29 00:48:38 UTC	7985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 6a 73 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 Data Ascii: <!DOCTYPE html><html lang="en" class="js"><head> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE
2024-09-29 00:48:38 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 42 61 6e 6b 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 41 67 72 69 63 75 6c 74 75 72 65 20 4c 6f 61 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 43 72 65 64 69 74 20 43 61 72 64 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: <li><a href="#">International Banking</a></li> <li><a href="#">Agriculture Loans</a></li> <li><a href="#">Credit Cards</a></li> <
2024-09-29 00:48:38 UTC	8000	IN	Data Raw: 6e 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 49 6e 73 75 72 61 6e 63 65 20 50 6c 61 6e 6e 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 45 73 74 61 74 65 20 50 6c 61 6e 6e 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ning</a></li> <li><a href="#">Insurance Planning</a></li> <li><a href="#">Estate Planning</a></li> </ul> <ul>
2024-09-29 00:48:38 UTC	7654	IN	Data Raw: 22 20 69 64 3d 22 73 62 61 72 2d 6c 69 6e 6b 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 62 61 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 65 74 2d 73 6f 63 69 61 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 Data Ascii: " id="sbar-links"> <div class="social-bar"> <div class="get-social"> <ul class="list-inline"> ...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49718	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:38 UTC	585	OUT	GET /css/MyFontsWebfontsKit.css HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:38 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:38 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 1700 Connection: close Content-Type: text/css
2024-09-29 00:48:38 UTC	1700	IN	Data Raw: 2f 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 4d 79 46 6f 6e 74 73 20 57 65 62 66 6f 6e 74 20 42 75 69 6c 64 20 49 44 20 32 35 34 36 32 33 31 2c 20 32 30 31 33 2d 30 35 2d 30 32 54 31 32 3a 35 37 3a 33 30 2d 30 34 30 30 0a 20 2a 0a 20 2a 20 54 68 65 20 66 6f 6e 74 73 20 6c 69 73 74 65 64 20 69 6e 20 74 68 69 73 20 6e 6f 74 69 63 65 20 61 72 65 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 45 6e 64 20 55 73 65 72 20 4c 69 63 65 6e 73 65 0a 20 2a 20 41 67 72 65 65 6d 65 6e 74 28 73 29 20 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 62 79 20 74 68 65 20 77 65 62 73 69 74 65 20 6f 77 6e 65 72 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 61 72 74 69 65 73 20 61 72 65 0a 20 2a 20 65 78 70 6c 69 63 69 74 6c 79 20 72 65 73 74 72 69 63 74 65 64 20 66 72 6f 6d 20 75 73 69 6e Data Ascii: /* @license * MyFonts Webfont Build ID 2546231, 2013-05-02T12:57:30-0400 * * The fonts listed in this notice are subject to the End User License * Agreement(s) entered into by the website owner. All other parties are * explicitly restricted from usin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49723	151.101.194.137	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:38 UTC	598	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ipv6.52-229-18-172.cprapid.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1965429 Date: Sun, 29 Sep 2024 00:48:39 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740038-EWR X-Cache: HIT, HIT X-Cache-Hits: 42, 0 X-Timer: S1727570919.008793,VS0,VE2 Vary: Accept-Encoding
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-09-29 00:48:39 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49722	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	583	OUT	GET /css/bootstrap_custom.css HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 84224 Connection: close Content-Type: text/css
2024-09-29 00:48:39 UTC	7986	IN	Data Raw: 2f 2a 21 0a 20 2a 20 43 75 73 74 6f 6d 20 62 6f 6f 74 73 74 72 61 70 20 62 75 69 6c 64 0a 20 2a 20 43 6f 6e 74 61 69 6e 73 3a 0a 20 2a 20 20 20 20 6e 6f 72 6d 61 6c 69 7a 65 2f 73 63 61 66 66 6f 6c 64 69 6e 67 0a 20 2a 20 20 20 20 63 6f 72 65 20 63 73 73 20 28 73 61 6e 73 20 74 61 62 6c 65 73 2f 62 75 74 74 6f 6e 73 29 0a 20 2a 20 20 20 20 75 74 69 6c 69 74 79 20 63 6c 61 73 73 65 73 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 2d 77 65 62 6b 69 Data Ascii: /! Custom bootstrap build * Contains: * normalize/scaffolding * core css (sans tables/buttons) * utility classes //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family: sans-serif;-ms-text-size-adjust: 100%;-webki
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 66 6f 6f 74 65 72 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 66 6f 6f 74 65 72 3a 62 65 66 6f 72 65 2c 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 2e 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b Data Ascii: padding-left: 0;border-right: 5px solid #eee;border-left: 0;text-align: right}.blockquote-reverse footer:before,blockquote.pull-right footer:before,.blockquote-reverse small:before,blockquote.pull-right small:before,.blockquote-reverse .small:before,block
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 74 3a 20 6c 65 66 74 7d 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 77 69 64 74 68 3a 20 31 30 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 31 7b 77 69 64 74 68 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 30 7b 77 69 64 74 68 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 39 7b 77 69 64 74 68 3a 20 37 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 38 7b 77 69 64 74 68 3a 20 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 37 7b 77 69 64 74 68 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 36 7b 77 69 64 74 68 3a 20 35 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 35 7b 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 34 7b 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 7d Data Ascii: t: left}.col-lg-12{width: 100%}.col-lg-11{width: 91.66666667%}.col-lg-10{width: 83.33333333%}.col-lg-9{width: 75%}.col-lg-8{width: 66.66666667%}.col-lg-7{width: 58.33333333%}.col-lg-6{width: 50%}.col-lg-5{width: 41.66666667%}.col-lg-4{width: 33.33333333%}
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 3e 20 74 68 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 3e 20 74 66 6f 6f Data Ascii: d,.table-responsive > .table-bordered > tbody > tr > td:last-child,.table-responsive > .table-bordered > tfoot > tr > td:last-child{border-right: 0}.table-responsive > .table-bordered > tbody > tr:last-child > th,.table-responsive > .table-bordered > tfoo
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 30 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 20 30 7d 7d 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 72 61 64 69 6f 2c 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 63 68 65 63 6b 62 6f 78 2c 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 70 78 7d 2e 66 6f 72 6d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 72 61 64 69 6f 2c 2e 66 6f 72 6d 2d 68 Data Ascii: 0}.form-inline .has-feedback .form-control-feedback{top: 0}}.form-horizontal .radio,.form-horizontal .checkbox,.form-horizontal .radio-inline,.form-horizontal .checkbox-inline{margin-top: 0;margin-bottom: 0;padding-top: 7px}.form-horizontal .radio,.form-h
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 63 6b 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 62 6c 6f 63 6b 7b 77 69 64 74 68 3a 20 31 30 30 25 7d 2e 66 61 64 65 7b 6f 70 61 63 69 74 79 3a 20 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 7d 2e 66 61 64 65 2e 69 6e 7b 6f 70 61 63 69 74 79 3a 20 31 7d 2e 63 6f 6c 6c 61 70 73 65 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 7d 2e 63 6f 6c 6c 61 70 73 65 2e 69 6e 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 7d 74 72 2e 63 6f 6c 6c 61 70 73 65 2e 69 Data Ascii: ck,input[type="button"].btn-block{width: 100%}.fade{opacity: 0;-webkit-transition: opacity .15s linear;-o-transition: opacity .15s linear;transition: opacity .15s linear}.fade.in{opacity: 1}.collapse{display: none}.collapse.in{display: block}tr.collapse.i
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 2d 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 3e 20 2e 62 74 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 70 78 7d 2e 6e 61 76 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 7d 2e 6e 61 76 20 3e 20 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 7d 2e 6e 61 76 20 3e 20 6c 69 20 3e 20 61 7b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 35 70 78 7d 2e 6e 61 76 20 3e 20 6c 69 20 3e 20 61 3a 68 6f 76 65 72 2c 2e 6e 61 76 20 3e 20 6c 69 20 3e 20 61 3a 66 6f 63 75 73 7b 74 65 Data Ascii: -btn:last-child > .btn-group{margin-left: -1px}.nav{margin-bottom: 0;padding-left: 0;list-style: none}.nav > li{position: relative;display: block}.nav > li > a{position: relative;display: block;padding: 10px 15px}.nav > li > a:hover,.nav > li > a:focus{te
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 2d 66 6f 72 6d 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 20 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 32 35 39 70 78 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 32 36 30 70 78 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 7b 77 69 64 74 68 3a 20 61 75 74 6f 3b 62 6f 72 64 65 72 3a 20 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 3b 2d 77 65 62 6b 69 74 2d Data Ascii: -form .has-feedback .form-control-feedback{top: 0}}@media (max-width: 259px){.navbar-form .form-group{margin-bottom: 5px}}@media (min-width: 260px){.navbar-form{width: auto;border: 0;margin-left: 0;margin-right: 0;padding-top: 0;padding-bottom: 0;-webkit-
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 6f 6c 6f 72 3a 20 23 32 34 35 32 36 39 7d 2e 61 6c 65 72 74 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 63 66 38 65 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 61 65 62 63 63 3b 63 6f 6c 6f 72 3a 20 23 38 61 36 64 33 62 7d 2e 61 6c 65 72 74 2d 77 61 72 6e 69 6e 67 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 66 37 65 31 62 35 7d 2e 61 6c 65 72 74 2d 77 61 72 6e 69 6e 67 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 20 23 36 36 35 31 32 63 7d 2e 61 6c 65 72 74 2d 64 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 32 64 65 64 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 62 63 63 64 31 3b 63 6f 6c 6f 72 3a 20 23 61 39 34 34 34 32 7d Data Ascii: olor: #245269}.alert-warning{background-color: #fcf8e3;border-color: #faebcc;color: #8a6d3b}.alert-warning hr{border-top-color: #f7e1b5}.alert-warning .alert-link{color: #66512c}.alert-danger{background-color: #f2dede;border-color: #ebccd1;color: #a94442}
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 65 7b 62 6f 72 64 65 72 3a 20 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 7d 2e 70 61 6e 65 6c 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 31 70 78 7d 2e 70 61 6e 65 6c 2d 67 72 6f 75 70 20 2e 70 61 6e 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 7d 2e 70 61 6e 65 6c 2d 67 72 6f 75 70 20 2e 70 61 6e 65 6c 20 2b 20 2e 70 61 6e 65 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 7d 2e 70 61 6e 65 6c 2d 67 72 6f 75 70 20 2e 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 7d 2e 70 61 6e 65 6c 2d 67 72 6f 75 70 20 2e 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 20 2b 20 2e 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 20 3e Data Ascii: e{border: 0;margin-bottom: 0}.panel-group{margin-bottom: 21px}.panel-group .panel{margin-bottom: 0;border-radius: 4px}.panel-group .panel + .panel{margin-top: 5px}.panel-group .panel-heading{border-bottom: 0}.panel-group .panel-heading + .panel-collapse >

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49721	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	574	OUT	GET /css/layout2.css HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 32880 Connection: close Content-Type: text/css
2024-09-29 00:48:39 UTC	7986	IN	Data Raw: 2a 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 7d 2e 69 6f 73 50 68 6f 6e 65 2c 2e 69 6f 73 50 68 6f 6e 65 20 61 7b 63 6f 6c 6f 72 3a 20 23 63 63 30 30 30 30 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 7d 68 31 2c 68 32 2c 68 33 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 46 75 74 75 72 61 42 54 2d 42 6f 6f 6b 7d 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 72 65 6d 3b 6d 61 72 67 69 6e 3a 20 38 70 78 20 30 7d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 72 65 6d 3b 6d 61 72 67 69 6e 3a 20 36 70 78 20 30 7d 68 32 2e 73 75 62 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a Data Ascii: *{-webkit-tap-highlight-color: rgba(0,0,0,0)}.iosPhone,.iosPhone a{color: #cc0000}a:hover{text-decoration: underline}h1,h2,h3{font-family: FuturaBT-Book}h2{font-size: 1.7rem;margin: 8px 0}h3{font-size: 1.7rem;margin: 6px 0}h2.sub-header{margin: 0;padding:
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 7d 2e 74 6f 70 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 6f 67 69 6e 2d 62 74 6e 20 2e 69 63 6f 6e 2d 75 73 65 72 2d 73 65 63 75 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 20 31 34 70 78 3b 6c 65 66 74 3a 20 36 70 78 7d 2e 6c 6f 67 69 6e 2d 62 74 6e 20 2e 6c 6f 67 69 6e 2d 61 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 20 31 39 70 78 3b 72 69 67 68 74 3a 20 31 31 70 78 7d 2e 74 6f 70 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 6f 67 69 6e 2d 62 74 6e 3a 68 6f 76 65 72 2c 2e 74 6f 70 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6c 6f 67 69 6e 2d 62 74 6e 2e 69 6e 61 63 74 69 76 65 3a 68 6f 76 65 Data Ascii: w: ellipsis;white-space: nowrap}.top-navigation .login-btn .icon-user-secure{position: absolute;top: 14px;left: 6px}.login-btn .login-arrow{position: absolute;top: 19px;right: 11px}.top-navigation .login-btn:hover,.top-navigation .login-btn.inactive:hove
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 30 2e 35 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 35 70 78 7d 2e 73 6f 63 2d 6e 61 76 2d 67 65 74 73 6f 63 69 61 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 7d 2e 73 6f 63 69 61 6c 2d 62 61 72 2d 77 72 61 70 2d 6f 75 74 65 72 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 74 65 6d 70 6c 61 74 65 2f 66 6f 6f 74 65 72 2d 62 67 39 36 30 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 74 6f 70 20 23 30 30 33 31 36 32 7d 2e 63 6f 70 79 72 69 67 68 74 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 Data Ascii: 0.5);border-radius: 15px}.soc-nav-getsocial{font-size: 1.2rem;margin-right: 5px}.social-bar-wrap-outer{width: 100%;background: url(../images/template/footer-bg960.png) no-repeat left top #003162}.copyright{overflow: hidden;color: #ffffff;text-align: cent
2024-09-29 00:48:39 UTC	8000	IN	Data Raw: 2d 76 65 72 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 33 46 32 46 32 7d 2e 70 72 6f 64 75 63 74 2d 69 6e 66 6f 2d 76 65 72 74 20 2e 68 65 61 64 65 72 2d 6f 76 65 72 6c 61 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 33 72 65 6d 7d 2e 70 72 6f 64 75 63 74 2d 69 6e 66 6f 2d 76 65 72 74 20 2e 69 6e 66 6f 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 32 30 70 78 20 38 30 70 78 7d 2e 70 72 6f 64 75 63 74 2d 69 6e 66 6f 2d 76 65 72 74 20 2e 69 6e 66 6f 2d 63 6f 6e 74 65 6e 74 20 2e 62 74 6e 7b 6d 61 72 67 69 6e 3a 20 30 20 31 39 25 3b 6c 65 66 74 3a 20 30 3b 72 69 67 68 74 3a 20 30 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b Data Ascii: -vert{background-clip: content-box;background-color: #F3F2F2}.product-info-vert .header-overlay{font-size: 1.3rem}.product-info-vert .info-content{padding: 30px 20px 80px}.product-info-vert .info-content .btn{margin: 0 19%;left: 0;right: 0;display: block;
2024-09-29 00:48:39 UTC	894	IN	Data Raw: 73 2f 73 61 6d 73 75 6e 67 2e 70 6e 67 29 7d 2e 69 63 6f 6e 2d 75 73 65 72 2d 6c 6f 63 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 6c 6f 63 6b 5f 32 2e 70 6e 67 29 7d 2e 69 63 6f 6e 2d 75 73 65 72 2d 73 65 63 75 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 6d 79 41 72 76 65 73 74 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 33 70 78 7d 2e 69 63 6f 6e 2d 75 73 65 72 2d 6d 6f 72 74 67 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 6d 79 41 72 76 65 73 74 2e 70 6e 67 29 3b 62 61 63 6b Data Ascii: s/samsung.png)}.icon-user-lock{background-image: url(../images/icons/lock_2.png)}.icon-user-secure{background-image: url(../images/icons/myArvest.png);background-position: 0 -3px}.icon-user-mortgage{background-image: url(../images/icons/myArvest.png);back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49728	104.17.24.14	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	623	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ipv6.52-229-18-172.cprapid.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	930	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 871148 Expires: Fri, 19 Sep 2025 00:48:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SvM88Rv0%2BrwXoIolVRjuDAiELDGHCP%2Bj7SuM4mGM%2FHyBFNQRUOZJDI5nR3vgmuvADV1JdCp9Uy3jVDl8K1bmBlTd7WundcBLEHgDZq7LfVv4LRQRQ8CMWYetKf1uGPd7bruLKW6%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7f807e93843a5-EWR
2024-09-29 00:48:39 UTC	439	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d Data Ascii: ComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 Data Ascii: d 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 Data Ascii: left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 Data Ascii: width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.cli
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 Data Ascii: deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c Data Ascii: is.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d Data Ascii: tion(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'==
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 Data Ascii: +','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.p
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: ,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49729	104.18.10.207	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	617	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ipv6.52-229-18-172.cprapid.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	935	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 09/24/2024 09:00:40 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: e1f2f91bd579a9ccda254e9ae82b7079 CDN-Cache: HIT CF-Cache-Status: HIT Age: 60789 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ca7f807efc441fe-EWR
2024-09-29 00:48:39 UTC	434	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bfa/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: .js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c 3d 6f 2c 7b 7d 2e 74 6f 53 74 Data Ascii: },supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l=o,{}.toSt
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 Data Ascii: .trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._destroyEleme
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 70 Data Ascii: .hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-pressed",!p
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 Data Ascii: leave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".active",ACTI
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f Data Ascii: onfig.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];var i=this._
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e Data Ascii: et.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirection=function
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b 69 29 2c 6f 2e 5f 69 73 53 6c Data Ascii: tion:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+i),o._isSl
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d 22 2e 22 2b 6e 2c 6f 3d 74 2e Data Ascii: DE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i="."+n,o=t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49731	104.18.10.207	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	575	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	918	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 17213248 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ca7f807ec1c80dc-EWR
2024-09-29 00:48:39 UTC	451	IN	Data Raw: 37 63 30 62 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c0b/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 Data Ascii: tstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 2b 3d 7e 7e 28 31 65 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2c 64 6f 63 75 6d Data Ascii: ="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t+=~~(1e6*Math.random()),docum
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d Data Ascii: t",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=this._element;t&&(e=
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 2c 44 3d 22 69 6e 70 75 74 22 2c 77 3d 22 2e 61 63 74 69 76 Data Ascii: ace,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="buttons"]',D="input",w=".activ
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6b 2c 6d 2e 66 6e 5b 70 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 Data Ascii: ss(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Constructor=k,m.fn[p].noConflic
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e 70 72 65 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 Data Ascii: teners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t.prev=function(){this._isSlid
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 75 73 65 28 74 29 7d 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 4c 45 41 56 45 Data Ascii: ig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return e.pause(t)}).on(Q.MOUSELEAVE
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 58 29 2c 61 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d Data Ascii: r e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.querySelector(X),a=this._getItem
2024-09-29 00:48:39 UTC	1369	IN	Data Raw: 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 29 29 7b 76 61 72 20 69 3d 6c 28 7b 7d 2c 50 28 6e 29 2e 64 61 74 61 28 29 2c 50 28 74 Data Ascii: d"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B)){var i=l({},P(n).data(),P(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49724	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	627	OUT	GET /images/arvest-logo.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 4092 Connection: close Content-Type: image/png
2024-09-29 00:48:39 UTC	4092	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c9 00 00 00 45 08 06 00 00 00 e0 b4 c2 a6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0f 9e 49 44 41 54 78 da ec 5d 07 98 17 c5 15 9f e3 e0 28 47 39 30 22 4d 04 05 02 16 04 05 44 c1 92 4f 41 b0 20 36 a2 10 01 e5 03 cf 20 b1 45 85 a0 89 9a 80 09 41 a5 08 44 40 e1 0b 62 41 b1 a4 2b 06 50 f1 02 16 40 05 45 48 e2 81 85 d8 10 94 22 f5 9f f7 d8 f7 c7 65 7c 6f eb 6c 39 6f 7f df f7 fb ee fe bb b3 b3 b3 b3 fb 66 e6 95 99 29 c8 e5 72 2a 62 74 02 b6 02 3e a6 e2 43 55 60 4b ba ef 61 74 6c 1f f0 53 e0 fb c0 75 f4 3b 43 b2 a8 0e dc 05 cc a5 b9 90 05 31 08 c9 c3 c0 63 81 1d 43 54 46 13 e0 68 e0 46 e0 7f 80 eb 81 9f 03 b7 02 8b 80 f5 48 20 da Data Ascii: PNGIHDREtEXtSoftwareAdobe ImageReadyqe<IDATx](G90"MDOA 6 EAD@bA+P@EH"e\|ol9of)r*bt>CU`KatlSu;C1cCTFhFH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49725	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	644	OUT	GET /images/merchant-services-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 22341 Connection: close Content-Type: image/png
2024-09-29 00:48:39 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 e7 ee f6 04 0c 0b db e6 f2 ea f1 f7 e4 ed f5 07 0d 0c 00 45 7c d8 e4 f0 06 16 19 dd e7 f2 c2 d5 e8 e2 eb f4 ed f3 f8 e1 ea f4 e8 ef f6 e0 e9 f3 da e5 f1 d5 e2 ef 06 14 16 f8 fa fd e5 ed f5 d1 df ee 0e 15 13 d4 e1 ef ed ed ee de e8 f2 f5 f8 fb d2 e0 ee c7 d9 ea f1 f6 fa cb db eb 06 18 1c 0a 12 11 ce dd ed f4 f0 f1 f0 f4 f9 06 10 10 eb f2 f8 f3 f7 fa cd dc ec cf de ed 0b 0f 0c c5 d7 e9 10 19 18 ee f4 f9 de e9 f3 e5 e2 e5 b2 a8 a0 18 24 24 ce ca ce c7 c1 c4 f4 ef ee c9 da eb b9 af a8 bf b9 b9 10 1e 20 e7 e5 e9 e8 db d8 c9 c4 c7 e6 df df f0 ea ea b6 ac a4 bd b6 b3 c6 bf c0 f2 ed ec 07 1b 20 d1 ce d2 ea e9 ec cc c7 ca fe ff ff c1 Data Ascii: PNGIHDRo PLTEE\|$$
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 47 20 93 5e 75 1c 23 1d 04 1f 7e fa c7 8f 0e 7f d4 fd 29 bc 62 45 7b da fe 32 79 f8 fd e4 d3 fd 27 d7 e4 d3 f6 cf ff 15 da 9d a7 1d 0f 36 68 cf df f8 eb ff f3 34 f6 3f 4f 3f fe 6c d1 ac fd e5 57 1b ef 8f a0 fd aa 78 98 ba ea 58 55 fe cd 89 b6 75 07 f6 ed 3b 70 65 c0 a0 d5 1a f2 b2 b3 0f 9e 33 a5 35 37 27 59 5c 01 a4 96 17 89 85 26 5d 1d 0e 31 71 c1 c1 a1 b1 f1 54 3b 26 93 99 d6 9e 5f 2c 17 d2 e9 fe d1 85 b5 89 6a 4f cf d4 3b 65 5c 39 37 71 a2 bd 98 9f f8 ed 77 9f 20 f7 03 26 ac da b9 73 77 71 56 56 66 15 38 56 ae a7 15 18 6a fa 06 8a 0e 22 bf 0a 29 0a 9b e6 7a 20 c0 00 2d 26 dd d7 d7 37 26 1e ce b0 99 cd b5 89 52 b9 da cd df 3b d7 a5 98 27 44 60 4a 9e 32 ff db da fc e2 da 2f 3e 21 9c 0f d8 ac 2b 3b 6f ec e4 e7 64 8e 67 ee df b7 7f ff 80 29 bb 77 a0 a8 df Data Ascii: G ^u#~)bE{2y'6h4?O?lWxXUu;pe357'Y\&]1qT;&_,jO;e\97qw &swqVVf8Vj")z -&7&R;'D`J2/>!+;odg)w
2024-09-29 00:48:40 UTC	6356	IN	Data Raw: 15 30 8b c0 34 a2 50 60 89 c5 ed d0 21 2f 21 36 3f fd f4 53 08 04 2a 26 25 25 c5 c7 c7 c7 a3 f0 48 6d 72 b2 d1 68 d4 99 f3 f2 f2 b2 0d a6 02 ad 4e 57 a0 d2 3a e5 76 74 74 1f 1e 2c 19 ea ea 68 ed 3e 7c fc f8 e0 60 79 f9 3d d4 1d f7 ec a9 13 b8 fe 5f 9b 2c d8 37 04 98 6d b0 ce 8d f1 0e 4c 62 ef 49 4d 28 12 07 10 33 a3 07 84 a8 6e 1e b4 50 83 bb 76 64 e4 e6 c1 bb 77 ef 44 47 03 55 2f 89 e5 0b 2c 55 a2 73 cb 0a db f2 b4 da 02 30 93 c9 84 e5 de ce cc 5a 9f 9f ff f0 f2 4f a1 71 b1 b1 31 5f 41 60 24 90 8b 8f 8f 4f 48 d0 ea 8c 46 63 72 75 5b 56 7d 75 36 98 c1 60 30 17 e8 20 01 6b f5 e6 2e e8 86 57 af 76 35 76 75 1f 87 45 48 09 c4 4c 42 70 e1 9e ea 9f ef 8c a8 c9 7c d3 63 62 63 42 53 80 5a 30 44 60 4d b6 99 6b 45 31 d7 83 0d bb 17 51 38 9a f4 37 c3 bc 2f 22 e2 9d Data Ascii: 04P`!/!6?S*&%%HmrhNW:vtt,h>\|`y=_,7mLbIM(3nPvdwDGU/,Us0ZOq1_A`$OHFcru[V}u6`0 k.Wv5vuEHLBp\|cbcBSZ0D`MkE1Q87/"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49727	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	643	OUT	GET /images/debit-card-beach-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 23282 Connection: close Content-Type: image/png
2024-09-29 00:48:39 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 d2 e0 ef e3 ec f5 d5 e2 f0 e5 ed f5 ea f1 f7 dd e8 f2 00 45 7c d8 e5 f1 df e9 f3 db e6 f1 e1 eb f4 cd dc ec f0 f5 fa e7 ee f6 c2 d5 e8 ec f2 f8 cf df ed e8 ef f6 ee f4 f9 c9 da eb f2 f6 fa f4 f8 fb f6 f9 fc 05 1b 3b 26 2b 90 fa fb fd c5 d7 e9 8c 53 35 28 ab ba ff ff ff 21 a8 b7 c7 d9 ea 2b 75 b3 21 18 15 33 af ba 36 6d 9a f0 e2 b8 2b 7c b6 6a 93 b6 9c 5b 37 61 53 5b 2d 1a 15 ee dc af 3e b4 ba 86 4e 30 2c 6b ae 70 57 59 29 85 bb 56 3f 3a 25 ab cd 34 24 1d 2a 38 95 1d a8 bc 95 5a 3a 4b b8 bb 2d b0 ce 27 9f c8 2b 61 aa 2b 57 a4 63 4b 4a 26 92 c2 e8 d7 ad 73 50 48 7b 49 32 f2 e6 c3 74 42 29 e1 d3 b1 fe 99 07 31 ab b0 3b 20 13 67 Data Ascii: PNGIHDRo PLTEE\|;&+S5(!+u!36m+\|j[7aS[->N0,kpWY)V?:%4$*8Z:K-'+a+WcKJ&sPH{I2tB)1; g
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: c7 8f fa 9f 26 f2 86 a6 48 71 b2 fe 90 37 70 8a e3 d1 78 24 8a ef cc 74 ed c3 38 7e 78 1e 91 c7 7f a3 3f 34 ad a9 8a 6f 8a f6 02 e7 33 cd ff 54 7b 21 bc cd 9f af 1b 81 e3 10 9f 3f 19 5f 2c 51 9c 64 8f 07 67 f3 89 0f e8 6a c5 a3 4d 91 a8 44 67 ad c7 69 ef e1 8f 00 1e cc d7 d5 9d 7f 18 8f 00 70 a5 6e 3c de 89 aa 8f 86 c7 42 81 1a 19 19 11 68 30 6d 54 56 50 a0 73 b4 b4 b4 3a f1 78 54 7f e0 ed dd e3 23 e1 0a 68 9a 18 7c e1 25 50 7f 38 3e 57 e9 4d 53 d5 5c 88 06 a3 73 18 3f a1 a3 a5 15 89 47 a3 fa 8b 45 de de d5 1f 78 23 fd 45 42 51 19 c1 03 6a 31 a4 37 94 0a 21 ab 90 28 d2 48 54 92 9d e0 11 ec 7d ea 0f 4d 10 4f c4 37 65 7b 51 9e 5c fe fd f3 0b 39 41 ac f2 a7 3b 75 fb 24 93 21 ff ae 3f 34 af fc 2e fe fe 23 f1 11 de 90 bf 7f bc 71 e2 f6 0d f6 cd 7b fb 23 66 b1 Data Ascii: &Hq7px$t8~x?4o3T{!?_,QdgjMDgipn<Bh0mTVPs:xT#h\|%P8>WMS\s?GEx#EBQj17!(HT}MO7e{Q\9A;u$!?4.#q{#f
2024-09-29 00:48:40 UTC	7297	IN	Data Raw: 7b dc 5b 70 ef c3 d3 8d 63 8d 3f 8f 9d be 5d 50 f0 f3 82 05 4d a7 4f c7 3d 69 8c 8b fb e1 e7 9f 9b de 21 8e d7 ed 07 2f 1e c9 da 23 a4 39 99 4c 20 0a 72 bd d8 2c e2 9a 4b 44 36 80 bd bc 7c f9 16 90 c2 10 e1 2d 2c 2c 2c b5 eb f9 f3 e7 2f a1 09 5e bd da d7 37 3e 3e fe 73 5f d7 f5 76 92 30 6b ad f9 73 01 98 a6 26 25 ce d9 79 70 d1 33 8e b3 f3 f8 07 94 18 8e b3 73 37 65 4c 19 be f3 27 d3 87 9c 95 91 0d 4d 3a b2 1f ee 4d b2 a1 c3 87 0f 93 64 cd f8 f8 78 5a 74 5d 5d 67 e7 89 3a c2 1c 1c 0c 08 e6 17 3c 9e 0d 3c 78 68 8e d6 a7 3b 0e 1e 3a b4 23 05 45 46 54 1a 28 82 49 d8 5e 2c 96 40 2e 60 80 04 d9 30 97 ae ac b3 ab cf 9f 67 3e ba 75 0b a2 23 42 0b bb f4 bc f1 fa a3 5b b7 2e 5d 82 8e 77 e9 d2 ee 5b 99 a9 b9 56 04 f9 2a e2 c9 61 32 42 4a 13 9c e1 d6 4f ef b1 b6 3e Data Ascii: {[pc?]PMO=i!/#9L r,KD6\|-,,,/^7>>s_v0ks&%yp3s7eL'M:MdxZt]]g:<<xh;:#EFT(I^,@.`0g>u#B[.]w[V*a2BJO>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49726	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:39 UTC	647	OUT	GET /images/cc-acquisition-offer-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:39 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:39 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 18130 Connection: close Content-Type: image/png
2024-09-29 00:48:39 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 17 2b 54 d5 e2 ef d7 e4 f0 e9 f0 f7 e3 ec f4 ec f2 f8 00 45 7c e7 ef f6 d9 e5 f1 f0 f5 fa e4 ed f5 d3 e1 ef 26 58 8b e5 ed f5 c2 d5 e8 e1 eb f4 ee f4 f9 df e9 f3 f2 f6 fa 10 3f 6f dc e7 f2 18 48 79 13 43 73 12 41 71 db e6 f2 15 45 75 e0 ea f3 dd e8 f2 22 54 86 0e 3d 6d 1d 4e 80 ea f1 f7 16 46 77 19 4a 7b cb db eb 1e 50 81 f5 f8 fb cf de ed 2e 61 95 1b 4b 7d de e8 f3 20 51 83 c9 da eb 28 5a 8d 0a 39 68 25 57 89 33 67 9b 34 68 9c 0d 3c 6c 2c 5f 92 31 65 99 22 53 85 21 52 84 0c 3a 6a ce dd ec cd dc ec da e6 f1 d1 e0 ee 09 37 66 c7 d9 ea 29 5b 8e f3 f7 fb 2a 5d 90 24 56 88 2d 60 93 1c 4d 7e f8 fa fc 30 63 97 c4 d6 e9 d0 df ed fa Data Ascii: PNGIHDRo PLTE+TE\|&X?oHyCsAqEu"T=mNFwJ{P.aK} Q(Z9h%W3g4h<l,_1e"S!R:j7f)[*]$V-`M~0c
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 04 f0 c4 b9 ba ce 89 d1 62 16 a4 41 b3 f6 62 4b 60 1c 1b b0 d4 74 5e 59 27 9f cd 95 c9 12 f3 7b e4 b1 30 99 84 60 30 8e 8d 99 99 f2 dc a8 8a 73 39 71 3d 3d 43 1d b7 5d e7 c4 df 5e 7d fb 56 4c cc ed 0b cb 9f 0e c7 60 3c 5a 60 ba 57 03 d6 36 cd bd 2e be fb 17 dc c6 e7 e6 ca 3a a5 47 bb b3 3b e9 64 6a 69 21 4e 4b 0c 56 9c 9b 9b 9b d3 93 2b 8d ca 49 55 76 76 16 de be e5 1a 79 ea 6f ab 6f 9f 8a 89 b9 70 fb 82 4b 25 80 39 f2 68 40 2d 0b cf 5b 91 1b 91 38 1a 30 b1 b3 b9 2d 03 47 f3 bb 7b 8a cf 81 2b 48 19 97 50 41 c1 00 2d ff 9c ac f3 5c 2c 38 64 a3 12 33 e2 12 94 ab c3 5c e7 2c 8f 14 2b 08 77 93 2c 72 22 ea 02 73 72 aa 2e ca ad af 4a 2c e6 e6 2d 28 78 c7 40 15 1d c7 82 2a 59 77 7d fd 93 d2 4e a9 54 26 4f cd 50 96 01 58 24 b8 63 a3 63 2e 7a 0d 0f 96 7a 96 f2 de Data Ascii: bAbK`t^Y'{0`0s9q==C]^}VL`<Z`W6.:G;dji!NKV+IUvvyoopK%9h@-[80-G{+HPA-\,8d3\,+w,r"sr.J,-(x@*Yw}NT&OPX$cc.zz
2024-09-29 00:48:40 UTC	2145	IN	Data Raw: 6b e4 b6 98 2b 3d b5 78 71 29 65 e6 f7 db e1 26 d2 48 c1 2b 08 7f f5 dc 16 73 7f 04 2f 57 fc 0d c9 4d 50 7d cd 6f 54 6e bf 46 5b a2 91 1b 2d 1b a6 cd ad bc 59 87 dc 8e 9f 11 70 2b 9f c7 71 3b 73 fc df 52 6e cc a2 45 da dc fa 91 02 b8 45 40 11 31 cc 0d 95 4b 24 fd 6d ad f6 12 c9 99 ae ba e3 93 96 2e dd d8 d6 0f dc 22 54 3e 66 66 8a 08 1f b3 e3 2a 2b 2b 95 42 c8 4d a5 30 36 9e 48 8a 2c 4d 54 a8 26 4e 44 cd 8f 74 0d 00 6a 50 10 4d c4 cd 6f e3 41 5e 27 d5 ad 58 6e a8 5c 52 53 c3 e9 64 dd e0 a4 ba 7e 2a b7 33 c8 07 33 03 9d 54 29 84 72 03 66 c6 84 99 31 cf ec d1 ea 24 29 88 26 e4 86 6a 79 9d 54 ab 5b a1 a1 72 2c 36 d2 5a d5 e5 88 d7 49 b5 e2 0f 66 66 fd 75 6d b5 50 ec 4e a1 50 f4 73 dc 54 8a 69 d3 8c 7b 91 02 9a 4a 65 3c 11 d5 40 05 a9 47 ca 0d aa af 89 b9 1d Data Ascii: k+=xq)e&H+s/WMP}oTnF[-Yp+q;sRnEE@1K$m."T>ff++BM06H,MT&NDtjPMoA^'Xn\RSd~33T)rf1$)&jyT[r,6ZIffumPNPsTi{Je<@G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49732	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:40 UTC	643	OUT	GET /images/mortgage-home4me-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:40 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:40 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 54009 Connection: close Content-Type: image/png
2024-09-29 00:48:40 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 02 00 00 00 a0 32 77 22 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 82 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR2w"tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 89 82 ff 93 36 17 3e ad 91 73 f2 56 e2 c4 d1 21 c3 38 58 52 12 8c 18 e7 22 17 29 a5 01 59 0e 41 6d 73 e2 85 f3 6d 5a 4f e5 fd 38 03 66 91 22 2f 10 e5 b8 aa 80 f5 e4 12 33 37 7a 06 bf ed 86 b6 43 4c 40 22 b7 a8 ec 69 53 5f ac ea bb a7 f5 f9 a2 21 3d 47 9a 52 ca f5 40 ad 79 a0 71 7b 08 a2 20 18 f0 17 a7 1f 50 21 69 fb 40 f7 23 58 87 a9 1d e8 58 fc 9e 4e 98 88 c0 4a 1b a2 b7 48 81 93 38 a1 ca 4f f6 1d b0 5f f4 c4 a0 80 0d 59 51 02 41 d4 1e bb e0 20 25 9c af 9e ae ce bb 29 b8 a2 39 b8 55 6e ce a9 a6 09 ef a2 c5 8a 29 c1 02 4b f3 62 9a ed 9e e8 45 33 45 db 69 ce 4d 70 7e 1c 4d 3d 31 1d 35 f1 e5 e4 19 4b e4 ad d2 f3 53 75 17 fd 74 62 25 67 e0 9f 0a a5 6f 19 5e 9d 51 b8 53 ce 4a dd 2e ff a8 39 2f 30 e7 25 73 0e 3c 89 2c 1a 76 e7 d4 9c 2a 87 14 1d 55 2e 95 60 2f Data Ascii: 6>sV!8XR")YAmsmZO8f"/37zCL@"iS_!=GR@yq{ P!i@#XXNJH8O_YQA %)9Un)KbE3EiMp~M=15KSutb%go^QSJ.9/0%s<,v*U.`/
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 07 84 ab 9a b7 26 71 30 f2 c4 33 36 b4 b4 45 6d cb 55 b1 50 35 99 ef fd a0 8b 7d 32 6d d2 60 88 b8 de 0f 64 0c c7 45 41 47 6b b5 1c 97 0d 9d b1 4c c2 93 40 75 88 f4 35 6d 1d 03 19 1d 37 7b 8f 4c 77 1b 92 19 18 4f 38 70 65 0d 74 f6 03 c9 34 23 74 78 ee 60 dc b5 c8 e0 90 b3 88 c0 a5 27 45 1a 07 46 bc 72 46 45 90 09 18 e1 51 d5 f0 18 29 52 5f 9d 96 cb 95 ad 4f 9c 5b 68 bb 40 5b b7 1e a3 19 91 cc 26 4f 93 e3 b7 28 a4 63 9c f9 d6 63 97 5d 28 72 0a a0 cf 1c 13 3e 58 ee c4 35 d3 a0 1f e9 2b 9f 69 97 c8 30 8e b1 a7 c3 84 e0 17 0f c1 44 72 8a 55 95 04 b8 4a 46 bc 82 ba 5b 4b 37 17 37 7d 0b 85 1c 50 a0 81 61 8e 0c 81 16 7e c3 20 c3 c3 90 d0 42 2a 97 9c 53 3f ca 98 31 38 aa 59 69 47 de 9f 24 2c 69 7a 9e 4a 69 18 6d cc 81 6b 3a 26 64 92 8e 5f 99 03 c5 52 9e 39 7e b8 Data Ascii: &q036EmUP5}2m`dEAGkL@u5m7{LwO8pet4#tx`'EFrFEQ)R_O[h@[&O(cc](r>X5+i0DrUJF[K77}Pa~ B*S?18YiG$,izJimk:&d_R9~
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 79 ff bb 7e ed a3 bf 7b 72 76 fa 7d df fd 8e 9b 6e fc b7 ff dc fb 9a d5 f2 c1 ab 0f bf ed 6f fc f8 e5 93 5d 69 7f fc 73 5f fc ea f7 7c e0 dd 3f fb 91 8f 7d e1 bd 1f a8 be f9 47 7f e7 fb 5e a2 e3 f2 fb 9f ff ca 07 bf eb ed bf fa c9 4f fc e1 cb 24 96 e3 57 bf f6 e5 e6 6e 39 de 3c f0 7d 8b b6 84 c5 6a 70 27 f5 10 f7 d3 e8 1a e1 09 21 29 89 39 53 ec 99 87 85 f4 62 eb db bd ef 77 ac 29 1d 16 dc d6 53 03 0f 82 72 e6 45 b4 e3 34 b0 16 03 cc 94 23 47 f0 ba 6d 5d d3 2c 6d b3 df 77 8f ed 4d a0 80 97 f4 45 6f c8 40 df ec 36 0f 1f 7e f3 c9 e3 47 03 7a 0d 48 8d ee 5f 1b c7 f6 e6 b2 32 86 e4 98 04 b1 27 35 de b5 58 7d 57 3e 7c f8 c0 c6 f1 51 41 41 4e b3 5a 9f 90 27 bd 1b fc 6b 0f 6f 5c d9 2c 1c 26 91 77 23 12 78 4d 6d c0 26 0a 3e 15 72 b5 4b ce da 01 43 b0 74 cb ba 58 Data Ascii: y~{rv}no]is_\|?}G^O$Wn9<}jp'!)9Sbw)SrE4#Gm],mwMEo@6~GzH_2'5X}W>\|QAANZ'ko\,&w#xMm&>rKCtX
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: d1 24 d3 91 94 a1 a3 23 22 6e c9 e7 d2 b1 62 41 a8 85 38 b8 dd 8a e9 f7 ba 3d 3e 4f 63 43 50 12 16 1d 2f 11 51 3a 68 94 c0 72 99 cc 47 4c c5 34 c3 9e a2 24 ea 4c 0a 25 50 28 03 82 03 ac 24 e6 9a 15 a5 2f 91 6b 67 2f 41 23 cf d2 03 1a 1d 7b 06 13 e0 16 81 32 8e 24 93 7e d0 6a 78 db 49 d6 71 e2 49 82 da b1 d9 c9 63 df 00 a9 fe b1 c4 0b 96 9d 5a a4 54 a6 a6 14 03 59 12 89 18 02 c7 e3 08 c9 93 65 36 7a 88 d9 54 04 7c 9f f0 d8 14 45 93 a6 93 75 51 a6 44 06 17 95 fe 47 3e 84 aa 72 d4 22 86 60 98 4c a6 cb e2 a8 b0 ee 14 66 c3 24 38 07 fd 8f a6 15 c8 94 b3 45 bd 28 a9 3c b7 83 b9 25 04 9d 89 e2 48 a1 e0 c3 64 60 c2 1d dc 67 43 43 97 05 0c 4a 52 c5 00 ca c4 e1 09 3c 0e 38 49 9d ee 49 a6 02 22 4d 07 0e 79 04 54 51 32 66 27 e7 6c 47 3e 25 91 96 46 cc 50 90 92 94 33 Data Ascii: $#"nbA8=>OcCP/Q:hrGL4$L%P($/kg/A#{2$~jxIqIcZTYe6zT\|EuQDG>r"`Lf$8E(<%Hd`gCCJR<8II"MyTQ2f'lG>%FP3
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 63 86 0d cc a5 eb 7e 2b 93 ad e4 88 12 b2 c6 06 7b f6 85 07 0f ec 79 f1 d0 de fc 3e 10 ca d4 8b 5d 3b 94 5f 3c f6 50 7e df d0 1c 69 4d de c7 79 04 60 49 6d 99 bb f7 ac 21 1f 3f 7a d5 69 a3 0f 3d 75 f4 a1 7f 3a ef d8 79 13 52 66 6e da dc 65 7b 88 2d d2 17 ae 58 bf 6d ce 66 7c 3c 7a b6 f5 0d ef 5e 0e 6f 36 d4 05 bf f9 61 7d eb 13 46 79 62 1a d3 72 40 af 18 de 97 17 82 50 ae 27 a1 41 49 1a 77 7c 2b 63 1a 7b bf 8f bc 35 9b 3f 9e 7d 70 d7 45 13 af bb f8 8c e1 20 cd f0 2f bc 87 25 fc d5 c3 6f cf 6e b9 95 ee 9d db 5d 71 ca e1 fc be be 39 9c ff 3e fe 26 51 b6 92 c3 04 a7 5d f6 7c 49 9c f4 43 0f 85 a3 eb 76 d4 e5 3a 05 f8 76 ca fc 95 bc a4 7f cf 7d 9d 2b d4 35 87 20 8e 81 3f 90 0c 90 b9 ac 51 f6 b2 b5 42 23 f6 28 f1 5d 7c da 70 e7 d1 1e d0 ab f3 53 e3 8e e6 6f 67 Data Ascii: c~+{y>];_<P~iMy`Im!?zi=u:yRfne{-Xmf\|<z^o6a}Fybr@P'AIw\|+c{5?}pE /%on]q9>&Q]\|ICv:v}+5 ?QB#(]\|pSog
2024-09-29 00:48:40 UTC	6024	IN	Data Raw: e3 52 b2 ca 47 6e 89 6c 79 70 ad 6b 91 c9 79 1d f2 48 98 d4 da 06 86 9c eb 4b bf 58 4b cd af d4 c0 90 e7 87 3f 37 c1 b8 d4 da de 89 56 35 30 08 b9 ca 62 85 cd 94 6b 6b e6 2d bd 64 58 90 8a ed 3b 6b ea ea f7 58 39 cc 5e dc 6b 45 e5 10 ab 23 8e 3a cd 1e 27 69 fe 77 56 0e f7 0e 24 f1 13 2a 87 ad 49 dc b4 a6 72 f8 2b 80 7d 94 b4 eb 6b a6 c4 d6 71 c2 c2 45 33 9d 91 5f ee 98 e6 a5 b7 3e 5a f4 dd 72 73 4f 95 43 e9 c7 e2 73 17 7e b7 ec c5 37 3e fa 89 f8 dc 3d 80 7d cc df 00 ec 93 4f 22 7f 0a d8 a7 15 52 f5 4b a4 21 7f 44 e5 50 11 0a d1 49 05 21 cb b6 85 c9 b8 b1 2d 25 2c a7 06 a2 f7 53 bf 98 c3 11 71 1e 05 b9 75 db ce ef 7e 58 d1 8a 7b f0 2b 82 7d e4 5c 12 dc 5a b0 cf e4 cf 66 81 ab f7 b3 e1 73 7f 0a d8 e7 c7 51 de 9b 3f a6 a5 46 da b3 40 e7 03 fb 28 9c df 74 fa Data Ascii: RGnlypkyHKXK?7V50bkk-dX;kX9^kE#:'iwV$*Ir+}kqE3_>ZrsOCs~7>=}O"RK!DPI!-%,Squ~X{+}\ZfsQ?F@(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49733	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:40 UTC	636	OUT	GET /images/awm-trust-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:40 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:40 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 29336 Connection: close Content-Type: image/png
2024-09-29 00:48:40 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 db e6 f2 ec f2 f8 d1 e0 ee e0 ea f3 e4 ed f5 e8 ef f6 00 45 7c e6 ee f6 ea f1 f7 d9 e5 f1 ee f3 f9 f0 f5 fa ce de ed dd e7 f2 c2 d5 e8 d7 e4 f0 c9 da eb e3 eb f4 f2 f6 fa e1 eb f4 d4 e1 ef cc dc ec de e9 f3 d5 e2 ef c6 d8 ea f7 fa fc f4 f7 fb dd e8 f2 36 6e 99 f5 f8 fb 4f 4a 28 c4 d6 e9 fb fd fe 34 3b 23 3c 39 25 a4 a1 9b 5b 53 2a 62 50 2d 2d 30 23 51 51 28 a9 86 68 62 59 2d 6b 53 32 59 4b 2c a1 7e 61 ae 8c 6d 6b 94 b5 4c 41 2a 43 40 26 46 48 27 bf be ba 88 81 36 6a 5b 2e 72 99 b8 be aa 9c 56 58 28 af ab a4 37 2b 28 71 5f 32 c7 b8 ac 57 41 2d 6a 69 2b 25 1f 25 9b 78 5a b4 97 81 82 7c 32 95 71 57 63 63 29 61 48 30 82 61 46 44 Data Ascii: PNGIHDRo PLTEE\|6nOJ(4;#<9%[SbP--0#QQ(hbY-kS2YK,~amkLAC@&FH'6j[.rVX(7+(q_2WA-ji+%%xZ\|2qWcc)aH0aFD
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 12 c9 78 3c 9a e1 8f c6 53 d0 5e 0c 22 16 8d a5 d3 d1 2e 2e 2e 74 17 3a 96 ee e2 e8 08 a1 5d 40 10 8a e2 46 64 80 47 f2 f2 75 41 8b 7d 7d ad 7d 16 b6 92 29 d0 24 95 27 09 75 f1 e3 75 e2 e6 b6 ed a8 d6 d6 13 57 f7 dc 6c 3f f5 0b ee 9b bf 31 b9 8a 80 a9 91 d6 fe fe bc bc 0d dd c3 5b 27 46 ae 1c 3d 73 f0 20 15 13 84 21 13 e9 2e 18 0c 86 ee e2 42 0c e3 84 61 30 74 3a dd 11 83 c1 38 62 b1 1c 47 47 88 c1 a0 63 5d 5c 3c c8 04 7a 86 d8 c5 11 eb c5 c0 62 e8 61 43 21 7d b8 ec 6c a6 46 b6 25 7b 5a 98 2c 2d 2e dc 23 2e 3c 35 f9 c5 89 91 11 de cd d1 83 5a 6d b7 fb 85 5f b8 37 9f 6c ff f1 c7 0d 95 fd b8 5b 13 2d 70 e9 d7 67 ce 1c 3c 7a e6 6b 0a 9a 48 24 d2 31 44 4c 10 06 eb e8 e8 08 40 e8 d8 20 ac 58 8f fc 0f 62 d0 a9 04 06 9a 88 26 50 5c 08 54 8a 0b dd c5 85 1e 44 17 Data Ascii: x<S^"...t:]@FdGuA}}})$'uuWl?1['F=s !.Ba0t:8bGGc]\<zbaC!}lF%{Z,-.#.<5Zm_7l[-pg<zkH$1DL@ Xb&P\TD
2024-09-29 00:48:40 UTC	8000	IN	Data Raw: 16 0b de 01 f6 80 73 bc 7d 8e 8d 25 0e c3 4b 61 d8 0e b0 d2 6d bc 5f 04 ad 1a 9c 43 f0 d6 5b 30 bc f7 9d 77 50 f0 ab 56 2e e8 29 43 07 86 b7 6f 47 cd 9f bf 01 86 fb 91 39 b0 69 06 6c 59 35 30 1c 07 67 1b 07 d5 46 fa 45 c0 60 84 c3 e9 5e 0d bb 23 24 d5 19 12 eb 5b 08 87 13 05 bf 6a e5 7a ca bf dd 00 37 2e 59 f2 3d 42 88 85 6d 13 ee a3 19 b0 59 0e bc bd bd 7d 23 60 8c 3a 83 d5 04 1c 19 b1 fd d9 5a 32 6f 5e 23 dc 6f 9b 6f e0 06 00 ec 15 56 02 cd b2 8f 60 d8 66 94 f0 86 0d 70 34 98 70 60 7a 3b 2f 5e b6 2c 1a f8 5b 00 cc 01 79 bb 3d 03 ab 04 7e 03 02 06 d0 50 60 06 bc 8d 02 60 d1 70 2b 0a 7e 95 4d 3e e5 fa a2 e0 f5 00 6d 3b ec ec 0c 6f 07 60 9b 90 45 19 b0 6f ab 97 d9 c0 c0 b8 f5 af 87 2b 67 c0 96 02 a6 f8 5c 04 6c d1 07 f3 1a e1 4a db 7c 83 e1 b7 5a 67 e8 b0 Data Ascii: s}%Kam_C[0wPV.)CoG9ilY50gFE`^#$[jz7.Y=BmY}#`:Z2o^#ooV`fp4p`z;/^,[y=~P``p+~M>m;o`Eo+g\lJ\|Zg
2024-09-29 00:48:40 UTC	5351	IN	Data Raw: 38 02 91 06 a9 1a 6a 90 d8 d8 98 50 2a 15 56 41 84 fc 82 82 34 21 ec 7a c1 62 ba b3 68 4e f1 61 c1 e2 a0 6d e9 49 9f 26 29 04 81 52 89 57 a0 97 9d d7 4e bb 5d 76 bb 52 6d 77 f8 aa 44 a2 d4 43 1f 7f bc df 43 2c e6 7a b4 3d 18 6c aa 9c e9 98 ea 00 81 8f 21 9d 4e ab 4d ef cd d7 1d dd 7c 74 ee 83 bf fd f5 f6 40 db d4 d0 f0 c0 74 db 50 d7 64 53 e5 4c 6e 19 44 8f bc bc 3c 98 69 ad 1d 33 6d ba d6 8f e3 41 4d 2c 9a ca 8b 49 74 8a a6 52 43 43 c3 88 15 44 a1 10 1a f3 dd 49 a0 e5 02 92 30 42 1a 9f 4f c3 83 fc 03 91 48 21 12 f0 2c 3c 9e 84 67 31 89 44 4a 24 8f 40 e3 c3 4e 28 4c 4b 26 8e 9a 96 46 e4 f1 48 2c 3e 31 26 86 4d 23 e1 49 34 50 2c 0b 0d 4d ab 55 27 52 69 20 95 26 74 72 a8 08 0b e3 72 b3 3f f5 8d 92 4b bd 02 15 52 58 9d 53 ed b2 53 d9 d9 89 24 b6 12 91 20 5d Data Ascii: 8jP*VA4!zbhNamI&)RWN]vRmwDCC,z=l!NM\|t@tPdSLnD<i3mAM,ItRCCDI0BOH!,<g1DJ$@N(LK&FH,>1&M#I4P,MU'Ri &trr?KRXSS$ ]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49737	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:40 UTC	642	OUT	GET /css/webfonts/26DA37_0_0.woff HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ipv6.52-229-18-172.cprapid.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:40 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49736	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:40 UTC	642	OUT	GET /css/webfonts/26DA37_1_0.woff HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ipv6.52-229-18-172.cprapid.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:40 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49735	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:40 UTC	650	OUT	GET /images/template/top-nav-bg.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:40 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49738	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:40 UTC	652	OUT	GET /images/template/footer-bg960.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:40 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49740	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:41 UTC	657	OUT	GET /images/template/nav-search-bar-bg.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:41 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49741	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:41 UTC	648	OUT	GET /images/icons/lg/custserv.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/css/layout2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:41 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49744	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:41 UTC	641	OUT	GET /css/webfonts/26DA37_0_0.ttf HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ipv6.52-229-18-172.cprapid.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:41 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49742	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:41 UTC	641	OUT	GET /css/webfonts/26DA37_1_0.ttf HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ipv6.52-229-18-172.cprapid.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ipv6.52-229-18-172.cprapid.com/css/MyFontsWebfontsKit.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:41 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49743	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:41 UTC	629	OUT	GET /images/housing-logo2.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:41 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 653 Connection: close Content-Type: image/png
2024-09-29 00:48:41 UTC	653	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 21 08 06 00 00 00 b8 26 a9 51 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 1a 49 44 41 54 78 da e4 57 bd 4e c3 30 10 76 ab 0e 6c 2d 6f e0 81 9d bc 01 61 63 23 6f 40 fa 06 7d 03 ca cc 40 46 c4 d4 4a 8c 0c 7d 83 06 31 c0 c0 90 47 30 13 6b de c0 f8 aa cf e8 6a 5d 02 71 23 05 89 93 3e d9 71 ef ce df f9 fc 73 55 d6 5a 15 89 dc c1 00 79 ac 9f 18 a3 0c 93 86 12 45 a4 8b 72 ea 50 da 9f c5 80 64 6f 04 9a 26 ae 1d 96 0e ab 06 22 25 6c a3 09 b4 45 5c 38 cc 98 ae 76 d8 c4 10 e9 3a f1 0a 93 c5 90 16 89 74 31 d6 3d ed 97 3d 22 7e f9 ca 43 f2 18 71 62 be 7d 2b 6c 24 Data Ascii: PNGIHDR !&QpHYstEXtSoftwareAdobe ImageReadyqe<IDATxWN0vl-oac#o@}@FJ}1G0kj]q#>qsUZyErPdo&"%lE\8v:t1=="~Cqb}+l$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49745	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:41 UTC	669	OUT	GET /arvest.com/images/small/button-arrow.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/css/bootstrap_custom.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:41 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:41 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:41 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:48:42 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=143780 Date: Sun, 29 Sep 2024 00:48:42 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49748	151.101.2.137	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 29 Sep 2024 00:48:42 GMT Age: 1965433 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740067-EWR X-Cache: HIT, HIT X-Cache-Hits: 42, 1 X-Timer: S1727570922.157166,VS0,VE1 Vary: Accept-Encoding
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-09-29 00:48:42 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49751	104.18.10.207	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	918	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 17213251 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ca7f817afe66a5b-EWR
2024-09-29 00:48:42 UTC	451	IN	Data Raw: 37 63 30 62 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c0b/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 Data Ascii: tstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 2b 3d 7e 7e 28 31 65 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2c 64 6f 63 75 6d Data Ascii: ="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t+=~~(1e6*Math.random()),docum
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d Data Ascii: t",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=this._element;t&&(e=
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 2c 44 3d 22 69 6e 70 75 74 22 2c 77 3d 22 2e 61 63 74 69 76 Data Ascii: ace,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="buttons"]',D="input",w=".activ
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6b 2c 6d 2e 66 6e 5b 70 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 Data Ascii: ss(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Constructor=k,m.fn[p].noConflic
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e 70 72 65 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 Data Ascii: teners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t.prev=function(){this._isSlid
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 75 73 65 28 74 29 7d 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 4c 45 41 56 45 Data Ascii: ig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return e.pause(t)}).on(Q.MOUSELEAVE
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 58 29 2c 61 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d Data Ascii: r e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.querySelector(X),a=this._getItem
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 29 29 7b 76 61 72 20 69 3d 6c 28 7b 7d 2c 50 28 6e 29 2e 64 61 74 61 28 29 2c 50 28 74 Data Ascii: d"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B)){var i=l({},P(n).data(),P(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49749	104.17.25.14	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	932	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 871151 Expires: Fri, 19 Sep 2025 00:48:42 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vnhwYufIBGBVw9%2FM1ykHhL%2BXmJOAaxV%2BziKHEtnhmiwqzC91leUYiXsW%2FNh9o7WJlIMriSVFsPmM70fL%2FcXft5mE0V4HoF1ZDQhbvPCihRlEU9PznT5W6dLEjM8H49ceYVKIag1g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ca7f817acde4268-EWR
2024-09-29 00:48:42 UTC	437	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c Data Ascii: etComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 Data Ascii: oid 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloa
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f Data Ascii: s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BO
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 Data Ascii: p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.c
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c Data Ascii: is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyl
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 Data Ascii: nction(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 Data Ascii: ['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: (t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49750	104.18.10.207	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	917	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 1b67fa50f8ffc843a15d702643eb706f CDN-Cache: HIT CF-Cache-Status: HIT Age: 17226942 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ca7f817c89142e4-EWR
2024-09-29 00:48:42 UTC	452	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c0c/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 Data Ascii: trap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c 3d 6f 2c 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6c 29 2e 6d 61 74 63 68 Data Ascii: onEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l=o,{}.toString.call(l).match
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 74 Data Ascii: removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._destroyElement=function(t){o(t
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 Data Ascii: abled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-pressed",!p(this._element).ha
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 22 2e 61 63 74 69 76 65 2e 63 Data Ascii: "touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".active",ACTIVE_ITEM:".active.c
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e Data Ascii: his._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];var i=this._getItemIndex(this.
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 3d 3d 3d 68 2c Data Ascii: (t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirection=function(t,e){var n=t===h,
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b 69 29 2c 6f 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 Data Ascii: });P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+i),o._isSliding=!1,setTimeou
2024-09-29 00:48:42 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d 22 2e 22 2b 6e 2c 6f 3d 74 2e 66 6e 5b 65 5d 2c 61 3d 7b 74 6f 67 67 6c 65 3a 21 30 Data Ascii: ){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i="."+n,o=t.fn[e],a={toggle:!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49752	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	625	OUT	GET /images/fdic-logo.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 916 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	916	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 17 08 06 00 00 00 63 ee ed 9b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 36 49 44 41 54 78 da cc d7 4b 6c 4c 51 1c c7 f1 3b 53 ef a0 23 6d 91 7a ab 86 46 44 43 11 89 10 c2 02 91 52 0b 2c 44 a8 57 2c b0 13 f1 08 82 08 36 36 34 11 8f 44 6a 41 44 08 d2 d4 a6 68 88 08 21 ea 11 a5 86 6a d3 6a a3 45 3d ea d1 f1 3d f5 9b b8 39 39 33 a3 32 0b ff e4 d3 99 7b ee b9 e7 9e 7b 1e ff b9 0d 46 22 91 8a c8 ef 78 8b 14 78 78 a2 b2 4a f4 57 59 47 cc 43 0b 36 76 f4 da 00 7f b2 3c cf bb 87 de 98 89 77 b8 86 5e 18 af 73 69 98 8e 0a 3c 45 1e 7a e2 25 a6 a0 0c 21 64 e3 0a be a9 ac 14 8f d4 46 b5 f7 3b 26 62 00 4a d0 15 b9 68 44 bf f6 Data Ascii: PNGIHDR$ctEXtSoftwareAdobe ImageReadyqe<6IDATxKlLQ;S#mzFDCR,DW,664DjADh!jjE==9932{{F"xxxJWYGC6v<w^si<Ez%!dF;&bJhD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49754	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	376	OUT	GET /images/arvest-logo.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 4092 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	4092	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c9 00 00 00 45 08 06 00 00 00 e0 b4 c2 a6 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0f 9e 49 44 41 54 78 da ec 5d 07 98 17 c5 15 9f e3 e0 28 47 39 30 22 4d 04 05 02 16 04 05 44 c1 92 4f 41 b0 20 36 a2 10 01 e5 03 cf 20 b1 45 85 a0 89 9a 80 09 41 a5 08 44 40 e1 0b 62 41 b1 a4 2b 06 50 f1 02 16 40 05 45 48 e2 81 85 d8 10 94 22 f5 9f f7 d8 f7 c7 65 7c 6f eb 6c 39 6f 7f df f7 fb ee fe bb b3 b3 b3 b3 fb 66 e6 95 99 29 c8 e5 72 2a 62 74 02 b6 02 3e a6 e2 43 55 60 4b ba ef 61 74 6c 1f f0 53 e0 fb c0 75 f4 3b 43 b2 a8 0e dc 05 cc a5 b9 90 05 31 08 c9 c3 c0 63 81 1d 43 54 46 13 e0 68 e0 46 e0 7f 80 eb 81 9f 03 b7 02 8b 80 f5 48 20 da Data Ascii: PNGIHDREtEXtSoftwareAdobe ImageReadyqe<IDATx](G90"MDOA 6 EAD@bA+P@EH"e\|ol9of)r*bt>CU`KatlSu;C1cCTFhFH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49755	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	393	OUT	GET /images/merchant-services-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 22341 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 e7 ee f6 04 0c 0b db e6 f2 ea f1 f7 e4 ed f5 07 0d 0c 00 45 7c d8 e4 f0 06 16 19 dd e7 f2 c2 d5 e8 e2 eb f4 ed f3 f8 e1 ea f4 e8 ef f6 e0 e9 f3 da e5 f1 d5 e2 ef 06 14 16 f8 fa fd e5 ed f5 d1 df ee 0e 15 13 d4 e1 ef ed ed ee de e8 f2 f5 f8 fb d2 e0 ee c7 d9 ea f1 f6 fa cb db eb 06 18 1c 0a 12 11 ce dd ed f4 f0 f1 f0 f4 f9 06 10 10 eb f2 f8 f3 f7 fa cd dc ec cf de ed 0b 0f 0c c5 d7 e9 10 19 18 ee f4 f9 de e9 f3 e5 e2 e5 b2 a8 a0 18 24 24 ce ca ce c7 c1 c4 f4 ef ee c9 da eb b9 af a8 bf b9 b9 10 1e 20 e7 e5 e9 e8 db d8 c9 c4 c7 e6 df df f0 ea ea b6 ac a4 bd b6 b3 c6 bf c0 f2 ed ec 07 1b 20 d1 ce d2 ea e9 ec cc c7 ca fe ff ff c1 Data Ascii: PNGIHDRo PLTEE\|$$
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 47 20 93 5e 75 1c 23 1d 04 1f 7e fa c7 8f 0e 7f d4 fd 29 bc 62 45 7b da fe 32 79 f8 fd e4 d3 fd 27 d7 e4 d3 f6 cf ff 15 da 9d a7 1d 0f 36 68 cf df f8 eb ff f3 34 f6 3f 4f 3f fe 6c d1 ac fd e5 57 1b ef 8f a0 fd aa 78 98 ba ea 58 55 fe cd 89 b6 75 07 f6 ed 3b 70 65 c0 a0 d5 1a f2 b2 b3 0f 9e 33 a5 35 37 27 59 5c 01 a4 96 17 89 85 26 5d 1d 0e 31 71 c1 c1 a1 b1 f1 54 3b 26 93 99 d6 9e 5f 2c 17 d2 e9 fe d1 85 b5 89 6a 4f cf d4 3b 65 5c 39 37 71 a2 bd 98 9f f8 ed 77 9f 20 f7 03 26 ac da b9 73 77 71 56 56 66 15 38 56 ae a7 15 18 6a fa 06 8a 0e 22 bf 0a 29 0a 9b e6 7a 20 c0 00 2d 26 dd d7 d7 37 26 1e ce b0 99 cd b5 89 52 b9 da cd df 3b d7 a5 98 27 44 60 4a 9e 32 ff db da fc e2 da 2f 3e 21 9c 0f d8 ac 2b 3b 6f ec e4 e7 64 8e 67 ee df b7 7f ff 80 29 bb 77 a0 a8 df Data Ascii: G ^u#~)bE{2y'6h4?O?lWxXUu;pe357'Y\&]1qT;&_,jO;e\97qw &swqVVf8Vj")z -&7&R;'D`J2/>!+;odg)w
2024-09-29 00:48:42 UTC	6356	IN	Data Raw: 15 30 8b c0 34 a2 50 60 89 c5 ed d0 21 2f 21 36 3f fd f4 53 08 04 2a 26 25 25 c5 c7 c7 c7 a3 f0 48 6d 72 b2 d1 68 d4 99 f3 f2 f2 b2 0d a6 02 ad 4e 57 a0 d2 3a e5 76 74 74 1f 1e 2c 19 ea ea 68 ed 3e 7c fc f8 e0 60 79 f9 3d d4 1d f7 ec a9 13 b8 fe 5f 9b 2c d8 37 04 98 6d b0 ce 8d f1 0e 4c 62 ef 49 4d 28 12 07 10 33 a3 07 84 a8 6e 1e b4 50 83 bb 76 64 e4 e6 c1 bb 77 ef 44 47 03 55 2f 89 e5 0b 2c 55 a2 73 cb 0a db f2 b4 da 02 30 93 c9 84 e5 de ce cc 5a 9f 9f ff f0 f2 4f a1 71 b1 b1 31 5f 41 60 24 90 8b 8f 8f 4f 48 d0 ea 8c 46 63 72 75 5b 56 7d 75 36 98 c1 60 30 17 e8 20 01 6b f5 e6 2e e8 86 57 af 76 35 76 75 1f 87 45 48 09 c4 4c 42 70 e1 9e ea 9f ef 8c a8 c9 7c d3 63 62 63 42 53 80 5a 30 44 60 4d b6 99 6b 45 31 d7 83 0d bb 17 51 38 9a f4 37 c3 bc 2f 22 e2 9d Data Ascii: 04P`!/!6?S*&%%HmrhNW:vtt,h>\|`y=_,7mLbIM(3nPvdwDGU/,Us0ZOq1_A`$OHFcru[V}u6`0 k.Wv5vuEHLBp\|cbcBSZ0D`MkE1Q87/"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49759	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	396	OUT	GET /images/cc-acquisition-offer-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 18130 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 17 2b 54 d5 e2 ef d7 e4 f0 e9 f0 f7 e3 ec f4 ec f2 f8 00 45 7c e7 ef f6 d9 e5 f1 f0 f5 fa e4 ed f5 d3 e1 ef 26 58 8b e5 ed f5 c2 d5 e8 e1 eb f4 ee f4 f9 df e9 f3 f2 f6 fa 10 3f 6f dc e7 f2 18 48 79 13 43 73 12 41 71 db e6 f2 15 45 75 e0 ea f3 dd e8 f2 22 54 86 0e 3d 6d 1d 4e 80 ea f1 f7 16 46 77 19 4a 7b cb db eb 1e 50 81 f5 f8 fb cf de ed 2e 61 95 1b 4b 7d de e8 f3 20 51 83 c9 da eb 28 5a 8d 0a 39 68 25 57 89 33 67 9b 34 68 9c 0d 3c 6c 2c 5f 92 31 65 99 22 53 85 21 52 84 0c 3a 6a ce dd ec cd dc ec da e6 f1 d1 e0 ee 09 37 66 c7 d9 ea 29 5b 8e f3 f7 fb 2a 5d 90 24 56 88 2d 60 93 1c 4d 7e f8 fa fc 30 63 97 c4 d6 e9 d0 df ed fa Data Ascii: PNGIHDRo PLTE+TE\|&X?oHyCsAqEu"T=mNFwJ{P.aK} Q(Z9h%W3g4h<l,_1e"S!R:j7f)[*]$V-`M~0c
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 04 f0 c4 b9 ba ce 89 d1 62 16 a4 41 b3 f6 62 4b 60 1c 1b b0 d4 74 5e 59 27 9f cd 95 c9 12 f3 7b e4 b1 30 99 84 60 30 8e 8d 99 99 f2 dc a8 8a 73 39 71 3d 3d 43 1d b7 5d e7 c4 df 5e 7d fb 56 4c cc ed 0b cb 9f 0e c7 60 3c 5a 60 ba 57 03 d6 36 cd bd 2e be fb 17 dc c6 e7 e6 ca 3a a5 47 bb b3 3b e9 64 6a 69 21 4e 4b 0c 56 9c 9b 9b 9b d3 93 2b 8d ca 49 55 76 76 16 de be e5 1a 79 ea 6f ab 6f 9f 8a 89 b9 70 fb 82 4b 25 80 39 f2 68 40 2d 0b cf 5b 91 1b 91 38 1a 30 b1 b3 b9 2d 03 47 f3 bb 7b 8a cf 81 2b 48 19 97 50 41 c1 00 2d ff 9c ac f3 5c 2c 38 64 a3 12 33 e2 12 94 ab c3 5c e7 2c 8f 14 2b 08 77 93 2c 72 22 ea 02 73 72 aa 2e ca ad af 4a 2c e6 e6 2d 28 78 c7 40 15 1d c7 82 2a 59 77 7d fd 93 d2 4e a9 54 26 4f cd 50 96 01 58 24 b8 63 a3 63 2e 7a 0d 0f 96 7a 96 f2 de Data Ascii: bAbK`t^Y'{0`0s9q==C]^}VL`<Z`W6.:G;dji!NKV+IUvvyoopK%9h@-[80-G{+HPA-\,8d3\,+w,r"sr.J,-(x@*Yw}NT&OPX$cc.zz
2024-09-29 00:48:42 UTC	2145	IN	Data Raw: 6b e4 b6 98 2b 3d b5 78 71 29 65 e6 f7 db e1 26 d2 48 c1 2b 08 7f f5 dc 16 73 7f 04 2f 57 fc 0d c9 4d 50 7d cd 6f 54 6e bf 46 5b a2 91 1b 2d 1b a6 cd ad bc 59 87 dc 8e 9f 11 70 2b 9f c7 71 3b 73 fc df 52 6e cc a2 45 da dc fa 91 02 b8 45 40 11 31 cc 0d 95 4b 24 fd 6d ad f6 12 c9 99 ae ba e3 93 96 2e dd d8 d6 0f dc 22 54 3e 66 66 8a 08 1f b3 e3 2a 2b 2b 95 42 c8 4d a5 30 36 9e 48 8a 2c 4d 54 a8 26 4e 44 cd 8f 74 0d 00 6a 50 10 4d c4 cd 6f e3 41 5e 27 d5 ad 58 6e a8 5c 52 53 c3 e9 64 dd e0 a4 ba 7e 2a b7 33 c8 07 33 03 9d 54 29 84 72 03 66 c6 84 99 31 cf ec d1 ea 24 29 88 26 e4 86 6a 79 9d 54 ab 5b a1 a1 72 2c 36 d2 5a d5 e5 88 d7 49 b5 e2 0f 66 66 fd 75 6d b5 50 ec 4e a1 50 f4 73 dc 54 8a 69 d3 8c 7b 91 02 9a 4a 65 3c 11 d5 40 05 a9 47 ca 0d aa af 89 b9 1d Data Ascii: k+=xq)e&H+s/WMP}oTnF[-Yp+q;sRnEE@1K$m."T>ff++BM06H,MT&NDtjPMoA^'Xn\RSd~33T)rf1$)&jyT[r,6ZIffumPNPsTi{Je<@G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49757	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	392	OUT	GET /images/debit-card-beach-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 23282 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 d2 e0 ef e3 ec f5 d5 e2 f0 e5 ed f5 ea f1 f7 dd e8 f2 00 45 7c d8 e5 f1 df e9 f3 db e6 f1 e1 eb f4 cd dc ec f0 f5 fa e7 ee f6 c2 d5 e8 ec f2 f8 cf df ed e8 ef f6 ee f4 f9 c9 da eb f2 f6 fa f4 f8 fb f6 f9 fc 05 1b 3b 26 2b 90 fa fb fd c5 d7 e9 8c 53 35 28 ab ba ff ff ff 21 a8 b7 c7 d9 ea 2b 75 b3 21 18 15 33 af ba 36 6d 9a f0 e2 b8 2b 7c b6 6a 93 b6 9c 5b 37 61 53 5b 2d 1a 15 ee dc af 3e b4 ba 86 4e 30 2c 6b ae 70 57 59 29 85 bb 56 3f 3a 25 ab cd 34 24 1d 2a 38 95 1d a8 bc 95 5a 3a 4b b8 bb 2d b0 ce 27 9f c8 2b 61 aa 2b 57 a4 63 4b 4a 26 92 c2 e8 d7 ad 73 50 48 7b 49 32 f2 e6 c3 74 42 29 e1 d3 b1 fe 99 07 31 ab b0 3b 20 13 67 Data Ascii: PNGIHDRo PLTEE\|;&+S5(!+u!36m+\|j[7aS[->N0,kpWY)V?:%4$*8Z:K-'+a+WcKJ&sPH{I2tB)1; g
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: c7 8f fa 9f 26 f2 86 a6 48 71 b2 fe 90 37 70 8a e3 d1 78 24 8a ef cc 74 ed c3 38 7e 78 1e 91 c7 7f a3 3f 34 ad a9 8a 6f 8a f6 02 e7 33 cd ff 54 7b 21 bc cd 9f af 1b 81 e3 10 9f 3f 19 5f 2c 51 9c 64 8f 07 67 f3 89 0f e8 6a c5 a3 4d 91 a8 44 67 ad c7 69 ef e1 8f 00 1e cc d7 d5 9d 7f 18 8f 00 70 a5 6e 3c de 89 aa 8f 86 c7 42 81 1a 19 19 11 68 30 6d 54 56 50 a0 73 b4 b4 b4 3a f1 78 54 7f e0 ed dd e3 23 e1 0a 68 9a 18 7c e1 25 50 7f 38 3e 57 e9 4d 53 d5 5c 88 06 a3 73 18 3f a1 a3 a5 15 89 47 a3 fa 8b 45 de de d5 1f 78 23 fd 45 42 51 19 c1 03 6a 31 a4 37 94 0a 21 ab 90 28 d2 48 54 92 9d e0 11 ec 7d ea 0f 4d 10 4f c4 37 65 7b 51 9e 5c fe fd f3 0b 39 41 ac f2 a7 3b 75 fb 24 93 21 ff ae 3f 34 af fc 2e fe fe 23 f1 11 de 90 bf 7f bc 71 e2 f6 0d f6 cd 7b fb 23 66 b1 Data Ascii: &Hq7px$t8~x?4o3T{!?_,QdgjMDgipn<Bh0mTVPs:xT#h\|%P8>WMS\s?GEx#EBQj17!(HT}MO7e{Q\9A;u$!?4.#q{#f
2024-09-29 00:48:42 UTC	7297	IN	Data Raw: 7b dc 5b 70 ef c3 d3 8d 63 8d 3f 8f 9d be 5d 50 f0 f3 82 05 4d a7 4f c7 3d 69 8c 8b fb e1 e7 9f 9b de 21 8e d7 ed 07 2f 1e c9 da 23 a4 39 99 4c 20 0a 72 bd d8 2c e2 9a 4b 44 36 80 bd bc 7c f9 16 90 c2 10 e1 2d 2c 2c 2c b5 eb f9 f3 e7 2f a1 09 5e bd da d7 37 3e 3e fe 73 5f d7 f5 76 92 30 6b ad f9 73 01 98 a6 26 25 ce d9 79 70 d1 33 8e b3 f3 f8 07 94 18 8e b3 73 37 65 4c 19 be f3 27 d3 87 9c 95 91 0d 4d 3a b2 1f ee 4d b2 a1 c3 87 0f 93 64 cd f8 f8 78 5a 74 5d 5d 67 e7 89 3a c2 1c 1c 0c 08 e6 17 3c 9e 0d 3c 78 68 8e d6 a7 3b 0e 1e 3a b4 23 05 45 46 54 1a 28 82 49 d8 5e 2c 96 40 2e 60 80 04 d9 30 97 ae ac b3 ab cf 9f 67 3e ba 75 0b a2 23 42 0b bb f4 bc f1 fa a3 5b b7 2e 5d 82 8e 77 e9 d2 ee 5b 99 a9 b9 56 04 f9 2a e2 c9 61 32 42 4a 13 9c e1 d6 4f ef b1 b6 3e Data Ascii: {[pc?]PMO=i!/#9L r,KD6\|-,,,/^7>>s_v0ks&%yp3s7eL'M:MdxZt]]g:<<xh;:#EFT(I^,@.`0g>u#B[.]w[V*a2BJO>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49756	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	392	OUT	GET /images/mortgage-home4me-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 54009 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 02 00 00 00 a0 32 77 22 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 82 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 Data Ascii: PNGIHDR2w"tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 89 82 ff 93 36 17 3e ad 91 73 f2 56 e2 c4 d1 21 c3 38 58 52 12 8c 18 e7 22 17 29 a5 01 59 0e 41 6d 73 e2 85 f3 6d 5a 4f e5 fd 38 03 66 91 22 2f 10 e5 b8 aa 80 f5 e4 12 33 37 7a 06 bf ed 86 b6 43 4c 40 22 b7 a8 ec 69 53 5f ac ea bb a7 f5 f9 a2 21 3d 47 9a 52 ca f5 40 ad 79 a0 71 7b 08 a2 20 18 f0 17 a7 1f 50 21 69 fb 40 f7 23 58 87 a9 1d e8 58 fc 9e 4e 98 88 c0 4a 1b a2 b7 48 81 93 38 a1 ca 4f f6 1d b0 5f f4 c4 a0 80 0d 59 51 02 41 d4 1e bb e0 20 25 9c af 9e ae ce bb 29 b8 a2 39 b8 55 6e ce a9 a6 09 ef a2 c5 8a 29 c1 02 4b f3 62 9a ed 9e e8 45 33 45 db 69 ce 4d 70 7e 1c 4d 3d 31 1d 35 f1 e5 e4 19 4b e4 ad d2 f3 53 75 17 fd 74 62 25 67 e0 9f 0a a5 6f 19 5e 9d 51 b8 53 ce 4a dd 2e ff a8 39 2f 30 e7 25 73 0e 3c 89 2c 1a 76 e7 d4 9c 2a 87 14 1d 55 2e 95 60 2f Data Ascii: 6>sV!8XR")YAmsmZO8f"/37zCL@"iS_!=GR@yq{ P!i@#XXNJH8O_YQA %)9Un)KbE3EiMp~M=15KSutb%go^QSJ.9/0%s<,v*U.`/
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 07 84 ab 9a b7 26 71 30 f2 c4 33 36 b4 b4 45 6d cb 55 b1 50 35 99 ef fd a0 8b 7d 32 6d d2 60 88 b8 de 0f 64 0c c7 45 41 47 6b b5 1c 97 0d 9d b1 4c c2 93 40 75 88 f4 35 6d 1d 03 19 1d 37 7b 8f 4c 77 1b 92 19 18 4f 38 70 65 0d 74 f6 03 c9 34 23 74 78 ee 60 dc b5 c8 e0 90 b3 88 c0 a5 27 45 1a 07 46 bc 72 46 45 90 09 18 e1 51 d5 f0 18 29 52 5f 9d 96 cb 95 ad 4f 9c 5b 68 bb 40 5b b7 1e a3 19 91 cc 26 4f 93 e3 b7 28 a4 63 9c f9 d6 63 97 5d 28 72 0a a0 cf 1c 13 3e 58 ee c4 35 d3 a0 1f e9 2b 9f 69 97 c8 30 8e b1 a7 c3 84 e0 17 0f c1 44 72 8a 55 95 04 b8 4a 46 bc 82 ba 5b 4b 37 17 37 7d 0b 85 1c 50 a0 81 61 8e 0c 81 16 7e c3 20 c3 c3 90 d0 42 2a 97 9c 53 3f ca 98 31 38 aa 59 69 47 de 9f 24 2c 69 7a 9e 4a 69 18 6d cc 81 6b 3a 26 64 92 8e 5f 99 03 c5 52 9e 39 7e b8 Data Ascii: &q036EmUP5}2m`dEAGkL@u5m7{LwO8pet4#tx`'EFrFEQ)R_O[h@[&O(cc](r>X5+i0DrUJF[K77}Pa~ B*S?18YiG$,izJimk:&d_R9~
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 79 ff bb 7e ed a3 bf 7b 72 76 fa 7d df fd 8e 9b 6e fc b7 ff dc fb 9a d5 f2 c1 ab 0f bf ed 6f fc f8 e5 93 5d 69 7f fc 73 5f fc ea f7 7c e0 dd 3f fb 91 8f 7d e1 bd 1f a8 be f9 47 7f e7 fb 5e a2 e3 f2 fb 9f ff ca 07 bf eb ed bf fa c9 4f fc e1 cb 24 96 e3 57 bf f6 e5 e6 6e 39 de 3c f0 7d 8b b6 84 c5 6a 70 27 f5 10 f7 d3 e8 1a e1 09 21 29 89 39 53 ec 99 87 85 f4 62 eb db bd ef 77 ac 29 1d 16 dc d6 53 03 0f 82 72 e6 45 b4 e3 34 b0 16 03 cc 94 23 47 f0 ba 6d 5d d3 2c 6d b3 df 77 8f ed 4d a0 80 97 f4 45 6f c8 40 df ec 36 0f 1f 7e f3 c9 e3 47 03 7a 0d 48 8d ee 5f 1b c7 f6 e6 b2 32 86 e4 98 04 b1 27 35 de b5 58 7d 57 3e 7c f8 c0 c6 f1 51 41 41 4e b3 5a 9f 90 27 bd 1b fc 6b 0f 6f 5c d9 2c 1c 26 91 77 23 12 78 4d 6d c0 26 0a 3e 15 72 b5 4b ce da 01 43 b0 74 cb ba 58 Data Ascii: y~{rv}no]is_\|?}G^O$Wn9<}jp'!)9Sbw)SrE4#Gm],mwMEo@6~GzH_2'5X}W>\|QAANZ'ko\,&w#xMm&>rKCtX
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: d1 24 d3 91 94 a1 a3 23 22 6e c9 e7 d2 b1 62 41 a8 85 38 b8 dd 8a e9 f7 ba 3d 3e 4f 63 43 50 12 16 1d 2f 11 51 3a 68 94 c0 72 99 cc 47 4c c5 34 c3 9e a2 24 ea 4c 0a 25 50 28 03 82 03 ac 24 e6 9a 15 a5 2f 91 6b 67 2f 41 23 cf d2 03 1a 1d 7b 06 13 e0 16 81 32 8e 24 93 7e d0 6a 78 db 49 d6 71 e2 49 82 da b1 d9 c9 63 df 00 a9 fe b1 c4 0b 96 9d 5a a4 54 a6 a6 14 03 59 12 89 18 02 c7 e3 08 c9 93 65 36 7a 88 d9 54 04 7c 9f f0 d8 14 45 93 a6 93 75 51 a6 44 06 17 95 fe 47 3e 84 aa 72 d4 22 86 60 98 4c a6 cb e2 a8 b0 ee 14 66 c3 24 38 07 fd 8f a6 15 c8 94 b3 45 bd 28 a9 3c b7 83 b9 25 04 9d 89 e2 48 a1 e0 c3 64 60 c2 1d dc 67 43 43 97 05 0c 4a 52 c5 00 ca c4 e1 09 3c 0e 38 49 9d ee 49 a6 02 22 4d 07 0e 79 04 54 51 32 66 27 e7 6c 47 3e 25 91 96 46 cc 50 90 92 94 33 Data Ascii: $#"nbA8=>OcCP/Q:hrGL4$L%P($/kg/A#{2$~jxIqIcZTYe6zT\|EuQDG>r"`Lf$8E(<%Hd`gCCJR<8II"MyTQ2f'lG>%FP3
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 63 86 0d cc a5 eb 7e 2b 93 ad e4 88 12 b2 c6 06 7b f6 85 07 0f ec 79 f1 d0 de fc 3e 10 ca d4 8b 5d 3b 94 5f 3c f6 50 7e df d0 1c 69 4d de c7 79 04 60 49 6d 99 bb f7 ac 21 1f 3f 7a d5 69 a3 0f 3d 75 f4 a1 7f 3a ef d8 79 13 52 66 6e da dc 65 7b 88 2d d2 17 ae 58 bf 6d ce 66 7c 3c 7a b6 f5 0d ef 5e 0e 6f 36 d4 05 bf f9 61 7d eb 13 46 79 62 1a d3 72 40 af 18 de 97 17 82 50 ae 27 a1 41 49 1a 77 7c 2b 63 1a 7b bf 8f bc 35 9b 3f 9e 7d 70 d7 45 13 af bb f8 8c e1 20 cd f0 2f bc 87 25 fc d5 c3 6f cf 6e b9 95 ee 9d db 5d 71 ca e1 fc be be 39 9c ff 3e fe 26 51 b6 92 c3 04 a7 5d f6 7c 49 9c f4 43 0f 85 a3 eb 76 d4 e5 3a 05 f8 76 ca fc 95 bc a4 7f cf 7d 9d 2b d4 35 87 20 8e 81 3f 90 0c 90 b9 ac 51 f6 b2 b5 42 23 f6 28 f1 5d 7c da 70 e7 d1 1e d0 ab f3 53 e3 8e e6 6f 67 Data Ascii: c~+{y>];_<P~iMy`Im!?zi=u:yRfne{-Xmf\|<z^o6a}Fybr@P'AIw\|+c{5?}pE /%on]q9>&Q]\|ICv:v}+5 ?QB#(]\|pSog
2024-09-29 00:48:42 UTC	6024	IN	Data Raw: e3 52 b2 ca 47 6e 89 6c 79 70 ad 6b 91 c9 79 1d f2 48 98 d4 da 06 86 9c eb 4b bf 58 4b cd af d4 c0 90 e7 87 3f 37 c1 b8 d4 da de 89 56 35 30 08 b9 ca 62 85 cd 94 6b 6b e6 2d bd 64 58 90 8a ed 3b 6b ea ea f7 58 39 cc 5e dc 6b 45 e5 10 ab 23 8e 3a cd 1e 27 69 fe 77 56 0e f7 0e 24 f1 13 2a 87 ad 49 dc b4 a6 72 f8 2b 80 7d 94 b4 eb 6b a6 c4 d6 71 c2 c2 45 33 9d 91 5f ee 98 e6 a5 b7 3e 5a f4 dd 72 73 4f 95 43 e9 c7 e2 73 17 7e b7 ec c5 37 3e fa 89 f8 dc 3d 80 7d cc df 00 ec 93 4f 22 7f 0a d8 a7 15 52 f5 4b a4 21 7f 44 e5 50 11 0a d1 49 05 21 cb b6 85 c9 b8 b1 2d 25 2c a7 06 a2 f7 53 bf 98 c3 11 71 1e 05 b9 75 db ce ef 7e 58 d1 8a 7b f0 2b 82 7d e4 5c 12 dc 5a b0 cf e4 cf 66 81 ab f7 b3 e1 73 7f 0a d8 e7 c7 51 de 9b 3f a6 a5 46 da b3 40 e7 03 fb 28 9c df 74 fa Data Ascii: RGnlypkyHKXK?7V50bkk-dX;kX9^kE#:'iwV$*Ir+}kqE3_>ZrsOCs~7>=}O"RK!DPI!-%,Squ~X{+}\ZfsQ?F@(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49758	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	385	OUT	GET /images/awm-trust-mainnav-ad.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 29336 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d9 00 00 00 ea 08 03 00 00 01 6f 89 20 d1 00 00 03 00 50 4c 54 45 ff 00 00 db e6 f2 ec f2 f8 d1 e0 ee e0 ea f3 e4 ed f5 e8 ef f6 00 45 7c e6 ee f6 ea f1 f7 d9 e5 f1 ee f3 f9 f0 f5 fa ce de ed dd e7 f2 c2 d5 e8 d7 e4 f0 c9 da eb e3 eb f4 f2 f6 fa e1 eb f4 d4 e1 ef cc dc ec de e9 f3 d5 e2 ef c6 d8 ea f7 fa fc f4 f7 fb dd e8 f2 36 6e 99 f5 f8 fb 4f 4a 28 c4 d6 e9 fb fd fe 34 3b 23 3c 39 25 a4 a1 9b 5b 53 2a 62 50 2d 2d 30 23 51 51 28 a9 86 68 62 59 2d 6b 53 32 59 4b 2c a1 7e 61 ae 8c 6d 6b 94 b5 4c 41 2a 43 40 26 46 48 27 bf be ba 88 81 36 6a 5b 2e 72 99 b8 be aa 9c 56 58 28 af ab a4 37 2b 28 71 5f 32 c7 b8 ac 57 41 2d 6a 69 2b 25 1f 25 9b 78 5a b4 97 81 82 7c 32 95 71 57 63 63 29 61 48 30 82 61 46 44 Data Ascii: PNGIHDRo PLTEE\|6nOJ(4;#<9%[SbP--0#QQ(hbY-kS2YK,~amkLAC@&FH'6j[.rVX(7+(q_2WA-ji+%%xZ\|2qWcc)aH0aFD
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 12 c9 78 3c 9a e1 8f c6 53 d0 5e 0c 22 16 8d a5 d3 d1 2e 2e 2e 74 17 3a 96 ee e2 e8 08 a1 5d 40 10 8a e2 46 64 80 47 f2 f2 75 41 8b 7d 7d ad 7d 16 b6 92 29 d0 24 95 27 09 75 f1 e3 75 e2 e6 b6 ed a8 d6 d6 13 57 f7 dc 6c 3f f5 0b ee 9b bf 31 b9 8a 80 a9 91 d6 fe fe bc bc 0d dd c3 5b 27 46 ae 1c 3d 73 f0 20 15 13 84 21 13 e9 2e 18 0c 86 ee e2 42 0c e3 84 61 30 74 3a dd 11 83 c1 38 62 b1 1c 47 47 88 c1 a0 63 5d 5c 3c c8 04 7a 86 d8 c5 11 eb c5 c0 62 e8 61 43 21 7d b8 ec 6c a6 46 b6 25 7b 5a 98 2c 2d 2e dc 23 2e 3c 35 f9 c5 89 91 11 de cd d1 83 5a 6d b7 fb 85 5f b8 37 9f 6c ff f1 c7 0d 95 fd b8 5b 13 2d 70 e9 d7 67 ce 1c 3c 7a e6 6b 0a 9a 48 24 d2 31 44 4c 10 06 eb e8 e8 08 40 e8 d8 20 ac 58 8f fc 0f 62 d0 a9 04 06 9a 88 26 50 5c 08 54 8a 0b dd c5 85 1e 44 17 Data Ascii: x<S^"...t:]@FdGuA}}})$'uuWl?1['F=s !.Ba0t:8bGGc]\<zbaC!}lF%{Z,-.#.<5Zm_7l[-pg<zkH$1DL@ Xb&P\TD
2024-09-29 00:48:42 UTC	8000	IN	Data Raw: 16 0b de 01 f6 80 73 bc 7d 8e 8d 25 0e c3 4b 61 d8 0e b0 d2 6d bc 5f 04 ad 1a 9c 43 f0 d6 5b 30 bc f7 9d 77 50 f0 ab 56 2e e8 29 43 07 86 b7 6f 47 cd 9f bf 01 86 fb 91 39 b0 69 06 6c 59 35 30 1c 07 67 1b 07 d5 46 fa 45 c0 60 84 c3 e9 5e 0d bb 23 24 d5 19 12 eb 5b 08 87 13 05 bf 6a e5 7a ca bf dd 00 37 2e 59 f2 3d 42 88 85 6d 13 ee a3 19 b0 59 0e bc bd bd 7d 23 60 8c 3a 83 d5 04 1c 19 b1 fd d9 5a 32 6f 5e 23 dc 6f 9b 6f e0 06 00 ec 15 56 02 cd b2 8f 60 d8 66 94 f0 86 0d 70 34 98 70 60 7a 3b 2f 5e b6 2c 1a f8 5b 00 cc 01 79 bb 3d 03 ab 04 7e 03 02 06 d0 50 60 06 bc 8d 02 60 d1 70 2b 0a 7e 95 4d 3e e5 fa a2 e0 f5 00 6d 3b ec ec 0c 6f 07 60 9b 90 45 19 b0 6f ab 97 d9 c0 c0 b8 f5 af 87 2b 67 c0 96 02 a6 f8 5c 04 6c d1 07 f3 1a e1 4a db 7c 83 e1 b7 5a 67 e8 b0 Data Ascii: s}%Kam_C[0wPV.)CoG9ilY50gFE`^#$[jz7.Y=BmY}#`:Z2o^#ooV`fp4p`z;/^,[y=~P``p+~M>m;o`Eo+g\lJ\|Zg
2024-09-29 00:48:42 UTC	5351	IN	Data Raw: 38 02 91 06 a9 1a 6a 90 d8 d8 98 50 2a 15 56 41 84 fc 82 82 34 21 ec 7a c1 62 ba b3 68 4e f1 61 c1 e2 a0 6d e9 49 9f 26 29 04 81 52 89 57 a0 97 9d d7 4e bb 5d 76 bb 52 6d 77 f8 aa 44 a2 d4 43 1f 7f bc df 43 2c e6 7a b4 3d 18 6c aa 9c e9 98 ea 00 81 8f 21 9d 4e ab 4d ef cd d7 1d dd 7c 74 ee 83 bf fd f5 f6 40 db d4 d0 f0 c0 74 db 50 d7 64 53 e5 4c 6e 19 44 8f bc bc 3c 98 69 ad 1d 33 6d ba d6 8f e3 41 4d 2c 9a ca 8b 49 74 8a a6 52 43 43 c3 88 15 44 a1 10 1a f3 dd 49 a0 e5 02 92 30 42 1a 9f 4f c3 83 fc 03 91 48 21 12 f0 2c 3c 9e 84 67 31 89 44 4a 24 8f 40 e3 c3 4e 28 4c 4b 26 8e 9a 96 46 e4 f1 48 2c 3e 31 26 86 4d 23 e1 49 34 50 2c 0b 0d 4d ab 55 27 52 69 20 95 26 74 72 a8 08 0b e3 72 b3 3f f5 8d 92 4b bd 02 15 52 58 9d 53 ed b2 53 d9 d9 89 24 b6 12 91 20 5d Data Ascii: 8jP*VA4!zbhNamI&)RWN]vRmwDCC,z=l!NM\|t@tPdSLnD<i3mAM,ItRCCDI0BOH!,<g1DJ$@N(LK&FH,>1&M#I4P,MU'Ri &trr?KRXSS$ ]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49760	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	622	OUT	GET /images/soc-fb.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 589 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	589	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 ef 49 44 41 54 78 da b4 94 cd 4b 1b 41 18 c6 9f c9 cc ee 26 76 dd 24 7e 1c b4 1f a0 05 7b e8 45 2a 1e 84 aa a0 17 45 0a 85 1e 7a e9 b9 97 42 a1 f4 ee a1 e0 d1 bf a0 f4 d2 93 f5 60 4f e6 d4 04 84 a0 20 52 f0 20 c4 83 a2 18 4d d0 5a b2 49 8c 66 b3 1f ce ec 42 f1 94 4c d7 e4 81 3d cc c7 fe e6 7d 9f 99 f7 25 4f a7 97 7f 76 1b 0f 67 d0 66 55 ca a7 19 32 f6 7a cd 43 87 14 71 1c ab dc 09 b0 e0 46 fe f7 27 cf f3 fc 4f 46 4c 2a 3d 42 50 bb b1 51 ae 5a 50 58 10 4f b7 ae 40 65 14 6e 93 83 a4 e0 75 cb 41 2c ca 30 3b 31 88 fe 9e 18 40 3c 6c 6c 17 51 38 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATxKA&v$~{EEzB`O R MZIfBL=}%OvgfU2zCqF'OFL*=BPQZPXO@enuA,0;1@<llQ8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49761	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	627	OUT	GET /images/soc-youtube.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 15201 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 38 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR*pHYs+8"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf
2024-09-29 00:48:42 UTC	7216	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49763	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	632	OUT	GET /images/soc-share-circle.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 717 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	717	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 02 94 49 44 41 54 48 89 9d 95 4f 48 54 41 1c c7 3f ef b9 ab 89 5b 12 05 21 2a 9a 20 75 11 c9 22 e8 54 90 82 64 09 15 24 e4 21 28 8a 82 a8 43 1d a3 4b 41 5d a3 a2 4b 1e c4 4b 46 44 50 4b 11 51 48 22 24 f8 a7 6e 61 a5 64 82 d5 6a 54 b2 2e bb ef cd c4 bc f7 66 dd dd 79 e6 ea 0f 66 99 f7 9b fd 7e 7e 33 bf f9 cd 8c 25 a5 e4 3f 76 00 e8 00 5a 80 06 a0 1c 58 04 26 81 31 20 0e 3c 5b 56 ae e0 21 ad 53 4a 39 2c 8b b3 11 29 e5 91 10 46 28 fc 5e 91 d0 42 bb bf 12 fc b1 21 59 9d c5 97 83 e7 cd b8 fe ea 6b d9 37 fc 6d 2d 01 7a 34 d3 0e 52 df 06 9c cd dd 8b a9 b9 24 d3 bf 16 8d 3d 2a 34 e7 eb 04 c9 78 5f ae f7 24 70 48 75 34 fc ae a1 12 6a 59 7e 77 68 76 8a 9a de eb Data Ascii: PNGIHDRIDATHOHTA?[! u"Td$!(CKA]KKFDPKQH"$nadjT.fyf~~3%?vZX&1 <[V!SJ9,)F(^B!Yk7m-z4R$=*4x_$pHu4jY~whv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49762	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	629	OUT	GET /images/soc-instagram.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 686 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 03 00 00 00 d7 f4 24 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 d8 50 4c 54 45 00 00 00 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 b5 Data Ascii: PNGIHDR$gAMAa cHRMz&u0`:pQ<PLTEwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49764	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:42 UTC	627	OUT	GET /images/soc-twitter.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:42 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:42 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 542 Connection: close Content-Type: image/png
2024-09-29 00:48:42 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 c0 49 44 41 54 78 da d4 95 cf 2b 44 51 14 c7 bf e7 be 67 8c 49 d2 20 19 19 3f 92 c6 8f c5 2c 2d d8 f8 37 2c 6c a4 64 33 65 61 a1 94 9a 52 28 7f 81 12 0b 65 63 c7 42 14 4d 51 8a 29 14 a1 46 4d 49 a8 f9 e1 d7 0c 6f ae 33 33 ca e8 bd 79 de c8 14 a7 6e ef bd 7b ef f9 9c ef 3d e7 bc f7 08 73 3b ab e8 f2 f6 e1 b7 ed 38 b8 45 08 bc 49 14 c9 04 9e 9f 62 45 21 33 57 a0 88 f6 07 e1 f2 63 fc 18 9e 76 d6 0c 20 3c a7 b2 17 89 ef 03 88 7c 60 a7 0d a8 b5 f3 fd 1b 8f 57 1e 94 bd 0e d7 13 8e bc 02 fd d5 94 0d 9e 2a 14 ce 0e 35 2a 61 b1 4d 60 b2 45 c0 ed 60 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx+DQgI ?,-7,ld3eaR(ecBMQ)FMIo33yn{=s;8EIbE!3Wcv <\|`W5*aM`E`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49765	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:48:43 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=143809 Date: Sun, 29 Sep 2024 00:48:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:48:43 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49768	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:43 UTC	378	OUT	GET /images/housing-logo2.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:43 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:43 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 653 Connection: close Content-Type: image/png
2024-09-29 00:48:43 UTC	653	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 21 08 06 00 00 00 b8 26 a9 51 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 1a 49 44 41 54 78 da e4 57 bd 4e c3 30 10 76 ab 0e 6c 2d 6f e0 81 9d bc 01 61 63 23 6f 40 fa 06 7d 03 ca cc 40 46 c4 d4 4a 8c 0c 7d 83 06 31 c0 c0 90 47 30 13 6b de c0 f8 aa cf e8 6a 5d 02 71 23 05 89 93 3e d9 71 ef ce df f9 fc 73 55 d6 5a 15 89 dc c1 00 79 ac 9f 18 a3 0c 93 86 12 45 a4 8b 72 ea 50 da 9f c5 80 64 6f 04 9a 26 ae 1d 96 0e ab 06 22 25 6c a3 09 b4 45 5c 38 cc 98 ae 76 d8 c4 10 e9 3a f1 0a 93 c5 90 16 89 74 31 d6 3d ed 97 3d 22 7e f9 ca 43 f2 18 71 62 be 7d 2b 6c 24 Data Ascii: PNGIHDR !&QpHYstEXtSoftwareAdobe ImageReadyqe<IDATxWN0vl-oac#o@}@FJ}1G0kj]q#>qsUZyErPdo&"%lE\8v:t1=="~Cqb}+l$

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49766	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:43 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 76 74 32 51 68 37 6d 4e 47 6b 79 37 2b 71 70 4f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 63 35 38 66 33 63 61 62 64 30 37 30 39 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: vt2Qh7mNGky7+qpO.1Context: 5c58f3cabd07090
2024-09-29 00:48:43 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:48:43 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 76 74 32 51 68 37 6d 4e 47 6b 79 37 2b 71 70 4f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 63 35 38 66 33 63 61 62 64 30 37 30 39 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 30 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: vt2Qh7mNGky7+qpO.2Context: 5c58f3cabd07090<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi0
2024-09-29 00:48:43 UTC	73	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 35 0d 0a 4d 53 2d 43 56 3a 20 76 74 32 51 68 37 6d 4e 47 6b 79 37 2b 71 70 4f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 63 35 38 66 33 63 61 62 64 30 37 30 39 30 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 55MS-CV: vt2Qh7mNGky7+qpO.3Context: 5c58f3cabd07090
2024-09-29 00:48:43 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:48:43 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 59 7a 77 50 4a 69 4c 69 6d 55 2b 54 6c 68 56 4f 70 73 4a 57 56 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: YzwPJiLimU+TlhVOpsJWVA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49770	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:43 UTC	619	OUT	GET /images/ios.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:43 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:43 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 4885 Connection: close Content-Type: image/png
2024-09-29 00:48:43 UTC	4885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 5a 08 04 00 00 00 e4 b7 f9 47 00 00 12 dc 49 44 41 54 78 9c ed 5d 09 74 55 c5 19 4e 63 9a 93 e6 84 10 50 03 81 10 15 54 90 45 50 41 8a 62 a9 0a 05 51 c4 05 41 14 28 62 11 37 10 5b c0 05 a1 54 5c 6a 6d ad 02 5a 5c 70 03 aa 88 4a 2b 28 82 88 56 4f c5 b2 89 08 2e 80 22 8b 31 40 64 09 61 09 f2 cf f4 9b b9 73 e7 dd ed dd 77 5f ee 4b 1e 72 ee fb 4e f2 66 bd f3 df f9 66 f9 ff 99 b9 f7 65 f0 8c 08 3f 6d a4 5d 80 08 61 91 76 01 22 84 45 da 05 88 10 16 69 17 20 42 58 a4 5d 80 08 61 91 76 01 22 84 45 9c 60 d6 82 dd ce 5e 60 f3 d8 9b fc 3d b6 92 ad 8d 90 16 ac 61 4b d8 42 f6 06 7b 9a 0f 65 c5 49 50 c8 1a b1 17 59 15 c7 a7 82 57 f2 bd 7c 37 df 15 21 4d d8 83 fa df cb e5 67 17 7b 88 e5 04 a2 90 75 60 Data Ascii: PNGIHDRZGIDATx]tUNcPTEPAbQA(b7[T\jmZ\pJ+(VO."1@dasw_KrNffe?m]av"Ei BX]av"E`^`=aKB{eIPYW\|7!Mg{u`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49769	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:43 UTC	620	OUT	GET /images/fdic.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:43 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:43 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 1411 Connection: close Content-Type: image/png
2024-09-29 00:48:43 UTC	1411	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 29 08 02 00 00 00 23 f7 47 9c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 25 49 44 41 54 78 da ec 57 69 53 5b 55 18 26 0b 49 20 4b 09 60 52 07 a4 01 4d 08 6b c3 8e 8a 5a 96 e2 87 52 ad 6d 71 d4 0e 54 1d db f1 17 54 1d ff 80 b6 e3 54 46 67 ec 67 07 77 6b 6b a7 80 ec a5 36 60 29 90 04 43 d8 42 42 80 84 ec 84 35 61 49 f0 29 17 ae 77 20 1d 06 86 19 fa 21 67 ee dc 79 ef 7b de 9c f3 9c 77 79 de 13 9a c3 e9 0e 3b d4 41 0f 3b ec 11 42 10 42 10 42 10 42 f0 f4 20 60 92 52 4d cd 75 bb cd c6 e5 72 3f fd ec 73 3a 9d fe f5 f5 af 1c 0e 47 4c 4c cc a5 cb 1f f3 f9 fc 5d 17 1a 1a 1a fc e5 e7 9f 4e 9e 2c 7f e9 e5 a2 7d fa a0 aa aa Data Ascii: PNGIHDR+)#GtEXtSoftwareAdobe ImageReadyqe<%IDATxWiS[U&I K`RMkZRmqTTTFggwkk6`)CBB5aI)w !gy{wy;A;BBBB `RMur?s:GLL]N,}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49771	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:43 UTC	619	OUT	GET /images/nhl.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:44 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:44 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 1277 Connection: close Content-Type: image/png
2024-09-29 00:48:44 UTC	1277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 27 00 00 00 29 08 02 00 00 00 39 cb a7 12 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 9f 49 44 41 54 78 da ec 58 59 53 9a 57 18 16 59 14 45 01 c3 26 a8 41 14 1c 01 21 6d 26 6a 90 98 58 f5 a2 22 36 b7 49 ed f6 37 da 69 a7 bd 6f 3b d3 49 db 3f d0 a4 d7 1d 1b 24 8b 36 a3 d6 35 1d 45 63 02 c6 1d 10 41 18 56 41 36 b1 4f f3 cd 20 6d 15 95 d2 25 6d cf c5 37 e7 1c ce 77 9e 77 7f 9f 0f 92 db e3 2d f8 cb 47 61 c1 df 31 fe 4b a8 94 3f f2 b2 cf e7 bb 7f cf e8 74 39 7b 7b f5 f5 f5 d2 d3 bf 48 ca 2d 9a e2 f1 f8 e8 e8 c8 d8 e8 48 32 99 24 76 14 0a 65 8f 4e c7 62 b1 ff 14 d4 83 83 03 93 69 ee c1 fd 7b c1 60 f0 37 3f 51 a9 d4 f6 ab d7 da db Data Ascii: PNGIHDR')9tEXtSoftwareAdobe ImageReadyqe<IDATxXYSWYE&A!m&jX"6I7io;I?$65EcAVA6O m%m7ww-Ga1K?t9{{H-H2$veNbi{`7?Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49772	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	374	OUT	GET /images/fdic-logo.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:44 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:44 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 916 Connection: close Content-Type: image/png
2024-09-29 00:48:44 UTC	916	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 17 08 06 00 00 00 63 ee ed 9b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 36 49 44 41 54 78 da cc d7 4b 6c 4c 51 1c c7 f1 3b 53 ef a0 23 6d 91 7a ab 86 46 44 43 11 89 10 c2 02 91 52 0b 2c 44 a8 57 2c b0 13 f1 08 82 08 36 36 34 11 8f 44 6a 41 44 08 d2 d4 a6 68 88 08 21 ea 11 a5 86 6a d3 6a a3 45 3d ea d1 f1 3d f5 9b b8 39 39 33 a3 32 0b ff e4 d3 99 7b ee b9 e7 9e 7b 1e ff b9 0d 46 22 91 8a c8 ef 78 8b 14 78 78 a2 b2 4a f4 57 59 47 cc 43 0b 36 76 f4 da 00 7f b2 3c cf bb 87 de 98 89 77 b8 86 5e 18 af 73 69 98 8e 0a 3c 45 1e 7a e2 25 a6 a0 0c 21 64 e3 0a be a9 ac 14 8f d4 46 b5 f7 3b 26 62 00 4a d0 15 b9 68 44 bf f6 Data Ascii: PNGIHDR$ctEXtSoftwareAdobe ImageReadyqe<6IDATxKlLQ;S#mzFDCR,DW,664DjADh!jjE==9932{{F"xxxJWYGC6v<w^si<Ez%!dF;&bJhD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49774	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	371	OUT	GET /images/soc-fb.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:44 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:44 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 589 Connection: close Content-Type: image/png
2024-09-29 00:48:44 UTC	589	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 ef 49 44 41 54 78 da b4 94 cd 4b 1b 41 18 c6 9f c9 cc ee 26 76 dd 24 7e 1c b4 1f a0 05 7b e8 45 2a 1e 84 aa a0 17 45 0a 85 1e 7a e9 b9 97 42 a1 f4 ee a1 e0 d1 bf a0 f4 d2 93 f5 60 4f e6 d4 04 84 a0 20 52 f0 20 c4 83 a2 18 4d d0 5a b2 49 8c 66 b3 1f ce ec 42 f1 94 4c d7 e4 81 3d cc c7 fe e6 7d 9f 99 f7 25 4f a7 97 7f 76 1b 0f 67 d0 66 55 ca a7 19 32 f6 7a cd 43 87 14 71 1c ab dc 09 b0 e0 46 fe f7 27 cf f3 fc 4f 46 4c 2a 3d 42 50 bb b1 51 ae 5a 50 58 10 4f b7 ae 40 65 14 6e 93 83 a4 e0 75 cb 41 2c ca 30 3b 31 88 fe 9e 18 40 3c 6c 6c 17 51 38 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATxKA&v$~{EEzB`O R MZIfBL=}%OvgfU2zCqF'OFL*=BPQZPXO@enuA,0;1@<llQ8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49773	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	378	OUT	GET /images/soc-instagram.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:44 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:44 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 686 Connection: close Content-Type: image/png
2024-09-29 00:48:44 UTC	686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 03 00 00 00 d7 f4 24 92 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 d8 50 4c 54 45 00 00 00 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 a5 8a 77 b5 Data Ascii: PNGIHDR$gAMAa cHRMz&u0`:pQ<PLTEwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49777	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	381	OUT	GET /images/soc-share-circle.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:44 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:44 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 717 Connection: close Content-Type: image/png
2024-09-29 00:48:44 UTC	717	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 02 94 49 44 41 54 48 89 9d 95 4f 48 54 41 1c c7 3f ef b9 ab 89 5b 12 05 21 2a 9a 20 75 11 c9 22 e8 54 90 82 64 09 15 24 e4 21 28 8a 82 a8 43 1d a3 4b 41 5d a3 a2 4b 1e c4 4b 46 44 50 4b 11 51 48 22 24 f8 a7 6e 61 a5 64 82 d5 6a 54 b2 2e bb ef cd c4 bc f7 66 dd dd 79 e6 ea 0f 66 99 f7 9b fd 7e 7e 33 bf f9 cd 8c 25 a5 e4 3f 76 00 e8 00 5a 80 06 a0 1c 58 04 26 81 31 20 0e 3c 5b 56 ae e0 21 ad 53 4a 39 2c 8b b3 11 29 e5 91 10 46 28 fc 5e 91 d0 42 bb bf 12 fc b1 21 59 9d c5 97 83 e7 cd b8 fe ea 6b d9 37 fc 6d 2d 01 7a 34 d3 0e 52 df 06 9c cd dd 8b a9 b9 24 d3 bf 16 8d 3d 2a 34 e7 eb 04 c9 78 5f ae f7 24 70 48 75 34 fc ae a1 12 6a 59 7e 77 68 76 8a 9a de eb Data Ascii: PNGIHDRIDATHOHTA?[! u"Td$!(CKA]KKFDPKQH"$nadjT.fyf~~3%?vZX&1 <[V!SJ9,)F(^B!Yk7m-z4R$=*4x_$pHu4jY~whv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49776	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	376	OUT	GET /images/soc-twitter.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:44 UTC	205	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:44 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 542 Connection: close Content-Type: image/png
2024-09-29 00:48:44 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 c0 49 44 41 54 78 da d4 95 cf 2b 44 51 14 c7 bf e7 be 67 8c 49 d2 20 19 19 3f 92 c6 8f c5 2c 2d d8 f8 37 2c 6c a4 64 33 65 61 a1 94 9a 52 28 7f 81 12 0b 65 63 c7 42 14 4d 51 8a 29 14 a1 46 4d 49 a8 f9 e1 d7 0c 6f ae 33 33 ca e8 bd 79 de c8 14 a7 6e ef bd 7b ef f9 9c ef 3d e7 bc f7 08 73 3b ab e8 f2 f6 e1 b7 ed 38 b8 45 08 bc 49 14 c9 04 9e 9f 62 45 21 33 57 a0 88 f6 07 e1 f2 63 fc 18 9e 76 d6 0c 20 3c a7 b2 17 89 ef 03 88 7c 60 a7 0d a8 b5 f3 fd 1b 8f 57 1e 94 bd 0e d7 13 8e bc 02 fd d5 94 0d 9e 2a 14 ce 0e 35 2a 61 b1 4d 60 b2 45 c0 ed 60 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx+DQgI ?,-7,ld3eaR(ecBMQ)FMIo33yn{=s;8EIbE!3Wcv <\|`W5*aM`E`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49775	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	376	OUT	GET /images/soc-youtube.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:44 UTC	207	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:44 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 15201 Connection: close Content-Type: image/png
2024-09-29 00:48:44 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 17 08 06 00 00 00 e0 2a d4 a0 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 38 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR*pHYs+8"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf
2024-09-29 00:48:44 UTC	7216	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49782	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	616	OUT	GET /favicon.ico HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ipv6.52-229-18-172.cprapid.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:45 UTC	164	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 00:48:45 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-29 00:48:45 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49781	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 32 45 34 46 32 6e 62 6a 30 79 62 35 58 75 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 31 33 35 34 35 30 62 62 30 38 34 39 33 30 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Y2E4F2nbj0yb5Xu9.1Context: 6135450bb0849308
2024-09-29 00:48:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:48:44 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 59 32 45 34 46 32 6e 62 6a 30 79 62 35 58 75 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 31 33 35 34 35 30 62 62 30 38 34 39 33 30 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Y2E4F2nbj0yb5Xu9.2Context: 6135450bb0849308<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:48:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 32 45 34 46 32 6e 62 6a 30 79 62 35 58 75 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 31 33 35 34 35 30 62 62 30 38 34 39 33 30 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Y2E4F2nbj0yb5Xu9.3Context: 6135450bb0849308<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:48:45 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:48:45 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 59 37 73 54 50 78 52 50 6b 4b 4b 41 6e 72 35 35 7a 6d 54 49 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: qY7sTPxRPkKKAnr55zmTIA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49784	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	368	OUT	GET /images/ios.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:45 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:45 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 4885 Connection: close Content-Type: image/png
2024-09-29 00:48:45 UTC	4885	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 5a 08 04 00 00 00 e4 b7 f9 47 00 00 12 dc 49 44 41 54 78 9c ed 5d 09 74 55 c5 19 4e 63 9a 93 e6 84 10 50 03 81 10 15 54 90 45 50 41 8a 62 a9 0a 05 51 c4 05 41 14 28 62 11 37 10 5b c0 05 a1 54 5c 6a 6d ad 02 5a 5c 70 03 aa 88 4a 2b 28 82 88 56 4f c5 b2 89 08 2e 80 22 8b 31 40 64 09 61 09 f2 cf f4 9b b9 73 e7 dd ed dd 77 5f ee 4b 1e 72 ee fb 4e f2 66 bd f3 df f9 66 f9 ff 99 b9 f7 65 f0 8c 08 3f 6d a4 5d 80 08 61 91 76 01 22 84 45 da 05 88 10 16 69 17 20 42 58 a4 5d 80 08 61 91 76 01 22 84 45 9c 60 d6 82 dd ce 5e 60 f3 d8 9b fc 3d b6 92 ad 8d 90 16 ac 61 4b d8 42 f6 06 7b 9a 0f 65 c5 49 50 c8 1a b1 17 59 15 c7 a7 82 57 f2 bd 7c 37 df 15 21 4d d8 83 fa df cb e5 67 17 7b 88 e5 04 a2 90 75 60 Data Ascii: PNGIHDRZGIDATx]tUNcPTEPAbQA(b7[T\jmZ\pJ+(VO."1@dasw_KrNffe?m]av"Ei BX]av"E`^`=aKB{eIPYW\|7!Mg{u`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49785	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:44 UTC	369	OUT	GET /images/fdic.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:45 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:45 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 1411 Connection: close Content-Type: image/png
2024-09-29 00:48:45 UTC	1411	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 29 08 02 00 00 00 23 f7 47 9c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 05 25 49 44 41 54 78 da ec 57 69 53 5b 55 18 26 0b 49 20 4b 09 60 52 07 a4 01 4d 08 6b c3 8e 8a 5a 96 e2 87 52 ad 6d 71 d4 0e 54 1d db f1 17 54 1d ff 80 b6 e3 54 46 67 ec 67 07 77 6b 6b a7 80 ec a5 36 60 29 90 04 43 d8 42 42 80 84 ec 84 35 61 49 f0 29 17 ae 77 20 1d 06 86 19 fa 21 67 ee dc 79 ef 7b de 9c f3 9c 77 79 de 13 9a c3 e9 0e 3b d4 41 0f 3b ec 11 42 10 42 10 42 10 42 f0 f4 20 60 92 52 4d cd 75 bb cd c6 e5 72 3f fd ec 73 3a 9d fe f5 f5 af 1c 0e 47 4c 4c cc a5 cb 1f f3 f9 fc 5d 17 1a 1a 1a fc e5 e7 9f 4e 9e 2c 7f e9 e5 a2 7d fa a0 aa aa Data Ascii: PNGIHDR+)#GtEXtSoftwareAdobe ImageReadyqe<%IDATxWiS[U&I K`RMkZRmqTTTFggwkk6`)CBB5aI)w !gy{wy;A;BBBB `RMur?s:GLL]N,}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49783	52.229.18.172	443	5008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:45 UTC	368	OUT	GET /images/nhl.png HTTP/1.1 Host: ipv6.52-229-18-172.cprapid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:48:45 UTC	206	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:48:45 GMT Server: Apache Last-Modified: Wed, 25 Aug 2021 22:35:58 GMT Accept-Ranges: bytes Content-Length: 1277 Connection: close Content-Type: image/png
2024-09-29 00:48:45 UTC	1277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 27 00 00 00 29 08 02 00 00 00 39 cb a7 12 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 9f 49 44 41 54 78 da ec 58 59 53 9a 57 18 16 59 14 45 01 c3 26 a8 41 14 1c 01 21 6d 26 6a 90 98 58 f5 a2 22 36 b7 49 ed f6 37 da 69 a7 bd 6f 3b d3 49 db 3f d0 a4 d7 1d 1b 24 8b 36 a3 d6 35 1d 45 63 02 c6 1d 10 41 18 56 41 36 b1 4f f3 cd 20 6d 15 95 d2 25 6d cf c5 37 e7 1c ce 77 9e 77 7f 9f 0f 92 db e3 2d f8 cb 47 61 c1 df 31 fe 4b a8 94 3f f2 b2 cf e7 bb 7f cf e8 74 39 7b 7b f5 f5 f5 d2 d3 bf 48 ca 2d 9a e2 f1 f8 e8 e8 c8 d8 e8 48 32 99 24 76 14 0a 65 8f 4e c7 62 b1 ff 14 d4 83 83 03 93 69 ee c1 fd 7b c1 60 f0 37 3f 51 a9 d4 f6 ab d7 da db Data Ascii: PNGIHDR')9tEXtSoftwareAdobe ImageReadyqe<IDATxXYSWYE&A!m&jX"6I7io;I?$65EcAVA6O m%m7ww-Ga1K?t9{{H-H2$veNbi{`7?Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49786	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:49 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yycSm31+bCc1AWb&MD=K6MRBUd8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-29 00:48:49 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d994f532-c8c8-4e64-9c0b-8cab3733691e MS-RequestId: 473ed424-3239-426c-97a4-c6329d1178ef MS-CV: KDYLHmjH3E60dB06.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 29 Sep 2024 00:48:48 GMT Connection: close Content-Length: 24490
2024-09-29 00:48:49 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-29 00:48:49 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49790	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:55 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 78 6c 42 4e 6a 48 46 68 30 53 39 30 70 71 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 33 65 35 36 31 38 62 38 30 66 30 61 33 39 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: sxlBNjHFh0S90pqo.1Context: 43e5618b80f0a393
2024-09-29 00:48:55 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:48:55 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 78 6c 42 4e 6a 48 46 68 30 53 39 30 70 71 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 33 65 35 36 31 38 62 38 30 66 30 61 33 39 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: sxlBNjHFh0S90pqo.2Context: 43e5618b80f0a393<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:48:55 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 73 78 6c 42 4e 6a 48 46 68 30 53 39 30 70 71 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 33 65 35 36 31 38 62 38 30 66 30 61 33 39 33 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: sxlBNjHFh0S90pqo.3Context: 43e5618b80f0a393
2024-09-29 00:48:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:48:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 62 42 65 61 56 77 69 36 68 55 2b 76 59 61 7a 45 50 43 46 52 73 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: bBeaVwi6hU+vYazEPCFRsw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49791	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:48:56 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 79 48 52 63 58 6e 4c 57 4f 30 4f 79 45 47 45 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 39 33 32 64 36 65 36 61 34 35 63 33 66 65 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: yHRcXnLWO0OyEGEB.1Context: 4932d6e6a45c3fe5
2024-09-29 00:48:56 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:48:56 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 79 48 52 63 58 6e 4c 57 4f 30 4f 79 45 47 45 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 39 33 32 64 36 65 36 61 34 35 63 33 66 65 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: yHRcXnLWO0OyEGEB.2Context: 4932d6e6a45c3fe5<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:48:56 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 79 48 52 63 58 6e 4c 57 4f 30 4f 79 45 47 45 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 39 33 32 64 36 65 36 61 34 35 63 33 66 65 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: yHRcXnLWO0OyEGEB.3Context: 4932d6e6a45c3fe5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:48:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:48:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 55 76 35 78 63 6d 34 4e 74 55 69 46 62 43 69 30 30 54 69 44 78 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Uv5xcm4NtUiFbCi00TiDxA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49792	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:49:11 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 47 44 58 4a 53 34 71 4f 31 6b 57 7a 38 4a 38 31 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 39 30 35 63 36 39 37 37 66 65 62 32 62 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: GDXJS4qO1kWz8J81.1Context: d2905c6977feb2be
2024-09-29 00:49:11 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:49:11 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 47 44 58 4a 53 34 71 4f 31 6b 57 7a 38 4a 38 31 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 39 30 35 63 36 39 37 37 66 65 62 32 62 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: GDXJS4qO1kWz8J81.2Context: d2905c6977feb2be<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:49:11 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 47 44 58 4a 53 34 71 4f 31 6b 57 7a 38 4a 38 31 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 32 39 30 35 63 36 39 37 37 66 65 62 32 62 65 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: GDXJS4qO1kWz8J81.3Context: d2905c6977feb2be
2024-09-29 00:49:11 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:49:11 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 45 6e 6a 34 67 64 4c 2f 45 61 46 2b 41 68 66 68 62 45 4c 31 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: FEnj4gdL/EaF+AhfhbEL1A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49793	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:49:15 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 62 46 79 72 6f 6a 45 2b 61 55 69 6a 48 34 33 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 36 66 62 64 33 35 31 35 32 38 37 35 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: bFyrojE+aUijH43L.1Context: a76fbd35152875c
2024-09-29 00:49:15 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:49:15 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 62 46 79 72 6f 6a 45 2b 61 55 69 6a 48 34 33 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 36 66 62 64 33 35 31 35 32 38 37 35 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 30 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: bFyrojE+aUijH43L.2Context: a76fbd35152875c<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi0
2024-09-29 00:49:15 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 62 46 79 72 6f 6a 45 2b 61 55 69 6a 48 34 33 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 36 66 62 64 33 35 31 35 32 38 37 35 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: bFyrojE+aUijH43L.3Context: a76fbd35152875c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:49:15 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:49:15 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 75 68 37 4a 33 59 61 4b 71 30 4b 55 32 44 33 43 78 6c 41 38 4a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: uh7J3YaKq0KU2D3CxlA8JQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49794	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:49:26 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yycSm31+bCc1AWb&MD=K6MRBUd8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-29 00:49:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: a73cdf9f-d576-4d2d-8067-9237bd03062e MS-RequestId: f366e38a-8613-4aed-acda-8a54ca811083 MS-CV: 56DSKNq1xUSH8lmH.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 29 Sep 2024 00:49:26 GMT Connection: close Content-Length: 30005
2024-09-29 00:49:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-29 00:49:27 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49795	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:49:29 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 32 55 4f 33 31 7a 75 32 55 53 55 78 58 73 2f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 31 33 66 65 61 37 34 61 65 32 34 61 34 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 72UO31zu2USUxXs/.1Context: 7613fea74ae24a4f
2024-09-29 00:49:29 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:49:29 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 37 32 55 4f 33 31 7a 75 32 55 53 55 78 58 73 2f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 31 33 66 65 61 37 34 61 65 32 34 61 34 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 72UO31zu2USUxXs/.2Context: 7613fea74ae24a4f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:49:29 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 37 32 55 4f 33 31 7a 75 32 55 53 55 78 58 73 2f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 31 33 66 65 61 37 34 61 65 32 34 61 34 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: 72UO31zu2USUxXs/.3Context: 7613fea74ae24a4f
2024-09-29 00:49:29 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:49:29 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 6c 76 70 2f 77 52 76 30 30 47 76 4b 48 62 68 37 71 32 53 2f 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Clvp/wRv00GvKHbh7q2S/g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49797	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:49:37 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 6c 79 6e 50 43 69 61 73 45 79 4e 61 39 4c 58 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 39 35 31 31 63 30 34 37 31 34 30 30 35 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: flynPCiasEyNa9LX.1Context: cd9511c04714005b
2024-09-29 00:49:37 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:49:37 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 66 6c 79 6e 50 43 69 61 73 45 79 4e 61 39 4c 58 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 39 35 31 31 63 30 34 37 31 34 30 30 35 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: flynPCiasEyNa9LX.2Context: cd9511c04714005b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi
2024-09-29 00:49:37 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 66 6c 79 6e 50 43 69 61 73 45 79 4e 61 39 4c 58 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 39 35 31 31 63 30 34 37 31 34 30 30 35 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: flynPCiasEyNa9LX.3Context: cd9511c04714005b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:49:38 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:49:38 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 30 46 4c 53 7a 63 72 54 46 45 65 49 54 71 49 4b 65 38 61 2f 2b 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 0FLSzcrTFEeITqIKe8a/+A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49799	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:49:55 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 78 4c 67 42 54 76 44 38 34 30 2b 79 6b 56 6f 73 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 35 62 64 61 34 36 38 38 62 35 34 62 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: xLgBTvD840+ykVos.1Context: ef5bda4688b54bd
2024-09-29 00:49:55 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:49:55 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 78 4c 67 42 54 76 44 38 34 30 2b 79 6b 56 6f 73 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 35 62 64 61 34 36 38 38 62 35 34 62 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 43 7a 2f 42 6a 43 32 68 5a 41 37 6c 74 4e 61 6e 34 59 53 67 63 39 70 56 36 51 6b 76 57 59 33 63 52 6b 5a 58 37 6a 4c 4b 69 53 75 41 71 33 2f 69 2b 2b 45 47 58 7a 38 45 79 64 75 73 36 31 78 72 50 67 6b 38 6b 56 35 5a 67 52 31 54 54 66 4c 66 66 71 79 62 72 5a 34 64 61 6a 39 49 6b 6b 38 59 50 47 71 51 39 4e 66 6d 39 6f 41 69 30 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: xLgBTvD840+ykVos.2Context: ef5bda4688b54bd<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfCz/BjC2hZA7ltNan4YSgc9pV6QkvWY3cRkZX7jLKiSuAq3/i++EGXz8Eydus61xrPgk8kV5ZgR1TTfLffqybrZ4daj9Ikk8YPGqQ9Nfm9oAi0
2024-09-29 00:49:55 UTC	73	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 35 0d 0a 4d 53 2d 43 56 3a 20 78 4c 67 42 54 76 44 38 34 30 2b 79 6b 56 6f 73 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 35 62 64 61 34 36 38 38 62 35 34 62 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 55MS-CV: xLgBTvD840+ykVos.3Context: ef5bda4688b54bd
2024-09-29 00:49:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:49:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 6a 4f 51 61 48 35 73 68 6b 79 44 4a 77 72 2f 2b 62 43 76 57 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: MjOQaH5shkyDJwr/+bCvWQ.0Payload parsing failed.

Target ID:	0
Start time:	20:48:30
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:48:33
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2260,i,7471430464917882819,9045591115373755048,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:48:36
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ipv6.52-229-18-172.cprapid.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ipv6.52-229-18-172.cprapid.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Windows Analysis Report
https://ipv6.52-229-18-172.cprapid.com/