Edit tour

Windows Analysis Report
https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a

Overview

General Information

Sample URL:	https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a
Analysis ID:	1528500
Tags:	urlscan
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=1944,i,13270647576138217538,262798573287539600,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A4109008217X-BM-CBT: 1696494873X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: 229C124F14F843F693B4EF574DFCAAABX-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A4109008217X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,d-thshldspcl40X-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 516Connection: Keep-AliveCache-Control: no-cacheCookie: SRCHUID=V=2&GUID=7A0479E0E07C4D7D91A8C7552F34E6D4&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&LUT=1696493908190&IPMH=7bc3b11d&IPMID=1696494873321&HV=1696494765; MUID=4E6D5F19647E45969740B90CC0355D4C; _SS=SID=1F4D6C7F4B26664337657FDE4A3767CB&CPID=1696494874312&AC=1&CPH=893a1c21; _EDGE_S=SID=1F4D6C7F4B26664337657FDE4A3767CB; MUIDB=4E6D5F19647E45969740B90CC0355D4C

Source: chromecache_161.2.dr	String found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: chromecache_162.2.dr	String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_161.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_161.2.dr	String found in binary or memory: http://brandonaaron.net)
Source: chromecache_162.2.dr, chromecache_161.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_161.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_161.2.dr	String found in binary or memory: http://trentrichardson.com/examples/timepicker
Source: chromecache_161.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_161.2.dr	String found in binary or memory: http://www.mathias-bank.de)
Source: chromecache_161.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_161.2.dr	String found in binary or memory: https://github.com/furf/jquery-ui-touch-punch
Source: chromecache_161.2.dr	String found in binary or memory: https://github.com/gabceb
Source: chromecache_161.2.dr	String found in binary or memory: https://github.com/gabceb/jquery-browser-plugin
Source: chromecache_161.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_161.2.dr	String found in binary or memory: https://github.com/markrian/jquery-ui-touch-punch-improved

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.8:49762 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@21/49@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=1944,i,13270647576138217538,262798573287539600,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=1944,i,13270647576138217538,262798573287539600,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
http://api.jqueryui.com/position/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
pe-0017a501.gslb.pphosted.com	67.231.156.254	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
securemail.lpl.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://securemail.lpl.com/formpostdir/Image?i=7	false	unknown
https://securemail.lpl.com/formpostdir/fonts/sourcesanspro-regular.ttf.woff	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17	false	unknown
https://securemail.lpl.com/favicon.ico	false	unknown
https://securemail.lpl.com/formpostdir/images/CheckBullet.gif	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17	false	unknown
https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17	false	unknown
https://securemail.lpl.com/formpostdir/images/BangBullet.gif	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo	false	unknown
https://securemail.lpl.com/formpostdir/images/TipClose.gif	false	unknown
https://securemail.lpl.com/securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_162.2.dr, chromecache_161.2.dr	false	URL Reputation: safe	unknown
https://github.com/carhartl/jquery-cookie	chromecache_161.2.dr	false		unknown
http://adomas.org/javascript-mouse-wheel/	chromecache_161.2.dr	false		unknown
http://jqueryui.com	chromecache_161.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/category/theming/	chromecache_162.2.dr	false		unknown
http://brandonaaron.net)	chromecache_161.2.dr	false		unknown
http://api.jqueryui.com/position/	chromecache_161.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery-color	chromecache_161.2.dr	false		unknown
https://github.com/markrian/jquery-ui-touch-punch-improved	chromecache_161.2.dr	false		unknown
https://github.com/gabceb/jquery-browser-plugin	chromecache_161.2.dr	false		unknown
http://www.mathias-bank.de)	chromecache_161.2.dr	false		unknown
https://github.com/furf/jquery-ui-touch-punch	chromecache_161.2.dr	false		unknown
https://github.com/gabceb	chromecache_161.2.dr	false		unknown
http://www.jacklmoore.com/autosize	chromecache_161.2.dr	false		unknown
http://trentrichardson.com/examples/timepicker	chromecache_161.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
67.231.156.254	pe-0017a501.gslb.pphosted.com	United States	22843	PROOFPOINT-ASN-US-EASTUS	false

Private

IP
192.168.2.8

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528500
Start date and time:	2024-10-08 00:21:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/49@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 172.217.18.110, 74.125.133.84, 34.104.35.123, 172.217.18.10, 142.250.184.234, 142.250.74.202, 142.250.185.170, 216.58.206.42, 142.250.186.42, 142.250.181.234, 142.250.185.74, 142.250.186.74, 142.250.184.202, 142.250.185.138, 142.250.185.106, 216.58.206.74, 216.58.212.170, 142.250.185.234, 142.250.185.202, 4.245.163.56, 199.232.214.172, 192.229.221.95, 13.85.23.206, 52.165.164.15, 142.250.184.195, 93.184.221.240
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a

Input	Output
URL: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Model: jbxai	{ "brand":["LPL Financial"], "contains_trigger_text":true, "trigger_text":"You can try to send a code again after 3 minutes.", "prominent_button_name":"Continue", "text_input_field_labels":["Email Address:", "First Name:", "Last Name:", "Password:", "Confirm Password:"], "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "text":"Create your account to read secure email. Email Address: michael.chicker@sbiopharma.com First Name: Last Name: Password: Confirm Password: We have sent a validation code to your email address. Please check your inbox for the code and enter it below. If you did not receive it and need another code:Click here You can try to send a code again after 3 minutes. Validation Code: Continue", "has_visible_qrcode":false}

URL: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Model: jbxai	{ "phishing_score":2, "brands":"LPL Financial", "legit_domain":"lpl.com", "classification":"known", "reasons":["The URL 'securemail.lpl.com' is a subdomain of 'lpl.com', which is the legitimate domain for LPL Financial.", "LPL Financial is a known brand in the financial services industry.", "The use of 'securemail' as a subdomain is plausible for a financial institution offering secure email services.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions."], "brand_matches":[false], "url_match":false, "brand_input":"LPL Financial", "input_fields":"Email Address:"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:22:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9746560586180095
Encrypted:	false
SSDEEP:	48:8R0dEjT8wwfHBBidAKZdA1oehwiZUklqehDy+3:8R7jvwpSMy
MD5:	556F4D7625E4F5C24C571FBB9134B6E9
SHA1:	BD8196BE09D01856438BE6D035E581DE5F8D425C
SHA-256:	F7F90C9AC538D82A2351A183BCDCE0214B05855621F9D58B3B144CC01DE1E24D
SHA-512:	A03036BB658A126D936F1FB253575A9AA3C28742FD54B866F388CB312F7E6F1183B96B9CDBE33C256FC1BE4F1EAB1EF4033712588EB7936B9E391E34BB71D558
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....VL.p....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............gI.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:22:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9939042924243
Encrypted:	false
SSDEEP:	48:800dEjT8wwfHBBidAKZdA1leh/iZUkAQkqeh8y+2:807jvwpo9QRy
MD5:	6F7F9B8949036FD8DA1A352C294DFA09
SHA1:	F313A4512B8BCCE9570DD1A64C2BC38C34BFD8F7
SHA-256:	51AE2FB284BF5A246FA4EA39C5E385830A1C4E09747C6B5F5B44279FD19E4908
SHA-512:	CE49481CF2FACAC9BFA8AE0051FA5821B801CB6526CBA7D31A9494AAD14D4CC9539288328ACF9A67B17610F8A048E1D873A7ACFADEDDA0B89E4DA14A5C06F443
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......p....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............gI.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00442546862228
Encrypted:	false
SSDEEP:	48:8l0dEjT8wbHBBidAKZdA14t5eh7sFiZUkmgqeh7sCy+BX:8l7jvdwn4y
MD5:	BA0569ACA8D04E897A0A61EB3FC3FE57
SHA1:	AB0BA0A545104FB5EF1286BFBD9D40DEB6BE504C
SHA-256:	BB139A0961C34D082662490DEA220FD0DDFEAF24563B434648CC5BE1E7321F10
SHA-512:	22F7D316FCCE4104D4D5F2E919015FE8034C6A5F14504360BC71C4E103FD54C57E9DE6EB24D895E41555E42F558E662821CA0BEC0D1B4A8E9572F58022CAA1D8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............gI.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:22:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.989968896000562
Encrypted:	false
SSDEEP:	48:8z0dEjT8wwfHBBidAKZdA16ehDiZUkwqehAy+R:8z7jvwpDKy
MD5:	8B3B2AC4A64176E802BFFFCA3522212D
SHA1:	6A23967FC7D771D8601240DD5A09D9AF3FFD432C
SHA-256:	9181F8A2264919E9981F7B7F3CE6246DB7A7A94FB12DA8DF90B7EB2AEE59D46E
SHA-512:	8E28630B3B4142699AD8DA25777D8EC2B1856BE3097FFED313D5172A01507795846D8A541ABBAD8B75298C1883D01311E02C21CE89075B85C777EDA039C6312B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....tv.p....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............gI.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:22:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9808841120307035
Encrypted:	false
SSDEEP:	48:8W0dEjT8wwfHBBidAKZdA1UehBiZUk1W1qeh+y+C:8W7jvwpz9ey
MD5:	798D6CA6A0260BE359F95A8C885826F9
SHA1:	BAEAFD6B7AE25A1E17210B98EF85A28C2055D1C5
SHA-256:	912AD045C8B09D3F4781B1FA8724CEB25D836C136C9E52D8C879ADCF7112C4BA
SHA-512:	6F0ADC6A1F1F62499ED6E026EA90CF88AEFD9303262A8C6852B227C9DD2578519600D3B1C71BB7B6F9FA1B2901CCAE0A263CAA4BFF9C08025D1A9F89C6923F54
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J..p....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............gI.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 21:22:48 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.988781827284178
Encrypted:	false
SSDEEP:	48:8tF0dEjT8wwfHBBidAKZdA1duTrehOuTbbiZUk5OjqehOuTb4y+yT+:8tF7jvwp8TYTbxWOvTb4y7T
MD5:	DA2A0DFA7406DBD961789D2EBBE99B11
SHA1:	6087FE19098165C67F25B441651C0D0BF4517C7F
SHA-256:	112976BF6D4DC2DA018C69A2905DE6590C85B97B4BF5952D8232462F73676C6F
SHA-512:	486E525D896688A4D06F50C0582FCF376EE3767A9BDF268B094D78DD23A975429EADDF47CC69E0B02B8806F9BD30A85155F9693AD12BCCA6A028A8A6453A07E9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3).p....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IGY.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............gI.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 128612, version 2.10
Category:	downloaded
Size (bytes):	128612
Entropy (8bit):	7.992355830336478
Encrypted:	true
SSDEEP:	3072:lwqTtPj/eAjhKdBz8D3G/KZi77IvKOL3tUBqD7AYhg:lwqTcANOOQnHaZ74
MD5:	03ADBB294261977089607CDEA10B520C
SHA1:	4DD8B4AD179F3F9B64EC980418F2C9D354A9983D
SHA-256:	D79149C9559597EFFB066E4ED38C2C4B429C88D0420725C296D52C40363EAF68
SHA-512:	5C40F0B1B41B832854E786AE3B6E9FAC4DAC0ED82F7FE3F6B3B8CB5034224DFDA5C2E6FB1B45D04F7CCEF7BA0FB48FD005B9FA527E72700088F9093A952025C4
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/formpostdir/fonts/sourcesanspro-regular.ttf.woff
Preview:	wOFF.......d......\|H........................BASE.......:...:....DSIG...T............GDEF..v....x....$..GPOS..y...QM......;.GSUB...T......<Z....OS/2...$...Y...`]..cmap...8...X..6....[cvt ..,........"..fpgm..+........s.Y.7gasp..v.............glyf..?....w..R,e...head.......6...6.l.Yhhea.......!...$...Zhmtx...........`...\loca..-........d.f.Xmaxp....... ... ...zname..Nd...j...<...post..S..."...K.C3.oprep..,....S...V.c...........E.8_.<...........g.........:...o..............x.c`d``...=....V..8...".}...~................v...............s....x.c`f\|.8.......).....B3.1.1.E.Y..Y...X....3.%.............w.....o0.00...1>`.......\|..Y...x..ypV..../$.KX..[.B..Y..a....AY..Hpt...n(b.F..q:.:v:.eZE...:...uZ5.6#.K.q0,Q#1(U^...>?#....43.9w{w=..s..[d.._C.....uv........\|....Z.i.C..)..o.5p;.c..../#m......."A_.`..2..,..s..H.i.";J..'Rd.K...FZe....e>&.JM0Ijl.d..5..\|...15..7..7.Gv.d.'%C.f.......c.{.] Y.=k..a.....E...\..hp^.6K.I....f"?..a.\|E..La.."...s..=G.......I:...'..`......b{....:Y

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	dropped
Size (bytes):	64
Entropy (8bit):	4.431150438178646
Encrypted:	false
SSDEEP:	3:CEVDalaaPZSxlHlWBfbwpn:39urSjMBc
MD5:	0099E0458F743BD64142F6BC36E00E0D
SHA1:	90C3E270B87CE28789925391972647697AE458D9
SHA-256:	3A085E20C4C690FCAB707C3492923DA12EF0D9911EACA70C7978C5595B1E546B
SHA-512:	93D376DF2E289169ECFBB76375ADE021A75A819195B7C44337EB76E67D9E3839E492270479EC955FD184290B9CF57E59B0A2086A0453C04CEA1CDE141D07432D
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,............`.....bV..C.f..;

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13183)
Category:	downloaded
Size (bytes):	37785
Entropy (8bit):	5.338234647560044
Encrypted:	false
SSDEEP:	768:ZGSoI+BTN8GWYArW1PHnXpAPNUFeKqq4R4bgeMSHh7FNE:cf58GWYArW1PHnZqQeKJG
MD5:	5B3C7AC6A53B9D9BDB7A1C7B27EE036F
SHA1:	E4116A2AF7920957C0B26FE3B8B6212BFCA3B876
SHA-256:	60A0E7BCF2F261816807201BB2A09522F62C399293CDF4B0B6443A42F6228C8B
SHA-512:	D769330B8D78CA256CCDBC9473A7E74086B6D49CB7BE743C5C70D46C44F72F4B1543EFF477AB3554CE49A9955DB0EA638895EE87265B54C901F1C6041D990C80
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17
Preview:	(function(a){if(a.PrimeFaces){a.PrimeFaces.debug("PrimeFaces already loaded, ignoring duplicate execution.");return}var b={escapeClientId:function(c){return"#"+c.replace(/:/g,"\\:")},onElementLoad:function(c,d){if(c.prop("complete")){d()}else{c.on("load",d)}},cleanWatermarks:function(){$.watermark.hideAll()},showWatermarks:function(){$.watermark.showAll()},getWidgetById:function(e){for(var d in b.widgets){var c=b.widgets[d];if(c&&c.id===e){return c}}return null},addSubmitParam:function(d,f){var e=$(this.escapeClientId(d));for(var c in f){e.append('<input type="hidden" name="'+b.escapeHTML(c)+'" value="'+b.escapeHTML(f[c])+'" class="ui-submit-param"></input>')}return this},submit:function(f,e){var c=$(this.escapeClientId(f));var d;if(e){d=c.attr("target");c.attr("target",e)}c.submit();c.children("input.ui-submit-param").remove();if(e){if(d!==undefined){c.attr("target",d)}else{c.removeAttr("target")}}},onPost:function(){this.nonAjaxPosted=true;this.abortXHRs()},abortXHRs:function(){b.aja

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 200 x 50
Category:	downloaded
Size (bytes):	1253
Entropy (8bit):	7.585545610243096
Encrypted:	false
SSDEEP:	24:A11iYEBllljwkJkoMf1d5VJmgNOjqDke1lPp7U3XgTGjHNNW2NRnEC:A11hmllav1tJmgNRQe1lPpIaGjtDEC
MD5:	5E70185C21A46FE6EC34ED6E3BC4C9D3
SHA1:	0F9CB391686D6C8D8B92483223FE28AF028CAB37
SHA-256:	56517B4B8FF5A38701719D101BAEC45352FEB195214CFD98F3F3EC15BC3CE885
SHA-512:	4C42EF4EA7452A49B46E4C67050D457EB18ECC1E6D685F037B02400A87A46E81728B7C9CF67283F052DD5FCE12ECFC1F389440EF22AC375D9EB8CD992FC5F8BD
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/formpostdir/Image?i=7
Preview:	GIF89a..2.......g......Lt...X~...9d.X\|.v..........Hp.....@k................................................!.......,......2.... $.di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL.6..z.&...\|N......w...y{.:..x..7.....1.......u.....a...,..3..(......(...n#....-......r.^.s.-....4..&.w.(....v.(...s.].../....r."..r...&...r..........,....[....n.0...r..JB.f.:e.8.%..... 0..C.z$.....h..S....VB@.`#g.4..AJ.&X.\|.4....8. .:{:..x. A....t.........../.."... $..d.$...).c.. .'Bh.s.....9e... ..P..u.A.+..F.<......$.1.\g#Vw.......i...&..w..t+..0L.)..1.{.:y.....PE.....@..qp.....N6N...".9.A..8.......Y.O............Mih.....s..5.-_.0..]".t.z#.P yR9.....W.+u..\|... ?.....i.....,.^q.&..r.%.w.Ae.\|..FZ.9...`..x..=.dO$..8....A....F.u..S.Y4.F.F.d.i....3..ee..y.$}'.SG..A..b.V..C..j.H.N..P.[p...5.AT.Ym...Q^...+'...b.Ly.....h.]..b.+~h.n.x5@.L5...%v(..]..@.....&.P)..Y.).}~.ot.Z)...h..^..$..jC..n.v.....4.4.T..F-j...E....%.b.........%3.&....pI.d....yi.e.Fh.....J...V:Lu....y...b...

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	dropped
Size (bytes):	64
Entropy (8bit):	4.440413476123046
Encrypted:	false
SSDEEP:	3:CRM7lHr/lWrdS75e8:CJS3
MD5:	08563EA7B7B4F4488302CC85B21E4992
SHA1:	38C7C24638EE35C10A544F0401FB1270C0CD6D3A
SHA-256:	749F13D9A507A80A7ACC85A5AD8C4CEE027BB31EBEA982D259A9256802009922
SHA-512:	DC05FF3243A053DF87292C9416AF5C1DC95587910DD8732607E4D6C952DF9B056F55FA19C396F8C0CA13AD7DA4613AF10C975EFE7AFEAF7A4610F2FD0154D7E3
Malicious:	false
Reputation:	low
Preview:	GIF89a.........lg_I......!.......,..............f..^Zm......P..;

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (47254), with no line terminators
Category:	dropped
Size (bytes):	47254
Entropy (8bit):	5.200712489482322
Encrypted:	false
SSDEEP:	768:0oxuhiT+kEUtMNBQVtVFZ89I1gu7Owrk+6xbyUzbyUE6xaQWkkkIkGnwhNrHSupn:VIRUtMNBQVtVFS9IOu6wrl6xbyUzbyUp
MD5:	1EE5300441F6D2204173FDE1C4ACA985
SHA1:	2DE2565C49F7548EFD6BF3F48751994A870B1200
SHA-256:	A1D563139C7AFA362C35519099D7018C09A72C05952CAE3CA5ED3C277C5554F2
SHA-512:	9155637FC8BAC573EC106B8DA46A98316822B80267D56EA5A3F6CA61EF5E3A0919729A43D404B0BEB8832DF329B2CBBC1B5DC587B21A0471E4CD540F82229517
Malicious:	false
Reputation:	low
Preview:	if(!((jsf&&jsf.specversion&&jsf.specversion>=23000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={};jsf.ajax=function(){var eventListeners=[];var errorListeners=[];var delayHandler=null;var isIE=function isIE(){if(typeof isIECache!=="undefined"){return isIECache}isIECache=document.all&&window.ActiveXObject&&navigator.userAgent.toLowerCase().indexOf("msie")>-1&&navigator.userAgent.toLowerCase().indexOf("opera")==-1;return isIECache};var isIECache;var getIEVersion=function getIEVersion(){if(typeof IEVersionCache!=="undefined"){return IEVersionCache}if(/MSIE ([0-9]+)/.test(navigator.userAgent)){IEVersionCache=parseInt(RegExp.$1)}else{IEVersionCache=-1}return IEVersionCache};var IEVersionCache;var isAutoExec=function isAutoExec(){try{if(typeof isAutoExecCache!=="undefined"){return isAutoExecCache}var autoExecTestString="<script>var mojarra = mojarra \|\| {};mojarra.autoExecTest = true;<\/script>";var tempElement=document.createElement("span");tempElement.innerHTML=autoExecTestString;var

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 508, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16755
Entropy (8bit):	7.9757414204084
Encrypted:	false
SSDEEP:	384:Tdgk731LaMW7NKnbxHIQCb7m8YPc5qEJZU2pWxSml1F4SOZP:51LadN6NCbS8YPafJZbsxSqb45ZP
MD5:	93D46004C954437039DB089DD097EB38
SHA1:	61BED313EE1EFA40DA3E9C18FBFA7CA214190DE7
SHA-256:	4C5C882C57946ED56E325D16C508BE939D9B46936B958DF23EE8B42BAB1F1BAC
SHA-512:	3FA7402F517CC9944DE5C46441E3755FFDC1F6408812AE3BB2685953AF0944586D35BAECC1F44037BD65EC0AFC18A6B51E0485BA99A21059E1DE5158BA4B1BAE
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17
Preview:	.PNG........IHDR... ..............A:IDATx..W..$K.=.==...{...m.m.m....w..;w...dEw..y.}..Q.U.'3OeW.A.......{...2...{..D"f.......ObY.6...y...................5j..x4..(...}..?..J.X.noo.5k....;.Q.?S...D..?.#N...+/.3f.P.r..j.V..8.Q..5.9P...e.Rn..y..>}..o..3g..k....W^y.I..aI....:P.\|..n.;v.P....y.P..e.p\.tK.9..q..}...L6.AgG.Z.\|...Zk...{...'.X$....{..8.....`.R.X&s._....Np.\|..j@...b]..V..r...V"'..=....+W"...6.pC..W_}..8K8.s..F...6[..!a[......GQ..`....~.....V_0....%:4^..r.....~..n......X.b..b..0.k.......}.q.D..x...wb..z#y./Y...(e3(.3.9n.[..9..V...".\.E.TBz.\.x.%..H .4Vrm2........@<N............M..i...`...Gb.....DU.%G<...X.`".t.~...(U...PX....Ku$...`.G....Jn."...C'./....M.8..........i........#.wJ....qh.e..{..l...y.../..Km.G..mz........1..n..=...F..L..ou.i....D..DJ.k.u..........T..;.M....#...I....h{.....D......~.5...O.`...p.^..s....\|......X..a1U.LF.4......(1bE._N.D..z.P'.RD...d.$zPb.w..*..2..R.1..m.....Tmt.I:...4\|.@.....Sh..U.D.........f^A.0U...L..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13183)
Category:	dropped
Size (bytes):	37785
Entropy (8bit):	5.338234647560044
Encrypted:	false
SSDEEP:	768:ZGSoI+BTN8GWYArW1PHnXpAPNUFeKqq4R4bgeMSHh7FNE:cf58GWYArW1PHnZqQeKJG
MD5:	5B3C7AC6A53B9D9BDB7A1C7B27EE036F
SHA1:	E4116A2AF7920957C0B26FE3B8B6212BFCA3B876
SHA-256:	60A0E7BCF2F261816807201BB2A09522F62C399293CDF4B0B6443A42F6228C8B
SHA-512:	D769330B8D78CA256CCDBC9473A7E74086B6D49CB7BE743C5C70D46C44F72F4B1543EFF477AB3554CE49A9955DB0EA638895EE87265B54C901F1C6041D990C80
Malicious:	false
Reputation:	low
Preview:	(function(a){if(a.PrimeFaces){a.PrimeFaces.debug("PrimeFaces already loaded, ignoring duplicate execution.");return}var b={escapeClientId:function(c){return"#"+c.replace(/:/g,"\\:")},onElementLoad:function(c,d){if(c.prop("complete")){d()}else{c.on("load",d)}},cleanWatermarks:function(){$.watermark.hideAll()},showWatermarks:function(){$.watermark.showAll()},getWidgetById:function(e){for(var d in b.widgets){var c=b.widgets[d];if(c&&c.id===e){return c}}return null},addSubmitParam:function(d,f){var e=$(this.escapeClientId(d));for(var c in f){e.append('<input type="hidden" name="'+b.escapeHTML(c)+'" value="'+b.escapeHTML(f[c])+'" class="ui-submit-param"></input>')}return this},submit:function(f,e){var c=$(this.escapeClientId(f));var d;if(e){d=c.attr("target");c.attr("target",e)}c.submit();c.children("input.ui-submit-param").remove();if(e){if(d!==undefined){c.attr("target",d)}else{c.removeAttr("target")}}},onPost:function(){this.nonAjaxPosted=true;this.abortXHRs()},abortXHRs:function(){b.aja

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.223148900731864
Encrypted:	false
SSDEEP:	24:tqAwGyTSQB24gTAhnsx1nD+o1NMTTJaz:tL+bgTinelDMd
MD5:	A05A05DCD6158CC4F8701173734F484A
SHA1:	FEEF99DC27E3DB5BF07A255B8EE509CCCACFF245
SHA-256:	CA9A42575D5AD76A2915ED24034A512413392423BC5EC029B4605AEE7EDF5D46
SHA-512:	635E76CBF85BC1E9AF0168A9B87D2085CBC68BEDEB07116DF062C2AAEA0F105D37378E37D881A8AED91EA3C0DFAF700BD6CD628620C5DCEEA6626EB3547E902C
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/favicon.ico
Preview:	............ .h.......(....... ..... .............................................................................................D..................................................d.................................................P...................................................@.....S..K..0.......................................................f..........................................................P....................................6.....j...........................................n......................f............................I.............{........................................^.......................i................................!.....:............./...................................{..............j...........................................................................-..`..M..v...@.........

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.431150438178646
Encrypted:	false
SSDEEP:	3:CEVDalaaPZSxlHlWBfbwpn:39urSjMBc
MD5:	0099E0458F743BD64142F6BC36E00E0D
SHA1:	90C3E270B87CE28789925391972647697AE458D9
SHA-256:	3A085E20C4C690FCAB707C3492923DA12EF0D9911EACA70C7978C5595B1E546B
SHA-512:	93D376DF2E289169ECFBB76375ADE021A75A819195B7C44337EB76E67D9E3839E492270479EC955FD184290B9CF57E59B0A2086A0453C04CEA1CDE141D07432D
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/formpostdir/images/CheckBullet.gif
Preview:	GIF89a...................!.......,............`.....bV..C.f..;

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.440413476123046
Encrypted:	false
SSDEEP:	3:CRM7lHr/lWrdS75e8:CJS3
MD5:	08563EA7B7B4F4488302CC85B21E4992
SHA1:	38C7C24638EE35C10A544F0401FB1270C0CD6D3A
SHA-256:	749F13D9A507A80A7ACC85A5AD8C4CEE027BB31EBEA982D259A9256802009922
SHA-512:	DC05FF3243A053DF87292C9416AF5C1DC95587910DD8732607E4D6C952DF9B056F55FA19C396F8C0CA13AD7DA4613AF10C975EFE7AFEAF7A4610F2FD0154D7E3
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/formpostdir/images/TipClose.gif
Preview:	GIF89a.........lg_I......!.......,..............f..^Zm......P..;

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 200 x 50
Category:	dropped
Size (bytes):	1253
Entropy (8bit):	7.585545610243096
Encrypted:	false
SSDEEP:	24:A11iYEBllljwkJkoMf1d5VJmgNOjqDke1lPp7U3XgTGjHNNW2NRnEC:A11hmllav1tJmgNRQe1lPpIaGjtDEC
MD5:	5E70185C21A46FE6EC34ED6E3BC4C9D3
SHA1:	0F9CB391686D6C8D8B92483223FE28AF028CAB37
SHA-256:	56517B4B8FF5A38701719D101BAEC45352FEB195214CFD98F3F3EC15BC3CE885
SHA-512:	4C42EF4EA7452A49B46E4C67050D457EB18ECC1E6D685F037B02400A87A46E81728B7C9CF67283F052DD5FCE12ECFC1F389440EF22AC375D9EB8CD992FC5F8BD
Malicious:	false
Reputation:	low
Preview:	GIF89a..2.......g......Lt...X~...9d.X\|.v..........Hp.....@k................................................!.......,......2.... $.di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL.6..z.&...\|N......w...y{.:..x..7.....1.......u.....a...,..3..(......(...n#....-......r.^.s.-....4..&.w.(....v.(...s.].../....r."..r...&...r..........,....[....n.0...r..JB.f.:e.8.%..... 0..C.z$.....h..S....VB@.`#g.4..AJ.&X.\|.4....8. .:{:..x. A....t.........../.."... $..d.$...).c.. .'Bh.s.....9e... ..P..u.A.+..F.<......$.1.\g#Vw.......i...&..w..t+..0L.)..1.{.:y.....PE.....@..qp.....N6N...".9.A..8.......Y.O............Mih.....s..5.-_.0..]".t.z#.P yR9.....W.+u..\|... ?.....i.....,.^q.&..r.%.w.Ae.\|..FZ.9...`..x..=.dO$..8....A....F.u..S.Y4.F.F.d.i....3..ee..y.$}'.SG..A..b.V..C..j.H.N..P.[p...5.AT.Ym...Q^...+'...b.Ly.....h.]..b.+~h.n.x5@.L5...%v(..]..@.....&.P)..Y.).}~.ot.Z)...h..^..$..jC..n.v.....4.4.T..F-j...E....%.b.........%3.&....pI.d....yi.e.Fh.....J...V:Lu....y...b...

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2266), with no line terminators
Category:	dropped
Size (bytes):	2266
Entropy (8bit):	5.298091481985771
Encrypted:	false
SSDEEP:	48:+roQmfyrhnAw1xwQiEDv3+uiDPsKKZYcOGkre:+rzuOhz1GQiq3+uiDPaKGki
MD5:	3EC16AA44D720657743FB21B8843A42A
SHA1:	63585295ACACCEFA397927146CDF66DD4E61B2D1
SHA-256:	AA45349925767E946B92475663269F3388B684612CAF430E23E5080C60D617DF
SHA-512:	C2736C0F0C03033F1391AA2F8E6200FD116EDB9D074F38246E8DDF7D02CA9407AD656CF6B42733DCDE2E32E23FA880E4B749BCFDCBED70C063A6DF8DC1F4809D
Malicious:	false
Reputation:	low
Preview:	(function(b){b.hotkeys={version:"0.2.0",specialKeys:{8:"backspace",9:"tab",10:"return",13:"return",16:"shift",17:"ctrl",18:"alt",19:"pause",20:"capslock",27:"esc",32:"space",33:"pageup",34:"pagedown",35:"end",36:"home",37:"left",38:"up",39:"right",40:"down",45:"insert",46:"del",59:";",61:"=",96:"0",97:"1",98:"2",99:"3",100:"4",101:"5",102:"6",103:"7",104:"8",105:"9",106:"",107:"+",109:"-",110:".",111:"/",112:"f1",113:"f2",114:"f3",115:"f4",116:"f5",117:"f6",118:"f7",119:"f8",120:"f9",121:"f10",122:"f11",123:"f12",144:"numlock",145:"scroll",173:"-",186:";",187:"=",188:",",189:"-",190:".",191:"/",192:"`",219:"[",220:"\\",221:"]",222:"'"},shiftNums:{"`":"~","1":"!","2":"@","3":"#","4":"$","5":"%","6":"^","7":"&","8":"","9":"(","0":")","-":"_","=":"+",";":": ","'":'"',",":"<",".":">","/":"?","\\":"\|"},textAcceptingInputTypes:["text","password","number","email","url","range","date","month","week","time","datetime","datetime-local","search","color","tel"],textInputTypes:/textarea\|input\|sel

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2266), with no line terminators
Category:	downloaded
Size (bytes):	2266
Entropy (8bit):	5.298091481985771
Encrypted:	false
SSDEEP:	48:+roQmfyrhnAw1xwQiEDv3+uiDPsKKZYcOGkre:+rzuOhz1GQiq3+uiDPaKGki
MD5:	3EC16AA44D720657743FB21B8843A42A
SHA1:	63585295ACACCEFA397927146CDF66DD4E61B2D1
SHA-256:	AA45349925767E946B92475663269F3388B684612CAF430E23E5080C60D617DF
SHA-512:	C2736C0F0C03033F1391AA2F8E6200FD116EDB9D074F38246E8DDF7D02CA9407AD656CF6B42733DCDE2E32E23FA880E4B749BCFDCBED70C063A6DF8DC1F4809D
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17
Preview:	(function(b){b.hotkeys={version:"0.2.0",specialKeys:{8:"backspace",9:"tab",10:"return",13:"return",16:"shift",17:"ctrl",18:"alt",19:"pause",20:"capslock",27:"esc",32:"space",33:"pageup",34:"pagedown",35:"end",36:"home",37:"left",38:"up",39:"right",40:"down",45:"insert",46:"del",59:";",61:"=",96:"0",97:"1",98:"2",99:"3",100:"4",101:"5",102:"6",103:"7",104:"8",105:"9",106:"",107:"+",109:"-",110:".",111:"/",112:"f1",113:"f2",114:"f3",115:"f4",116:"f5",117:"f6",118:"f7",119:"f8",120:"f9",121:"f10",122:"f11",123:"f12",144:"numlock",145:"scroll",173:"-",186:";",187:"=",188:",",189:"-",190:".",191:"/",192:"`",219:"[",220:"\\",221:"]",222:"'"},shiftNums:{"`":"~","1":"!","2":"@","3":"#","4":"$","5":"%","6":"^","7":"&","8":"","9":"(","0":")","-":"_","=":"+",";":": ","'":'"',",":"<",".":">","/":"?","\\":"\|"},textAcceptingInputTypes:["text","password","number","email","url","range","date","month","week","time","datetime","datetime-local","search","color","tel"],textInputTypes:/textarea\|input\|sel

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.003649478784567
Encrypted:	false
SSDEEP:	3:CqauVL/at/FylhJNlglrmrT:Wu5a1IwkX
MD5:	4C69EEE876E3130B6951BA08FD6EB67C
SHA1:	884FD33D52C7EA30F04E8732A364A22DDB760F7D
SHA-256:	CB61290F2FAD07BA1668C99FFF76B88C2910924860B2FD71547BAA3A4451B62F
SHA-512:	8C4FEED2A343E384775B5D4F90442287252374A0D029B14C2E89B6C5FA388BC0F8E5C54FDEDFD154E99A046516CCAF9E982A2B4E628247C3FD07BD42C4FCCA31
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/formpostdir/images/BangBullet.gif
Preview:	GIF89a..........ff...................!.......,...........H...@...l,.... .Q..$.;

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.223148900731864
Encrypted:	false
SSDEEP:	24:tqAwGyTSQB24gTAhnsx1nD+o1NMTTJaz:tL+bgTinelDMd
MD5:	A05A05DCD6158CC4F8701173734F484A
SHA1:	FEEF99DC27E3DB5BF07A255B8EE509CCCACFF245
SHA-256:	CA9A42575D5AD76A2915ED24034A512413392423BC5EC029B4605AEE7EDF5D46
SHA-512:	635E76CBF85BC1E9AF0168A9B87D2085CBC68BEDEB07116DF062C2AAEA0F105D37378E37D881A8AED91EA3C0DFAF700BD6CD628620C5DCEEA6626EB3547E902C
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .............................................................................................D..................................................d.................................................P...................................................@.....S..K..0.......................................................f..........................................................P....................................6.....j...........................................n......................f............................I.............{........................................^.......................i................................!.....:............./...................................{..............j...........................................................................-..`..M..v...@.........

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25115), with no line terminators
Category:	downloaded
Size (bytes):	25115
Entropy (8bit):	5.077240836874768
Encrypted:	false
SSDEEP:	384:sBJC4J7GJiL/72fZBhVgKKri8s/oAT8s5oAjG8sl8sJ0:hJfBhxv
MD5:	6C9193EACA3F3316140C7A96D8E2EDEA
SHA1:	853589DF20768E14568C2A37177F440DDADB95D4
SHA-256:	4E4A1EDD64E32C55BB71E49FDDAF41EE58AAD04BDC1570A93A89645CB3C09895
SHA-512:	7BB0E6178DCF0BDB7871924A92AF01CA05BD37BAD50C9B7FA256115CB6CE5906D6BD1018D812EA5462AE434BDEB2C7C470238F795495E28BF9516C663951BAD1
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo
Preview:	a{outline:0}.ui-widget{font-family:Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widget select,.ui-widget textarea,.ui-widget button{font-family:Arial,sans-serif;font-size:1em}.ui-widget-content{border:1px solid #a8a8a8;background:#fff;color:#4f4f4f}.ui-widget-content a{color:#4f4f4f}.ui-widget-header{border:1px solid #a8a8a8;background:#c4c4c4 url("/securereader/javax.faces.resource/images/ui-bg_highlight-soft_100_c4c4c4_1x100.png.jsf?ln=primefaces-aristo") 50% 50% repeat-x;background:#c4c4c4 linear-gradient(top,rgba(255,255,255,0.8),rgba(255,255,255,0));background:#c4c4c4 -webkit-gradient(linear,left top,left bottom,from(rgba(255,255,255,0.8)),to(rgba(255,255,255,0)));background:#c4c4c4 -moz-linear-gradient(top,rgba(255,255,255,0.8),rgba(255,255,255,0));color:#333;font-weight:bold;text-shadow:0 1px 0 rgba(255,255,255,0.7)}.ui-widget-header a{color:#4f4f4f}.ui-state-default,.ui-widget-content .ui-state-default,.ui-widget-header .ui-state-def

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19425)
Category:	downloaded
Size (bytes):	267239
Entropy (8bit):	5.292248426826677
Encrypted:	false
SSDEEP:	6144:rFfwZqOMrqrJxaCg/qd/JsgciBjUZKziu1/:rFBE7eA
MD5:	540804DAC5A11DF20E7119A35D01E2F8
SHA1:	6D1AB351BC7568ACB90E29C6ABDF4570A907A431
SHA-256:	52D03B5EA1D204F7E6917075ECBB1C562F2FBE9029FE95C4BD25A70EDDDE2728
SHA-512:	F458CC926ECAB96EB1C771C7FE4DC643E0F217F8AA362DAECCDA719B2B8CC0059192E5BAEACF5969429AE1A2CA7B59B7773CD1F7A003C079FF871556DD52D9FD
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17
Preview:	/! jQuery UI - v1.12.1 - 2017-08-09. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/datepicker.js, widgets/mouse.js, widgets/slider.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js.* Copyright jQuery Foundation and other contributors; Licensed MIT */.(function(a){if(typeof define==="function"&&define.amd){define(["jquery"],a)}else{a(jQuery)}}(function(K){K.ui=K.ui\|\|{};var Z=K.ui.version="

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15488)
Category:	downloaded
Size (bytes):	93818
Entropy (8bit):	4.870223615541555
Encrypted:	false
SSDEEP:	1536:s57R1lQB9y9HyXNoNiNTN/hQNBQIYOHhJvebvzQO:GVQnQO
MD5:	CA00B2BD616FFC3C6041350A592C7426
SHA1:	EA082A42F3BB7A907B5A05E1E5EA5F6B967E3EFE
SHA-256:	19846DEA837AA2A28869F608DB27827473E96713C9DE87ED94906AF0A928DDC2
SHA-512:	E18DE16BD4F1C2CEFCB9E205A5DAF48CB60925961F3F6DE0C4A93529B1B9AAB2C49F0E6CB08F45DA673152C8A333F622002DC229172C2FB804C8139CAA5C21DF
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17
Preview:	.ui-helper-hidden-accessible input,.ui-helper-hidden-accessible select{-webkit-transform:scale(0);-moz-transform:scale(0);-ms-transform:scale(0);transform:scale(0)}.ui-shadow{-moz-box-shadow:0 5px 10px rgba(0,0,0,0.8);-webkit-box-shadow:0 5px 10px rgba(0,0,0,0.8);box-shadow:0 5px 10px rgba(0,0,0,0.8)}.ui-overlay-visible{visibility:visible}ui-overlay-visible {visibility:visible!important}.ui-overlay-hidden{visibility:hidden}.ui-overlay-hidden {visibility:hidden!important}.ui-overflow-hidden{overflow:hidden}.ui-datepicker .ui-datepicker-current.ui-priority-secondary{opacity:1}.ui-icon-blank{background-position:16px 16px}@media only all{th.ui-column-p-6,td.ui-column-p-6,th.ui-column-p-5,td.ui-column-p-5,th.ui-column-p-4,td.ui-column-p-4,th.ui-column-p-3,td.ui-column-p-3,th.ui-column-p-2,td.ui-column-p-2,th.ui-column-p-1,td.ui-column-p-1{display:none}}@media screen and (min-width:20em){th.ui-column-p-1,td.ui-column-p-1{display:table-cell}}@media screen and (min-width:30em){th.ui-column-p

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 508, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16755
Entropy (8bit):	7.9757414204084
Encrypted:	false
SSDEEP:	384:Tdgk731LaMW7NKnbxHIQCb7m8YPc5qEJZU2pWxSml1F4SOZP:51LadN6NCbS8YPafJZbsxSqb45ZP
MD5:	93D46004C954437039DB089DD097EB38
SHA1:	61BED313EE1EFA40DA3E9C18FBFA7CA214190DE7
SHA-256:	4C5C882C57946ED56E325D16C508BE939D9B46936B958DF23EE8B42BAB1F1BAC
SHA-512:	3FA7402F517CC9944DE5C46441E3755FFDC1F6408812AE3BB2685953AF0944586D35BAECC1F44037BD65EC0AFC18A6B51E0485BA99A21059E1DE5158BA4B1BAE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..............A:IDATx..W..$K.=.==...{...m.m.m....w..;w...dEw..y.}..Q.U.'3OeW.A.......{...2...{..D"f.......ObY.6...y...................5j..x4..(...}..?..J.X.noo.5k....;.Q.?S...D..?.#N...+/.3f.P.r..j.V..8.Q..5.9P...e.Rn..y..>}..o..3g..k....W^y.I..aI....:P.\|..n.;v.P....y.P..e.p\.tK.9..q..}...L6.AgG.Z.\|...Zk...{...'.X$....{..8.....`.R.X&s._....Np.\|..j@...b]..V..r...V"'..=....+W"...6.pC..W_}..8K8.s..F...6[..!a[......GQ..`....~.....V_0....%:4^..r.....~..n......X.b..b..0.k.......}.q.D..x...wb..z#y./Y...(e3(.3.9n.[..9..V...".\.E.TBz.\.x.%..H .4Vrm2........@<N............M..i...`...Gb.....DU.%G<...X.`".t.~...(U...PX....Ku$...`.G....Jn."...C'./....M.8..........i........#.wJ....qh.e..{..l...y.../..Km.G..mz........1..n..=...F..L..ou.i....D..DJ.k.u..........T..;.M....#...I....h{.....D......~.5...O.`...p.^..s....\|......X..a1U.LF.4......(1bE._N.D..z.P'.RD...d.$zPb.w..*..2..R.1..m.....Tmt.I:...4\|.@.....Sh..U.D.........f^A.0U...L..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	5.16239056561107
Encrypted:	false
SSDEEP:	3:zNBbn3N7KYM7lGpHdi0KVkVrA23l+dQgp8scwWCNl2r3/n:zNNn3RHMEH+6H3WIAz2D
MD5:	2FD35E18E0ED2380E6F6DBC165C8001E
SHA1:	DA835E1BA888FFF126F51F0A47A1AAEA7327C1F0
SHA-256:	43AD370FDAD7B1E11DDAFBFB64464E0CC9E8AEC3773B91E588711249EED2608E
SHA-512:	C7283A64BDD43E7A78B6CFD00907AB2378F8878416E46029EE764A6292665573DB4C8CCD34471D1F9F1C6076B8552C2EBBDD843F6BD2728AE7CF47E1E7896875
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAmNoTqZoDfjaxIFDZA08QsSBQ0qAeMMEgUNfhkhWBIFDQ_712cSBQ3ZFN9F?alt=proto
Preview:	CmEKCw2QNPELGgQIAxgBChMNKgHjDBoECAUYARoECFYYAiABCicNfhkhWBoECEwYAioaCApSFgoMISRAIyomJT8tXysuEAEY/////w8KCw0P+9dnGgQIXxgCCgcN2RTfRRoA

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.003649478784567
Encrypted:	false
SSDEEP:	3:CqauVL/at/FylhJNlglrmrT:Wu5a1IwkX
MD5:	4C69EEE876E3130B6951BA08FD6EB67C
SHA1:	884FD33D52C7EA30F04E8732A364A22DDB760F7D
SHA-256:	CB61290F2FAD07BA1668C99FFF76B88C2910924860B2FD71547BAA3A4451B62F
SHA-512:	8C4FEED2A343E384775B5D4F90442287252374A0D029B14C2E89B6C5FA388BC0F8E5C54FDEDFD154E99A046516CCAF9E982A2B4E628247C3FD07BD42C4FCCA31
Malicious:	false
Reputation:	low
Preview:	GIF89a..........ff...................!.......,...........H...@...l,.... .Q..$.;

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18546)
Category:	dropped
Size (bytes):	430302
Entropy (8bit):	5.112123976635055
Encrypted:	false
SSDEEP:	3072:6YyVvbIOc7M1WTzkfbpdZPND0mUw2d5wZ/nL8YIPDi2rGb:6Yqh1Ozkfj0mUw2drLi
MD5:	1EC2E61D03A4C0EF91BE8E321D07C5D8
SHA1:	31034A0F1087C879BB12D3E16D85D341783E3249
SHA-256:	A73D718DED1E36A2B0330EE5C0B5806AE9DA6306C406149EF0D4D7D0DB1670BA
SHA-512:	579CD2F97B2F40480B31C67FDDFF882CAD24D8CF26016084B7E9A86C605387281C5554E3607C567CDB19C30FEAD53ACEF1E8BC56B6DF8561525110CC37D63A68
Malicious:	false
Reputation:	low
Preview:	if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),k=f.sourceComponentId+"_dlg";if(h.document.getElementById(k)){return}var j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwidget",d=f.options.styleClass\|\|"",e=$('<div id="'+k+'" class="ui-dialog ui-widget ui-widget-content ui-corner-all ui-shadow ui-hidden-container ui-overlay-hidden '+d+'" data-pfdlgcid="'+PrimeFaces.escapeHTML(f.pfdlgcid)+'" data-widget="'+j+'"></div>').append('<div class="ui-dialog-titlebar ui-widget-header ui-helper-clearfix ui-corner-top"><span id="'+k+'_title" class="ui-dialog-title"></span></div>');var g=e.children(".ui-dialog-titlebar");if(f.options.closable!==false){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-close ui-corner-all" href="#" role="button"><span class="ui-icon ui-icon-closethick"></span></a>')}if(f.options.minimizable){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-minimize ui-corner-all" hr

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (47254), with no line terminators
Category:	downloaded
Size (bytes):	47254
Entropy (8bit):	5.200712489482322
Encrypted:	false
SSDEEP:	768:0oxuhiT+kEUtMNBQVtVFZ89I1gu7Owrk+6xbyUzbyUE6xaQWkkkIkGnwhNrHSupn:VIRUtMNBQVtVFS9IOu6wrl6xbyUzbyUp
MD5:	1EE5300441F6D2204173FDE1C4ACA985
SHA1:	2DE2565C49F7548EFD6BF3F48751994A870B1200
SHA-256:	A1D563139C7AFA362C35519099D7018C09A72C05952CAE3CA5ED3C277C5554F2
SHA-512:	9155637FC8BAC573EC106B8DA46A98316822B80267D56EA5A3F6CA61EF5E3A0919729A43D404B0BEB8832DF329B2CBBC1B5DC587B21A0471E4CD540F82229517
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces
Preview:	if(!((jsf&&jsf.specversion&&jsf.specversion>=23000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={};jsf.ajax=function(){var eventListeners=[];var errorListeners=[];var delayHandler=null;var isIE=function isIE(){if(typeof isIECache!=="undefined"){return isIECache}isIECache=document.all&&window.ActiveXObject&&navigator.userAgent.toLowerCase().indexOf("msie")>-1&&navigator.userAgent.toLowerCase().indexOf("opera")==-1;return isIECache};var isIECache;var getIEVersion=function getIEVersion(){if(typeof IEVersionCache!=="undefined"){return IEVersionCache}if(/MSIE ([0-9]+)/.test(navigator.userAgent)){IEVersionCache=parseInt(RegExp.$1)}else{IEVersionCache=-1}return IEVersionCache};var IEVersionCache;var isAutoExec=function isAutoExec(){try{if(typeof isAutoExecCache!=="undefined"){return isAutoExecCache}var autoExecTestString="<script>var mojarra = mojarra \|\| {};mojarra.autoExecTest = true;<\/script>";var tempElement=document.createElement("span");tempElement.innerHTML=autoExecTestString;var

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18546)
Category:	downloaded
Size (bytes):	430302
Entropy (8bit):	5.112123976635055
Encrypted:	false
SSDEEP:	3072:6YyVvbIOc7M1WTzkfbpdZPND0mUw2d5wZ/nL8YIPDi2rGb:6Yqh1Ozkfj0mUw2drLi
MD5:	1EC2E61D03A4C0EF91BE8E321D07C5D8
SHA1:	31034A0F1087C879BB12D3E16D85D341783E3249
SHA-256:	A73D718DED1E36A2B0330EE5C0B5806AE9DA6306C406149EF0D4D7D0DB1670BA
SHA-512:	579CD2F97B2F40480B31C67FDDFF882CAD24D8CF26016084B7E9A86C605387281C5554E3607C567CDB19C30FEAD53ACEF1E8BC56B6DF8561525110CC37D63A68
Malicious:	false
Reputation:	low
URL:	https://securemail.lpl.com/securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17
Preview:	if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),k=f.sourceComponentId+"_dlg";if(h.document.getElementById(k)){return}var j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwidget",d=f.options.styleClass\|\|"",e=$('<div id="'+k+'" class="ui-dialog ui-widget ui-widget-content ui-corner-all ui-shadow ui-hidden-container ui-overlay-hidden '+d+'" data-pfdlgcid="'+PrimeFaces.escapeHTML(f.pfdlgcid)+'" data-widget="'+j+'"></div>').append('<div class="ui-dialog-titlebar ui-widget-header ui-helper-clearfix ui-corner-top"><span id="'+k+'_title" class="ui-dialog-title"></span></div>');var g=e.children(".ui-dialog-titlebar");if(f.options.closable!==false){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-close ui-corner-all" href="#" role="button"><span class="ui-icon ui-icon-closethick"></span></a>')}if(f.options.minimizable){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-minimize ui-corner-all" hr

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 00:22:39.402621031 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:22:39.777455091 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:22:43.746223927 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 8, 2024 00:22:46.402410984 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 8, 2024 00:22:49.008228064 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:22:49.225511074 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.225574017 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.226052046 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.226052046 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.226093054 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.226176023 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.226249933 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.226264954 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.227411032 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.227440119 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.425003052 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:22:49.813442945 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.827408075 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.827433109 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.829133987 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.830327988 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.830353975 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.840851068 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.840867043 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.841924906 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.841990948 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.849250078 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.849431038 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.851728916 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.851814985 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.852380037 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.852397919 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.895241022 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.895241022 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:49.895262957 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:49.944503069 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.190778971 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.190807104 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.190817118 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.191076994 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.191090107 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.191639900 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.213790894 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.213808060 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.214945078 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.214987040 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.266789913 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.267290115 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.267410040 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.267652988 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.268241882 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.268280029 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.268367052 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.268587112 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.271641016 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.271686077 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.271739960 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272213936 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272262096 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.272664070 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.272679090 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.272722960 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272753000 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.272762060 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272772074 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.272782087 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.272819996 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.272846937 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272846937 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272870064 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272910118 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.272929907 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.273493052 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.273510933 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.274019003 CEST	49709	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.274036884 CEST	443	49709	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.274153948 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.274183035 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.274235010 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.277059078 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.277070045 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.279025078 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.279041052 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.307404995 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.402370930 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.402400970 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.402407885 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.402425051 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.403265953 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.403265953 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.403275967 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.421459913 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.421473980 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.421538115 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.421610117 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.421617031 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.422848940 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.488609076 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.488621950 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.488740921 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.488807917 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.489784002 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.493108034 CEST	49710	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.493136883 CEST	443	49710	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.493557930 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.493602037 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.493676901 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.494904041 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.494914055 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.752198935 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.752301931 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.752541065 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.752556086 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.753515005 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.753549099 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.753900051 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.754005909 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.754061937 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.755062103 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.755126953 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.756267071 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.756412983 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.757011890 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.757210016 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.757217884 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.758882999 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.759200096 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.759211063 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.759556055 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.759948015 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.760010004 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.760380030 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.799402952 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.801032066 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.807399988 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.933260918 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.933350086 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.933373928 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.933408976 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.933434010 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.933444977 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.933473110 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.933495998 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.933568001 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.933618069 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.935147047 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.935167074 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.935231924 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.935262918 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.976803064 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.976808071 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.976808071 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:50.995944023 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:50.996012926 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017651081 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017667055 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017705917 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017715931 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017750978 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.017792940 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.017797947 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017878056 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.017894983 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017904997 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.017954111 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.017960072 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.018006086 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.018014908 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.018075943 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.018095970 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.019159079 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.019243002 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.019253969 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.019458055 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.019469976 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.019524097 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.019530058 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.019891977 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.019946098 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.019956112 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.021769047 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.021785021 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.021858931 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.021868944 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.022406101 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.022546053 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.022550106 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.022552013 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.022610903 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.022619009 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.022619963 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.022675991 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.022684097 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.023547888 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.023627043 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.023636103 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.026223898 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.026344061 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.026350975 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.040208101 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.043205023 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.071103096 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.071108103 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.071227074 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.085040092 CEST	443	49703	23.206.229.226	192.168.2.8
Oct 8, 2024 00:22:51.085268974 CEST	49703	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:22:51.102005959 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.102015972 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.102040052 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.102118015 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.102181911 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.102185965 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.102682114 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.102693081 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.102750063 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.102756023 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103068113 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103075027 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103131056 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.103143930 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103367090 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103374958 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103421926 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.103430986 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103923082 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103939056 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103970051 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.103979111 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.103996992 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.104253054 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.104279995 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.104309082 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.104319096 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.104341030 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.104713917 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.104726076 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.104759932 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.104768038 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.104888916 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.104935884 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.104943037 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.105206966 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.105252028 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.105261087 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.105839968 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.105920076 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.105920076 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.105959892 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.106123924 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.106172085 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.106182098 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.106931925 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.106985092 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.106993914 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.107212067 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.107250929 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.107258081 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.107346058 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.107470036 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.108006001 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108020067 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108066082 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.108074903 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108501911 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108525038 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108851910 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.108858109 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108951092 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108978033 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.108995914 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.109003067 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.109024048 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.109618902 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.109668970 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.109674931 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.109834909 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.109885931 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.109893084 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.110613108 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.110660076 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.110671043 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.162502050 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.194384098 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194397926 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194453955 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.194478989 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194514036 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194520950 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194549084 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.194555998 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194574118 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.194766998 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194793940 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194808006 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.194813967 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.194839954 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.195085049 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195133924 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.195142031 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195260048 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195302963 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.195311069 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195508957 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195557117 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.195565939 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195873976 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195914030 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.195924044 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195940971 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.195979118 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.195986032 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.199470043 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.199538946 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.199558973 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.199691057 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.199743032 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.199749947 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.199836016 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.199882030 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.199888945 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.253223896 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.280822039 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.280836105 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.280967951 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281012058 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281167030 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281214952 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281239033 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281256914 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281280041 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281291962 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281306028 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281337976 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281349897 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281378031 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281395912 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281455040 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281469107 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281488895 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281541109 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281557083 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281704903 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281755924 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281764030 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281776905 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281878948 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281893015 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281934023 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281938076 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.281958103 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.281985044 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.282006025 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.282018900 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282171965 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282223940 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.282237053 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282540083 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282594919 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.282599926 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282612085 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282649040 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.282663107 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282685995 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.282723904 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.304543972 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.349297047 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.362709045 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.363480091 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.363621950 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.363831043 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.363850117 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.364188910 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.364203930 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.364976883 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.365035057 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.365416050 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.365474939 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.367209911 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.367214918 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.368011951 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.368098021 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.368240118 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.368297100 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.369503975 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.369560957 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.370526075 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.370573997 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.371129036 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.371138096 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.371524096 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.371531963 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.371633053 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.371639967 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.410918951 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.417520046 CEST	49713	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.417551041 CEST	443	49713	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.418801069 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.418833971 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.418910027 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.421817064 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.424789906 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.424802065 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.425954103 CEST	49716	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.425966978 CEST	443	49716	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.426242113 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.466847897 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.466880083 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.467575073 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.468056917 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.468074083 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.469826937 CEST	49714	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.469851971 CEST	443	49714	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.490988016 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491014957 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491023064 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491039991 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491069078 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.491085052 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491118908 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.491712093 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491738081 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491746902 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491774082 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491780043 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.491791964 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.491813898 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.493442059 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.493458033 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.493469954 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.493495941 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.493508101 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.493518114 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.493558884 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.523998976 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.524025917 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.524122000 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.524647951 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.524660110 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.534353971 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.534492016 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.577362061 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.577377081 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.577397108 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.577429056 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.577466965 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.577595949 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578478098 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578486919 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578526020 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.578536987 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578550100 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.578861952 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578872919 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578907013 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.578921080 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578933001 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.578937054 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.578955889 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.579711914 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.579720974 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.579756021 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.579766035 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.579771996 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.579781055 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.579799891 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.579804897 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.579826117 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.579829931 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.579834938 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.579847097 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.580353022 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.580398083 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.580404997 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.580447912 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.580487013 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.580894947 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.580940008 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.580946922 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.580952883 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.580980062 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.581763029 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.581774950 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.581815004 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.581830025 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.581835032 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.582104921 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.582113028 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.582145929 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.582153082 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.582185030 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.582644939 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.582653046 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.582698107 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.582703114 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.583611012 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.583673000 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.583678961 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.584467888 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.584526062 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.584531069 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.594764948 CEST	49717	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.594819069 CEST	443	49717	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.632894039 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.666440010 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.666518927 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.666533947 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.667182922 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.667233944 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.667244911 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.668174028 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.668235064 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.668245077 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.669472933 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.669529915 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.669543028 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.670121908 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.670129061 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.670161009 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.670177937 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.670254946 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.670304060 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.671416998 CEST	49718	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.671430111 CEST	443	49718	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.709559917 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.753201962 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.753238916 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.753283024 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.753314018 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.753319979 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.753458977 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.753521919 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.753526926 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.753534079 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.753559113 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.754497051 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.754558086 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.754568100 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.755012989 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.755091906 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.755099058 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.755686998 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.755759001 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.755764961 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.756690025 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.756774902 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.756782055 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.757430077 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.757500887 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.757505894 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.758274078 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.758336067 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.758343935 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.810050011 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.840262890 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840279102 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840315104 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840338945 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.840388060 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.840399027 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840415955 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840424061 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840461969 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.840471029 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840567112 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840615034 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.840620041 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840626955 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.840658903 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.841789961 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.841800928 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.841908932 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.841917038 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.841959000 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.842034101 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.842088938 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.842093945 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.842833996 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.842909098 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.842916012 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.842953920 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.843004942 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.843009949 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.844326019 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.844383001 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.844383955 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.844394922 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.844434977 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.844441891 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.844490051 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.844496965 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.845276117 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.845325947 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.845331907 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.845402956 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.845453978 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.845458984 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.846213102 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.846270084 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.846276999 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.847495079 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.847600937 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.847609997 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.847770929 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.847937107 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.847944975 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.847996950 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.848045111 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.848051071 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.890449047 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.915950060 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.916357994 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.916387081 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.916829109 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.917375088 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.917435884 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.917562962 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.927431107 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.927531958 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.927552938 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.927581072 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.927638054 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.927645922 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.927778006 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.927835941 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.927841902 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.928484917 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.928549051 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.928556919 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.929702997 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.929790974 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.929797888 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.929821014 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.929881096 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.929887056 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.930032015 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.930094004 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.930099964 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.935282946 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.935352087 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.935363054 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.935780048 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.935842991 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.935852051 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936058998 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936117887 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.936124086 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936261892 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936326981 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.936335087 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936372042 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936429977 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.936438084 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936856985 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936908960 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.936914921 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.936980963 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.937036991 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.937043905 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.937565088 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.937642097 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.937649012 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.948522091 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.948904991 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.948924065 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.949291945 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.949762106 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.949762106 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.949779034 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.949841022 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.959431887 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.989546061 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.994321108 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.994613886 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.994637012 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.998234034 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.998308897 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.998950958 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:51.999125957 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:51.999150038 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.005728006 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.017469883 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.017592907 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.017623901 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.017663956 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.017710924 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.017720938 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.017751932 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.017801046 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.017806053 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.017940044 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.017985106 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.017990112 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.018244982 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.018290997 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.018296003 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.018479109 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.018520117 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.018526077 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.018609047 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.018645048 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.019262075 CEST	49715	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.019278049 CEST	443	49715	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.043412924 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.047203064 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.047221899 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.074193954 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.074249983 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:22:52.074305058 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.075402021 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.075437069 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:22:52.096057892 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.096082926 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.096141100 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.096153021 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.096199989 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.096237898 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.099603891 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.113401890 CEST	49719	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.113428116 CEST	443	49719	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.120306969 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.120387077 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.120428085 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.166821003 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.166928053 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.167021036 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.170512915 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.170562029 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.170660019 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.172791958 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.172823906 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.172874928 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.175765991 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.175776005 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.178292990 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.178309917 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.211000919 CEST	49720	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.211021900 CEST	443	49720	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.211939096 CEST	49721	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.211958885 CEST	443	49721	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.307208061 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.307250977 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.307396889 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.308423042 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.308439016 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.310026884 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.310055017 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.310215950 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.310621023 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.310638905 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.654849052 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.656727076 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.656740904 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.657111883 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.658838034 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.658838034 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.658849001 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.658984900 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.679462910 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.681195974 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.681217909 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.681571007 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.684052944 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.684156895 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.684550047 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.708425045 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.716794968 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:22:52.721324921 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.721350908 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:22:52.723228931 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:22:52.723417997 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.727252007 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.727380037 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:22:52.731396914 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.769129038 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.769145012 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:22:52.781333923 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.782593012 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.782630920 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.786216974 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.786295891 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.788990021 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.789195061 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.789350033 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.789376974 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.810209036 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:52.810236931 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:52.810451031 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:52.814594030 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:52.814620018 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:52.816184998 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:22:52.826837063 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.826864958 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.826873064 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.826896906 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.826930046 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.826937914 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.826970100 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.833548069 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.860068083 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.860088110 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.860137939 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.860152006 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.894259930 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.894851923 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.894862890 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.897756100 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.897898912 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.898374081 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.898520947 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.898792028 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.898798943 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.909823895 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.910298109 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.910310984 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.910373926 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.910388947 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.912856102 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.912887096 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.912967920 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.912976980 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.912996054 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.940597057 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.948491096 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.948503017 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.948587894 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.948601007 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.948612928 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.948661089 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.951086044 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.951163054 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.951302052 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.961544991 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.993927956 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.993941069 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.993973970 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.994028091 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.994034052 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.994173050 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.996018887 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.996037960 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.996074915 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.996082067 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.996109962 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.996227026 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.998641014 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.998656034 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.998723984 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.998732090 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:52.998754978 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:52.998769999 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.023049116 CEST	49724	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.023083925 CEST	443	49724	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.025949001 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.026138067 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.026201963 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.031593084 CEST	49725	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.031610966 CEST	443	49725	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.036614895 CEST	49726	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.036623001 CEST	443	49726	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.076980114 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.077004910 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.077100992 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.077112913 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.077332020 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.078207970 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.078224897 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.078299046 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.078305960 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.078330994 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.078375101 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.079652071 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.079713106 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.079720020 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.079752922 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.079788923 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.079788923 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.080960989 CEST	49723	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.080980062 CEST	443	49723	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.128691912 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.128731966 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.128881931 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.129832983 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.129847050 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.442586899 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.442652941 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.448267937 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.448283911 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.448565006 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.503314018 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.510786057 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.555402994 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.617038965 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.659564972 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.671729088 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.671736002 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.672183990 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.685640097 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.685729980 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.688173056 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.702088118 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.702157974 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.702208042 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.735392094 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.775693893 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.775707006 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.775718927 CEST	49728	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.775723934 CEST	443	49728	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.788927078 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.788949966 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.789300919 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.789300919 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.789324045 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.801835060 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.801913977 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.802074909 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.877003908 CEST	49729	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:53.877021074 CEST	443	49729	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:53.886948109 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.886970043 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:53.887025118 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.887341022 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:53.887348890 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.077611923 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.077642918 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.077709913 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.078610897 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.078619957 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.271063089 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.325617075 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.325644970 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.326821089 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.326833010 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.326896906 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.329351902 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.329432964 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.331418037 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.331432104 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.459462881 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.459475994 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.459563971 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.459583998 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.459628105 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.519316912 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.519402027 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.519484997 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.520845890 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.520878077 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.524908066 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.524949074 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.525012016 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.525738001 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.525751114 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.529036999 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.529072046 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.529131889 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.529360056 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.529373884 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.533121109 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.533158064 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.533202887 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.533580065 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.533596992 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.538439989 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.538523912 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:54.542109966 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:54.542119026 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.542375088 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.543359041 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.543373108 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.543421030 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.543422937 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.543428898 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.543462038 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.543529987 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.543529987 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.543550014 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.545192003 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.545203924 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.545239925 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.545274973 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.545295000 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.545562029 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.545805931 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:54.546485901 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.546494961 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.546518087 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.546550989 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.546567917 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.546963930 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.587404966 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.629887104 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.629900932 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.629933119 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.629975080 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.630001068 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.630018950 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.630098104 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.630105972 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.630127907 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.630269051 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.630269051 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.630279064 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.631917953 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.631927967 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.631953955 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.632006884 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.632006884 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.632019997 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.633012056 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.633019924 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.633044004 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.633059978 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.633078098 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.633208990 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.633831978 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.633838892 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.634211063 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.634218931 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.640666962 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.658890009 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.658907890 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.660243034 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.660310030 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.661098003 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.661173105 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.661288977 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.661295891 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.675194025 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.706422091 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.712898970 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.712908030 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.712956905 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.712965012 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.713011980 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.713016987 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.713046074 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.713052988 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.713094950 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.713116884 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.713125944 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.713141918 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.713186026 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.713186026 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.734704018 CEST	49730	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.734725952 CEST	443	49730	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.735930920 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.735965014 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.736027002 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.736871004 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.736886978 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.800045967 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.800118923 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.800200939 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:54.821964979 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.821985960 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.821994066 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.822019100 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.822036028 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.822046995 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.822088003 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.875956059 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:54.875965118 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.875977039 CEST	49731	443	192.168.2.8	184.28.90.27
Oct 8, 2024 00:22:54.875982046 CEST	443	49731	184.28.90.27	192.168.2.8
Oct 8, 2024 00:22:54.908648968 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.908672094 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.908721924 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.908740044 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.908777952 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.909739971 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.909751892 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.909813881 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.909821987 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.910954952 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.911011934 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.911019087 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.913445950 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.913502932 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.913510084 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.996583939 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.996670008 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.996696949 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.996865988 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.996879101 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.996902943 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.996932030 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.996937990 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.996956110 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.997045994 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.997060061 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.997076988 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.997091055 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.997097969 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.997127056 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.997924089 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.997937918 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.997986078 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.997992992 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.998126984 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.998137951 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.998172045 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.998178005 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.998203993 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.998811007 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.998868942 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:54.998876095 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.998883963 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:54.998919010 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.007157087 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.014857054 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.069432974 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.069449902 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.069655895 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.069679022 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.070317984 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.070738077 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.070755005 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.070800066 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.083406925 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.083477020 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.083487988 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.083528042 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.083791971 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.083839893 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.083852053 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.083861113 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.083884001 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.083904982 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.083909988 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.084315062 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.084371090 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.084378958 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.084733009 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.084781885 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.084789038 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.085355997 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.085400105 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.085410118 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.085719109 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.085777044 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.085783958 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.085899115 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.085951090 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.085958958 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.086039066 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.086090088 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.086097956 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.086803913 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.086853981 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.086862087 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.099184990 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.099602938 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.099895000 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.100035906 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.100306988 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.101340055 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.101449966 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.101468086 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.147407055 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.172974110 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.173042059 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.173060894 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.173074007 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.173110962 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.173119068 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.173141956 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.173158884 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.173258066 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.173316956 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.173322916 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.173633099 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.173679113 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.173691034 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.174009085 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.174076080 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.174083948 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.174736977 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.174797058 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.174803019 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.174999952 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.175050974 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.175061941 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.175251961 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.175312042 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.175319910 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.175359011 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.175448895 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.175457001 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.175699949 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.175750017 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.182128906 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.183887959 CEST	49732	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.183895111 CEST	443	49732	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.184443951 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.184489012 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.184560061 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.185286999 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.185305119 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.192017078 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.192295074 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.192320108 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.192725897 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.193567991 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.193691015 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.193876982 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.206684113 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.228885889 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.228946924 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.228955030 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.228977919 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.228980064 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.229015112 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.229033947 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.229048014 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.229048967 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.229069948 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.229089975 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.229106903 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.229135036 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.229147911 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.239406109 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.270648956 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.272321939 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.272340059 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.274180889 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.274247885 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.275120974 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.275262117 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.275568008 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.275576115 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306272984 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306292057 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306324959 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306340933 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306351900 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.306369066 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306379080 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306390047 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.306406975 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.306415081 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306454897 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306457043 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.306479931 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.306483984 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.306530952 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.306588888 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.307586908 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.307610035 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.307631969 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.307676077 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.307702065 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.307737112 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.308232069 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.308242083 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.308262110 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.308294058 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.308321953 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.309674025 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.309684038 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.309705973 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.309720993 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.309758902 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.309767008 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.310148954 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.310169935 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.310209036 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.310225010 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.310256004 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.310847044 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.310924053 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.310940027 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.311033964 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.311085939 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.313193083 CEST	49738	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.313224077 CEST	443	49738	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.314286947 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.314320087 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.314479113 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.314948082 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.314961910 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.330518961 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.330549955 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.330600977 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.330631018 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.387376070 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.388006926 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.388021946 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.388391972 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.389484882 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.389678001 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.390010118 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390033960 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390065908 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390069962 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.390080929 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390105963 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.390486956 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390506983 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390532970 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.390533924 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390562057 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.390563011 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.390583992 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.390734911 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.390815973 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391093969 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391113043 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391139984 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391148090 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.391158104 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391180038 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.391239882 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.391686916 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391706944 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391740084 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.391748905 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.391803980 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.392700911 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.392754078 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.392786026 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.392796040 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.392807007 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.393464088 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.393536091 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.393546104 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.395950079 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.396030903 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.396042109 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.409465075 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.409485102 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.409542084 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.409554005 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.409687996 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.409924984 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.410428047 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.410435915 CEST	443	49740	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.410471916 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.410490036 CEST	49740	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.410871029 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.410885096 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.411218882 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.411464930 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.411470890 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.420370102 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.420403957 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.420447111 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.420490026 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.420501947 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.421300888 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.421363115 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.421371937 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.423187971 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.423244953 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.423259974 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.435400963 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.436059952 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.436238050 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.436264038 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.471965075 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472031116 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.472048044 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472062111 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472069979 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472090960 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472116947 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.472124100 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472142935 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.472321987 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472328901 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472352982 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472373009 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.472379923 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472402096 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.472856045 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472863913 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472928047 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.472935915 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.472991943 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473018885 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473037958 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.473046064 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473067045 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.473659992 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473712921 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.473720074 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473751068 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473781109 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473794937 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.473803997 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.473826885 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.477619886 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.477685928 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.477695942 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.477816105 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.477885008 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.477891922 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.508348942 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.508413076 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.508438110 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.508487940 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.508527040 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.508785963 CEST	49739	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.508800030 CEST	443	49739	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.509249926 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.509265900 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.509454966 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.509910107 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.509926081 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.518785000 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.518863916 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.519021034 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.519736052 CEST	49742	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.519747972 CEST	443	49742	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.520155907 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.520195961 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.520291090 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.520741940 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.520756006 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555283070 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555372000 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.555396080 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555644989 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555707932 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.555715084 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555725098 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555758953 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555761099 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.555794954 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555805922 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.555819988 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.555835009 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.556050062 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556118011 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.556124926 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556391954 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556463957 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.556469917 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556618929 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556679964 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.556687117 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556720972 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556772947 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.556778908 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556940079 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.556993008 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.556998968 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.557101965 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.557151079 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.557157040 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.557837009 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.557898045 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.557909012 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.557941914 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.558008909 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.558016062 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.558147907 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.558231115 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.558238029 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.558909893 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.558973074 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.558981895 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.559150934 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.559211016 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.559218884 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.559273958 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.559328079 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.559334040 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.612967014 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.612982035 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638390064 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638477087 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.638490915 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638525963 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638582945 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.638591051 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638765097 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638818026 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.638827085 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638871908 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.638930082 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.638937950 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639111042 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639168024 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.639174938 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639205933 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639266968 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.639272928 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639383078 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639475107 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.639482021 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639664888 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639734983 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.639741898 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639895916 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.639947891 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.639954090 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640110970 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640182972 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.640189886 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640232086 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640289068 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.640295982 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640444994 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640503883 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.640512943 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640549898 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640599012 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.640604019 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640739918 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.640793085 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.640799046 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.683203936 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.683703899 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.683794975 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.683809042 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.684004068 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.684062004 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.684068918 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.684158087 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.684937954 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.685237885 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.685264111 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.685427904 CEST	49741	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.685444117 CEST	443	49741	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.685682058 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.686146021 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.686207056 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.686336040 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.727406979 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.813066006 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.815418005 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.815435886 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.815778017 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.819248915 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.819248915 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.819358110 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.858936071 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.859019995 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.859147072 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.860411882 CEST	49743	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.860429049 CEST	443	49743	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.890887976 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.899676085 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.899688959 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.900398016 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.900940895 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.901036978 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.901412010 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.943401098 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.972414970 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.989276886 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.989305019 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.989312887 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.989365101 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:55.989377975 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.989388943 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:55.989420891 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.004791021 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.025930882 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.040112019 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.040131092 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.040563107 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.040590048 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.040652990 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.041599035 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.041662931 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.041821003 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.041842937 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.042013884 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.042987108 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.043037891 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.043118954 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.066564083 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.066648960 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.066737890 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.070095062 CEST	49745	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.070116043 CEST	443	49745	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.075593948 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.075613022 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.075675011 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.075680971 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.075782061 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.075782061 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.075789928 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.076374054 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.077435017 CEST	49744	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.077449083 CEST	443	49744	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.083394051 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.083396912 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.174340963 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.174443007 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.174595118 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.175671101 CEST	49746	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.175695896 CEST	443	49746	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.196110010 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.196187973 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:22:56.196319103 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.196319103 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.197781086 CEST	49747	443	192.168.2.8	67.231.156.254
Oct 8, 2024 00:22:56.197792053 CEST	443	49747	67.231.156.254	192.168.2.8
Oct 8, 2024 00:23:02.160267115 CEST	49703	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.160777092 CEST	49703	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.161863089 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.161916018 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.162020922 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.163300037 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.163322926 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.165183067 CEST	443	49703	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.165596962 CEST	443	49703	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.612391949 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:02.612457991 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:02.612490892 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:23:02.752830982 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.752923965 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.794089079 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.794116974 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.794529915 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.794584036 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.795156002 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.795181990 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:02.795319080 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:02.835407019 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:03.102029085 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:03.102086067 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:03.102101088 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:03.102113962 CEST	443	49754	23.206.229.226	192.168.2.8
Oct 8, 2024 00:23:03.102147102 CEST	49754	443	192.168.2.8	23.206.229.226
Oct 8, 2024 00:23:03.866560936 CEST	49722	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:23:03.866592884 CEST	443	49722	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:05.866019964 CEST	49756	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:23:05.870861053 CEST	53	49756	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:05.870948076 CEST	49756	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:23:05.871062040 CEST	49756	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:23:05.871072054 CEST	49756	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:23:05.875865936 CEST	53	49756	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:05.875878096 CEST	53	49756	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:06.295005083 CEST	53	49756	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:06.295531988 CEST	49756	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:23:06.300878048 CEST	53	49756	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:06.300924063 CEST	49756	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:23:52.107139111 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:23:52.107197046 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:52.107258081 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:23:52.107546091 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:23:52.107558966 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:52.713895082 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:52.714201927 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:23:52.714232922 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:52.714567900 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:52.714988947 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:23:52.715049028 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:23:52.769391060 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:24:02.230662107 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:02.230694056 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.230799913 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:02.231358051 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:02.231373072 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.621609926 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:24:02.621709108 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:24:02.621774912 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:24:02.857346058 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.857424974 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:02.866255045 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:02.866280079 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.866568089 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.890345097 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:02.935403109 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.988734007 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.988758087 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.988832951 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:02.988854885 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:02.988912106 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.070817947 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.070844889 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.070892096 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.070904970 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.070951939 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.072853088 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.072871923 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.072923899 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.072947979 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.072988033 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.155003071 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.155025005 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.155075073 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.155087948 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.155132055 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.170388937 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.170413017 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.170484066 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.170504093 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.170547962 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.170929909 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.170948982 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.170988083 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.171003103 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.171019077 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.171041965 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.171936035 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.171957970 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.171988010 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.171994925 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.172027111 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.172046900 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.239151001 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.239176035 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.239242077 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.239272118 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.239342928 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.240053892 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.240072966 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.240124941 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.240133047 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.240165949 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.240982056 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.240998983 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.241036892 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.241044998 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.241070986 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.241091013 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.242211103 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.242227077 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.242285967 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.242294073 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.242335081 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.243707895 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.243725061 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.243760109 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.243776083 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.243802071 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.243824959 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.244537115 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.244553089 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.244607925 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.244625092 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.244664907 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.245500088 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.245554924 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.245568991 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.245578051 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.245640993 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.245666981 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.245688915 CEST	49762	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.245692015 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.245697975 CEST	443	49762	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.295485020 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.295521975 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.295584917 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.296888113 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.296927929 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.296977997 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.297585964 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.297620058 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.297631025 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.297647953 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.299832106 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.299868107 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.299917936 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.300082922 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.300093889 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.301635981 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.301666975 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.301726103 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.302666903 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.302699089 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.302741051 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.302803993 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.302817106 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.302943945 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:03.302958012 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:03.864603996 CEST	49760	443	192.168.2.8	172.217.18.4
Oct 8, 2024 00:24:03.864639044 CEST	443	49760	172.217.18.4	192.168.2.8
Oct 8, 2024 00:24:04.291987896 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.293154001 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.293286085 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.293814898 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.294820070 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.325352907 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.325376987 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.325915098 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.325922012 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.326411009 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.326435089 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.326829910 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.326836109 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.326931953 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.326947927 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.327145100 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.327162027 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.327373981 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.327379942 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.327545881 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.327550888 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.327622890 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.327630997 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.328027964 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.328032970 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.418761969 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.418792963 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.418838024 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.418865919 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.419102907 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.419121981 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.419130087 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.419289112 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.419325113 CEST	443	49767	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.419359922 CEST	49767	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.421279907 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.421340942 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.421405077 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.421709061 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.421727896 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.421739101 CEST	49764	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.421740055 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.421745062 CEST	443	49764	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.421802044 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.421871901 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422008038 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422027111 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422040939 CEST	49766	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422049046 CEST	443	49766	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422293901 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422322035 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422384977 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422394037 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422436953 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422519922 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422573090 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422610044 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422781944 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422791958 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.422801018 CEST	49765	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.422805071 CEST	443	49765	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.427202940 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.427229881 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.427299023 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.427313089 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.427350998 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.427367926 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.427437067 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.427483082 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.429075003 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.429088116 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.429097891 CEST	49763	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.429104090 CEST	443	49763	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.432820082 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.432878017 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.433010101 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.434125900 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.434149981 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.434262991 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.434309006 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.434410095 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.434529066 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.434534073 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.434781075 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.434788942 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.434865952 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.435405970 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.435415030 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.435928106 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.435970068 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.436206102 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.436206102 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.436250925 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.436398029 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.436428070 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:04.436492920 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.436583996 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:04.436604977 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.047574043 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.048125029 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.048139095 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.048628092 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.048640013 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.058353901 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.058857918 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.058885098 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.059741020 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.059747934 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.073869944 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.074510098 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.074531078 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.074894905 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.074904919 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.077321053 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.077774048 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.077786922 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.078389883 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.078394890 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.087429047 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.087971926 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.087982893 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.088604927 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.088610888 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.146589041 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.146646976 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.147027969 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.147027969 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.147347927 CEST	49771	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.147361994 CEST	443	49771	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.151072979 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.151106119 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.151156902 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.151678085 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.151699066 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.177448034 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.177534103 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.177602053 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.177778006 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.177778006 CEST	49769	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.177797079 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.177804947 CEST	443	49769	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.180866003 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.180902004 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181126118 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181126118 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181158066 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181325912 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181380033 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181396008 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181468964 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181473970 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181521893 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181596994 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181596994 CEST	49770	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181606054 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181618929 CEST	443	49770	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181709051 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181732893 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.181936026 CEST	49768	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.181941986 CEST	443	49768	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.184612989 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.184679031 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.184741974 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.184972048 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.184998989 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.185386896 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.185429096 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.185496092 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.185606003 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.185625076 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.191467047 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.191546917 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.191601038 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.191790104 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.191828966 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.191863060 CEST	49772	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.191880941 CEST	443	49772	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.194399118 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.194453001 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.194541931 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.194658995 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.194670916 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.793482065 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.794101000 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.794126034 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.794616938 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.794627905 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.805413961 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.805928946 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.805960894 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.806461096 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.806468010 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.813415051 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.814229965 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.814263105 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.814618111 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.814625025 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.825323105 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.825792074 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.825824022 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.826212883 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.826221943 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.890486002 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.890559912 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.890649080 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.890808105 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.890830994 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.890845060 CEST	49775	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.890851021 CEST	443	49775	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.893846989 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.893902063 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.893987894 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.894135952 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.894148111 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.910578012 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.910732031 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.910927057 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.911128044 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.911128044 CEST	49773	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.911158085 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.911168098 CEST	443	49773	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.914632082 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.914689064 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.914880991 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.915116072 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.915128946 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.920736074 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.920809984 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.920880079 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.921092987 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.921109915 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.921123028 CEST	49776	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.921128988 CEST	443	49776	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.923827887 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.923880100 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.924051046 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.925090075 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.925106049 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.943377972 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.943455935 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.943531990 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.943731070 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.943749905 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.943763971 CEST	49777	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.943770885 CEST	443	49777	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.946244001 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.946294069 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:05.946542978 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.946742058 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:05.946758986 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.534632921 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.535085917 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.535156965 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.535914898 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.535929918 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.536317110 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.536612034 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.536648035 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.537060976 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.537069082 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.552416086 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.553394079 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.553420067 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.553874969 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.553880930 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.564493895 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.565021038 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.565042019 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.565412045 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.565418005 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.634305000 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.634385109 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.634499073 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.634658098 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.634679079 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.634702921 CEST	49780	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.634711027 CEST	443	49780	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.637624025 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.637660980 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.637864113 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.638051987 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.638060093 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.639708996 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.639772892 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.639838934 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.639930964 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.639950037 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.639962912 CEST	49778	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.639967918 CEST	443	49778	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.642261028 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.642290115 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.642366886 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.642513990 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.642529964 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.655421972 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.655488968 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.655666113 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.655695915 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.655714035 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.655725002 CEST	49779	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.655730963 CEST	443	49779	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.658503056 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.658544064 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.658770084 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.658885956 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.658898115 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.664928913 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.665039062 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.665091038 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.665182114 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.665194988 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.665200949 CEST	49781	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.665206909 CEST	443	49781	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.667917013 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.667943001 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.668013096 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.668174028 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.668188095 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.913244009 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.914033890 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.914052010 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:06.914577007 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:06.914592028 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.013058901 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.013129950 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.013219118 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.013408899 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.013427019 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.013492107 CEST	49774	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.013499022 CEST	443	49774	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.016329050 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.016362906 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.016498089 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.016673088 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.016684055 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.258610010 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.259233952 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.259247065 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.259831905 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.259838104 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.264480114 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.265045881 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.265091896 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.265484095 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.265496016 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.270296097 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.271208048 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.271223068 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.271898985 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.271904945 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.292404890 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.292898893 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.292949915 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.293365955 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.293378115 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.354950905 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.355021954 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.355139971 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.355348110 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.355365992 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.355377913 CEST	49782	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.355391979 CEST	443	49782	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.358598948 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.358639002 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.358720064 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.358895063 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.358907938 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.359086037 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.359148026 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.359306097 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.359379053 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.359379053 CEST	49783	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.359431982 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.359462976 CEST	443	49783	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.362409115 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.362452030 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.362664938 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.362664938 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.362696886 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.372289896 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.372364044 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.372529984 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.372577906 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.372577906 CEST	49784	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.372596025 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.372605085 CEST	443	49784	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.375330925 CEST	49789	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.375368118 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.375474930 CEST	49789	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.375716925 CEST	49789	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.375741005 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.414738894 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.414828062 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.414876938 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.415129900 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.415152073 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.415158987 CEST	49785	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.415163994 CEST	443	49785	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.418579102 CEST	49790	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.418620110 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.418776989 CEST	49790	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.418982983 CEST	49790	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.419003010 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.630152941 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.630703926 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.630755901 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.631253004 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.631268978 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.725611925 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.725711107 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.725796938 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.725984097 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.726037025 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.726068974 CEST	49786	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.726085901 CEST	443	49786	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.729583979 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.729629040 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.729932070 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.729932070 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.729976892 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.966809988 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.967365026 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.967376947 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.968133926 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.968141079 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.971297026 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.972032070 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.972055912 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.972665071 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.972671032 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.989787102 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.990307093 CEST	49789	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.990324974 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:07.990966082 CEST	49789	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:07.990971088 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.033680916 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.034234047 CEST	49790	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.034246922 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.034929991 CEST	49790	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.034934998 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.061446905 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.061525106 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.061580896 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.061907053 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.061928034 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.062025070 CEST	49787	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.062035084 CEST	443	49787	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.066052914 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.066103935 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.066195011 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.066441059 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.066456079 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.067282915 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.067368984 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.067797899 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.067797899 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.068253040 CEST	49788	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.068268061 CEST	443	49788	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.071427107 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.071495056 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.071585894 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.071810007 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.071825027 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.086071968 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.086143017 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.086205006 CEST	49789	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.086491108 CEST	49789	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.086504936 CEST	443	49789	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.090339899 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.090377092 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.090455055 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.090693951 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.090706110 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.128906965 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.128978968 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.129034042 CEST	49790	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.129295111 CEST	49790	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.129317045 CEST	443	49790	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.132543087 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.132587910 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.132735968 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.132877111 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.132886887 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.348498106 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.349237919 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.349246979 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.350316048 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.350321054 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.443584919 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.443660975 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.443873882 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.444503069 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.444503069 CEST	49791	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.444521904 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.444530010 CEST	443	49791	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.447705984 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.447751045 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.447825909 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.447947025 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.447962046 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.685759068 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.686614990 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.686641932 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.687202930 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.687208891 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.695672035 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.696083069 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.696115017 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.696511030 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.696520090 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.766150951 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.766875029 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.766886950 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.767445087 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.767448902 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.781213999 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.781393051 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.781457901 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.781538010 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.781553984 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.781558990 CEST	49792	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.781563997 CEST	443	49792	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.784084082 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.784123898 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.784733057 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.784868956 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.784882069 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.790883064 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.790935993 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.790977955 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.791167974 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.791188002 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.791204929 CEST	49794	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.791212082 CEST	443	49794	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.793745995 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.793770075 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.793847084 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.793992043 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.794006109 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.865850925 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.865922928 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.866003036 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.866178036 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.866193056 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.866199017 CEST	49795	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.866204023 CEST	443	49795	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.869062901 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.869107962 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:08.869205952 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.869376898 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:08.869390011 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.058448076 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.058881998 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.058907032 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.059318066 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.059324980 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.154408932 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.154483080 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.154522896 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.154741049 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.154764891 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.154779911 CEST	49796	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.154786110 CEST	443	49796	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.157748938 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.157794952 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.157881975 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.158133030 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.158147097 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.407377005 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.409111977 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.409130096 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.409599066 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.409603119 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.425518036 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.425920010 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.425930977 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.426414967 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.426419020 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.491060972 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.491739035 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.491772890 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.492212057 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.492219925 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.506623983 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.506695032 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.506769896 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.506911993 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.506930113 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.506942987 CEST	49797	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.506948948 CEST	443	49797	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.510231018 CEST	49801	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.510265112 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.510354042 CEST	49801	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.510598898 CEST	49801	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.510618925 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.526171923 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.526221991 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.526277065 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.526756048 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.526767015 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.526777983 CEST	49798	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.526782036 CEST	443	49798	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.530038118 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.530061007 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.530172110 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.530431986 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.530457973 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.590095043 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.590178013 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.590221882 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.590418100 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.590436935 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.590444088 CEST	49799	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.590451956 CEST	443	49799	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.593723059 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.593759060 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.593883038 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.594019890 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.594034910 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.806560993 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.807198048 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.807218075 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.807584047 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.807595968 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.908056974 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.908149958 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.908853054 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.908853054 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.908853054 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.911145926 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.911196947 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:09.911375999 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.911546946 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:09.911566973 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.135546923 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.136082888 CEST	49801	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.136101007 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.139336109 CEST	49801	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.139348030 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.147703886 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.148195982 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.148205042 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.149327993 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.149341106 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.218301058 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.219069958 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.219079971 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.219983101 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.220000982 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.223115921 CEST	49800	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.223131895 CEST	443	49800	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.231645107 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.231718063 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.231904984 CEST	49801	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.231940985 CEST	49801	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.231950998 CEST	443	49801	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.235157013 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.235178947 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.235250950 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.235418081 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.235428095 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.258708954 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.258774042 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.259074926 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.259074926 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.259074926 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.261885881 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.261914015 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.262089968 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.262151957 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.262156963 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.313309908 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.313469887 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.313591957 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.313591957 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.313641071 CEST	49803	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.313657999 CEST	443	49803	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.316442966 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.316483974 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.316549063 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.316765070 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.316781998 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.517390013 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.517931938 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.517955065 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.518414974 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.518424988 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.547956944 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.548445940 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.548456907 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.548935890 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.548942089 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.565567970 CEST	49802	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.565596104 CEST	443	49802	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.615289927 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.615359068 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.615417004 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.615822077 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.615847111 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.615863085 CEST	49793	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.615869999 CEST	443	49793	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.618887901 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.618930101 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.618993998 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.619141102 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.619158983 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.649857998 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.649930000 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.649991035 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.650166988 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.650192976 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.650211096 CEST	49804	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.650218010 CEST	443	49804	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.652968884 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.653013945 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.653228998 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.653409958 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.653424025 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.868730068 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.869421959 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.869517088 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.869535923 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.869772911 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.869782925 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.870292902 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.870292902 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.870304108 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.870325089 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.938117027 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.938668966 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.938709021 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.939158916 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.939166069 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.966355085 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.966423988 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.966872931 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.966872931 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.966872931 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.969340086 CEST	49810	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.969386101 CEST	443	49810	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.969463110 CEST	49810	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.969634056 CEST	49810	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.969645977 CEST	443	49810	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.972645044 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.972711086 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.972943068 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.972943068 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.972943068 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.975079060 CEST	49811	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.975116968 CEST	443	49811	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:10.975181103 CEST	49811	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.975311995 CEST	49811	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:10.975322008 CEST	443	49811	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.038674116 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.038764000 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.038846970 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.039297104 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.039330959 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.039344072 CEST	49807	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.039350033 CEST	443	49807	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.042418957 CEST	49812	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.042467117 CEST	443	49812	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.042543888 CEST	49812	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.042776108 CEST	49812	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.042790890 CEST	443	49812	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.191112041 CEST	49805	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.191133022 CEST	443	49805	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.260288954 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.260804892 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.260833025 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.261307001 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.261312008 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.269254923 CEST	49806	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.269277096 CEST	443	49806	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.303889036 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.304442883 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.304467916 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.305056095 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.305063009 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.367010117 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.367069006 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.367353916 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.367381096 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.367381096 CEST	49808	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.367400885 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.367408991 CEST	443	49808	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.370104074 CEST	49813	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.370134115 CEST	443	49813	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.370362997 CEST	49813	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.370362997 CEST	49813	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.370393038 CEST	443	49813	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.411137104 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.411215067 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.411268950 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.411539078 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.411555052 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.411581039 CEST	49809	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.411587000 CEST	443	49809	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.414275885 CEST	49814	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.414288998 CEST	443	49814	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.414360046 CEST	49814	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.414715052 CEST	49814	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.414721966 CEST	443	49814	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.600810051 CEST	443	49810	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.601381063 CEST	49810	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.601409912 CEST	443	49810	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.602067947 CEST	49810	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.602080107 CEST	443	49810	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.629700899 CEST	443	49811	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.630675077 CEST	49811	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.630675077 CEST	49811	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.630685091 CEST	443	49811	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.630697966 CEST	443	49811	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.690228939 CEST	443	49812	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.691276073 CEST	49812	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.691276073 CEST	49812	443	192.168.2.8	13.107.246.60
Oct 8, 2024 00:24:11.691319942 CEST	443	49812	13.107.246.60	192.168.2.8
Oct 8, 2024 00:24:11.691335917 CEST	443	49812	13.107.246.60	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 00:22:47.632771015 CEST	53	49419	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:47.644227028 CEST	53	54250	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:48.854254961 CEST	53	56650	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:48.916937113 CEST	58339	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:22:48.917140007 CEST	59933	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:22:49.166131973 CEST	53	58339	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:52.061217070 CEST	63108	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:22:52.061404943 CEST	52160	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:22:52.070882082 CEST	53	63108	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:52.071460009 CEST	53	52160	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:52.320638895 CEST	53	51347	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:52.876640081 CEST	53	59933	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:53.326142073 CEST	63146	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:22:53.326874971 CEST	54468	53	192.168.2.8	1.1.1.1
Oct 8, 2024 00:22:53.593267918 CEST	53	63146	1.1.1.1	192.168.2.8
Oct 8, 2024 00:22:57.288727045 CEST	53	54468	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:05.865531921 CEST	53	63340	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:05.865648985 CEST	53	52737	1.1.1.1	192.168.2.8
Oct 8, 2024 00:23:24.575841904 CEST	138	138	192.168.2.8	192.168.2.255
Oct 8, 2024 00:23:47.235745907 CEST	53	55733	1.1.1.1	192.168.2.8

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 8, 2024 00:22:52.876745939 CEST	192.168.2.8	1.1.1.1	c1ec	(Port unreachable)	Destination Unreachable
Oct 8, 2024 00:22:57.288794041 CEST	192.168.2.8	1.1.1.1	c1ec	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 00:22:48.916937113 CEST	192.168.2.8	1.1.1.1	0xa8a3	Standard query (0)	securemail.lpl.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:22:48.917140007 CEST	192.168.2.8	1.1.1.1	0xf273	Standard query (0)	securemail.lpl.com	65	IN (0x0001)	false
Oct 8, 2024 00:22:52.061217070 CEST	192.168.2.8	1.1.1.1	0xd33	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:22:52.061404943 CEST	192.168.2.8	1.1.1.1	0x6095	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 00:22:53.326142073 CEST	192.168.2.8	1.1.1.1	0x56d0	Standard query (0)	securemail.lpl.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:22:53.326874971 CEST	192.168.2.8	1.1.1.1	0x24b0	Standard query (0)	securemail.lpl.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 00:22:49.166131973 CEST	1.1.1.1	192.168.2.8	0xa8a3	No error (0)	securemail.lpl.com	pe-0017a501.gslb.pphosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:22:49.166131973 CEST	1.1.1.1	192.168.2.8	0xa8a3	No error (0)	pe-0017a501.gslb.pphosted.com		67.231.156.254	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:22:52.070882082 CEST	1.1.1.1	192.168.2.8	0xd33	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:22:52.071460009 CEST	1.1.1.1	192.168.2.8	0x6095	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 00:22:52.876640081 CEST	1.1.1.1	192.168.2.8	0xf273	Server failure (2)	securemail.lpl.com	none	none	65	IN (0x0001)	false
Oct 8, 2024 00:22:53.593267918 CEST	1.1.1.1	192.168.2.8	0x56d0	No error (0)	securemail.lpl.com	pe-0017a501.gslb.pphosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:22:53.593267918 CEST	1.1.1.1	192.168.2.8	0x56d0	No error (0)	pe-0017a501.gslb.pphosted.com		67.231.156.254	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:22:57.288727045 CEST	1.1.1.1	192.168.2.8	0x24b0	Server failure (2)	securemail.lpl.com	none	none	65	IN (0x0001)	false
Oct 8, 2024 00:23:00.135356903 CEST	1.1.1.1	192.168.2.8	0x3814	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:23:00.135356903 CEST	1.1.1.1	192.168.2.8	0x3814	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:23:00.681437016 CEST	1.1.1.1	192.168.2.8	0xbc93	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:23:00.681437016 CEST	1.1.1.1	192.168.2.8	0xbc93	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:23:14.872591019 CEST	1.1.1.1	192.168.2.8	0x3668	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:23:14.872591019 CEST	1.1.1.1	192.168.2.8	0x3668	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:24:00.201181889 CEST	1.1.1.1	192.168.2.8	0x87d0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:24:00.201181889 CEST	1.1.1.1	192.168.2.8	0x87d0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 00:24:02.229816914 CEST	1.1.1.1	192.168.2.8	0x33d7	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 00:24:02.229816914 CEST	1.1.1.1	192.168.2.8	0x33d7	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

securemail.lpl.com

https:

www.bing.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49709	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:49 UTC	736	OUT	GET /formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 22:22:50 UTC	957	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:49 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Set-Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; Path=/securereader; Secure; HttpOnly Set-Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; Path=/formpostdir; Secure; HttpOnly Set-Cookie: BID=30b79a3a; Max-Age=28800; Expires=Tue, 08 Oct 2024 06:22:50 GMT; Path=/; Secure; HttpOnly Set-Cookie: BID=30b79a3a; Max-Age=28800; Expires=Tue, 08 Oct 2024 06:22:50 GMT; Path=/; Secure; HttpOnly Pragma: no-cache Cache-Control: no-store, max-age=0 Expires: Thu, 30 Sep 2021 23:59:59 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Content-Length: 29735 Connection: close Content-Type: text/html;charset=UTF-8
2024-10-07 22:22:50 UTC	7235	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 20 69 64 3d 22 6a 5f 69 64 74 33 22 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 65 63 75 72 65 72 65 61 64 65 72 2f 6a 61 76 61 78 2e 66 61 63 65 73 2e 72 65 73 6f 75 72 63 65 2f 74 68 65 6d 65 2e 63 73 73 2e 6a 73 66 3f 6c 6e 3d 70 72 69 6d 65 66 61 63 65 73 2d 61 72 69 73 74 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 65 63 75 72 65 72 65 61 64 65 72 2f 6a 61 76 61 78 2e 66 61 63 65 73 2e 72 65 73 6f 75 72 63 65 2f 63 6f 6d 70 6f 6e Data Ascii: <!DOCTYPE html><html lang="en"><head id="j_idt3"><link type="text/css" rel="stylesheet" href="/securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo" /><link type="text/css" rel="stylesheet" href="/securereader/javax.faces.resource/compon
2024-10-07 22:22:50 UTC	9141	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 66 70 74 45 6e 64 53 65 73 73 69 6f 6e 42 74 6e 27 29 2e 66 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 20 20 20 20 7d 0a 7d 0a 20 20 20 20 20 20 20 20 2f 2f 5d 5d 3e 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 53 74 79 6c 69 6e 67 20 66 6f 72 20 61 20 6d 6f 64 61 6c 20 74 6f 20 61 70 70 65 61 72 20 Data Ascii: document.getElementById('pfptEndSessionBtn').focus(); event.preventDefault(); }} //... </script><style type="text/css">/******************************************************************************Styling for a modal to appear
2024-10-07 22:22:50 UTC	13359	IN	Data Raw: 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 34 65 6d 20 38 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 43 41 30 44 46 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 38 65 6d 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 20 6e 6f 6e 65 3b 0a Data Ascii: background-image: none; padding: 0.4em 8px; color: #FFFFFF; background-color: #3CA0DF; font-weight: 600; font-size: 0.88em; border-radius: 5px; vertical-align: middle; text-decoration:none; -webkit-user-drag: none;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49710	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:50 UTC	745	OUT	GET /securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:50 UTC	617	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:50 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"24683-1707857112000" Expires: Wed, 06 Nov 2024 22:22:50 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/css
2024-10-07 22:22:50 UTC	7575	IN	Data Raw: 33 66 66 38 0d 0a 61 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 69 6e 70 75 74 2c 2e 75 69 2d 77 69 64 67 65 74 20 73 65 6c 65 63 74 2c 2e 75 69 2d 77 69 64 67 65 74 20 74 65 78 74 61 72 65 61 2c 2e 75 69 2d 77 69 64 67 65 74 20 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 62 6f 72 64 65 72 3a 31 70 78 Data Ascii: 3ff8a{outline:0}.ui-widget{font-family:Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widget select,.ui-widget textarea,.ui-widget button{font-family:Arial,sans-serif;font-size:1em}.ui-widget-content{border:1px
2024-10-07 22:22:50 UTC	8807	IN	Data Raw: 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 32 2d 6e 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 32 38 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 32 2d 65 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 34 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 32 70 Data Ascii: ui-icon-triangle-2-n-s{background-position:-128px -16px}.ui-icon-triangle-2-e-w{background-position:-144px -16px}.ui-icon-arrow-1-n{background-position:0 -32px}.ui-icon-arrow-1-ne{background-position:-16px -32px}.ui-icon-arrow-1-e{background-position:-32p
2024-10-07 22:22:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:50 UTC	8192	IN	Data Raw: 32 32 32 33 0d 0a 2d 74 6f 70 6c 65 66 74 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 74 6f 70 72 69 67 68 74 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6f 74 74 6f 6d 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 6c 65 66 74 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 Data Ascii: 2223-topleft:3px;-webkit-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;border-top-right-radius:3px}.ui-corner-bottom{-moz-border-radius-bottomleft:3px;-webkit-border-bottom-left
2024-10-07 22:22:50 UTC	553	IN	Data Raw: 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 75 69 2d 62 75 74 74 6f 6e 2e 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 64 72 6f 70 64 6f 77 6e 2c Data Ascii: t-radius:3px;border-bottom-right-radius:3px}.ui-inputgroup .ui-button:first-child{border-top-left-radius:3px;border-bottom-left-radius:3px}.ui-inputgroup .ui-button:last-child,.ui-inputgroup .ui-autocomplete:last-child .ui-button.ui-autocomplete-dropdown,
2024-10-07 22:22:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49713	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:50 UTC	752	OUT	GET /securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:50 UTC	617	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:50 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"93422-1707857112000" Expires: Wed, 06 Nov 2024 22:22:50 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/css
2024-10-07 22:22:50 UTC	7575	IN	Data Raw: 33 66 66 38 0d 0a 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 20 69 6e 70 75 74 2c 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 20 73 65 6c 65 63 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 2e 75 69 2d 73 68 61 64 6f 77 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 70 78 20 72 Data Ascii: 3ff8.ui-helper-hidden-accessible input,.ui-helper-hidden-accessible select{-webkit-transform:scale(0);-moz-transform:scale(0);-ms-transform:scale(0);transform:scale(0)}.ui-shadow{-moz-box-shadow:0 5px 10px rgba(0,0,0,0.8);-webkit-box-shadow:0 5px 10px r
2024-10-07 22:22:51 UTC	8807	IN	Data Raw: 6e 68 65 72 69 74 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 68 65 69 67 68 74 3a 2e 38 65 6d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 74 6f 70 3a 2d 2e 33 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 65 6d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 7b 74 6f 70 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 2d 6d 69 6e 7b 6c 65 66 74 3a 30 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 2d Data Ascii: nherit}.ui-slider-horizontal{height:.8em}.ui-slider-horizontal .ui-slider-handle{top:-.3em;margin-left:-.6em}.ui-slider-horizontal .ui-slider-range{top:0;height:100%}.ui-slider-horizontal .ui-slider-range-min{left:0}.ui-slider-horizontal .ui-slider-range-
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 30 65 6d 29 7b 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 34 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 35 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 30 65 6d 29 7b 2e 75 69 2d Data Ascii: 3ff8@media screen and (min-width:50em){.ui-columntoggler .ui-columntoggler-item.ui-column-p-4{display:block}}@media screen and (min-width:60em){.ui-columntoggler .ui-columntoggler-item.ui-column-p-5{display:block}}@media screen and (min-width:70em){.ui-
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 72 65 66 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 75 69 2d 64 61 74 61 74 61 62 6c 65 2d 72 65 66 6c 6f 77 20 2e 75 69 2d 72 65 66 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 64 61 74 61 74 61 62 6c 65 2d 72 65 66 6c 6f 77 20 74 72 2e 75 69 2d 64 61 74 61 74 61 62 6c 65 2d 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 3e 74 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 7d 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 7b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: reflow-dropdown{display:inline-block}.ui-datatable-reflow .ui-reflow-dropdown{margin-left:5px;border-top-left-radius:3px;border-bottom-left-radius:3px}.ui-datatable-reflow tr.ui-datatable-empty-message>td{display:block;border:0 none}}.ui-dialog{position:
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 65 6e 75 2d 66 69 6c 74 65 72 7b 77 69 64 74 68 3a 38 35 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 66 69 6c 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 2e 34 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 66 69 6c 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 75 69 2d 69 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 Data Ascii: 3ff8enu-filter{width:85%;padding-right:15px}.ui-selectonemenu-panel .ui-selectonemenu-filter-container{position:relative;margin:0;padding:.4em;display:inline-block;width:100%}.ui-selectonemenu-panel .ui-selectonemenu-filter-container .ui-icon{position:a
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 6f 61 72 64 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 69 2d 66 6c 75 69 64 20 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 75 69 2d 66 6c 75 69 64 20 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 20 2e 75 69 2d 73 65 6c 65 63 74 63 68 65 63 6b 62 6f 78 6d 65 6e 75 2d 74 72 69 67 67 65 72 20 2e 75 69 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 75 Data Ascii: oard-input{width:100%}.ui-fluid .ui-selectcheckboxmenu{width:100%;box-sizing:border-box;-webkit-box-sizing:border-box;-moz-box-sizing:border-box}.ui-fluid .ui-selectcheckboxmenu .ui-selectcheckboxmenu-trigger .ui-icon{margin-left:auto;margin-right:auto}.u
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 75 69 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 75 69 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 75 69 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 75 69 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 75 69 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 75 69 2d 73 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: 3ff8-offset-11{margin-left:91.66666667%}.ui-sm-offset-10{margin-left:83.33333333%}.ui-sm-offset-9{margin-left:75%}.ui-sm-offset-8{margin-left:66.66666667%}.ui-sm-offset-7{margin-left:58.33333333%}.ui-sm-offset-6{margin-left:50%}.ui-sm-offset-5{margin-le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49716	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:50 UTC	740	OUT	GET /securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:50 UTC	624	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:50 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"89493-1707857112000" Expires: Wed, 06 Nov 2024 22:22:50 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:50 UTC	7568	IN	Data Raw: 33 66 66 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3ff8/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-07 22:22:51 UTC	8814	IN	Data Raw: 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d Data Ascii: ]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d Data Ascii: 3ff8=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 70 65 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 21 3d 3d 72 7d 29 3a 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3c 69 2e 63 61 6c 6c 28 6e 2c 65 29 21 3d 3d 72 7d 29 3a 53 2e 66 69 6c 74 65 72 28 6e 2c 65 2c 72 29 7d 53 2e 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 3d 22 3a 6e 6f 74 28 22 2b 65 2b 22 29 22 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 31 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 3f 53 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 72 2c 65 29 3f 5b 72 5d 3a 5b 5d 3a 53 Data Ascii: pe?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeType?S.find.matchesSelector(r,e)?[r]:[]:S
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 Data Ascii: 3ff8ar V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t=Object.create(null),V(e)&&(e.nodeType?e[this.expando]=t:Objec
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 61 6e 64 6c 65 72 2c 69 3d 6f 2e 73 65 6c 65 63 74 6f 72 29 2c 69 26 26 53 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 72 65 2c 69 29 2c 6e 2e 67 75 69 64 7c 7c 28 6e 2e 67 75 69 64 3d 53 2e 67 75 69 64 2b 2b 29 2c 28 75 3d 76 2e 65 76 65 6e 74 73 29 7c 7c 28 75 3d 76 2e 65 76 65 6e 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 29 2c 28 61 3d 76 2e 68 61 6e 64 6c 65 29 7c 7c 28 61 3d 76 2e 68 61 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 26 26 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 65 64 21 3d 3d 65 2e 74 79 70 65 3f 53 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 Data Ascii: andler,i=o.selector),i&&S.find.matchesSelector(re,i),n.guid\|\|(n.guid=S.guid++),(u=v.events)\|\|(u=v.events=Object.create(null)),(a=v.handle)\|\|(a=v.handle=function(e){return"undefined"!=typeof S&&S.event.triggered!==e.type?S.event.dispatch.apply(t,arguments)
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 Data Ascii: 3ff8"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49714	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:50 UTC	748	OUT	GET /securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:50 UTC	625	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:50 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"267239-1707857112000" Expires: Wed, 06 Nov 2024 22:22:50 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:50 UTC	7567	IN	Data Raw: 33 66 66 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 38 2d 30 39 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 67 67 61 62 6c 65 2e 6a 73 Data Ascii: 3ff8/! jQuery UI - v1.12.1 - 2017-08-09 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js
2024-10-07 22:22:51 UTC	8815	IN	Data Raw: 61 69 2c 61 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 61 68 2c 61 69 2c 61 67 2c 74 72 75 65 29 7d 2c 5f 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 61 6a 2c 61 6b 2c 61 67 2c 61 6c 29 7b 61 6c 3d 28 74 79 70 65 6f 66 20 61 6c 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 3f 61 6c 3a 61 67 3b 76 61 72 20 61 68 3d 28 74 79 70 65 6f 66 20 61 6a 3d 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 61 6a 3d 3d 3d 6e 75 6c 6c 29 2c 61 69 3d 7b 65 78 74 72 61 3a 61 68 3f 61 6b 3a 61 67 2c 6b 65 79 73 3a 61 68 3f 61 6a 3a 61 6b 2c 65 6c 65 6d 65 6e 74 3a 61 68 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3a 61 6a 2c 61 64 64 3a 61 6c 7d 3b 61 69 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 Data Ascii: ai,ag){return this._toggleClass(ah,ai,ag,true)},_toggleClass:function(aj,ak,ag,al){al=(typeof al==="boolean")?al:ag;var ah=(typeof aj==="string"\|\|aj===null),ai={extra:ah?ak:ag,keys:ah?aj:ak,element:ah?this.element:aj,add:al};ai.element.toggleClass(this._c
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 78 2e 61 74 5b 31 5d 3d 3d 3d 22 62 6f 74 74 6f 6d 22 3f 2d 61 78 2e 74 61 72 67 65 74 48 65 69 67 68 74 3a 30 2c 61 76 3d 2d 32 2a 61 78 2e 6f 66 66 73 65 74 5b 31 5d 2c 61 45 2c 61 75 3b 69 66 28 61 43 3c 30 29 7b 61 75 3d 61 79 2e 74 6f 70 2b 61 42 2b 61 48 2b 61 76 2b 61 78 2e 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 2d 61 47 2d 61 46 3b 69 66 28 61 75 3c 30 7c 7c 61 75 3c 61 72 28 61 43 29 29 7b 61 79 2e 74 6f 70 2b 3d 61 42 2b 61 48 2b 61 76 7d 7d 65 6c 73 65 7b 69 66 28 61 7a 3e 30 29 7b 61 45 3d 61 79 2e 74 6f 70 2d 61 78 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 54 6f 70 2b 61 42 2b 61 48 2b 61 76 2d 61 74 3b 69 66 28 61 45 3e 30 7c 7c 61 72 28 61 45 29 3c 61 7a 29 7b 61 79 2e 74 6f 70 2b 3d Data Ascii: 3ff8x.at[1]==="bottom"?-ax.targetHeight:0,av=-2*ax.offset[1],aE,au;if(aC<0){au=ay.top+aB+aH+av+ax.collisionHeight-aG-aF;if(au<0\|\|au<ar(aC)){ay.top+=aB+aH+av}}else{if(az>0){aE=ay.top-ax.collisionPosition.marginTop+aB+aH+av-at;if(aE>0\|\|ar(aE)<az){ay.top+=
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 69 66 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 69 73 74 61 6e 63 65 4d 65 74 28 61 67 29 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 28 61 67 29 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3d 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 6f 77 6e 45 76 65 6e 74 2c 61 67 29 21 3d 3d 66 61 6c 73 65 29 3b 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3f 74 68 69 73 2e 5f 6d 6f 75 73 65 44 72 61 67 28 61 67 29 3a 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 61 67 29 29 7d 72 65 74 75 72 6e 20 21 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 7d 2c 5f 6d 6f 75 73 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 61 67 29 7b 74 68 Data Ascii: preventDefault()}if(this._mouseDistanceMet(ag)&&this._mouseDelayMet(ag)){this._mouseStarted=(this._mouseStart(this._mouseDownEvent,ag)!==false);(this._mouseStarted?this._mouseDrag(ag):this._mouseUp(ag))}return !this._mouseStarted},_mouseUp:function(ag){th
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 6f 6c 6c 4c 65 66 74 28 29 3b 61 68 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 69 66 28 74 68 69 73 2e 5f 69 73 52 6f 6f 74 4e 6f 64 65 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 29 7b 61 68 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 7d 72 65 74 75 72 6e 7b 74 6f 70 3a 61 68 2e 74 6f 70 2b 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 63 73 73 28 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 29 2c 31 30 29 7c 7c 30 29 2c 6c 65 66 74 3a 61 68 2e 6c 65 66 74 2b 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 63 73 73 28 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 29 2c Data Ascii: 3ff8ollLeft();ah.top+=this.scrollParent.scrollTop()}if(this._isRootNode(this.offsetParent[0])){ah={top:0,left:0}}return{top:ah.top+(parseInt(this.offsetParent.css("borderTopWidth"),10)\|\|0),left:ah.left+(parseInt(this.offsetParent.css("borderLeftWidth"),
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 63 74 69 6f 6e 28 61 68 2c 61 69 2c 61 67 29 7b 76 61 72 20 61 6a 3d 61 67 2e 6f 70 74 69 6f 6e 73 3b 69 66 28 61 6a 2e 5f 63 75 72 73 6f 72 29 7b 4b 28 22 62 6f 64 79 22 29 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 61 6a 2e 5f 63 75 72 73 6f 72 29 7d 7d 7d 29 3b 4b 2e 75 69 2e 70 6c 75 67 69 6e 2e 61 64 64 28 22 64 72 61 67 67 61 62 6c 65 22 2c 22 6f 70 61 63 69 74 79 22 2c 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 69 2c 61 6a 2c 61 67 29 7b 76 61 72 20 61 68 3d 4b 28 61 6a 2e 68 65 6c 70 65 72 29 2c 61 6b 3d 61 67 2e 6f 70 74 69 6f 6e 73 3b 69 66 28 61 68 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 29 29 7b 61 6b 2e 5f 6f 70 61 63 69 74 79 3d 61 68 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 29 7d 61 68 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 2c Data Ascii: ction(ah,ai,ag){var aj=ag.options;if(aj._cursor){K("body").css("cursor",aj._cursor)}}});K.ui.plugin.add("draggable","opacity",{start:function(ai,aj,ag){var ah=K(aj.helper),ak=ag.options;if(ah.css("opacity")){ak._opacity=ah.css("opacity")}ah.css("opacity",
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 74 2c 61 6d 2c 61 71 2c 61 69 29 7b 69 66 28 21 61 6d 2e 6f 66 66 73 65 74 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 76 61 72 20 61 6b 3d 28 61 74 2e 70 6f 73 69 74 69 6f 6e 41 62 73 7c 7c 61 74 2e 70 6f 73 69 74 69 6f 6e 2e 61 62 73 6f 6c 75 74 65 29 2e 6c 65 66 74 2b 61 74 2e 6d 61 72 67 69 6e 73 2e 6c 65 66 74 2c 61 70 3d 28 61 74 2e 70 6f 73 69 74 69 6f 6e 41 62 73 7c 7c 61 74 2e 70 6f 73 69 74 69 6f 6e 2e 61 62 73 6f 6c 75 74 65 29 2e 74 6f 70 2b 61 74 2e 6d 61 72 67 69 6e 73 2e 74 6f 70 2c 61 6a 3d 61 6b 2b 61 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2c 61 6f 3d 61 70 2b 61 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 Data Ascii: 3ff8}return function(at,am,aq,ai){if(!am.offset){return false}var ak=(at.positionAbs\|\|at.position.absolute).left+at.margins.left,ap=(at.positionAbs\|\|at.position.absolute).top+at.margins.top,aj=ak+at.helperProportions.width,ao=ap+at.helperProportions.hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49717	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:51 UTC	731	OUT	GET /securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:51 UTC	624	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:51 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"37785-1707857112000" Expires: Wed, 06 Nov 2024 22:22:51 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:51 UTC	7568	IN	Data Raw: 33 66 66 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 50 72 69 6d 65 46 61 63 65 73 29 7b 61 2e 50 72 69 6d 65 46 61 63 65 73 2e 64 65 62 75 67 28 22 50 72 69 6d 65 46 61 63 65 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 2c 20 69 67 6e 6f 72 69 6e 67 20 64 75 70 6c 69 63 61 74 65 20 65 78 65 63 75 74 69 6f 6e 2e 22 29 3b 72 65 74 75 72 6e 7d 76 61 72 20 62 3d 7b 65 73 63 61 70 65 43 6c 69 65 6e 74 49 64 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 22 23 22 2b 63 2e 72 65 70 6c 61 63 65 28 2f 3a 2f 67 2c 22 5c 5c 3a 22 29 7d 2c 6f 6e 45 6c 65 6d 65 6e 74 4c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 69 66 28 63 2e 70 72 6f 70 28 22 63 6f 6d 70 6c 65 74 65 22 29 29 7b 64 28 29 7d 65 6c 73 65 7b 63 2e 6f 6e 28 22 Data Ascii: 3ff8(function(a){if(a.PrimeFaces){a.PrimeFaces.debug("PrimeFaces already loaded, ignoring duplicate execution.");return}var b={escapeClientId:function(c){return"#"+c.replace(/:/g,"\\:")},onElementLoad:function(c,d){if(c.prop("complete")){d()}else{c.on("
2024-10-07 22:22:51 UTC	8814	IN	Data Raw: 69 61 6c 6f 67 28 63 29 7d 2c 63 6f 6e 66 69 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 64 69 61 6c 6f 67 2e 44 69 61 6c 6f 67 48 61 6e 64 6c 65 72 2e 63 6f 6e 66 69 72 6d 28 63 29 7d 2c 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 3a 5b 5d 2c 61 64 64 44 65 66 65 72 72 65 64 52 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 63 2c 64 29 7b 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 2e 70 75 73 68 28 7b 77 69 64 67 65 74 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 3a 63 2c 63 61 6c 6c 62 61 63 6b 3a 64 7d 29 7d 2c 72 65 6d 6f 76 65 44 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 64 3d 28 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 2e 6c 65 6e 67 74 68 2d 31 29 Data Ascii: ialog(c)},confirm:function(c){b.dialog.DialogHandler.confirm(c)},deferredRenders:[],addDeferredRender:function(e,c,d){this.deferredRenders.push({widget:e,container:c,callback:d})},removeDeferredRenders:function(e){for(var d=(this.deferredRenders.length-1)
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 63 74 69 6f 6e 28 66 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 74 69 6e 67 20 61 6a 61 78 20 72 65 71 75 65 73 74 2e 22 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 63 75 73 74 6f 6d 46 6f 63 75 73 3d 66 61 6c 73 65 3b 76 61 72 20 6e 3d 28 66 2e 67 6c 6f 62 61 6c 3d 3d 3d 74 72 75 65 7c 7c 66 2e 67 6c 6f 62 61 6c 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 3f 74 72 75 65 3a 66 61 6c 73 65 2c 63 3d 6e 75 6c 6c 2c 67 3d 6e 75 6c 6c 2c 76 3d 6e 75 6c 6c 3b 69 66 28 66 2e 6f 6e 73 74 61 72 74 29 7b 76 3d 66 2e 6f 6e 73 74 61 72 74 2e 63 61 6c 6c 28 74 68 69 73 2c 66 29 7d 69 66 28 66 2e 65 78 74 26 26 66 2e 65 78 74 2e 6f 6e 73 74 61 72 74 29 7b 76 3d 66 2e 65 78 74 2e 6f 6e 73 74 61 72 74 2e 63 61 6c 6c 28 74 68 69 Data Ascii: 3ff8ction(f){PrimeFaces.debug("Initiating ajax request.");PrimeFaces.customFocus=false;var n=(f.global===true\|\|f.global===undefined)?true:false,c=null,g=null,v=null;if(f.onstart){v=f.onstart.call(this,f)}if(f.ext&&f.ext.onstart){v=f.ext.onstart.call(thi
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 29 7b 76 61 72 20 63 3d 64 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 64 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 64 2e 74 65 78 74 3b 69 66 28 65 2e 70 66 41 72 67 73 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 62 29 7b 65 2e 70 66 41 72 67 73 5b 61 5d 3d 62 5b 61 5d 7d 7d 65 6c 73 65 7b 65 2e 70 66 41 72 67 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 29 7d 7d 7d 7d 2c 64 6f 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 2c 64 6f 44 65 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 24 28 50 72 69 6d 65 46 61 63 65 73 2e 65 73 63 61 70 65 43 6c 69 65 6e 74 49 64 28 62 29 29 2e 72 65 6d 6f 76 65 28 29 7d Data Ascii: ){var c=d.textContent\|\|d.innerText\|\|d.text;if(e.pfArgs){var b=JSON.parse(c);for(var a in b){e.pfArgs[a]=b[a]}}else{e.pfArgs=JSON.parse(c)}}}},doError:function(a,b){},doDelete:function(a){var b=a.getAttribute("id");$(PrimeFaces.escapeClientId(b)).remove()}
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	5046	IN	Data Raw: 31 33 61 39 0d 0a 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 29 7b 74 68 69 73 2e 64 65 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 74 68 69 73 2e 64 65 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 61 29 7d 2c 61 64 64 52 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 61 29 7d 7d 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 77 69 64 67 65 74 2e 44 79 6e 61 6d 69 63 4f 76 65 72 6c 61 79 57 69 64 67 65 74 3d 50 72 69 6d 65 46 61 63 65 73 2e 77 69 64 67 65 74 2e 42 61 73 65 Data Ascii: 13a9stroyListeners){this.destroyListeners=[]}this.destroyListeners.push(a)},addRefreshListener:function(a){if(!this.refreshListeners){this.refreshListeners=[]}this.refreshListeners.push(a)}});PrimeFaces.widget.DynamicOverlayWidget=PrimeFaces.widget.Base

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49715	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:51 UTC	737	OUT	GET /securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:51 UTC	625	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:51 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"430302-1707857112000" Expires: Wed, 06 Nov 2024 22:22:51 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:51 UTC	7567	IN	Data Raw: 33 66 66 38 0d 0a 69 66 28 21 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 3d 7b 7d 3b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 2e 44 69 61 6c 6f 67 48 61 6e 64 6c 65 72 3d 7b 6f 70 65 6e 44 69 61 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 66 69 6e 64 52 6f 6f 74 57 69 6e 64 6f 77 28 29 2c 6b 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2b 22 5f 64 6c 67 22 3b 69 66 28 68 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6b 29 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 6a 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2e 72 65 70 6c 61 63 65 28 2f 3a 2f 67 2c 22 5f 22 29 2b 22 5f 64 6c 67 77 69 64 Data Ascii: 3ff8if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),k=f.sourceComponentId+"_dlg";if(h.document.getElementById(k)){return}var j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwid
2024-10-07 22:22:51 UTC	8815	IN	Data Raw: 72 64 69 6f 6e 22 29 7d 7d 64 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 3b 74 68 69 73 2e 62 69 6e 64 4b 65 79 45 76 65 6e 74 73 28 29 7d 2c 62 69 6e 64 4b 65 79 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6f 6e 28 22 66 6f 63 75 73 2e 61 63 63 6f 72 64 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 74 61 62 73 2d 6f 75 74 6c 69 6e 65 22 29 7d 29 2e 6f 6e 28 22 62 6c 75 72 2e 61 63 63 6f 72 64 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 74 61 62 73 2d 6f 75 74 6c 69 6e 65 22 29 7d 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 61 63 63 6f 72 64 69 6f 6e 22 2c Data Ascii: rdion")}}d.preventDefault()});this.bindKeyEvents()},bindKeyEvents:function(){this.headers.on("focus.accordion",function(){$(this).addClass("ui-tabs-outline")}).on("blur.accordion",function(){$(this).removeClass("ui-tabs-outline")}).on("keydown.accordion",
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 74 72 75 65 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 7d 7d 2c 65 6e 61 62 6c 65 44 72 6f 70 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 29 29 7b 74 68 69 73 2e 62 69 6e 64 44 72 6f 70 64 6f 77 6e 45 76 65 6e 74 73 28 29 3b 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 66 61 6c 73 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 7d 7d 2c 62 69 6e 64 4b 65 79 45 76 65 6e 74 Data Ascii: 3ff8).prop("disabled",true).addClass("ui-state-disabled")}},enableDropdown:function(){if(this.dropdown.length&&this.dropdown.prop("disabled")){this.bindDropdownEvents();this.dropdown.prop("disabled",false).removeClass("ui-state-disabled")}},bindKeyEvent
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 3a 74 72 75 65 7d 29 7d 69 66 28 74 68 69 73 2e 68 61 73 42 65 68 61 76 69 6f 72 28 22 71 75 65 72 79 22 29 29 7b 74 68 69 73 2e 63 61 6c 6c 42 65 68 61 76 69 6f 72 28 22 71 75 65 72 79 22 2c 62 29 7d 65 6c 73 65 7b 50 72 69 6d 65 46 61 63 65 73 2e 61 6a 61 78 2e 52 65 71 75 65 73 74 2e 68 61 6e 64 6c 65 28 62 29 7d 7d 2c 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 6c 69 67 6e 50 61 6e 65 6c 28 29 3b 69 66 28 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 29 7b 74 68 69 73 2e 70 61 6e 65 6c 2e 73 68 6f 77 28 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 2c 7b 7d 2c 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 44 75 72 61 74 69 6f 6e 29 7d 65 6c 73 65 7b 74 68 69 73 2e 70 61 6e 65 6c 2e 73 68 6f 77 28 29 7d 7d 2c 68 69 64 65 3a 66 75 6e Data Ascii: :true})}if(this.hasBehavior("query")){this.callBehavior("query",b)}else{PrimeFaces.ajax.Request.handle(b)}},show:function(){this.alignPanel();if(this.cfg.effect){this.panel.show(this.cfg.effect,{},this.cfg.effectDuration)}else{this.panel.show()}},hide:fun
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 5f 73 75 70 65 72 28 62 29 3b 74 68 69 73 2e 69 6e 70 75 74 3d 24 28 74 68 69 73 2e 6a 71 49 64 2b 22 5f 69 6e 70 75 74 22 29 3b 74 68 69 73 2e 6a 71 45 6c 3d 74 68 69 73 2e 63 66 67 2e 70 6f 70 75 70 3f 74 68 69 73 2e 69 6e 70 75 74 3a 24 28 74 68 69 73 2e 6a 71 49 64 2b 22 5f 69 6e 6c 69 6e 65 22 29 3b 76 61 72 20 67 3d 74 68 69 73 3b 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 65 4c 6f 63 61 6c 65 28 29 3b 74 68 69 73 2e 62 69 6e 64 44 61 74 65 53 65 6c 65 63 74 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 62 69 6e 64 56 69 65 77 43 68 61 6e 67 65 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 62 69 6e 64 43 6c 6f 73 65 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 63 66 67 Data Ascii: 3ff8it:function(b){this._super(b);this.input=$(this.jqId+"_input");this.jqEl=this.cfg.popup?this.input:$(this.jqId+"_inline");var g=this;this.configureLocale();this.bindDateSelectListener();this.bindViewChangeListener();this.bindCloseListener();this.cfg
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 67 68 74 28 29 2a 74 68 69 73 2e 70 61 67 65 29 29 7d 7d 2c 72 65 66 72 65 73 68 44 69 6d 65 6e 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 24 28 77 69 6e 64 6f 77 29 3b 69 66 28 61 2e 77 69 64 74 68 28 29 3c 3d 74 68 69 73 2e 63 66 67 2e 62 72 65 61 6b 70 6f 69 6e 74 29 7b 74 68 69 73 2e 63 6f 6c 75 6d 6e 73 3d 31 3b 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 49 74 65 6d 57 69 64 74 68 73 28 74 68 69 73 2e 63 6f 6c 75 6d 6e 73 29 3b 74 68 69 73 2e 74 6f 74 61 6c 50 61 67 65 73 3d 74 68 69 73 2e 69 74 65 6d 73 43 6f 75 6e 74 3b 74 68 69 73 2e 72 65 73 70 6f 6e 73 69 76 65 44 72 6f 70 64 6f 77 6e 2e 73 68 6f 77 28 29 3b 74 68 69 73 2e 70 61 67 65 4c 69 6e 6b 73 2e 68 69 64 65 28 29 7d 65 6c 73 65 7b 74 68 69 73 2e 63 6f 6c 75 6d 6e Data Ascii: ght()*this.page))}},refreshDimensions:function(){var a=$(window);if(a.width()<=this.cfg.breakpoint){this.columns=1;this.calculateItemWidths(this.columns);this.totalPages=this.itemsCount;this.responsiveDropdown.show();this.pageLinks.hide()}else{this.column
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 6c 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 74 6f 67 67 6c 65 28 24 28 74 68 69 73 29 29 3b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 3b 74 68 69 73 2e 69 74 65 6d 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 22 3e 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 20 3e 20 6c 61 62 65 6c 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 73 65 6c 65 63 74 43 68 65 63 6b 62 6f 78 4d 65 6e 75 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 74 6f 67 67 6c 65 28 24 28 74 68 69 73 29 2e 70 72 65 76 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 63 68 6b 62 6f 78 2d 62 6f 78 22 29 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 28 29 3b 62 2e 70 72 65 76 65 6e 74 44 65 Data Ascii: 3ff8ler",function(b){a.toggle($(this));b.preventDefault()});this.itemContainer.find("> .ui-columntoggler-item > label").on("click.selectCheckboxMenu",function(b){a.toggle($(this).prev().children(".ui-chkbox-box"));PrimeFaces.clearSelection();b.preventDe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49718	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:51 UTC	722	OUT	GET /securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:51 UTC	624	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:51 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:14 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"47334-1707857114000" Expires: Wed, 06 Nov 2024 22:22:51 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:51 UTC	7568	IN	Data Raw: 33 66 66 38 0d 0a 69 66 28 21 28 28 6a 73 66 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 3e 3d 32 33 30 30 30 29 26 26 28 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 3e 3d 33 29 29 29 7b 76 61 72 20 6a 73 66 3d 7b 7d 3b 6a 73 66 2e 61 6a 61 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 65 72 72 6f 72 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 64 65 6c 61 79 48 61 6e 64 6c 65 72 3d 6e 75 6c 6c 3b 76 61 72 20 69 73 49 45 3d 66 75 6e 63 74 69 6f 6e 20 69 73 49 45 28 29 7b 69 66 28 74 79 70 65 6f 66 20 69 73 49 45 43 61 63 68 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 Data Ascii: 3ff8if(!((jsf&&jsf.specversion&&jsf.specversion>=23000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={};jsf.ajax=function(){var eventListeners=[];var errorListeners=[];var delayHandler=null;var isIE=function isIE(){if(typeof isIECache!=="undefined")
2024-10-07 22:22:51 UTC	8814	IN	Data Raw: 65 74 43 6c 69 65 6e 74 49 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 3d 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 73 5b 69 5d 3b 69 66 28 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 2e 69 6e 64 65 78 4f 66 28 6a 73 66 2e 73 65 70 61 72 61 74 6f 72 63 68 61 72 29 3d 3d 30 29 7b 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 3d 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 69 66 28 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 2e 69 6e 64 65 78 4f 66 28 6e 61 6d 69 6e 67 43 6f 6e 74 61 69 6e 65 72 50 72 65 66 69 78 29 21 3d 30 29 7b 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 3d 6e 61 6d 69 6e 67 43 6f 6e 74 61 69 6e 65 72 50 72 65 66 69 78 2b 74 61 72 67 65 74 43 6c 69 65 6e Data Ascii: etClientIds.length;i++){var targetClientId=targetClientIds[i];if(targetClientId.indexOf(jsf.separatorchar)==0){targetClientId=targetClientId.substring(1);if(targetClientId.indexOf(namingContainerPrefix)!=0){targetClientId=namingContainerPrefix+targetClien
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 68 69 6c 64 28 6e 6f 64 65 29 29 3b 74 72 79 7b 74 65 6d 70 2e 6f 75 74 65 72 48 54 4d 4c 3d 22 22 7d 63 61 74 63 68 28 65 78 29 7b 7d 7d 3b 76 61 72 20 64 65 6c 65 74 65 43 68 69 6c 64 72 65 6e 3d 66 75 6e 63 74 69 6f 6e 20 64 65 6c 65 74 65 43 68 69 6c 64 72 65 6e 28 6e 6f 64 65 29 7b 69 66 28 21 6e 6f 64 65 29 7b 72 65 74 75 72 6e 7d 66 6f 72 28 76 61 72 20 78 3d 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 78 3e 3d 30 3b 78 2d 2d 29 7b 76 61 72 20 63 68 69 6c 64 4e 6f 64 65 3d 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 78 5d 3b 64 65 6c 65 74 65 4e 6f 64 65 28 63 68 69 6c 64 4e 6f 64 65 29 7d 7d 3b 76 61 72 20 63 6f 70 79 43 68 69 6c 64 4e 6f 64 65 73 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 70 79 43 68 Data Ascii: 3ff8hild(node));try{temp.outerHTML=""}catch(ex){}};var deleteChildren=function deleteChildren(node){if(!node){return}for(var x=node.childNodes.length-1;x>=0;x--){var childNode=node.childNodes[x];deleteNode(childNode)}};var copyChildNodes=function copyCh
2024-10-07 22:22:51 UTC	8190	IN	Data Raw: 62 6f 64 79 45 6e 64 3d 62 6f 64 79 45 6e 64 45 78 2e 65 78 65 63 28 73 72 63 29 3b 69 66 28 62 6f 64 79 45 6e 64 21 3d 3d 6e 75 6c 6c 29 7b 73 72 63 42 6f 64 79 3d 73 72 63 2e 73 75 62 73 74 72 69 6e 67 28 62 6f 64 79 53 74 61 72 74 45 78 2e 6c 61 73 74 49 6e 64 65 78 2c 62 6f 64 79 45 6e 64 2e 69 6e 64 65 78 29 7d 65 6c 73 65 7b 73 72 63 42 6f 64 79 3d 73 72 63 2e 73 75 62 73 74 72 69 6e 67 28 62 6f 64 79 53 74 61 72 74 45 78 2e 6c 61 73 74 49 6e 64 65 78 29 7d 65 6c 65 6d 65 6e 74 52 65 70 6c 61 63 65 53 74 72 28 64 6f 63 42 6f 64 79 2c 22 62 6f 64 79 22 2c 73 72 63 42 6f 64 79 29 7d 7d 65 6c 73 65 7b 65 6c 65 6d 65 6e 74 52 65 70 6c 61 63 65 53 74 72 28 64 6f 63 42 6f 64 79 2c 22 62 6f 64 79 22 2c 73 72 63 29 7d 7d 65 6c 73 65 7b 69 66 28 69 64 3d 3d Data Ascii: bodyEnd=bodyEndEx.exec(src);if(bodyEnd!==null){srcBody=src.substring(bodyStartEx.lastIndex,bodyEnd.index)}else{srcBody=src.substring(bodyStartEx.lastIndex)}elementReplaceStr(docBody,"body",srcBody)}}else{elementReplaceStr(docBody,"body",src)}}else{if(id==
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	8192	IN	Data Raw: 33 38 61 36 0d 0a 2e 22 7d 65 6c 73 65 7b 64 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 65 72 72 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 73 65 72 76 65 72 2c 20 73 74 61 74 75 73 3a 20 22 2b 64 61 74 61 2e 72 65 73 70 6f 6e 73 65 43 6f 64 65 7d 7d 65 6c 73 65 7b 69 66 28 73 74 61 74 75 73 3d 3d 22 73 65 72 76 65 72 45 72 72 6f 72 22 29 7b 64 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 73 65 72 76 65 72 45 72 72 6f 72 4d 65 73 73 61 67 65 7d 65 6c 73 65 7b 69 66 28 73 74 61 74 75 73 3d 3d 22 65 6d 70 74 79 52 65 73 70 6f 6e 73 65 22 29 7b 64 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 22 41 6e 20 65 6d 70 74 79 20 72 65 73 70 6f 6e 73 65 20 77 61 73 20 72 65 63 65 Data Ascii: 38a6."}else{data.description="There was an error communicating with the server, status: "+data.responseCode}}else{if(status=="serverError"){data.description=serverErrorMessage}else{if(status=="emptyResponse"){data.description="An empty response was rece
2024-10-07 22:22:51 UTC	6316	IN	Data Raw: 3d 3d 3d 22 65 72 72 6f 72 2d 6e 61 6d 65 22 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7b 65 72 72 6f 72 4e 61 6d 65 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 2e 6e 6f 64 65 56 61 6c 75 65 7d 7d 65 6c 65 6d 65 6e 74 3d 72 65 73 70 6f 6e 73 65 54 79 70 65 2e 66 69 72 73 74 43 68 69 6c 64 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 69 66 28 65 6c 65 6d 65 6e 74 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 22 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7b 65 72 72 6f 72 4d 65 73 73 61 67 65 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 2e 6e 6f 64 65 56 61 6c 75 65 7d 7d 73 65 6e 64 45 72 72 6f 72 28 72 65 71 75 Data Ascii: ==="error-name"){if(null!=element.firstChild){errorName=element.firstChild.nodeValue}}element=responseType.firstChild.nextSibling;if(element.nodeName==="error-message"){if(null!=element.firstChild){errorMessage=element.firstChild.nodeValue}}sendError(requ
2024-10-07 22:22:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49719	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:51 UTC	740	OUT	GET /securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:52 UTC	617	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:52 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"2266-1707857112000" Content-Length: 2266 Expires: Wed, 06 Nov 2024 22:22:52 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: text/javascript
2024-10-07 22:22:52 UTC	2266	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 68 6f 74 6b 65 79 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 32 2e 30 22 2c 73 70 65 63 69 61 6c 4b 65 79 73 3a 7b 38 3a 22 62 61 63 6b 73 70 61 63 65 22 2c 39 3a 22 74 61 62 22 2c 31 30 3a 22 72 65 74 75 72 6e 22 2c 31 33 3a 22 72 65 74 75 72 6e 22 2c 31 36 3a 22 73 68 69 66 74 22 2c 31 37 3a 22 63 74 72 6c 22 2c 31 38 3a 22 61 6c 74 22 2c 31 39 3a 22 70 61 75 73 65 22 2c 32 30 3a 22 63 61 70 73 6c 6f 63 6b 22 2c 32 37 3a 22 65 73 63 22 2c 33 32 3a 22 73 70 61 63 65 22 2c 33 33 3a 22 70 61 67 65 75 70 22 2c 33 34 3a 22 70 61 67 65 64 6f 77 6e 22 2c 33 35 3a 22 65 6e 64 22 2c 33 36 3a 22 68 6f 6d 65 22 2c 33 37 3a 22 6c 65 66 74 22 2c 33 38 3a 22 75 70 22 2c 33 39 3a 22 72 69 67 68 74 22 2c 34 30 3a 22 64 6f 77 Data Ascii: (function(b){b.hotkeys={version:"0.2.0",specialKeys:{8:"backspace",9:"tab",10:"return",13:"return",16:"shift",17:"ctrl",18:"alt",19:"pause",20:"capslock",27:"esc",32:"space",33:"pageup",34:"pagedown",35:"end",36:"home",37:"left",38:"up",39:"right",40:"dow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49720	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:51 UTC	744	OUT	GET /formpostdir/Image?i=7 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:52 UTC	519	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:52 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1253 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:52 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:52 UTC	1253	IN	Data Raw: 47 49 46 38 39 61 c8 00 32 00 c4 10 00 a3 b7 c7 67 88 a3 f0 f3 f6 1a 4c 74 d1 db e3 2a 58 7e e0 e7 ec 39 64 87 58 7c 99 76 94 ac b2 c3 d1 94 ab be c2 cf da 48 70 90 85 9f b5 0b 40 6b ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 10 00 2c 00 00 00 00 c8 00 32 00 00 05 ff 20 24 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c b6 36 ce e8 b4 7a 9d 26 94 df c3 87 7c 4e af db e9 0c b8 fe 77 ef fb 1f 79 7b 82 3a 7f 85 78 83 88 37 86 8b 81 89 8e 31 0e 91 92 93 94 93 01 75 8d 89 04 0e 00 61 0a 0e 99 2c 0d 87 33 0c 98 28 06 0c aa ab 0c 06 Data Ascii: GIF89a2gLt*X~9dX\|vHp@k!,2 $dihlp,tmx\|pH,rl:tJZvzxL6z&\|Nwy{:x71ua,3(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49721	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:51 UTC	754	OUT	GET /formpostdir/images/TipClose.gif HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:52 UTC	613	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:52 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1717088664000" Last-Modified: Thu, 30 May 2024 17:04:24 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:52 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:52 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 02 00 99 8d 6c 67 5f 49 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 08 00 08 00 00 02 11 0c 84 02 66 b8 f7 5e 5a 6d 86 aa 8c 94 99 bb 50 00 00 3b Data Ascii: GIF89alg_I!,f^ZmP;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49723	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:52 UTC	742	OUT	GET /formpostdir/fonts/sourcesanspro-regular.ttf.woff HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://securemail.lpl.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:52 UTC	615	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:52 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"128612-1717088664000" Last-Modified: Thu, 30 May 2024 17:04:24 GMT Content-Length: 128612 Cache-Control: max-age=0 Expires: Mon, 07 Oct 2024 22:22:52 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: font/woff
2024-10-07 22:22:52 UTC	7577	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 f6 64 00 13 00 00 00 04 7c 48 00 02 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 01 e5 18 00 00 00 3a 00 00 00 3a 8b 19 94 b1 44 53 49 47 00 01 e5 54 00 00 11 0d 00 00 18 fc 90 16 06 f3 47 44 45 46 00 01 76 8c 00 00 02 78 00 00 03 c2 83 24 87 b4 47 50 4f 53 00 01 79 04 00 00 51 4d 00 01 02 16 0c ca 3b 13 47 53 55 42 00 01 ca 54 00 00 1a c2 00 00 3c 5a 92 a2 9d 89 4f 53 2f 32 00 00 02 24 00 00 00 59 00 00 00 60 5d b0 d7 80 63 6d 61 70 00 00 0e 38 00 00 1d 58 00 00 36 86 97 c0 f1 5b 63 76 74 20 00 00 2c e8 00 00 00 2a 00 00 00 2a 01 22 0d ca 66 70 67 6d 00 00 2b 90 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 01 76 84 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 3f ec 00 01 0e Data Ascii: wOFFd\|HBASE::DSIGTGDEFvx$GPOSyQM;GSUBT<ZOS/2$Y`]cmap8X6[cvt ,**"fpgm+sY7gaspvglyf?
2024-10-07 22:22:52 UTC	8799	IN	Data Raw: a0 7f e6 54 a1 9e d9 df 0b c7 a9 af 14 fc a5 57 76 dd c2 f1 d9 b5 4a 9d b8 33 bb 3e 01 b1 06 7d 53 40 72 22 74 8e 82 7c 0d bd 53 40 72 1f 74 8f 82 bc 0c fd 53 80 50 47 a0 83 94 16 e0 68 85 1e c4 7a 4c c6 b9 d9 9e a5 66 0c c2 da 20 e3 6c d0 50 a1 81 d9 3e 85 96 d9 de 1a a9 6f 16 f6 23 2c c9 f6 00 68 30 d6 13 32 5a 81 13 15 7a 08 6b e3 8c f3 b2 bd 09 c8 1b d0 99 05 08 f1 c8 4d 33 2e 02 cd 14 7a 2c db b3 d0 46 63 ac 10 67 a8 77 7c 4a 46 6b 70 aa 42 43 b3 b3 10 2e d6 38 2c c4 e2 88 ec 2c 04 f1 c3 33 14 42 0d 82 4e 54 50 cf a0 17 0b d0 d3 d9 59 08 a8 5b 7c 8e 42 4f 66 67 27 74 c8 ce 45 e8 9c ed b9 55 16 c3 e7 65 2c 06 e7 2b 52 7b f8 82 8c 1b b3 fd 5f a8 b5 a1 b0 67 a1 57 b6 9f d6 5a 9f 0a 7b 10 6e ca f6 df 46 eb 04 f4 b8 72 3b b8 54 91 5c cf 97 65 f4 cd f6 79 Data Ascii: TWvJ3>}S@r"t\|S@rtSPGhzLf lP>o#,h02ZzkM3.z,Fcgw\|JFkpBC.8,,3BNTPY[\|BOfg'tEUe,+R{_gWZ{nFr;T\ey
2024-10-07 22:22:52 UTC	16376	IN	Data Raw: 93 77 66 77 66 76 42 4f 4e 3d 39 ef c4 8d b3 39 87 db db dd 4b ba 88 a4 d3 29 23 01 ca c9 20 01 02 13 64 61 30 5f 83 30 18 0c c2 80 65 01 16 0a b6 c1 18 8c b0 31 ec 61 30 20 0b 19 63 0c 42 88 68 c1 57 08 dd ec af 52 57 77 ef cc 9e 64 7f ff f9 81 6e b7 f7 33 3d dd 55 af aa de 7b f5 ea 05 4e c7 1d e1 38 be ce ff 21 a7 e1 4c 9c 95 eb e7 5c dc 19 ee 61 8e 9b 3d 0c 7f 94 fc 8f 70 1c 67 6f 1d a1 00 8f 00 9e d3 b5 8e 3c c2 69 39 f0 dc a3 9c 01 fe c9 d9 fb 87 e0 0d b6 47 38 0b c6 ec 14 7b 14 3e 4d ba 72 b0 2b 17 bd 2a 0f 38 a2 f6 68 a2 04 44 2b 70 8c 03 31 0c 0c 29 3b 30 08 47 c0 93 ed 38 b8 6a b1 a6 6d 2c dd 35 30 f5 93 a9 4a fe 0e 70 f8 f6 db f9 3f 3c 77 e5 f0 5d 67 ce dc 05 16 4f dc 70 c3 89 d2 d3 ed 0a f8 ea d3 3f 84 ed e3 61 db 39 3e c8 df 03 7b 60 e7 b6 a4 Data Ascii: wfwfvBON=99K)# da0_0e1a0 cBhWRWwdn3=U{N8!L\a=pgo<i9G8{>Mr+*8hD+p1);0G8jm,50Jp?<w]gOp?a9>{`
2024-10-07 22:22:52 UTC	16376	IN	Data Raw: e7 7e 43 96 36 24 57 06 12 8b 1a 69 67 a1 a8 81 f8 f0 a9 07 e8 f9 8a 60 3e ba 1f 79 93 02 67 7c 51 14 17 e3 ed 67 39 45 ad c6 88 cc a7 3b de a5 34 c9 bb b7 49 59 48 b7 aa 5e a3 9b ee 74 fa 69 c1 48 92 a3 b0 4b 9d 46 d2 32 bd 41 59 a6 f1 8f 4f cf 19 6d 26 ad d1 da 33 73 ea 8d 5b 0b c6 5e a3 d6 da 8f 2a 36 22 10 55 6c 84 ad fe 1d a9 c7 08 b4 b0 fd 5e 71 2a 36 33 dd fe 11 be 88 4d 89 ed 1f 49 34 e3 bf c1 05 64 49 d8 71 d6 20 c7 19 cb a7 ca 28 73 04 84 d8 59 56 3f 96 d0 3a 6c e5 41 39 45 34 32 cb b5 02 25 61 bf 8a ea 1d 26 e4 62 88 ee bf df ba d8 ec b1 a0 62 88 07 f7 f3 39 54 f2 90 16 43 9c 6c 7b 41 2f 29 86 d8 fe 6f 24 13 50 fe d1 f7 63 9f e7 e6 9e f5 24 65 ab 37 52 af 00 76 7f 93 2a 4b 42 cd 41 a3 a8 1e a9 71 89 1f b9 ff f0 54 af bf 4f db e7 ed 9d 3a f4 91 Data Ascii: ~C6$Wig`>yg\|Qg9E;4IYH^tiHKF2AYOm&3s[^6"Ul^q63MI4dIq (sYV?:lA9E42%a&bb9TCl{A/)o$Pc$e7Rv*KBAqTO:
2024-10-07 22:22:52 UTC	16376	IN	Data Raw: ad 4f 6d cc 72 eb 2d c6 8f 8d 93 b7 e8 c2 54 04 97 aa 52 aa 41 b0 d2 04 32 83 b7 f7 f4 f4 95 06 38 39 7d f3 3e 59 b3 ba 65 ac 4d 63 6a d6 42 8b c8 1a 56 aa a0 2d 11 c2 d2 fa cf 9c ec 86 7b dc f5 13 33 93 d8 3e ca 76 ac fa cc fc a3 64 1f 61 bf 83 fb e4 60 56 37 f4 ee 89 33 90 f5 f8 a4 06 8a 14 c8 b1 5e ce e5 22 6b 0f 71 3d 33 e9 48 92 80 d0 1b b2 f5 16 a8 a1 0a d7 0d 2b 81 1b 4b c7 c0 e2 a9 a7 2e de f4 ea dc dc ab 73 a4 a9 68 0b fe f1 8f 91 f9 f1 28 f1 ef 83 d7 d8 17 59 39 e8 61 b8 f5 f1 1b bc 3e fe 8b 62 9e 99 71 04 1c db dd 12 0d 9c 49 31 41 c6 d7 88 74 9a 39 a0 fc a0 79 c9 56 8c d7 c1 c5 96 23 b5 79 c9 47 b3 be 15 89 eb ba 46 8f 69 81 b3 7d f1 fb 4a 47 02 8d ed 70 96 eb 3b ec 23 c9 43 56 60 ff 17 b6 c4 4b 56 2d 10 5b e3 3f bd ae eb 33 5f 11 2c 72 76 e7 Data Ascii: Omr-TRA289}>YeMcjBV-{3>vda`V73^"kq=3H+K.sh(Y9a>bqI1At9yV#yGFi}JGp;#CV`KV-[?3_,rv
2024-10-07 22:22:52 UTC	16376	IN	Data Raw: bc 62 58 d8 60 a9 40 e4 bc c9 e0 fa 9e c2 e6 7a 28 3c bc ad d8 bb d9 dd ed a8 c7 c6 37 ca 7f f9 0b f5 ba e1 48 d5 09 7e e2 0f 86 46 f7 0e 8e 9f 38 1a 48 b9 8b 0e cf e6 9d f5 99 f9 2e 1e cb 43 df c4 bc 04 4a 05 7c fc b2 5c 33 2b f0 ac 9d 2b c2 0a af 92 87 91 9d 34 c4 5f 34 a2 8e 16 4c 54 d0 8c 01 4d d9 56 b4 b5 57 e4 0c 66 b5 e3 0b 0b e3 13 f3 f3 87 3a 2f d8 53 dc 32 18 0c 0e 6e 29 9e 70 a1 ea ec f9 f9 be fd bb 76 ed db b7 6b d7 fe 77 4e fe 88 e0 99 7b f0 9c df 43 e6 08 cd 3d 24 67 c0 3d cb 7d 48 57 48 8f a4 94 cc 0a 64 50 8a 8e ba 2a d1 d8 0f f6 1b 13 a8 c8 20 16 b5 ba 0a ca 46 4c 6d 0a 36 49 e0 98 4d f5 a1 0b 36 2f 2c ec fa b7 9d d7 f5 0c 7b 8a 53 49 f0 bd 68 7e d7 bb 47 df 7d fe f9 57 75 33 fd c9 be a0 fe 03 fd 02 96 d9 f3 a3 31 5c fa 07 1b 81 fd 89 36 Data Ascii: bX`@z(<7H~F8H.CJ\|\3++4_4LTMVWf:/S2n)pvkwN{C=$g=}HWHdP* FLm6IM6/,{SIh~G}Wu31\6
2024-10-07 22:22:53 UTC	16376	IN	Data Raw: 4a ec 7e bf 1d 7e d8 67 9a 4a 0f 16 8e df 0c 73 35 a4 1b 48 4e e6 d5 f3 2d 73 ab e4 5b de 6d 73 b9 6c 56 97 eb 2e f8 b1 c2 7b 76 c6 6d b5 ba a5 1f cc d7 2d ed 63 7f c4 5c c7 a5 f1 7b 62 ed 5b fb e1 5f 7a 22 7e 59 57 d7 83 28 95 33 bc 67 7f 84 bf da 28 18 5e f1 f8 3c 02 71 70 1d e4 f9 75 cd b9 a3 da 07 71 2f 94 d3 50 22 38 4b 0a f1 19 d5 b1 ca b8 dd 37 2f 1f 9b 36 7b 63 36 f6 38 85 d5 92 94 f5 b0 99 b4 cd cb eb 64 a4 de 87 98 b5 dc be 36 f5 9a 3f b8 5e f5 30 12 bc da d8 ff 56 5a cc 51 2e cb c6 23 b0 5e ad 0c 8d d1 d5 6c 82 39 0d d2 61 82 4f 5a 27 e5 2c 14 90 9e 59 8e 11 52 e5 62 a1 5a 2d a0 8f 30 c1 89 4a 32 51 a9 24 20 ab e4 77 bb fc 7e 97 db 4f e6 e0 66 b8 97 1f cb 9d f1 2f d7 9f 28 97 13 e8 63 f1 7a 2d 36 8f 87 7d 38 17 4f e4 72 89 78 2e e4 72 3a 5d e8 Data Ascii: J~~gJs5HN-s[mslV.{vm-c\{b[_z"~YW(3g(^<qpuq/P"8K7/6{c68d6?^0VZQ.#^l9aOZ',YRbZ-0J2Q$ w~Of/(cz-6}8Orx.r:]
2024-10-07 22:22:53 UTC	16376	IN	Data Raw: f5 77 30 3f 8e f9 ef 99 6f af d3 77 af 5f d9 24 9e 36 80 84 6a c9 44 fa ee 45 ef 5e 12 51 a3 11 90 7e 23 78 81 61 6d a0 75 47 31 6a 6f 92 77 42 eb a4 6a 8b 61 cc 60 c9 5f 8d 32 a4 4f 1b fb 91 7e 2c 33 b5 1e d5 e5 ef b6 79 37 3f e2 8a 39 c0 f4 39 f0 38 3b 01 45 f7 45 7a a2 38 15 b8 7e 94 18 1b d2 2b 8f 32 bd 83 3a e3 4f cc 0f 66 fa 2c d3 73 58 be 8f 69 19 4b ee 0e eb 95 95 9b 57 6e 89 b8 57 9b 18 3d e6 68 b2 02 e8 b1 0b c4 c5 a1 fb 6d 64 3a 97 57 9c c1 fc 48 a6 a7 b2 e4 41 e6 6f 62 3a 9c 69 1e d3 76 61 fd b6 a2 ff ca b9 61 cf 40 ac ff 8f 26 53 a4 89 6c 7c 5c 1b 01 34 b0 85 e9 32 61 bc f3 0f fa 4d 0b a1 d1 06 42 87 5e 49 fc e2 fa 06 72 b8 2a f6 2c f5 06 12 06 27 0c 4b fc 24 79 7c f2 84 e4 59 c9 b7 26 df 93 7c 5f f2 43 c9 be e4 9f 52 12 52 9a a5 0c 4f b9 32 Data Ascii: w0?ow_$6jDE^Q~#xamuG1jowBja`_2O~,3y7?998;EEz8~+2:Of,sXiKWnW=hmd:WHAob:ivaa@&Sl\|\42aMB^Ir*,'K$y\|Y&\|_CRRO2
2024-10-07 22:22:53 UTC	13980	IN	Data Raw: 65 84 af 2f 23 7c c9 8c f0 35 32 9f 32 9f c2 95 ff 6e fe 03 f5 9f 36 9f 46 5e 47 fb f2 cc 45 26 f4 8d b9 d8 5c 8c fc 12 f3 59 5c 53 47 fe 3a 99 cf 9b 2f a0 0d 3a fe e7 31 5f 34 5f 44 db 74 14 30 83 51 c0 44 f3 9f e6 2b a8 a3 63 81 39 e6 6b e6 bf 70 ae 13 0b 7c dd 7c 1d 2d 5c 61 ae c0 51 1d 17 ec 6b be 6d be 8d bc 8e 0e 9e c0 e8 60 3b 46 07 5b e8 59 51 5c 53 c7 08 5b 33 46 38 c0 5c 6f ae 47 5e 47 0a 5b 9b 9f 98 9f a0 85 3a 5e 98 c1 78 61 23 c6 0b bb 9b 9f 9b 9f e3 6a 3a 6a d8 9a 51 43 69 6e 31 b7 a2 9d db cc 6d b8 f2 76 73 3b 8e ea 38 62 3b c6 11 fb 32 82 68 9a c5 66 b1 e8 67 96 98 25 22 93 71 c4 02 c6 11 1b 33 8e d8 8a 71 c4 7e e6 1e 73 af c8 37 cb 4c 60 3f 73 bf 79 00 79 1d 47 6c c3 38 62 be 79 c8 3c 84 bc 8e 26 a6 31 9a d8 39 22 9a d8 86 d1 c4 6c 46 13 Data Ascii: e/#\|522n6F^GE&\Y\SG:/:1_4_Dt0QD+c9kp\|\|-\aQkm`;F[YQ\S[3F8\oG^G[:^xa#j:jQCin1mvs;8b;2hfg%"q3q~s7L`?syyGl8by<&19"lF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49724	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:52 UTC	805	OUT	GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.lpl.com/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:52 UTC	612	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:52 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=0 ETag: W/"16755-1707857112000" Expires: Mon, 07 Oct 2024 22:22:52 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: image/png
2024-10-07 22:22:52 UTC	7580	IN	Data Raw: 33 66 66 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 01 fc 08 06 00 00 00 b0 f1 ad 14 00 00 41 3a 49 44 41 54 78 01 b4 57 03 b0 24 4b d3 3d dd 3d 3d 9e b5 06 7b ff b5 9e 6d db b6 6d db b6 6d db b6 ad bb b6 77 af d7 3b 77 ac ae ff 64 45 77 bc 89 79 0a 7d 19 91 51 d5 55 d5 95 27 33 4f 65 57 a3 41 0c a5 94 81 ff 91 b8 7b d7 ef 8f 7f 32 d6 9f 9a dc 7b ef bd 93 89 44 22 66 9a a6 c2 df 08 c7 f1 4f 62 59 96 36 d8 d6 d6 96 79 fb ed b7 db 01 88 2e a3 e2 df 00 f8 a9 9b bf fc f2 cb a7 8c 1a 35 6a ed a6 a6 a6 78 34 1a ed a1 28 0d 9e fc 7d 1f ec ab 3f c7 0d 4a b1 58 ec 6e 6f 6f ef 9c 35 6b d6 d4 c3 0e 3b ec 51 00 3f 53 cb f5 00 44 95 18 3f e2 88 23 4e bc f2 ca 2b 2f 1c 33 66 cc 50 c8 aa 72 19 15 6a ad 56 83 e3 38 a8 51 1d ad 35 8e 39 50 Data Ascii: 3ff8PNGIHDR A:IDATxW$K==={mmmw;wdEwy}QU'3OeWA{2{D"fObY6y.5jx4(}?JXnoo5k;Q?SD?#N+/3fPrjV8Q59P
2024-10-07 22:22:52 UTC	8802	IN	Data Raw: d8 30 2a 17 c2 44 6a aa ad 98 b5 9f a2 97 5f 56 7e 6e dd 86 98 fe a0 69 c1 2d 7e 5a eb eb 9b 73 87 d5 96 c2 f0 30 db 1d a6 e3 3e 6c d1 e2 0d dc 0b 9f 04 07 af cb e7 9d 0b 23 22 ac 46 d6 01 3f 0f 0d d9 00 06 69 3d 5f 19 15 15 76 25 31 f1 2b f3 e8 d1 54 f2 da 6b 6a e1 ec d9 4a 31 4b 34 85 e3 9e b5 fd 1c 1a 4a 9f 7a 34 a3 05 c1 c1 5b 01 04 bc e9 ef ff 7e 56 cb 96 64 0c 0d b5 16 44 44 d0 e7 81 81 9b 71 0f e8 75 8a e2 26 6a ca 61 b3 e9 98 f9 46 15 a4 0b 60 48 97 2e d5 ed 88 8e 4e e8 69 30 6c 6b 65 d0 77 b6 d4 32 d5 7c ed 9a cc fb cb 35 aa aa 94 de cc d4 65 9a cd d6 5f 3d bd 97 bd 5b 50 60 27 a9 39 e2 4b 8a ab ab 20 d5 f5 20 15 90 ee 7d 7a 66 bd 00 2a 1f 01 d2 eb 54 4f 17 03 c2 25 c9 3e f6 df b5 6d 3b bc af 9b db 17 c1 40 e7 72 53 85 52 77 f9 b2 8e 15 15 c9 5a Data Ascii: 0Dj_V~ni-~Zs0>l#"F?i=_v%1+TkjJ1K4Jz4[~VdDDqu&jaF`H.Ni0lkew2\|5e_=[P`'9K }zfTO%>m;@rSRwZ
2024-10-07 22:22:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:52 UTC	391	IN	Data Raw: 31 37 62 0d 0a 73 ad cf 1e cb c0 82 30 a2 c6 cf 1d 7e 5a 34 61 ed 53 ce f5 2b d6 69 51 7b 99 9d ce 0a a7 30 a0 22 31 3d 39 76 e4 fb ce ae f5 19 39 61 91 8a 3e b0 40 65 7e 89 16 8a 35 5d e4 17 b2 00 fb 82 64 19 18 fa 2b 9e f4 01 62 e9 65 07 00 cb 3a bf f7 52 b4 07 7d f6 44 16 c4 50 24 f6 be 47 9c 13 4b d0 44 cf cd 29 b2 8c 10 c9 23 61 fa ef 87 de 7c 1d 44 ea 10 90 65 c8 f7 cb 2a 16 33 ed 8d e3 de 75 fe 9e ca 82 08 22 e9 fd 13 da 45 24 71 9e 5b c8 01 96 90 14 89 82 a2 1e c4 98 a3 61 8d fb 04 28 ca a0 58 b0 ce 92 4e 2e 0b 21 ec b3 d3 d7 8d 9b 14 f4 c5 08 b1 00 a0 69 d2 a1 17 47 6d 6e 2b 14 5d 4f 24 1b 2c 8a c5 98 62 93 00 ee ae 54 c6 29 b5 37 e0 7a 60 e5 41 b9 19 3f 65 a9 66 4e ee f5 0d a0 fb dc 11 3b f0 da 9f a6 b4 1b e5 1d 07 9d 43 22 2a 23 22 4a 80 6d 80 Data Ascii: 17bs0~Z4aS+iQ{0"1=9v9a>@e~5]d+be:R}DP$GKD)#a\|De3u"E$q[a(XN.!iGmn+]O$,bT)7z`A?efN;C"#"Jm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49725	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:52 UTC	756	OUT	GET /formpostdir/images/BangBullet.gif HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:52 UTC	613	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:52 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"79-1717088664000" Last-Modified: Thu, 30 May 2024 17:04:24 GMT Content-Length: 79 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:52 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:52 UTC	79	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 a2 04 00 ff ff 00 66 66 00 00 00 00 99 99 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 04 00 2c 00 00 00 00 08 00 08 00 00 03 14 48 04 0c ba 40 08 06 e3 6c 2c 04 cc c6 e0 20 a4 51 0a a6 24 00 3b Data Ascii: GIF89aff!,H@l, Q$;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49726	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:52 UTC	757	OUT	GET /formpostdir/images/CheckBullet.gif HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:53 UTC	613	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:52 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1717088664000" Last-Modified: Thu, 30 May 2024 17:04:24 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:52 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:53 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 03 00 00 bf 00 ff ff ff 80 ff 80 ff ff ff 21 f9 04 01 00 00 03 00 2c 00 00 00 00 08 00 08 00 00 02 11 dc 80 60 97 c8 1d 1a 0a 62 56 0a b1 43 d5 99 66 14 00 3b Data Ascii: GIF89a!,`bVCf;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49728	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:53 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 22:22:53 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=152569 Date: Mon, 07 Oct 2024 22:22:53 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49729	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:53 UTC	689	OUT	GET /favicon.ico HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BID=30b79a3a
2024-10-07 22:22:53 UTC	598	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:22:53 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Fri, 09 Sep 2022 18:31:36 GMT ETag: "47e-5e842c188b200" Accept-Ranges: bytes Content-Length: 1150 Cache-Control: public, max-age=1550000 Expires: Mon, 07 Oct 2024 22:22:53 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' Connection: close Content-Type: image/x-icon
2024-10-07 22:22:53 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 f3 0e 00 00 f3 0e 00 00 00 00 00 00 00 00 00 00 d7 8c 02 ff ec 92 00 ff ee 8f 00 ff d6 82 04 ff d6 86 0f ff eb 92 0c ff e6 86 00 ff ec 90 01 ff ef 90 00 ff e9 8d 00 ff e4 89 06 ff e4 88 0b ff e3 87 0a ff e3 88 05 ff e3 89 02 ff e4 8c 02 ff eb 8c 00 ff f5 8b 00 ff e5 8b 0f ff ef be 80 ff ff f0 d9 ff ff e8 bf ff ea a2 44 ff f1 88 01 ff d8 8b 10 ff e2 8e 0c ff e8 8d 03 ff eb 89 00 ff e9 8b 02 ff e6 8d 07 ff e1 8c 08 ff de 8a 08 ff d5 88 13 ff f0 8a 00 ff eb 8c 0d ff fc d4 a0 ff f1 fb ff ff fb fe ff ff dc a7 64 ff ef 8a 05 ff dd 88 0a ff e9 8c 01 ff ee 8b 00 ff eb 8b 00 ff e6 8e 01 ff df 8c 08 ff db 88 04 ff e2 89 03 ff c5 Data Ascii: h( Dd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49730	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:54 UTC	486	OUT	GET /securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:54 UTC	624	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:54 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"89493-1707857112000" Expires: Wed, 06 Nov 2024 22:22:54 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:54 UTC	7568	IN	Data Raw: 33 66 66 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3ff8/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-07 22:22:54 UTC	8814	IN	Data Raw: 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d Data Ascii: ]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===
2024-10-07 22:22:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:54 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d Data Ascii: 3ff8=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]
2024-10-07 22:22:54 UTC	8190	IN	Data Raw: 70 65 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 21 3d 3d 72 7d 29 3a 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3c 69 2e 63 61 6c 6c 28 6e 2c 65 29 21 3d 3d 72 7d 29 3a 53 2e 66 69 6c 74 65 72 28 6e 2c 65 2c 72 29 7d 53 2e 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 3d 22 3a 6e 6f 74 28 22 2b 65 2b 22 29 22 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 31 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 3f 53 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 72 2c 65 29 3f 5b 72 5d 3a 5b 5d 3a 53 Data Ascii: pe?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeType?S.find.matchesSelector(r,e)?[r]:[]:S
2024-10-07 22:22:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:54 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 Data Ascii: 3ff8ar V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t=Object.create(null),V(e)&&(e.nodeType?e[this.expando]=t:Objec
2024-10-07 22:22:54 UTC	8190	IN	Data Raw: 61 6e 64 6c 65 72 2c 69 3d 6f 2e 73 65 6c 65 63 74 6f 72 29 2c 69 26 26 53 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 72 65 2c 69 29 2c 6e 2e 67 75 69 64 7c 7c 28 6e 2e 67 75 69 64 3d 53 2e 67 75 69 64 2b 2b 29 2c 28 75 3d 76 2e 65 76 65 6e 74 73 29 7c 7c 28 75 3d 76 2e 65 76 65 6e 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 29 2c 28 61 3d 76 2e 68 61 6e 64 6c 65 29 7c 7c 28 61 3d 76 2e 68 61 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 26 26 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 65 64 21 3d 3d 65 2e 74 79 70 65 3f 53 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 Data Ascii: andler,i=o.selector),i&&S.find.matchesSelector(re,i),n.guid\|\|(n.guid=S.guid++),(u=v.events)\|\|(u=v.events=Object.create(null)),(a=v.handle)\|\|(a=v.handle=function(e){return"undefined"!=typeof S&&S.event.triggered!==e.type?S.event.dispatch.apply(t,arguments)
2024-10-07 22:22:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:54 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 Data Ascii: 3ff8"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49731	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:54 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 22:22:54 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=152504 Date: Mon, 07 Oct 2024 22:22:54 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 22:22:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49732	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:54 UTC	494	OUT	GET /securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:54 UTC	625	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:54 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"267239-1707857112000" Expires: Wed, 06 Nov 2024 22:22:54 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:54 UTC	7567	IN	Data Raw: 33 66 66 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 38 2d 30 39 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 67 67 61 62 6c 65 2e 6a 73 Data Ascii: 3ff8/! jQuery UI - v1.12.1 - 2017-08-09 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js
2024-10-07 22:22:54 UTC	8815	IN	Data Raw: 61 69 2c 61 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 61 68 2c 61 69 2c 61 67 2c 74 72 75 65 29 7d 2c 5f 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 61 6a 2c 61 6b 2c 61 67 2c 61 6c 29 7b 61 6c 3d 28 74 79 70 65 6f 66 20 61 6c 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 3f 61 6c 3a 61 67 3b 76 61 72 20 61 68 3d 28 74 79 70 65 6f 66 20 61 6a 3d 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 61 6a 3d 3d 3d 6e 75 6c 6c 29 2c 61 69 3d 7b 65 78 74 72 61 3a 61 68 3f 61 6b 3a 61 67 2c 6b 65 79 73 3a 61 68 3f 61 6a 3a 61 6b 2c 65 6c 65 6d 65 6e 74 3a 61 68 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3a 61 6a 2c 61 64 64 3a 61 6c 7d 3b 61 69 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 Data Ascii: ai,ag){return this._toggleClass(ah,ai,ag,true)},_toggleClass:function(aj,ak,ag,al){al=(typeof al==="boolean")?al:ag;var ah=(typeof aj==="string"\|\|aj===null),ai={extra:ah?ak:ag,keys:ah?aj:ak,element:ah?this.element:aj,add:al};ai.element.toggleClass(this._c
2024-10-07 22:22:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:54 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 78 2e 61 74 5b 31 5d 3d 3d 3d 22 62 6f 74 74 6f 6d 22 3f 2d 61 78 2e 74 61 72 67 65 74 48 65 69 67 68 74 3a 30 2c 61 76 3d 2d 32 2a 61 78 2e 6f 66 66 73 65 74 5b 31 5d 2c 61 45 2c 61 75 3b 69 66 28 61 43 3c 30 29 7b 61 75 3d 61 79 2e 74 6f 70 2b 61 42 2b 61 48 2b 61 76 2b 61 78 2e 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 2d 61 47 2d 61 46 3b 69 66 28 61 75 3c 30 7c 7c 61 75 3c 61 72 28 61 43 29 29 7b 61 79 2e 74 6f 70 2b 3d 61 42 2b 61 48 2b 61 76 7d 7d 65 6c 73 65 7b 69 66 28 61 7a 3e 30 29 7b 61 45 3d 61 79 2e 74 6f 70 2d 61 78 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 54 6f 70 2b 61 42 2b 61 48 2b 61 76 2d 61 74 3b 69 66 28 61 45 3e 30 7c 7c 61 72 28 61 45 29 3c 61 7a 29 7b 61 79 2e 74 6f 70 2b 3d Data Ascii: 3ff8x.at[1]==="bottom"?-ax.targetHeight:0,av=-2*ax.offset[1],aE,au;if(aC<0){au=ay.top+aB+aH+av+ax.collisionHeight-aG-aF;if(au<0\|\|au<ar(aC)){ay.top+=aB+aH+av}}else{if(az>0){aE=ay.top-ax.collisionPosition.marginTop+aB+aH+av-at;if(aE>0\|\|ar(aE)<az){ay.top+=
2024-10-07 22:22:54 UTC	8190	IN	Data Raw: 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 69 66 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 69 73 74 61 6e 63 65 4d 65 74 28 61 67 29 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 28 61 67 29 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3d 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 6f 77 6e 45 76 65 6e 74 2c 61 67 29 21 3d 3d 66 61 6c 73 65 29 3b 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3f 74 68 69 73 2e 5f 6d 6f 75 73 65 44 72 61 67 28 61 67 29 3a 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 61 67 29 29 7d 72 65 74 75 72 6e 20 21 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 7d 2c 5f 6d 6f 75 73 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 61 67 29 7b 74 68 Data Ascii: preventDefault()}if(this._mouseDistanceMet(ag)&&this._mouseDelayMet(ag)){this._mouseStarted=(this._mouseStart(this._mouseDownEvent,ag)!==false);(this._mouseStarted?this._mouseDrag(ag):this._mouseUp(ag))}return !this._mouseStarted},_mouseUp:function(ag){th
2024-10-07 22:22:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:54 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 6f 6c 6c 4c 65 66 74 28 29 3b 61 68 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 69 66 28 74 68 69 73 2e 5f 69 73 52 6f 6f 74 4e 6f 64 65 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 29 7b 61 68 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 7d 72 65 74 75 72 6e 7b 74 6f 70 3a 61 68 2e 74 6f 70 2b 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 63 73 73 28 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 29 2c 31 30 29 7c 7c 30 29 2c 6c 65 66 74 3a 61 68 2e 6c 65 66 74 2b 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 63 73 73 28 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 29 2c Data Ascii: 3ff8ollLeft();ah.top+=this.scrollParent.scrollTop()}if(this._isRootNode(this.offsetParent[0])){ah={top:0,left:0}}return{top:ah.top+(parseInt(this.offsetParent.css("borderTopWidth"),10)\|\|0),left:ah.left+(parseInt(this.offsetParent.css("borderLeftWidth"),
2024-10-07 22:22:54 UTC	8190	IN	Data Raw: 63 74 69 6f 6e 28 61 68 2c 61 69 2c 61 67 29 7b 76 61 72 20 61 6a 3d 61 67 2e 6f 70 74 69 6f 6e 73 3b 69 66 28 61 6a 2e 5f 63 75 72 73 6f 72 29 7b 4b 28 22 62 6f 64 79 22 29 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 61 6a 2e 5f 63 75 72 73 6f 72 29 7d 7d 7d 29 3b 4b 2e 75 69 2e 70 6c 75 67 69 6e 2e 61 64 64 28 22 64 72 61 67 67 61 62 6c 65 22 2c 22 6f 70 61 63 69 74 79 22 2c 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 61 69 2c 61 6a 2c 61 67 29 7b 76 61 72 20 61 68 3d 4b 28 61 6a 2e 68 65 6c 70 65 72 29 2c 61 6b 3d 61 67 2e 6f 70 74 69 6f 6e 73 3b 69 66 28 61 68 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 29 29 7b 61 6b 2e 5f 6f 70 61 63 69 74 79 3d 61 68 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 29 7d 61 68 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 2c Data Ascii: ction(ah,ai,ag){var aj=ag.options;if(aj._cursor){K("body").css("cursor",aj._cursor)}}});K.ui.plugin.add("draggable","opacity",{start:function(ai,aj,ag){var ah=K(aj.helper),ak=ag.options;if(ah.css("opacity")){ak._opacity=ah.css("opacity")}ah.css("opacity",
2024-10-07 22:22:54 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:54 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 74 2c 61 6d 2c 61 71 2c 61 69 29 7b 69 66 28 21 61 6d 2e 6f 66 66 73 65 74 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 76 61 72 20 61 6b 3d 28 61 74 2e 70 6f 73 69 74 69 6f 6e 41 62 73 7c 7c 61 74 2e 70 6f 73 69 74 69 6f 6e 2e 61 62 73 6f 6c 75 74 65 29 2e 6c 65 66 74 2b 61 74 2e 6d 61 72 67 69 6e 73 2e 6c 65 66 74 2c 61 70 3d 28 61 74 2e 70 6f 73 69 74 69 6f 6e 41 62 73 7c 7c 61 74 2e 70 6f 73 69 74 69 6f 6e 2e 61 62 73 6f 6c 75 74 65 29 2e 74 6f 70 2b 61 74 2e 6d 61 72 67 69 6e 73 2e 74 6f 70 2c 61 6a 3d 61 6b 2b 61 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2c 61 6f 3d 61 70 2b 61 74 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 Data Ascii: 3ff8}return function(at,am,aq,ai){if(!am.offset){return false}var ak=(at.positionAbs\|\|at.position.absolute).left+at.margins.left,ap=(at.positionAbs\|\|at.position.absolute).top+at.margins.top,aj=ak+at.helperProportions.width,ao=ap+at.helperProportions.hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49738	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	477	OUT	GET /securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:55 UTC	624	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:55 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"37785-1707857112000" Expires: Wed, 06 Nov 2024 22:22:55 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:55 UTC	7568	IN	Data Raw: 33 66 66 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 50 72 69 6d 65 46 61 63 65 73 29 7b 61 2e 50 72 69 6d 65 46 61 63 65 73 2e 64 65 62 75 67 28 22 50 72 69 6d 65 46 61 63 65 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 2c 20 69 67 6e 6f 72 69 6e 67 20 64 75 70 6c 69 63 61 74 65 20 65 78 65 63 75 74 69 6f 6e 2e 22 29 3b 72 65 74 75 72 6e 7d 76 61 72 20 62 3d 7b 65 73 63 61 70 65 43 6c 69 65 6e 74 49 64 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 22 23 22 2b 63 2e 72 65 70 6c 61 63 65 28 2f 3a 2f 67 2c 22 5c 5c 3a 22 29 7d 2c 6f 6e 45 6c 65 6d 65 6e 74 4c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 69 66 28 63 2e 70 72 6f 70 28 22 63 6f 6d 70 6c 65 74 65 22 29 29 7b 64 28 29 7d 65 6c 73 65 7b 63 2e 6f 6e 28 22 Data Ascii: 3ff8(function(a){if(a.PrimeFaces){a.PrimeFaces.debug("PrimeFaces already loaded, ignoring duplicate execution.");return}var b={escapeClientId:function(c){return"#"+c.replace(/:/g,"\\:")},onElementLoad:function(c,d){if(c.prop("complete")){d()}else{c.on("
2024-10-07 22:22:55 UTC	8814	IN	Data Raw: 69 61 6c 6f 67 28 63 29 7d 2c 63 6f 6e 66 69 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 62 2e 64 69 61 6c 6f 67 2e 44 69 61 6c 6f 67 48 61 6e 64 6c 65 72 2e 63 6f 6e 66 69 72 6d 28 63 29 7d 2c 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 3a 5b 5d 2c 61 64 64 44 65 66 65 72 72 65 64 52 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 63 2c 64 29 7b 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 2e 70 75 73 68 28 7b 77 69 64 67 65 74 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 3a 63 2c 63 61 6c 6c 62 61 63 6b 3a 64 7d 29 7d 2c 72 65 6d 6f 76 65 44 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 64 3d 28 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 2e 6c 65 6e 67 74 68 2d 31 29 Data Ascii: ialog(c)},confirm:function(c){b.dialog.DialogHandler.confirm(c)},deferredRenders:[],addDeferredRender:function(e,c,d){this.deferredRenders.push({widget:e,container:c,callback:d})},removeDeferredRenders:function(e){for(var d=(this.deferredRenders.length-1)
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 63 74 69 6f 6e 28 66 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 74 69 6e 67 20 61 6a 61 78 20 72 65 71 75 65 73 74 2e 22 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 63 75 73 74 6f 6d 46 6f 63 75 73 3d 66 61 6c 73 65 3b 76 61 72 20 6e 3d 28 66 2e 67 6c 6f 62 61 6c 3d 3d 3d 74 72 75 65 7c 7c 66 2e 67 6c 6f 62 61 6c 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 3f 74 72 75 65 3a 66 61 6c 73 65 2c 63 3d 6e 75 6c 6c 2c 67 3d 6e 75 6c 6c 2c 76 3d 6e 75 6c 6c 3b 69 66 28 66 2e 6f 6e 73 74 61 72 74 29 7b 76 3d 66 2e 6f 6e 73 74 61 72 74 2e 63 61 6c 6c 28 74 68 69 73 2c 66 29 7d 69 66 28 66 2e 65 78 74 26 26 66 2e 65 78 74 2e 6f 6e 73 74 61 72 74 29 7b 76 3d 66 2e 65 78 74 2e 6f 6e 73 74 61 72 74 2e 63 61 6c 6c 28 74 68 69 Data Ascii: 3ff8ction(f){PrimeFaces.debug("Initiating ajax request.");PrimeFaces.customFocus=false;var n=(f.global===true\|\|f.global===undefined)?true:false,c=null,g=null,v=null;if(f.onstart){v=f.onstart.call(this,f)}if(f.ext&&f.ext.onstart){v=f.ext.onstart.call(thi
2024-10-07 22:22:55 UTC	8190	IN	Data Raw: 29 7b 76 61 72 20 63 3d 64 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 64 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 64 2e 74 65 78 74 3b 69 66 28 65 2e 70 66 41 72 67 73 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 62 29 7b 65 2e 70 66 41 72 67 73 5b 61 5d 3d 62 5b 61 5d 7d 7d 65 6c 73 65 7b 65 2e 70 66 41 72 67 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 29 7d 7d 7d 7d 2c 64 6f 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 2c 64 6f 44 65 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 24 28 50 72 69 6d 65 46 61 63 65 73 2e 65 73 63 61 70 65 43 6c 69 65 6e 74 49 64 28 62 29 29 2e 72 65 6d 6f 76 65 28 29 7d Data Ascii: ){var c=d.textContent\|\|d.innerText\|\|d.text;if(e.pfArgs){var b=JSON.parse(c);for(var a in b){e.pfArgs[a]=b[a]}}else{e.pfArgs=JSON.parse(c)}}}},doError:function(a,b){},doDelete:function(a){var b=a.getAttribute("id");$(PrimeFaces.escapeClientId(b)).remove()}
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	5046	IN	Data Raw: 31 33 61 39 0d 0a 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 29 7b 74 68 69 73 2e 64 65 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 74 68 69 73 2e 64 65 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 61 29 7d 2c 61 64 64 52 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 61 29 7d 7d 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 77 69 64 67 65 74 2e 44 79 6e 61 6d 69 63 4f 76 65 72 6c 61 79 57 69 64 67 65 74 3d 50 72 69 6d 65 46 61 63 65 73 2e 77 69 64 67 65 74 2e 42 61 73 65 Data Ascii: 13a9stroyListeners){this.destroyListeners=[]}this.destroyListeners.push(a)},addRefreshListener:function(a){if(!this.refreshListeners){this.refreshListeners=[]}this.refreshListeners.push(a)}});PrimeFaces.widget.DynamicOverlayWidget=PrimeFaces.widget.Base

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49741	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	483	OUT	GET /securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:55 UTC	625	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:55 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"430302-1707857112000" Expires: Wed, 06 Nov 2024 22:22:55 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:55 UTC	7567	IN	Data Raw: 33 66 66 38 0d 0a 69 66 28 21 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 3d 7b 7d 3b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 2e 44 69 61 6c 6f 67 48 61 6e 64 6c 65 72 3d 7b 6f 70 65 6e 44 69 61 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 66 69 6e 64 52 6f 6f 74 57 69 6e 64 6f 77 28 29 2c 6b 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2b 22 5f 64 6c 67 22 3b 69 66 28 68 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6b 29 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 6a 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2e 72 65 70 6c 61 63 65 28 2f 3a 2f 67 2c 22 5f 22 29 2b 22 5f 64 6c 67 77 69 64 Data Ascii: 3ff8if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),k=f.sourceComponentId+"_dlg";if(h.document.getElementById(k)){return}var j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwid
2024-10-07 22:22:55 UTC	8815	IN	Data Raw: 72 64 69 6f 6e 22 29 7d 7d 64 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 3b 74 68 69 73 2e 62 69 6e 64 4b 65 79 45 76 65 6e 74 73 28 29 7d 2c 62 69 6e 64 4b 65 79 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6f 6e 28 22 66 6f 63 75 73 2e 61 63 63 6f 72 64 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 74 61 62 73 2d 6f 75 74 6c 69 6e 65 22 29 7d 29 2e 6f 6e 28 22 62 6c 75 72 2e 61 63 63 6f 72 64 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 74 61 62 73 2d 6f 75 74 6c 69 6e 65 22 29 7d 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 61 63 63 6f 72 64 69 6f 6e 22 2c Data Ascii: rdion")}}d.preventDefault()});this.bindKeyEvents()},bindKeyEvents:function(){this.headers.on("focus.accordion",function(){$(this).addClass("ui-tabs-outline")}).on("blur.accordion",function(){$(this).removeClass("ui-tabs-outline")}).on("keydown.accordion",
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 74 72 75 65 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 7d 7d 2c 65 6e 61 62 6c 65 44 72 6f 70 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 29 29 7b 74 68 69 73 2e 62 69 6e 64 44 72 6f 70 64 6f 77 6e 45 76 65 6e 74 73 28 29 3b 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 66 61 6c 73 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 7d 7d 2c 62 69 6e 64 4b 65 79 45 76 65 6e 74 Data Ascii: 3ff8).prop("disabled",true).addClass("ui-state-disabled")}},enableDropdown:function(){if(this.dropdown.length&&this.dropdown.prop("disabled")){this.bindDropdownEvents();this.dropdown.prop("disabled",false).removeClass("ui-state-disabled")}},bindKeyEvent
2024-10-07 22:22:55 UTC	8190	IN	Data Raw: 3a 74 72 75 65 7d 29 7d 69 66 28 74 68 69 73 2e 68 61 73 42 65 68 61 76 69 6f 72 28 22 71 75 65 72 79 22 29 29 7b 74 68 69 73 2e 63 61 6c 6c 42 65 68 61 76 69 6f 72 28 22 71 75 65 72 79 22 2c 62 29 7d 65 6c 73 65 7b 50 72 69 6d 65 46 61 63 65 73 2e 61 6a 61 78 2e 52 65 71 75 65 73 74 2e 68 61 6e 64 6c 65 28 62 29 7d 7d 2c 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 6c 69 67 6e 50 61 6e 65 6c 28 29 3b 69 66 28 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 29 7b 74 68 69 73 2e 70 61 6e 65 6c 2e 73 68 6f 77 28 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 2c 7b 7d 2c 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 44 75 72 61 74 69 6f 6e 29 7d 65 6c 73 65 7b 74 68 69 73 2e 70 61 6e 65 6c 2e 73 68 6f 77 28 29 7d 7d 2c 68 69 64 65 3a 66 75 6e Data Ascii: :true})}if(this.hasBehavior("query")){this.callBehavior("query",b)}else{PrimeFaces.ajax.Request.handle(b)}},show:function(){this.alignPanel();if(this.cfg.effect){this.panel.show(this.cfg.effect,{},this.cfg.effectDuration)}else{this.panel.show()}},hide:fun
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 5f 73 75 70 65 72 28 62 29 3b 74 68 69 73 2e 69 6e 70 75 74 3d 24 28 74 68 69 73 2e 6a 71 49 64 2b 22 5f 69 6e 70 75 74 22 29 3b 74 68 69 73 2e 6a 71 45 6c 3d 74 68 69 73 2e 63 66 67 2e 70 6f 70 75 70 3f 74 68 69 73 2e 69 6e 70 75 74 3a 24 28 74 68 69 73 2e 6a 71 49 64 2b 22 5f 69 6e 6c 69 6e 65 22 29 3b 76 61 72 20 67 3d 74 68 69 73 3b 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 65 4c 6f 63 61 6c 65 28 29 3b 74 68 69 73 2e 62 69 6e 64 44 61 74 65 53 65 6c 65 63 74 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 62 69 6e 64 56 69 65 77 43 68 61 6e 67 65 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 62 69 6e 64 43 6c 6f 73 65 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 63 66 67 Data Ascii: 3ff8it:function(b){this._super(b);this.input=$(this.jqId+"_input");this.jqEl=this.cfg.popup?this.input:$(this.jqId+"_inline");var g=this;this.configureLocale();this.bindDateSelectListener();this.bindViewChangeListener();this.bindCloseListener();this.cfg
2024-10-07 22:22:55 UTC	8190	IN	Data Raw: 67 68 74 28 29 2a 74 68 69 73 2e 70 61 67 65 29 29 7d 7d 2c 72 65 66 72 65 73 68 44 69 6d 65 6e 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 24 28 77 69 6e 64 6f 77 29 3b 69 66 28 61 2e 77 69 64 74 68 28 29 3c 3d 74 68 69 73 2e 63 66 67 2e 62 72 65 61 6b 70 6f 69 6e 74 29 7b 74 68 69 73 2e 63 6f 6c 75 6d 6e 73 3d 31 3b 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 49 74 65 6d 57 69 64 74 68 73 28 74 68 69 73 2e 63 6f 6c 75 6d 6e 73 29 3b 74 68 69 73 2e 74 6f 74 61 6c 50 61 67 65 73 3d 74 68 69 73 2e 69 74 65 6d 73 43 6f 75 6e 74 3b 74 68 69 73 2e 72 65 73 70 6f 6e 73 69 76 65 44 72 6f 70 64 6f 77 6e 2e 73 68 6f 77 28 29 3b 74 68 69 73 2e 70 61 67 65 4c 69 6e 6b 73 2e 68 69 64 65 28 29 7d 65 6c 73 65 7b 74 68 69 73 2e 63 6f 6c 75 6d 6e Data Ascii: ght()*this.page))}},refreshDimensions:function(){var a=$(window);if(a.width()<=this.cfg.breakpoint){this.columns=1;this.calculateItemWidths(this.columns);this.totalPages=this.itemsCount;this.responsiveDropdown.show();this.pageLinks.hide()}else{this.column
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 6c 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 74 6f 67 67 6c 65 28 24 28 74 68 69 73 29 29 3b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 3b 74 68 69 73 2e 69 74 65 6d 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 22 3e 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 20 3e 20 6c 61 62 65 6c 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 73 65 6c 65 63 74 43 68 65 63 6b 62 6f 78 4d 65 6e 75 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 74 6f 67 67 6c 65 28 24 28 74 68 69 73 29 2e 70 72 65 76 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 63 68 6b 62 6f 78 2d 62 6f 78 22 29 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 28 29 3b 62 2e 70 72 65 76 65 6e 74 44 65 Data Ascii: 3ff8ler",function(b){a.toggle($(this));b.preventDefault()});this.itemContainer.find("> .ui-columntoggler-item > label").on("click.selectCheckboxMenu",function(b){a.toggle($(this).prev().children(".ui-chkbox-box"));PrimeFaces.clearSelection();b.preventDe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49739	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	468	OUT	GET /securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:55 UTC	624	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:55 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:14 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"47334-1707857114000" Expires: Wed, 06 Nov 2024 22:22:55 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-10-07 22:22:55 UTC	7568	IN	Data Raw: 33 66 66 38 0d 0a 69 66 28 21 28 28 6a 73 66 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 3e 3d 32 33 30 30 30 29 26 26 28 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 3e 3d 33 29 29 29 7b 76 61 72 20 6a 73 66 3d 7b 7d 3b 6a 73 66 2e 61 6a 61 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 65 72 72 6f 72 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 64 65 6c 61 79 48 61 6e 64 6c 65 72 3d 6e 75 6c 6c 3b 76 61 72 20 69 73 49 45 3d 66 75 6e 63 74 69 6f 6e 20 69 73 49 45 28 29 7b 69 66 28 74 79 70 65 6f 66 20 69 73 49 45 43 61 63 68 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 Data Ascii: 3ff8if(!((jsf&&jsf.specversion&&jsf.specversion>=23000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={};jsf.ajax=function(){var eventListeners=[];var errorListeners=[];var delayHandler=null;var isIE=function isIE(){if(typeof isIECache!=="undefined")
2024-10-07 22:22:55 UTC	8814	IN	Data Raw: 65 74 43 6c 69 65 6e 74 49 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 3d 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 73 5b 69 5d 3b 69 66 28 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 2e 69 6e 64 65 78 4f 66 28 6a 73 66 2e 73 65 70 61 72 61 74 6f 72 63 68 61 72 29 3d 3d 30 29 7b 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 3d 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 69 66 28 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 2e 69 6e 64 65 78 4f 66 28 6e 61 6d 69 6e 67 43 6f 6e 74 61 69 6e 65 72 50 72 65 66 69 78 29 21 3d 30 29 7b 74 61 72 67 65 74 43 6c 69 65 6e 74 49 64 3d 6e 61 6d 69 6e 67 43 6f 6e 74 61 69 6e 65 72 50 72 65 66 69 78 2b 74 61 72 67 65 74 43 6c 69 65 6e Data Ascii: etClientIds.length;i++){var targetClientId=targetClientIds[i];if(targetClientId.indexOf(jsf.separatorchar)==0){targetClientId=targetClientId.substring(1);if(targetClientId.indexOf(namingContainerPrefix)!=0){targetClientId=namingContainerPrefix+targetClien
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	8192	IN	Data Raw: 33 66 66 38 0d 0a 68 69 6c 64 28 6e 6f 64 65 29 29 3b 74 72 79 7b 74 65 6d 70 2e 6f 75 74 65 72 48 54 4d 4c 3d 22 22 7d 63 61 74 63 68 28 65 78 29 7b 7d 7d 3b 76 61 72 20 64 65 6c 65 74 65 43 68 69 6c 64 72 65 6e 3d 66 75 6e 63 74 69 6f 6e 20 64 65 6c 65 74 65 43 68 69 6c 64 72 65 6e 28 6e 6f 64 65 29 7b 69 66 28 21 6e 6f 64 65 29 7b 72 65 74 75 72 6e 7d 66 6f 72 28 76 61 72 20 78 3d 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 78 3e 3d 30 3b 78 2d 2d 29 7b 76 61 72 20 63 68 69 6c 64 4e 6f 64 65 3d 6e 6f 64 65 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 78 5d 3b 64 65 6c 65 74 65 4e 6f 64 65 28 63 68 69 6c 64 4e 6f 64 65 29 7d 7d 3b 76 61 72 20 63 6f 70 79 43 68 69 6c 64 4e 6f 64 65 73 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 70 79 43 68 Data Ascii: 3ff8hild(node));try{temp.outerHTML=""}catch(ex){}};var deleteChildren=function deleteChildren(node){if(!node){return}for(var x=node.childNodes.length-1;x>=0;x--){var childNode=node.childNodes[x];deleteNode(childNode)}};var copyChildNodes=function copyCh
2024-10-07 22:22:55 UTC	8190	IN	Data Raw: 62 6f 64 79 45 6e 64 3d 62 6f 64 79 45 6e 64 45 78 2e 65 78 65 63 28 73 72 63 29 3b 69 66 28 62 6f 64 79 45 6e 64 21 3d 3d 6e 75 6c 6c 29 7b 73 72 63 42 6f 64 79 3d 73 72 63 2e 73 75 62 73 74 72 69 6e 67 28 62 6f 64 79 53 74 61 72 74 45 78 2e 6c 61 73 74 49 6e 64 65 78 2c 62 6f 64 79 45 6e 64 2e 69 6e 64 65 78 29 7d 65 6c 73 65 7b 73 72 63 42 6f 64 79 3d 73 72 63 2e 73 75 62 73 74 72 69 6e 67 28 62 6f 64 79 53 74 61 72 74 45 78 2e 6c 61 73 74 49 6e 64 65 78 29 7d 65 6c 65 6d 65 6e 74 52 65 70 6c 61 63 65 53 74 72 28 64 6f 63 42 6f 64 79 2c 22 62 6f 64 79 22 2c 73 72 63 42 6f 64 79 29 7d 7d 65 6c 73 65 7b 65 6c 65 6d 65 6e 74 52 65 70 6c 61 63 65 53 74 72 28 64 6f 63 42 6f 64 79 2c 22 62 6f 64 79 22 2c 73 72 63 29 7d 7d 65 6c 73 65 7b 69 66 28 69 64 3d 3d Data Ascii: bodyEnd=bodyEndEx.exec(src);if(bodyEnd!==null){srcBody=src.substring(bodyStartEx.lastIndex,bodyEnd.index)}else{srcBody=src.substring(bodyStartEx.lastIndex)}elementReplaceStr(docBody,"body",srcBody)}}else{elementReplaceStr(docBody,"body",src)}}else{if(id==
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	8192	IN	Data Raw: 33 38 61 36 0d 0a 2e 22 7d 65 6c 73 65 7b 64 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 65 72 72 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 73 65 72 76 65 72 2c 20 73 74 61 74 75 73 3a 20 22 2b 64 61 74 61 2e 72 65 73 70 6f 6e 73 65 43 6f 64 65 7d 7d 65 6c 73 65 7b 69 66 28 73 74 61 74 75 73 3d 3d 22 73 65 72 76 65 72 45 72 72 6f 72 22 29 7b 64 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 73 65 72 76 65 72 45 72 72 6f 72 4d 65 73 73 61 67 65 7d 65 6c 73 65 7b 69 66 28 73 74 61 74 75 73 3d 3d 22 65 6d 70 74 79 52 65 73 70 6f 6e 73 65 22 29 7b 64 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 22 41 6e 20 65 6d 70 74 79 20 72 65 73 70 6f 6e 73 65 20 77 61 73 20 72 65 63 65 Data Ascii: 38a6."}else{data.description="There was an error communicating with the server, status: "+data.responseCode}}else{if(status=="serverError"){data.description=serverErrorMessage}else{if(status=="emptyResponse"){data.description="An empty response was rece
2024-10-07 22:22:55 UTC	6316	IN	Data Raw: 3d 3d 3d 22 65 72 72 6f 72 2d 6e 61 6d 65 22 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7b 65 72 72 6f 72 4e 61 6d 65 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 2e 6e 6f 64 65 56 61 6c 75 65 7d 7d 65 6c 65 6d 65 6e 74 3d 72 65 73 70 6f 6e 73 65 54 79 70 65 2e 66 69 72 73 74 43 68 69 6c 64 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 69 66 28 65 6c 65 6d 65 6e 74 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 22 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7b 65 72 72 6f 72 4d 65 73 73 61 67 65 3d 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 2e 6e 6f 64 65 56 61 6c 75 65 7d 7d 73 65 6e 64 45 72 72 6f 72 28 72 65 71 75 Data Ascii: ==="error-name"){if(null!=element.firstChild){errorName=element.firstChild.nodeValue}}element=responseType.firstChild.nextSibling;if(element.nodeName==="error-message"){if(null!=element.firstChild){errorMessage=element.firstChild.nodeValue}}sendError(requ
2024-10-07 22:22:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49740	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	486	OUT	GET /securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:55 UTC	617	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:55 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=2592000 ETag: W/"2266-1707857112000" Content-Length: 2266 Expires: Wed, 06 Nov 2024 22:22:55 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: text/javascript
2024-10-07 22:22:55 UTC	2266	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 68 6f 74 6b 65 79 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 32 2e 30 22 2c 73 70 65 63 69 61 6c 4b 65 79 73 3a 7b 38 3a 22 62 61 63 6b 73 70 61 63 65 22 2c 39 3a 22 74 61 62 22 2c 31 30 3a 22 72 65 74 75 72 6e 22 2c 31 33 3a 22 72 65 74 75 72 6e 22 2c 31 36 3a 22 73 68 69 66 74 22 2c 31 37 3a 22 63 74 72 6c 22 2c 31 38 3a 22 61 6c 74 22 2c 31 39 3a 22 70 61 75 73 65 22 2c 32 30 3a 22 63 61 70 73 6c 6f 63 6b 22 2c 32 37 3a 22 65 73 63 22 2c 33 32 3a 22 73 70 61 63 65 22 2c 33 33 3a 22 70 61 67 65 75 70 22 2c 33 34 3a 22 70 61 67 65 64 6f 77 6e 22 2c 33 35 3a 22 65 6e 64 22 2c 33 36 3a 22 68 6f 6d 65 22 2c 33 37 3a 22 6c 65 66 74 22 2c 33 38 3a 22 75 70 22 2c 33 39 3a 22 72 69 67 68 74 22 2c 34 30 3a 22 64 6f 77 Data Ascii: (function(b){b.hotkeys={version:"0.2.0",specialKeys:{8:"backspace",9:"tab",10:"return",13:"return",16:"shift",17:"ctrl",18:"alt",19:"pause",20:"capslock",27:"esc",32:"space",33:"pageup",34:"pagedown",35:"end",36:"home",37:"left",38:"up",39:"right",40:"dow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49742	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	440	OUT	GET /formpostdir/images/TipClose.gif HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:55 UTC	613	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:55 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1717088664000" Last-Modified: Thu, 30 May 2024 17:04:24 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:55 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:55 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 02 00 99 8d 6c 67 5f 49 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 08 00 08 00 00 02 11 0c 84 02 66 b8 f7 5e 5a 6d 86 aa 8c 94 99 bb 50 00 00 3b Data Ascii: GIF89alg_I!,f^ZmP;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49743	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	430	OUT	GET /formpostdir/Image?i=7 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:55 UTC	519	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:55 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1253 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:55 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:55 UTC	1253	IN	Data Raw: 47 49 46 38 39 61 c8 00 32 00 c4 10 00 a3 b7 c7 67 88 a3 f0 f3 f6 1a 4c 74 d1 db e3 2a 58 7e e0 e7 ec 39 64 87 58 7c 99 76 94 ac b2 c3 d1 94 ab be c2 cf da 48 70 90 85 9f b5 0b 40 6b ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 10 00 2c 00 00 00 00 c8 00 32 00 00 05 ff 20 24 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c b6 36 ce e8 b4 7a 9d 26 94 df c3 87 7c 4e af db e9 0c b8 fe 77 ef fb 1f 79 7b 82 3a 7f 85 78 83 88 37 86 8b 81 89 8e 31 0e 91 92 93 94 93 01 75 8d 89 04 0e 00 61 0a 0e 99 2c 0d 87 33 0c 98 28 06 0c aa ab 0c 06 Data Ascii: GIF89a2gLt*X~9dX\|vHp@k!,2 $dihlp,tmx\|pH,rl:tJZvzxL6z&\|Nwy{:x71ua,3(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49744	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	491	OUT	GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:55 UTC	612	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:55 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Tue, 13 Feb 2024 20:45:12 GMT Cache-Control: max-age=604800, max-age=0 ETag: W/"16755-1707857112000" Expires: Mon, 07 Oct 2024 22:22:55 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: image/png
2024-10-07 22:22:55 UTC	7580	IN	Data Raw: 33 66 66 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 01 fc 08 06 00 00 00 b0 f1 ad 14 00 00 41 3a 49 44 41 54 78 01 b4 57 03 b0 24 4b d3 3d dd 3d 3d 9e b5 06 7b ff b5 9e 6d db b6 6d db b6 6d db b6 ad bb b6 77 af d7 3b 77 ac ae ff 64 45 77 bc 89 79 0a 7d 19 91 51 d5 55 d5 95 27 33 4f 65 57 a3 41 0c a5 94 81 ff 91 b8 7b d7 ef 8f 7f 32 d6 9f 9a dc 7b ef bd 93 89 44 22 66 9a a6 c2 df 08 c7 f1 4f 62 59 96 36 d8 d6 d6 96 79 fb ed b7 db 01 88 2e a3 e2 df 00 f8 a9 9b bf fc f2 cb a7 8c 1a 35 6a ed a6 a6 a6 78 34 1a ed a1 28 0d 9e fc 7d 1f ec ab 3f c7 0d 4a b1 58 ec 6e 6f 6f ef 9c 35 6b d6 d4 c3 0e 3b ec 51 00 3f 53 cb f5 00 44 95 18 3f e2 88 23 4e bc f2 ca 2b 2f 1c 33 66 cc 50 c8 aa 72 19 15 6a ad 56 83 e3 38 a8 51 1d ad 35 8e 39 50 Data Ascii: 3ff8PNGIHDR A:IDATxW$K==={mmmw;wdEwy}QU'3OeWA{2{D"fObY6y.5jx4(}?JXnoo5k;Q?SD?#N+/3fPrjV8Q59P
2024-10-07 22:22:56 UTC	8802	IN	Data Raw: d8 30 2a 17 c2 44 6a aa ad 98 b5 9f a2 97 5f 56 7e 6e dd 86 98 fe a0 69 c1 2d 7e 5a eb eb 9b 73 87 d5 96 c2 f0 30 db 1d a6 e3 3e 6c d1 e2 0d dc 0b 9f 04 07 af cb e7 9d 0b 23 22 ac 46 d6 01 3f 0f 0d d9 00 06 69 3d 5f 19 15 15 76 25 31 f1 2b f3 e8 d1 54 f2 da 6b 6a e1 ec d9 4a 31 4b 34 85 e3 9e b5 fd 1c 1a 4a 9f 7a 34 a3 05 c1 c1 5b 01 04 bc e9 ef ff 7e 56 cb 96 64 0c 0d b5 16 44 44 d0 e7 81 81 9b 71 0f e8 75 8a e2 26 6a ca 61 b3 e9 98 f9 46 15 a4 0b 60 48 97 2e d5 ed 88 8e 4e e8 69 30 6c 6b 65 d0 77 b6 d4 32 d5 7c ed 9a cc fb cb 35 aa aa 94 de cc d4 65 9a cd d6 5f 3d bd 97 bd 5b 50 60 27 a9 39 e2 4b 8a ab ab 20 d5 f5 20 15 90 ee 7d 7a 66 bd 00 2a 1f 01 d2 eb 54 4f 17 03 c2 25 c9 3e f6 df b5 6d 3b bc af 9b db 17 c1 40 e7 72 53 85 52 77 f9 b2 8e 15 15 c9 5a Data Ascii: 0Dj_V~ni-~Zs0>l#"F?i=_v%1+TkjJ1K4Jz4[~VdDDqu&jaF`H.Ni0lkew2\|5e_=[P`'9K }zfTO%>m;@rSRwZ
2024-10-07 22:22:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-07 22:22:56 UTC	391	IN	Data Raw: 31 37 62 0d 0a 73 ad cf 1e cb c0 82 30 a2 c6 cf 1d 7e 5a 34 61 ed 53 ce f5 2b d6 69 51 7b 99 9d ce 0a a7 30 a0 22 31 3d 39 76 e4 fb ce ae f5 19 39 61 91 8a 3e b0 40 65 7e 89 16 8a 35 5d e4 17 b2 00 fb 82 64 19 18 fa 2b 9e f4 01 62 e9 65 07 00 cb 3a bf f7 52 b4 07 7d f6 44 16 c4 50 24 f6 be 47 9c 13 4b d0 44 cf cd 29 b2 8c 10 c9 23 61 fa ef 87 de 7c 1d 44 ea 10 90 65 c8 f7 cb 2a 16 33 ed 8d e3 de 75 fe 9e ca 82 08 22 e9 fd 13 da 45 24 71 9e 5b c8 01 96 90 14 89 82 a2 1e c4 98 a3 61 8d fb 04 28 ca a0 58 b0 ce 92 4e 2e 0b 21 ec b3 d3 d7 8d 9b 14 f4 c5 08 b1 00 a0 69 d2 a1 17 47 6d 6e 2b 14 5d 4f 24 1b 2c 8a c5 98 62 93 00 ee ae 54 c6 29 b5 37 e0 7a 60 e5 41 b9 19 3f 65 a9 66 4e ee f5 0d a0 fb dc 11 3b f0 da 9f a6 b4 1b e5 1d 07 9d 43 22 2a 23 22 4a 80 6d 80 Data Ascii: 17bs0~Z4aS+iQ{0"1=9v9a>@e~5]d+be:R}DP$GKD)#a\|De3u"E$q[a(XN.!iGmn+]O$,bT)7z`A?efN;C"#"Jm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49745	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:55 UTC	442	OUT	GET /formpostdir/images/BangBullet.gif HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:56 UTC	613	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:56 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"79-1717088664000" Last-Modified: Thu, 30 May 2024 17:04:24 GMT Content-Length: 79 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:56 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:56 UTC	79	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 a2 04 00 ff ff 00 66 66 00 00 00 00 99 99 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 04 00 2c 00 00 00 00 08 00 08 00 00 03 14 48 04 0c ba 40 08 06 e3 6c 2c 04 cc c6 e0 20 a4 51 0a a6 24 00 3b Data Ascii: GIF89aff!,H@l, Q$;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49746	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:56 UTC	443	OUT	GET /formpostdir/images/CheckBullet.gif HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
2024-10-07 22:22:56 UTC	613	IN	HTTP/1.1 200 200 Date: Mon, 07 Oct 2024 22:22:56 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1717088664000" Last-Modified: Thu, 30 May 2024 17:04:24 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Wed, 06 Nov 2024 22:22:56 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-10-07 22:22:56 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 03 00 00 bf 00 ff ff ff 80 ff 80 ff ff ff 21 f9 04 01 00 00 03 00 2c 00 00 00 00 08 00 08 00 00 02 11 dc 80 60 97 c8 1d 1a 0a 62 56 0a b1 43 d5 99 66 14 00 3b Data Ascii: GIF89a!,`bVCf;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49747	67.231.156.254	443	7060	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:22:56 UTC	375	OUT	GET /favicon.ico HTTP/1.1 Host: securemail.lpl.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BID=30b79a3a
2024-10-07 22:22:56 UTC	598	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:22:56 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Fri, 09 Sep 2022 18:31:36 GMT ETag: "47e-5e842c188b200" Accept-Ranges: bytes Content-Length: 1150 Cache-Control: public, max-age=1550000 Expires: Mon, 07 Oct 2024 22:22:56 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' Connection: close Content-Type: image/x-icon
2024-10-07 22:22:56 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 f3 0e 00 00 f3 0e 00 00 00 00 00 00 00 00 00 00 d7 8c 02 ff ec 92 00 ff ee 8f 00 ff d6 82 04 ff d6 86 0f ff eb 92 0c ff e6 86 00 ff ec 90 01 ff ef 90 00 ff e9 8d 00 ff e4 89 06 ff e4 88 0b ff e3 87 0a ff e3 88 05 ff e3 89 02 ff e4 8c 02 ff eb 8c 00 ff f5 8b 00 ff e5 8b 0f ff ef be 80 ff ff f0 d9 ff ff e8 bf ff ea a2 44 ff f1 88 01 ff d8 8b 10 ff e2 8e 0c ff e8 8d 03 ff eb 89 00 ff e9 8b 02 ff e6 8d 07 ff e1 8c 08 ff de 8a 08 ff d5 88 13 ff f0 8a 00 ff eb 8c 0d ff fc d4 a0 ff f1 fb ff ff fb fe ff ff dc a7 64 ff ef 8a 05 ff dd 88 0a ff e9 8c 01 ff ee 8b 00 ff eb 8b 00 ff e6 8e 01 ff df 8c 08 ff db 88 04 ff e2 89 03 ff c5 Data Ascii: h( Dd

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.8	49754	23.206.229.226	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:23:02 UTC	2123	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109008217 X-BM-CBT: 1696494873 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 229C124F14F843F693B4EF574DFCAAAB X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109008217 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,d-thshldspcl40 X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=7A0479E0E07C4D7D91A8C7552F34E6D4&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&LUT=1696493908190&IPMH=7bc3b11d&IPMID=1696494873321&HV=1696494765; MUID=4E6D5F19647E45969740B90CC0355D4C; _SS=SID=1F4D6C7F4B26664337657FDE4A3767CB&CPID=1696494874312&AC=1&CPH=893a1c21; _EDGE_S=SID=1F4D6C7F4B26664337657FDE4A3767CB; MUIDB=4E6D5F19647E45969740B90CC0355D4C
2024-10-07 22:23:02 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-07 22:23:02 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 34 45 36 44 35 46 31 39 36 34 37 45 34 35 39 36 39 37 34 30 42 39 30 43 43 30 33 35 35 44 34 43 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 30 36 38 37 30 43 30 39 41 31 46 37 34 43 39 43 42 33 41 42 46 30 34 30 46 43 39 46 30 41 37 38 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>4E6D5F19647E45969740B90CC0355D4C</CID><Events><E><T>Event.ClientInst</T><IG>06870C09A1F74C9CB3ABF040FC9F0A78</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-07 22:23:03 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C28CE1EB7D754F8D97691EAE8E9E6C54 Ref B: LAX311000109017 Ref C: 2024-10-07T22:23:02Z Date: Mon, 07 Oct 2024 22:23:03 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.e4d7ce17.1728339782.266d84f

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.8	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:02 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:02 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:02 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222402Z-1657d5bbd48cpbzgkvtewk0wu0000000047g0000000071yx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:02 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 22:24:03 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.8	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:04 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:04 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:04 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222404Z-1657d5bbd48wd55zet5pcra0cg000000041g00000000fkky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:04 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.8	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:04 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:04 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222404Z-1657d5bbd48gqrfwecymhhbfm800000002wg00000000kbbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:04 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:04 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:04 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:04 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222404Z-1657d5bbd48jwrqbupe3ktsx9w000000049g00000000f8h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:04 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:04 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:04 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222404Z-1657d5bbd48762wn1qw4s5sd300000000400000000008b1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:04 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.8	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:04 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:04 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:04 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222404Z-1657d5bbd4824mj9d6vp65b6n400000004cg00000000204b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:04 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.8	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd4824mj9d6vp65b6n4000000047g00000000pyvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.8	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b6ff579e-d01e-0028-17ff-187896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd48gqrfwecymhhbfm800000002w000000000k4tu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.8	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd48vhs7r2p1ky7cs5w00000004gg000000000msx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.8	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd48tnj6wmberkg2xy8000000048g000000002rgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.8	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd48sqtlf1huhzuwq7000000003s000000000s4qr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.8	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd48jwrqbupe3ktsx9w00000004c0000000004bbv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.8	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd4824mj9d6vp65b6n4000000048000000000ne9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.8	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd48xsz2nuzq4vfrzg800000003vg00000000utb5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.8	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:05 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 98328d39-101e-0028-56f9-188f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222405Z-1657d5bbd48xdq5dkwwugdpzr000000004b000000000rcp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.8	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:06 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222406Z-1657d5bbd48gqrfwecymhhbfm800000002x000000000ez3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.8	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:06 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:06 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222406Z-1657d5bbd482tlqpvyz9e93p54000000043000000000qwef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:06 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.8	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:06 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222406Z-1657d5bbd48tnj6wmberkg2xy8000000048g000000002rk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.8	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:06 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:06 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222406Z-1657d5bbd48vhs7r2p1ky7cs5w00000004bg00000000m06f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:06 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.8	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:06 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222406Z-1657d5bbd482krtfgrg72dfbtn00000003wg000000007377 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.8	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:07 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222407Z-1657d5bbd48tqvfc1ysmtbdrg000000003z000000000c5q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:07 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.8	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222407Z-1657d5bbd48xsz2nuzq4vfrzg8000000040000000000843p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.8	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222407Z-1657d5bbd48lknvp09v995n79000000003t0000000006g4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.8	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222407Z-1657d5bbd48wd55zet5pcra0cg000000043g0000000085xq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:07 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.8	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222407Z-1657d5bbd4824mj9d6vp65b6n400000004cg0000000020au x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.8	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:07 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222407Z-1657d5bbd48wd55zet5pcra0cg0000000450000000002p4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.8	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:08 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222408Z-1657d5bbd48brl8we3nu8cxwgn00000004e0000000009srp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.8	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:07 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222408Z-1657d5bbd482krtfgrg72dfbtn00000003r000000000wa28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.8	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:08 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222408Z-1657d5bbd48gqrfwecymhhbfm8000000030g000000002cxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.8	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:08 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222408Z-1657d5bbd48sdh4cyzadbb3748000000040g0000000048kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.8	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:08 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:08 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 0506d398-001e-0049-0aef-185bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222408Z-1657d5bbd482krtfgrg72dfbtn00000003wg00000000739m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.8	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:08 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222408Z-1657d5bbd48jwrqbupe3ktsx9w00000004a000000000b4re x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.8	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:08 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222408Z-1657d5bbd48vlsxxpe15ac3q7n000000045g000000002va9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.8	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:09 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 92e59db7-001e-002b-6700-1799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222409Z-1657d5bbd48xdq5dkwwugdpzr000000004900000000111dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.8	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:09 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:09 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222409Z-1657d5bbd48gqrfwecymhhbfm800000002vg00000000nbu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:09 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.8	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:09 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:09 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222409Z-1657d5bbd48xlwdx82gahegw4000000004500000000117tz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:09 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.8	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:09 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:09 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222409Z-1657d5bbd482lxwq1dp2t1zwkc00000003yg0000000012ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.8	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:09 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222409Z-1657d5bbd48xdq5dkwwugdpzr000000004cg00000000g98z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.8	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd4824mj9d6vp65b6n4000000048g00000000h2u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:10 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.8	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd48xlwdx82gahegw40000000046g00000000t5v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:10 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.8	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7709e3c3-b01e-0097-5e02-174f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd48762wn1qw4s5sd3000000003y000000000hzx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:10 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.8	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd48wd55zet5pcra0cg000000041000000000hfan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:10 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.8	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd48t66tjar5xuq22r8000000045000000000352y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.8	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd482krtfgrg72dfbtn00000003sg00000000pftc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:10 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.8	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd48tqvfc1ysmtbdrg000000003z000000000c5u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:10 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.8	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:10 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:10 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222410Z-1657d5bbd48xsz2nuzq4vfrzg800000003ug00000000yuuf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:11 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.8	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:11 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:11 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222411Z-1657d5bbd48t66tjar5xuq22r8000000041g00000000geca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:11 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.8	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:11 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222411Z-1657d5bbd48q6t9vvmrkd293mg00000003z000000000u2sb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.8	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:11 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222411Z-1657d5bbd48tnj6wmberkg2xy8000000046000000000c83z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.8	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:11 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222411Z-1657d5bbd48dfrdj7px744zp8s00000003s000000000uyx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.8	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:11 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222411Z-1657d5bbd48dfrdj7px744zp8s00000003s000000000uyxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.8	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:12 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222412Z-1657d5bbd48lknvp09v995n79000000003u0000000002zu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.8	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:12 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:12 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222412Z-1657d5bbd482krtfgrg72dfbtn00000003y0000000001ybz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.8	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:12 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222412Z-1657d5bbd48sqtlf1huhzuwq7000000003t000000000mebw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.8	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:12 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222412Z-1657d5bbd482krtfgrg72dfbtn00000003t000000000n0pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.8	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:12 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222412Z-1657d5bbd48vhs7r2p1ky7cs5w00000004c000000000kw74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.8	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:12 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:12 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222412Z-1657d5bbd487nf59mzf5b3gk8n00000003n000000000u3f9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:12 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.8	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:12 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:12 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: bf719889-501e-00a0-2c78-189d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222412Z-1657d5bbd48hzllksrq1r6zsvs000000017g00000000qm27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:12 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.8	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:13 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 22:24:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 22:24:13 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T222413Z-1657d5bbd482lxwq1dp2t1zwkc00000003tg00000000n214 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 22:24:13 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.8	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 22:24:13 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	18:22:43
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:22:45
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=1944,i,13270647576138217538,262798573287539600,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:22:47
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a	HTTP Parser: No favicon
Source: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a	HTTP Parser: No favicon

Source: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a	HTTP Parser: No <meta name="author".. found
Source: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a	HTTP Parser: No <meta name="author".. found

Source: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a	HTTP Parser: No <meta name="copyright".. found
Source: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET /formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/Image?i=7 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/TipClose.gif HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/fonts/sourcesanspro-regular.ttf.woff HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://securemail.lpl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.lpl.com/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/BangBullet.gif HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/CheckBullet.gif HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail.lpl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/TipClose.gif HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/Image?i=7 HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/BangBullet.gif HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/CheckBullet.gif HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=7961C2462F47FEC5AED4C02308F5414C; BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail.lpl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BID=30b79a3a
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: securemail.lpl.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Windows Analysis Report
https://securemail.lpl.com/formpostdir/securereader?id=oRmYs2-9SdHgP4vEWl7m4tYo5MzW0b3S&brand=30b79a3a